0709 SAP HANA Database Administrationhdbuserstore command

© 2012 SAP AG. All rights reserved. 2This presentation and SAP's strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is

provided without a warranty of any kind, either express or implied, including, but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or non-infringement.

Disclaimer

This presentation outlines our general product direction and should not be relied on in making a purchase decision. This presentation is not subject to your license agreement or any other agreement with SAP. SAP has no obligation to pursue any course of business outlined in this presentation or to develop or release any functionality mentioned in this presentation. This presentation and SAP's strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is provided without a warranty of any kind, either express or implied, including but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or non-infringement. SAP assumes no responsibility for errors or omissions in this document, except if such damages were caused by SAP intentionally or grossly negligent.

© 2012 SAP AG. All rights reserved. 3This presentation and SAP's strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is

provided without a warranty of any kind, either express or implied, including, but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or non-infringement.

hdbuserstore command

This command centralizes connection information to a HANA system, making it easier to move between systems when executing sql from the command line.

• This mechanism is required for life cycle management and upcoming development topics.

• System connection information is kept in a secure file.

• Security considerations are documented here: sapnote xxxyyy

• The capability exists on any OS platform supported by the HANA client libarary

• To use the command, first the HANA client library needs to be in the path• For example, place the following in the last line of the $HOME/.profile of the <sid>adm

user:PATH=$PATH:/usr/sap/hdblcient

© 2012 SAP AG. All rights reserved. 4This presentation and SAP's strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is

provided without a warranty of any kind, either express or implied, including, but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or non-infringement.

hdbuserstore synopsis

$ hdbuserstore set doug hana1box.pal.sap.corp:30215 system Blahblah1

command key host and port user name password

• To add a key into the store:

© 2012 SAP AG. All rights reserved. 5This presentation and SAP's strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is

provided without a warranty of any kind, either express or implied, including, but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or non-infringement.

Once hdbuserstore is set up

list command shows two keys, doug and hdbsystem.

Connect using key HDBSYSTEM

Change connection using key DOUG

User can connect to systems without revealing the password.

The DATA FILE containing the passwords is under OS security and should be treated accordingly.

© 2012 SAP AG. All rights reserved. 6This presentation and SAP's strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is

provided without a warranty of any kind, either express or implied, including, but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or non-infringement.

Bonus content: hdbuserstore command

Managing the DATA FILE on the appliance:

• The binary file is stored in ~/.hdb/<host>/SSFS_HDB.dat

• File is mode 640, so only members of the sapsys group can read the file

• Regardless, the –u command line option for hdbuserstore command will not work on the appliance. Invoking the option results in: