Re: Masking sp_password/sp_addlogin


"Amit" <Amit.Bharadia@xxxxxxxxx> wrote in message
news:1166524143.792387.119260@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi ,

With auditing enabled, with sp_password/addlogin password is displayed
in clear text in audit tables, Since audit tables are system tables we
cannot write trigger on audit table.

Any way to mask the same..?

-Amit


I assume that you are referring to event 38 (exec procedure). In which case
only the login name is stored in extrainfo for sp_addlogin and sp_password.
Now, the MDA tables (i.e., monSysSQLText) are another story - which Sybase
claims to be addressing in a future release.


.