iControl Perl SOAP - security

iControl is inherently secure. We support HTTP Basic Auth over SSL, so the credentials are secure from the perl script to the BIG-IP. Unfortunately until the username/password are passed into the iControl calls, it is beyond the security of iControl and into the security of your application. I've heard of users storing username/passwords in a database and using a front level authentication within their applications to restrict which credentials are extracted from the db. Since each users runtime environment is a bit different, it's hard to suggest a single way to secure passwords. You could implement a prompt in your script that allows for character masking when the user is prompted for passwords, but this makes scripting difficult as it requires user intervention.

 

 

Good luck and any tips you come up with I'm sure others out there would benefit from.

 

 

-Joe