User Credentials

You can determine whether the password is hidden for a command line utility. Most of the commands discussed in this guide allow for the specification of CA Harvest SCM user credentials or user credentials for a remote operating system (for example, for a file agent login).

If the CA Harvest SCM server or file agent process does not allow command line utilities to pass clear-text passwords and if the command line is determined to be passing clear-text passwords, the CA Harvest SCM server or file agent process will reject the create session or file agent login request.

Password information is considered hidden on command line utilities if any of the following are true:

The command line specifies one of the input file options (for example, -i or ‑di).
The input file option is not specified and the password option (for example, ‑pw, -rpw) is not specified on the command line.

Examples: Determine User Credentials

The following command line statements show examples of how user credentials are determined.

The following statement is not considered to have a hidden password because the password option is explicitly specified on the command line:

hco -b brokername -usr username -pw password ...

The following statement is considered to have a hidden Remote OS user password, because even though clear text credentials are being specified, the password is not explicitly specified on the command line. In this case the command will prompt for the user's password information.

hco -b brokername ... -rm remote_computer -rusr username ...

The following statement is considered to have a hidden CA Harvest SCM user password because an encrypted credential file is used to specify the user credentials for the command.

hco -b brokername -eh encrypted_credential_file ...

The following statement is considered to have a hidden CA Harvest SCM user password because the options are specified in the context of an input file:

hco -i inputfile

inputfile contains the following options:

-b brokername -usr username -pw password ...

The following statement is not considered to have a hidden CA Harvest SCM user password because the password option is specified explicitly, even though the user name and password specifications are overwritten as a result of the ‑prompt option.

hco -b brokername -usr username -pw password -prompt ...

The following statement is not considered to have a hidden Remote OS user password, because even though an encrypted credential file is specified, the remote password option is specified.

hco -b brokername ... -rm remote_computer -er encrypted_credential_file ‑rpw password ...

The following statement is not considered to have a hidden CA Harvest SCM user password, because even though an encrypted credential file is specified, the password option is specified.

hco -b brokername -eh encrypted_credential_file -pw password ...