I often use an org file to record database queries, using sql source blocks. I've been putting the database credentials in the file using header-args:sql properties, but I'd prefer to have the credentials saved in a separate file for security reasons. Any ideas on how I could make this work?
Mike Gauland <mikelygee@gmail.com> writes:
> I often use an org file to record database queries, using sql source blocks.
> I've been putting the database credentials in the file using header-args:sql
> properties, but I'd prefer to have the credentials saved in a separate file for
> security reasons.
>
> Any ideas on how I could make this work?
It probably wouldn't be too hard to use the authinfo.gpg facility via
the auth-source library which is included in Emacs. In fact, I think
sql-mode might already have support for this built in.
Most servers have a plain text file (permissions 004) that let you add name and pass and db
> On Oct 31, 2021, at 9:51 PM, Tim Cross <theophilusx@gmail.com> wrote:
>
>
> Mike Gauland <mikelygee@gmail.com> writes:
>
>> I often use an org file to record database queries, using sql source blocks.
>> I've been putting the database credentials in the file using header-args:sql
>> properties, but I'd prefer to have the credentials saved in a separate file for
>> security reasons.
>>
>> Any ideas on how I could make this work?
>
> It probably wouldn't be too hard to use the authinfo.gpg facility via
> the auth-source library which is included in Emacs. In fact, I think
> sql-mode might already have support for this built in.
>
On 1/11/21 4:33 pm, Tim Cross wrote:
> Mike Gauland <mikelygee@gmail.com> writes:
>
>> I often use an org file to record database queries, using sql source blocks.
>> I've been putting the database credentials in the file using header-args:sql
>> properties, but I'd prefer to have the credentials saved in a separate file for
>> security reasons.
>>
>> Any ideas on how I could make this work?
> It probably wouldn't be too hard to use the authinfo.gpg facility via
> the auth-source library which is included in Emacs. In fact, I think
> sql-mode might already have support for this built in.
>
Thanks for the suggestion. I didn't see it on worg, but in ob-sql.el I
found support for ":dbconnection". I can set up an entry in
sql-connection-alist, and give the name of the entry to the sql block
via :dbconnection. Now, my password is safely out of the .org file. As a
bonus, it is easier to maintain across different org files.
Aloha Mike, Mike Gauland <mikelygee@gmail.com> writes: > On 1/11/21 4:33 pm, Tim Cross wrote: >> Mike Gauland <mikelygee@gmail.com> writes: >> >>> I often use an org file to record database queries, using sql >>> source blocks. >>> I've been putting the database credentials in the file using >>> header-args:sql >>> properties, but I'd prefer to have the credentials saved in a >>> separate file for >>> security reasons. >>> >>> Any ideas on how I could make this work? >> It probably wouldn't be too hard to use the authinfo.gpg >> facility via >> the auth-source library which is included in Emacs. In fact, I >> think >> sql-mode might already have support for this built in. >> > Thanks for the suggestion. I didn't see it on worg, but in > ob-sql.el I found > support for ":dbconnection". I can set up an entry in > sql-connection-alist, and > give the name of the entry to the sql block via :dbconnection. > Now, my password > is safely out of the .org file. As a bonus, it is easier to > maintain across > different org files. The Worg entry should be fixed now. Thanks for the report. All the best, Tom -- Thomas S. Dye https://tsdye.online/tsdye