[Qgis-user] obscurate DB password from .qgs project

[kimaidou]

Hi all

I completely understand the need to encrypt the passwords, and I also think
as you guys that using the Firefox/Thunderbird approach is the right way.

I have one concern about doing this. We should find a solution to let
people use Qgis project with db layers with QGIS Server. We could use the
same principle as ssh keys. If the trusted key is on the server, QGIS can
load these layers. This way we won't prevent server side postgis use.

Another solution, but no very secure, would be to let the user decide for
each project if he wants the passwords to be encrypted or not.

Michael


2012/11/16 Yves Jacolin <yjacolin at free.fr>

> Le vendredi 16 novembre 2012 20:12:54 Jürgen E. Fischer a écrit :
> > Hi Giovanni,
> >
> > On Fri, 16. Nov 2012 at 20:07:43 +0100, G. Allegri wrote:
> > > > The other way to do it would be to add a user-defined "master"
> > > > passphrase
> > > > (entered at run-time) to unlock all of the encrypted passwords,
> assuming
> > > > there are many. Exactly like Thunderbird/Firefox's Master Password.
> > >
> > > That's what I also was thinking to. I have dozens of layers and I can't
> > > ask
> > > the uset to set the pw for each one.  I hope I will be able to manage
> this
> > > through code...
> >
> > QGIS will only ask for each connection once and cache the credentials in
> > memory - so if you have multiple layers from the same database, you
> should
> > see the request only once.
> >
> >
> > Jürgen
> Hello,
>
> Is it possible to store this credentials in "user setting" instead in the
> project files? I mean currently if user open the project later he should
> fill a
> again the credentials form, isn't it?
>
> Y.
> --
> Yves Jacolin
> _______________________________________________
> Qgis-user mailing list
> Qgis-user at lists.osgeo.org
> http://lists.osgeo.org/mailman/listinfo/qgis-user
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/qgis-user/attachments/20121116/5f3eb50b/attachment.html>