Filesystem rights with ODBC

[Kristof Bajnok]

On 2017/01/20 15:48, Cantor, Scott wrote:
>> Does mod_shib really need to access StorageService configuration? If
>> not, is there by any chance any way to hide the database secrets from
>> the webserver?
> It does not need them, but no, there is no current way to hide them other than just duplicating the configuration file for mod_shib and pointing the web server to that copy.

Fortunately (at least) MySql ODBC does have an option to use my.cnf for
connecting to the server. Using this, I was able to get rid of the
secrets in the config file. I've documented this on the wiki.

I have no idea whether other drivers allow the externalization of the
connection data. If anyone does know, please amend the wiki accordingly.

Cheers,
Kristof