Jacek, > How about simply keeping the credentials in ~/.my.cnf > file (I think it'd be useful to can come up with > lsst-specific name for the file to avoid collisions.) > I just realized mysql api allows to directly use such > config file: > > db=_mysql.connect(host="outhouse",db="thangs",read_default_file="~/.my.cnf") > > (this is from http://mysql-python.sourceforge.net/MySQLdb.html) > > It is handy and mysql-compatible. I think this is good for MySQL. ~/.my.cnf should already be read by default, I believe. My only concern is that we don't have a problem if we have to change RDBMS implementations. The original ~/.lsst/db-auth.paf was developed to be database-agnostic, but it's probably not too bad to force people to use database-specific credential storage, as implementations won't change that frequently. -- Kian-Tat Lim, LSST Data Management, [log in to unmask] ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the QSERV-L list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=QSERV-L&A=1