Re: Storing passwords in records/Authenticating IOC with other servers

[Ralph Lange via Tech-talk <tech-talk@aps.anl.gov>]

Plus...
If you do the caput on the command line, it will end up in the shell's history file.

If there's a Gateway involved, turning up debugging would make it appear in the log.

If some server in the chain (hopefully not the IOC) uses CAPutLog, it could appear in the log.

I have a milder use case for the OPC UA Security feature, as the credentials don't need to be dynamic (in the sense of being set by the operator across CA).

The Device Support (through a call in the startup script) reads them from a file and doesn't expose them anywhere. The assumption is that file access can be stripped down enough to ensure that only that one IOC instance has read access.

Cheers,
~Ralph