Forum Discussion

Vidyak's avatar
Vidyak
New Contributor II
2 years ago

SIC Password and API keys are stored in a plain text file

Hi  We are evaluating the SIC tool for integration and noticed that API keys and DB passwords are stored unencrypted in plain text files. This is becoming a huge security concern as this way of stor...
Security
  • Ryan_Berry's avatar
    Ryan_Berry
    3 months ago

    Hello mithun_laha ,

       Can you provide a brief example of what calls you're making in your code?  Is it the remote BR that is returning this failure?  

  • Nikpowar97's avatar
    Nikpowar97
    3 months ago

    Hey mithun_laha ,

    Did u set up WinSCP to connect to the SFTP server on the client environment where the SFTP server can be accessed remotely on the OS Cloud App?

    you might have created a Direct Connection with your SFTP details like port number and host name to access the Smart Integration Connecter page. (System Pane)
    u are using the Smart integration function to get stored information like SFTP password, user name, etc.
    using the ApiLibrary.GetSmartIntegrationConfigValue("Key as String to get the password value").

    and u are using a  BRApi.Utilities.ExecRemoteGatewayBusinessRule to retrieve the results.
    As per my understanding,

    A database connection additionally with the Direct connection needs to setup to connect OS Cloud app Client Environment.If you notice and try to compile your smart integration function. it will ask for a database gateway connection to compile your code.
    In your 
    BRApi.Utilities.ExecRemoteGatewayBusinessRule function u need to mention the database connection name as the remotehostname to get details from the direct connection on the remote client environment.

    Dim remoteResults As RemoteRequestResultDto = BRApi.Utilities.ExecRemoteGatewayBusinessRule(si,smartintegrationBRName,Nothing,database connection gateway name, function name in Smart integration Function BR name,String.Empty,False,600)

    If you have followed these steps and still facing an issue please check by hardcoding the credentials in the WinSCP session in your extensibility rules to check your connection. (I hope u have used the WinSCP.dll in the referenced assemblies). OR if you have issues connecting with the Smart integration function please check the SIC logs.

    I am not an expert at this but I have connected to Amazon S3 using a direct connection before. a similar approach should work here.







mithun_laha's avatar
mithun_laha
New Contributor III

I am trying to connect in SFTP. I did create a smart integration function and calling it from extensibility rules but getting the issue as HostName is not set. ObjectResultValue is null or empty. 

Nikpowar97's avatar
Nikpowar97
Contributor
3 months ago

Hey mithun_laha ,

Did u set up WinSCP to connect to the SFTP server on the client environment where the SFTP server can be accessed remotely on the OS Cloud App?

you might have created a Direct Connection with your SFTP details like port number and host name to access the Smart Integration Connecter page. (System Pane)
u are using the Smart integration function to get stored information like SFTP password, user name, etc.
using the ApiLibrary.GetSmartIntegrationConfigValue("Key as String to get the password value").

and u are using a  BRApi.Utilities.ExecRemoteGatewayBusinessRule to retrieve the results.
As per my understanding,

A database connection additionally with the Direct connection needs to setup to connect OS Cloud app Client Environment.If you notice and try to compile your smart integration function. it will ask for a database gateway connection to compile your code.
In your 
BRApi.Utilities.ExecRemoteGatewayBusinessRule function u need to mention the database connection name as the remotehostname to get details from the direct connection on the remote client environment.

Dim remoteResults As RemoteRequestResultDto = BRApi.Utilities.ExecRemoteGatewayBusinessRule(si,smartintegrationBRName,Nothing,database connection gateway name, function name in Smart integration Function BR name,String.Empty,False,600)

If you have followed these steps and still facing an issue please check by hardcoding the credentials in the WinSCP session in your extensibility rules to check your connection. (I hope u have used the WinSCP.dll in the referenced assemblies). OR if you have issues connecting with the Smart integration function please check the SIC logs.

I am not an expert at this but I have connected to Amazon S3 using a direct connection before. a similar approach should work here.







  • mithun_laha's avatar
    mithun_laha
    New Contributor III
    3 months ago

    Hello,

    Your assumption is correct. I am using SFTP with WinScp. I have a existing database connection in SIC. Can I use that in BRApi.Utilities.ExecRemoteGatewayBusinessRule