Re: SQL authenticated push subscriber's password appears in profiler

From: Narayana Vyas Kondreddi (answer_me@hotmail.com)
Date: 03/28/03 

From: "Narayana Vyas Kondreddi" <answer_me@hotmail.com>
Date: Fri, 28 Mar 2003 21:31:39 -0000

I haven't verified it myself but notified MS. Will update this thread when I
have more information. 

--
HTH,
Vyas, MVP (SQL Server)
http://vyaskn.tripod.com/
What hardware is your SQL Server running on?
http://vyaskn.tripod.com/poll.htm
"Nayan Raval" <nr@anon.com> wrote in message
news:03aa01c2f516$52bbf310$a601280a@phx.gbl...
Set up:
SQL Server 2000 SP3. Transactional replication with
separate publication and distribution servers. Set up a
push subscriber specifying sql authenticated login and
password.
Security problem:
Run profiler. On publication server visit
Tools...Replication...Configure Publishing, Subscribers
and Distribution. Select the Subscribers tab and change
the sql authenticated login's password.
You'll see sp_MSupdate_subscriber_info appearing in
Profiler with the password in clear text.
If the publication server and distribution server are on
the same sql server then instead of
sp_MSupdate_subscriber_info you see sp_changesubscriber in
profiler. The latter doesn't show parameters.
Please could MS fix this for separate publisher and
distributor.
Thanks,
--
Nayan Raval

Relevant Pages

  • Re: SQL authenticated push subscribers password appears in profiler
    ... Turned out to be a known issue, and will not be fixed for SQL Server 2000, ... as running Profiler requires sysadmin, ... What hardware is your SQL Server running on? ... separate publication and distribution servers. ...
    (microsoft.public.sqlserver.security)
  • Multiple Distribution Server
    ... Is it possible to set up multiple distribution servers locating on different Hosts for one SQL Server. ... Different database on the SQL server could use different Host acting distribution server for replication purpose. ...
    (microsoft.public.sqlserver.replication)
  • Re: Problem altering table and adding a default
    ... SQL Server does not allow that - you can only add nullable ... > After you add a new column in Enterprise Manager, uncheck Allow Nulls, ... the ALTER TABLE statement above will pass to the SQL Server ... > 4) Start Profiler and perform a new trace. ...
    (microsoft.public.sqlserver.server)
  • Re: Running profiler on busy 8-cpu Sql Server
    ... with SQL Server. ... Not only does the Profiler GUI's screen need to ... Server & places it on queues that the Profiler GUI picks up. ... / data columns & filters you define in a profiler trace, ...
    (microsoft.public.sqlserver.server)
  • Re: Problem altering table and adding a default
    ... ALTER TABLE dbo.Test_tbl ADD Notnull_col1 charNOT NULL ... SQL Server does not allow that - you can only add nullable columns. ... After you add a new column in Enterprise Manager, uncheck Allow Nulls, bind the uder- ... Start Profiler and perform a new trace. ...
    (microsoft.public.sqlserver.server)