[wix-users] when creating registry value, can I not log it to the MSI log file? [P]

[Hoover, Jacob]

Can't is a strong word.  A custom BA allows you to do anything a MSI can do and more.

Storing a password in the registry in plain text would be a security concern, even if it's intermittent.  Having it in the logs is just one more place it could be found.

If it's acceptable for X to ask for it, then why can't Y ask for it as well?  Then, if you have time to move the logic to a custom BA, you could suppress the dialogs in both and property drive it from the command line.

If Y isn't able to prompt for it, then how do you intend on handling Y being ran a second time without X being ran first?

-----Original Message-----
From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On Behalf Of Steven Ogilvie
Sent: Thursday, July 07, 2016 2:09 PM
To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
Subject: Re: [wix-users] when creating registry value, can I not log it to the MSI log file? [P]

Classification: Public
Can't do that...

MSI installer X has a dialog that asks for information in order to create a DB If Windows authentication there isn't a password If mixed authentication (or just SQL) there will be a password

MSI installer X has another dialog that asks information about the Web site it will create It asks for the Web App Pool user + password (however if the web app pool user is a system user, i.e. LocalSystem, there isn't a password

So some of that information is gathered in MSI installer X which MSI installer Y will use and remove the registry entries by the end of the install

Thanks,

Steve




This message has been marked as Public by Steven Ogilvie on July 7, 2016 3:09:19 PM.
The above classification labels were added to the message by TITUS Message Classification.For More information visit www.titus.com.
-----Original Message-----
From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On Behalf Of Hoover, Jacob
Sent: July 7, 2016 1:29 PM
To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
Subject: Re: [wix-users] when creating registry value, can I not log it to the MSI log file?

Create a bundle, gather the info in the bundle and pass it as a MsiProperty to X and Y?


> On Jul 7, 2016, at 12:20 PM, Steve Ogilvie <sogilvie at msn.com> wrote:
> 
> Hi folks,
> 
> 
> 
> I have several MSI's in my installer.
> 
> 
> 
> Let's call two of them X and Y...
> 
> 
> 
> Y requires some information from X
> 
> 
> 
> So what I do is create some registry entries in X, which Y reads and 
> later deletes the registry entries...
> 
> 
> 
> 2 of those registry entries are passwords...
> 
> 
> 
> Is there any way to *NOT* log the registry value into the MSI log 
> file?
> 
> 
> 
> i.e. when I use:
> 
> <RegistryKey Id="ProductId" ForceCreateOnInstall="yes" 
> ForceDeleteOnUninstall="yes" Root="HKLM" 
> Key="SOFTWARE\MYCO\MyProduct">
> 
> <!-- The password will be deleted by the next installer -->
> 
> <RegistryValue Type="string" Name="Password" Value="[A_PASSWORD]"/>
> 
> 
> 
> Thanks,
> 
> 
> 
> Steve                         
> 
> ____________________________________________________________________
> WiX Toolset Users Mailing List provided by FireGiant 
> http://www.firegiant.com/

____________________________________________________________________
WiX Toolset Users Mailing List provided by FireGiant http://www.firegiant.com/

____________________________________________________________________
WiX Toolset Users Mailing List provided by FireGiant http://www.firegiant.com/