JR32747: "PERSIST SECURITY INFO=TRUE" WITH OLEDB CONNECTION IS ENCRYPTING THE PASSWORD IN THE CONNECTION STRING.

DB2 Version 9.1 Fix Pack 8  for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 9  for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 10  for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 11  for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 12  for Linux, UNIX and Windows

APAR status

• Closed as program error.

Error description

• Persist Security Info if enabled allows applications to view
  sensitive information that was passed in the connection string
  like the password. The password is encrypted.  This APAR will
  ensure the connection string password is not encrypted
  

Local fix

• A possible workaround is to use a string variable to store the
  OLE DB connection string and pass this string variable while
  opening OLE DB connection and use the string variable for
  further processing in application code instead of using the OLE
  DB connection object string property.
  

Problem summary

• "PERSIST SECURITY INFO=TRUE" WITH OLEDB CONNECTION IS ENCRYPTING
  THE PASSWORD IN THE CONNECTION STRING.
  

Problem conclusion

• First fixed in DB2 UDB Version 9.1, FixPak 8
  

Temporary fix

• A possible workaround is to use a string variable to store the
  OLE DB connection string and pass this string variable while
  opening OLE DB connection and use the string variable for
  further processing in application code instead of using the OLE
  DB connection object string property.
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  JR30294

• APAR is sysrouted TO one or more of the following:

  IC63032

Fix information

• Fixed component name

  DB2 CASE WINDOW

• Fixed component ID

  5724D5401

Applicable component levels

• R910 PSN

     UP