topic Re: using sysparm to supply password in batch file to sas prog - non alpha/num characters in passwor in SAS Programming

using sysparm to supply password in batch file to sas prog - non alpha/num characters in password

andrewjmdata — Wed, 05 Dec 2018 19:37:46 GMT

Hi, We want to send a password from a batch file to be used in a sas prog that actually comes from an Azzure Vault (encrypted key).

The batch file command runs sas, the prog and then we put sysparm at the end:

c:\progs\sas.exe -sysin "test.sas" -sysparm (Passwordstringalphanum)

In a test environment our solution works fine where the password is a mix of alpha and numeric. However, when we use any non alpha/numeric character it fails. eg comma,hash,star,slash etc.

Am pretty sure the issue is the non alpha/num characters in the password.

We have no control over the password so can't suggest passwords are only alpha/num.

Any ideas appreciated!

Thanks

Andrew

Re: using sysparm to supply password in batch file to sas prog - non alpha/num characters in passwor

SASKiwi — Wed, 05 Dec 2018 19:53:09 GMT

Have you tried enclosing the string with single quotes? That should mask non-alphanumeric characters.

Re: using sysparm to supply password in batch file to sas prog - non alpha/num characters in passwor

andrewjmdata — Wed, 05 Dec 2018 19:55:20 GMT

I think we have tried all sorts of variations like that but I'll check.

Was hoping there might be a flag I could use/something.

Thanks

Andrew

Re: using sysparm to supply password in batch file to sas prog - non alpha/num characters in passwor

Kurt_Bremser — Wed, 05 Dec 2018 19:58:00 GMT

NEVER, EVER, not even in your baddest dreams, put a password in a commandline. Your CSO will have you hung, drawn and quartered, and rightfully so.

Store passwords in metadata, where you can control access, or setup passwordless connections with (protected) public/private key pairs.

Re: using sysparm to supply password in batch file to sas prog - non alpha/num characters in passwor

andrewjmdata — Wed, 05 Dec 2018 20:01:07 GMT

Hi Kurt, As I said in my message the actual password is stored in Azzure Vault. We are testing to ensure we can pass strings as passwords that will almost certainly contain non alpha/numeric chars.

Andrew

Re: using sysparm to supply password in batch file to sas prog - non alpha/num characters in passwor

Kurt_Bremser — Wed, 05 Dec 2018 21:52:39 GMT

That doesn't matter. Anything on the commandline is visible to all processes and all users.