|
|
|
SSC Journeyman
      
Group: General Forum Members
Last Login: Tuesday, June 09, 2009 8:13 AM
Points: 75,
Visits: 3
|
|
|
|
|
|
SSC Rookie
      
Group: General Forum Members
Last Login: Monday, March 18, 2013 3:03 PM
Points: 40,
Visits: 303
|
|
This is an encryption of the password, not a hash. The term 'hash' connotes a one-way process.
|
|
|
|
|
SSC Eights!
      
Group: General Forum Members
Last Login: Friday, August 03, 2007 2:55 AM
Points: 928,
Visits: 1
|
|
You will find that this encryption actually points to the current version of the dts package.
If you change the package over time, eventually the link gets lost and the encryption code will not work.
I speak from experience here. Especially happens when saving as another name and then saving back as the original name, which some testers do at times.
------------------------------ The Users are always right - when I'm not wrong!
|
|
|
|
|
SSC-Addicted
      
Group: General Forum Members
Last Login: Yesterday @ 8:08 AM
Points: 427,
Visits: 276
|
|
Much better way is to use integrated security. You just need a /E on the end then
|
|
|
|
|
SSC Rookie
      
Group: General Forum Members
Last Login: Monday, January 30, 2012 5:12 AM
Points: 40,
Visits: 143
|
|
| Agreed with previous comments. I always using -E switch to get an integrated security.
|
|
|
|
|
SSC-Enthusiastic
      
Group: General Forum Members
Last Login: Friday, July 14, 2006 12:01 PM
Points: 102,
Visits: 1
|
|
Can you guys elaborate on integrated security or point me in a direction to learn more about this? Thanks.
Also, as a side not another way I have created the DTS execute command is through the dtsrunui utility. This also allows for more customization with logging and such.
|
|
|
|
|
Valued Member
      
Group: General Forum Members
Last Login: Friday, May 03, 2013 8:44 AM
Points: 61,
Visits: 419
|
|
Integrated security = Windows NT Security. From books on line: The login is created in Microsoft Windows NT® 4.0 or Windows® 2000 rather than in SQL Server. This login is then granted permission to connect to an instance of SQL Server. The login is granted access within SQL Server.
SQL Server achieves login security integration with Windows NT 4.0 or Windows 2000 by using the security attributes of a network user to control login access. A user's network security attributes are established at network login time and are validated by a Windows domain controller. When a network user tries to connect, SQL Server uses Windows-based facilities to determine the validated network user name. SQL Server then verifies that the person is who they say they are, and then permits or denies login access based on that network user name alone, without requiring a separate login name and password.
|
|
|
|
|
Forum Newbie
      
Group: General Forum Members
Last Login: Monday, August 25, 2008 8:09 AM
Points: 5,
Visits: 10
|
|
If you have a job that runs multiple dts packages, the process you have documented would be long and laborious.... I generally use the DTSRUNUI.exe executable... 1) >start>Run>DTSRUNUI 2) Specify SQL Server you want to get encrypted command for and the login credentials you want the job to use to run. 3) click the "..." next to package name 4) Click the "advanced" button 5) Specify variables if you want to... 6) Click the bullet for "Encrypt the command" 7) Click the "Generate" button 8) copy n' paste the line of text that is generated into the step of your dts package... Wahlah, nice and easy... DTSRUNUI is seperate from enterprise manager, so you can have both apps up at the same time...
|
|
|
|
|
Forum Newbie
      
Group: General Forum Members
Last Login: Tuesday, February 12, 2013 9:25 PM
Points: 3,
Visits: 42
|
|
Thanks for the tip. Can this encrypted command line be used as the Data Source on the Linked Server Properties sheet, (when implementing the Package as a linked server this is the equivalent of the dtsrun command-line). This is important to us as the Data Source is stored as open text in the database ???
|
|
|
|
|
Grasshopper
      
Group: General Forum Members
Last Login: Thursday, April 23, 2009 12:56 PM
Points: 20,
Visits: 16
|
|
I agree with the other posters regarding the use of the /E option. The key to making this work is to remember the security context. In the case mentioned here, the job will run as the user logged in to the SQL Server Agent. If the DTS package utilizes resources across the network, it may be necessary to set up the SQL Server Agent account with a domain level account. We run hundreds of DTS packages this way. We tried running with the method mentioned here and found it to be a maintenance nightmare because you can't be sure which package is actually being run.
|
|
|
|