JR30294: "PERSIST SECURITY INFO=TRUE" WITH OLEDB CONNECTION IS ENCRYPTING THE PASSWORD IN THE CONNECTION STRING.

DB2 Version 9.5 Fix Pack 5 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 6a for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 7 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 8 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 9 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 10 for Linux, UNIX, and Windows

APAR status

• Closed as program error.

Error description

• Persist Security Info if enabled allows applications to view
  sensitive information that was passed in the connection string
  like the password. The password is encrypted.  This APAR will
  ensure the connection string password is not encrypted
  

Local fix

• A possible workaround is to use a string variable to store the
  OLE DB connection string and pass this string variable while
  opening OLE DB connection and use the string variable for
  further processing in application code instead of using the OLE
  DB connection object string property.
  

Problem summary

• See prob desc
  

Problem conclusion

• fixed in fp5
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  JR32747

Fix information

• Fixed component name

  DB2 CASE WINDOW

• Fixed component ID

  5724D5401

Applicable component levels

• R950 PSN

     UP