Delphix Products

 View Only

  • 1.  Login failure with masked vdb

    Posted 03-26-2024 05:24:00 PM

    Hello,
    What is the right way to prepare a production masked vdb so that it still allows user to login with normal credentials from a client portal?

    before masking:

    user: testUser

    pwd: testPwd

    Login is fine.

    after masking:

    expected:

    Use same credentials as above. 

    actual:

    Application was unable to decrypt and validate the credentials since the data already got masked.

    Thanks in advanced.

    Bryan



    ------------------------------
    Bryan Pham
    Community Member
    United HealthCare Services Inc.
    ------------------------------


  • 2.  RE: Login failure with masked vdb

    Posted 03-27-2024 07:35:00 AM

    Hello Bryan,

    To clarify as part of your masking job did you select to mask login user/credential information?

    In your example here are you attempting to login to the database or an application using the backend masked database?



    ------------------------------
    Newton Nyante
    Senior Technical Support Engineer
    Delphix
    ------------------------------

    Original Message


  • 3.  RE: Login failure with masked vdb

    Posted 03-27-2024 01:19:00 PM
    Edited by Michael Torok 03-27-2024 01:25:28 PM

    To clarify as part of your masking job did you select to mask login user/credential information?



    Yes. We did.





    are you attempting to login to the database or an application using the backend masked database?



    We can login to the database and query the masked data and found out the reason why the login failed from the client portal.



    testUser becomes sometestUser



    testPwd becomes sometestPwd





    We are trying to login from a client portal using its application backend masked database in Delphix. 



    How do we make the login credentials part working on a masked database safely?

    We can skip the masking from certain credentials but someone with enough privilege can see it from delphix and use that info to login to production. Not masking is still not a good solution to me.

     

     

    Thank you,

     

    Bryan Pham

     



  • 4.  RE: Login failure with masked vdb

    Posted 03-28-2024 09:51:00 AM

    Thanks for the clarification.  With the user/password masked it sounds then like these specific values changes makes them invalid for the application.  Perhaps the application also has a checksum or other mechanism to validate the credentials?  I'd recommend reviewing with the application team and how the stored database credentials are used for application authentication.



    ------------------------------
    Newton Nyante
    Senior Technical Support Engineer
    Delphix
    ------------------------------

    Original Message


Related Content