sec_store_set()

Store and encrypt a text string in the PATROL Agent.

Syntax

sec_store_set(key,value,[application_classes])

Parameter

Description

The sec_store_set() function enters value into the Secure Key Store (SKS) archive. For more information about the SKS archive, see the PATROL Security User Guide. 

Use this function to store and encrypt any text string. This function works with sec_store_get(), which you can use to retrieve a value stored by sec_store_set(). The sec_store_set() function returns 1 when successful and 0 when unsuccessful. 

For a complete list of error messages, see the following table. 

The application_class parameter is a semi-colon separated list of one or more application classes. To retrieve value, an application class must be on this list. If you do not specify an application_class, sec_store_set() uses the default for this parameter, which is the application class that called sec_store_set(). 

You can use this function to write a PSL script that performs an action that requires a password. For example, the script can use a password to open a database. In this scenario, key is a user ID and value is a password. The sec_store_set() function stores the password in the secure area of the PATROL Agent, and your script uses sec_store_get() to retrieve the password. 

Giving a script password access to a protected resource presents a trade-off between security and usability. Requiring a person to enter a password is generally more secure than delegating this task to a script. The higher level of security, however, comes at a price to the person who has to remember the password or keep it in a safe place. While it is not the safest option, allowing a script to enter a password provides a much higher level of security than not using a password at all. Use this method of password management when you need to provide mid-level security.

Example

This script demonstrates the sec_store_set() function.

sec_store_set("ORACLE/INSTANCE1/JSMITH", "paddy3","PATROL_NT;NT_SYSTEMS");