SMTP - Is it possible to decrypt password stored in messaging-channels.json for SMTP channel?

SébastienCouetoux

Hello Dataiku Community,

For sending e-mail messages from Dataiku DSS 12;6.1, we're using a
configuration SMTP TLS in Administation - Settings - User Experience -
Notifications & Integrations and we set the host, port , login and
password in Messaging Channels - Mail (SMTP) channel but the password is
not viewable in the DSS console even with the admin user.

After connection to the servers where Dataiku DSS 12.6.1, I go to
the config directory in datadir and I can see a file named
messaging-channels.json where there is the information about the
password for SMTP Channel but the password is encrypted with AES.

Is there a way for us to decrypt this password with a tool provided in Dataiku DSS 12.6.1?

Regards

Sébastien

SébastienCouetoux

Hello Dataiku Community,

Concerning the possibility of decryption of the encrypted password stored in DATADIR/config/messaging-channels.json, I open a ticket in Dataiku Support site and Chris from Dataiku Support give me the solution.

The command to launch is DATADIR/bin/dku get-cleartext-password encrypted-password

The encrypted password will be like the below in messaging-channels.json,:

e:AES:X2:uersYiVJrq8SnyN9+TzJty2sp6AkhKM2yx7hndOeVD8tRRnY4GQ4xq3dL9+gCBZOK1ohyZ51Tw\u003d\u003d

The ending characters need to be translated to their symbol equivalent.

\u003d\u003d -> ==

Full string:

e:AES:X2:uersYiVJrq8SnyN9+TzJty2sp6AkhKM2yx7hndOeVD8tRRnY4GQ4xq3dL9+gCBZOK1ohyZ51Tw==

After doing this and re-trying the command, I get the
un-encrypted password returned to me. This can happen if you're copy and
pasting from Terminal

Sample:

DATADIR/bin/dku get-cleartext-password '<encrypted-password>'

Regards

Sébastien