Results of 1 - 10 of about 17 for Security (0.002 sec.)
- Securing DuckDB 14345
- DuckDB is a powerful analytical database engine. It can read and write files, access the network, load extensions, and use system resources. Like any powerful tool, these capabilities require appropriate configuration when working with sens
...itive data or in shared environments. This page documents DuckDB's security model and security-related settings. The right configuration depends on your use case, environment, and threat model. If y..., but they are not a substitute for proper sandboxing. Also keep in mind that sandboxing should not just be considered for security purposes, but also for preventing denial of service (DoS) attacks: malicious inputs can easily cause DuckDB to consume exc...ork. Untrusted Non-SQL Input Warning Even non-SQL input into DuckDB can easily have unintended consequences. When building security-sensitive applications with DuckDB, always make sure you properly understand the impact of feeding untrusted input into Du... - https://man.mtool.work/duckdb/2.0/operations_manual/securing_duckdb/overview.htm...
- Securing Extensions 11431
- DuckDB has a powerful extension mechanism, which has the same privileges as the user running DuckDB's (parent) process. This introduces security considerations. Therefore, we recommend reviewing the configuration options listed on this page
...y key. These are open-source extensions distributed via the DuckDB Community Extensions repository . Unsigned. Overview of Security Levels for Extensions DuckDB offers the following security levels for extensions. Usable extensions Description Configurat...sions = false core and community Extensions can only be loaded if signed from a core or community key. This is the default security level. Any extension including unsigned Any extensions can be loaded. Set allow_unsigned_extensions = true at startup (e.g...., duckdb -unsigned in the CLI). It cannot be changed while the database is running. Security-related configuration settings lock themselves , i.e., it is only possible to restrict capabilities in the current process... - https://man.mtool.work/duckdb/2.0/operations_manual/securing_duckdb/securing_ext...
- Quack Remote Protocol 9569
- The Quack extension turns a DuckDB instance into a server that other DuckDB instances (clients) can connect to over HTTP. This page covers the protocol at a glance and walks through basic usage on both sides of the wire. For the full list o
...f functions, settings, and logging knobs, see the Reference . For configuring TLS and authentication / authorization, see Security . For user guides, see Guides . Quack in a Nutshell In short, the Quack protocol and its interactions work as follows: HTT...P-based. Quack messages travel over plain HTTP or HTTPS via a reverse proxy (see Security ). This means standard load balancers, firewalls, and reverse proxies handle Quack traffic the same way they handle any ot...nction is in use, the auth_token that clients need to connect. To choose the token yourself, pass the token parameter (see Security ): {:.codebox-server} CALL quack_serve('quack:localhost', token = '⟨my_token⟩'); Tip The DuckDB CLI can start a server dir... - https://man.mtool.work/duckdb/2.0/quack/overview.html
- Community Extensions 8621
- Community-contributed extensions can be installed from the Community Extensions repository since summer 2024 . Please visit the “Community Extensions” section of the documentation for more details. Warning Community extensions are contribut
...on CI, not that its code is safe. Install and load community extensions only if you trust their author and source. See the security considerations for details. Deprecated Starting with DuckDB 2.0, community extensions are no longer built for the osx_amd6... - https://man.mtool.work/duckdb/2.0/extensions/community_extensions.html
- Deploy 8517
- Overview Deploying DuckDB-Wasm means serving its components so that the browser can fetch and instantiate them. This page describes each component a deployment needs to serve, how the worker and WebAssembly variants relate, how extensions a
...re served and mirrored, and the security considerations involved. A DuckDB-Wasm deployment needs to access the following components: Main Library Component. Distri...ffer , see the following resources: WebAssembly threads on web.dev Enabling SharedArrayBuffer on the Chrome developer blog Security Considerations Warning Deploying DuckDB-Wasm with access to your own data means whoever has access to SQL can access the d... - https://man.mtool.work/duckdb/2.0/clients/wasm/deploying_duckdb_wasm.html
- Troubleshooting 8517
- Curl Request Fails Problem When trying to attach to an Iceberg REST Catalog endpoint, DuckDB returns the following error: IO Error: Curl Request to '/v1/oauth/tokens' failed with error: 'URL using bad/illegal format or missing URL' Solution
...y https://s3tables.us-east-2.amazonaws.com/iceberg/v1/arn:aws:s3tables:... http error 403 thrown. Message: {"message":"The security token included in the request is invalid."} Solution Use the duckdb_secrets() function to check whether DuckDB loaded the... - https://man.mtool.work/duckdb/2.0/core_extensions/iceberg/troubleshooting.html
- PostgreSQL Extension and the Secret Manager 8397
- User credentials and other PostgreSQL database connection details can be stored using the DuckDB Secrets Manager . The following syntax can be used to create a secret: CREATE SECRET ( TYPE postgres, HOST '127.0.0.1', PORT 5432, DATABASE pos
...rror occurs, the full connection string, including your credentials, may appear in the resulting error message. For better security, store credentials using DuckDB-managed secrets. Secret Configuration Options Secrets of type postgres support a number of...de confidential credentials (like the s3 example above). For multi-tenant scenarios it is expected that Postgres Row-Level Security policies can be used to prevent users to see secrets of other users. Different table name (for example, in a different sch... - https://man.mtool.work/duckdb/2.0/core_extensions/postgres/secrets.html
- MySQL Extension 8155
- The mysql extension allows DuckDB to directly read and write data from/to a running MySQL instance. The data can be queried directly from the underlying MySQL database. Data can be loaded from MySQL tables into DuckDB tables, or vice versa.
...rror occurs, the full connection string, including your credentials, may appear in the resulting error message. For better security, store credentials using secrets instead, as described in Configuring via Secrets . Configuration The connection string de...can be used to make SSL connections. Below is a description of the supported parameters. Setting Description ssl_mode The security state to use for the connection to the server: disabled, required, verify_ca, verify_identity or preferred (default: prefe... - https://man.mtool.work/duckdb/2.0/core_extensions/mysql.html
- DuckDB Wasm Client 7810
- Installation To use the DuckDB Wasm client, visit the duckdb-wasm GitHub repository . The latest stable version of the DuckDB WebAssembly client is 2.0.0. DuckDB-Wasm is a version of DuckDB that has been compiled to WebAssembly , the portab
...loading differs from native DuckDB and which extensions are available. Deploy — the components a deployment serves and the security considerations involved. Troubleshoot — common issues and their workarounds, including CORS errors, memory limits, and thr... - https://man.mtool.work/duckdb/2.0/clients/wasm/overview.html
- Tableau – A Data Visualization Tool 7810
- Tableau is a popular commercial data visualization tool. In addition to a large number of built-in connectors, it also provides generic database connectivity via ODBC and JDBC connectors. Tableau has two main versions: Desktop and Online (S
...epository, but essentially you will need the duckdb_jdbc.taco file. (Despite what the Tableau documentation says, the real security risk is in the JDBC driver code, not the small amount of JavaScript in the Taco file.) Server (Online) On Linux, copy the... - https://man.mtool.work/duckdb/2.0/guides/data_viewers/tableau.html
DuckDB 2.0 Documentation / man.mtool.work