I prefer to use externally identified userids. Most of the dba scripts run as / (i.e.
unix user oracle, oracle user ops$oracle). You can also wrap the sql in a ksh script
where password is not known from ps -ef. If I do this, I have 1 common script w/
username/password, 1 place to change, doesn't affect other scripts. Just my way :)
Gene
>>> [EMAIL PROTECTED] 06/20/01 04:36AM >>>
Options
1) external account, "sqlplus /"
2) delay connection "sqlplus /nolog" with "connect
..." in the script
3) print "password" | sqlplus system
hth
connor
--- Kris Austin <[EMAIL PROTECTED]> wrote: >
>
>
>
> hi,
>
> do you know how to hide oracle passwords from ps
> -ef? we pass in our pw in
> cron, and it shows up when you run ps -ef (to check
> unix processes). i
> recognize that is this NOT a smart thing to do...
>
> can anyone recommend a better way of supplying
> oracle passwords when
> scripts are connecting to oracle? do you use config
> files that store
> pws? just curious what everyone else is doing to
> plug this security hole.
>
> thanks,
> kris
>
> --
> Please see the official ORACLE-L FAQ:
> http://www.orafaq.com
> --
> Author: Kris Austin
> INET: [EMAIL PROTECTED]
>
> Fat City Network Services -- (858) 538-5051 FAX:
> (858) 538-5051
> San Diego, California -- Public Internet
> access / Mailing Lists
>
--------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an
> E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of
> 'ListGuru') and in
> the message BODY, include a line containing: UNSUB
> ORACLE-L
> (or the name of mailing list you want to be removed
> from). You may
> also send the HELP command for other information
> (like subscribing).
=====
Connor McDonald
http://www.oracledba.co.uk (mirrored at
http://www.oradba.freeserve.co.uk)
"Some days you're the pigeon, some days you're the statue"
____________________________________________________________
Do You Yahoo!?
Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
or your free @yahoo.ie address at http://mail.yahoo.ie
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: =?iso-8859-1?q?Connor=20McDonald?=
INET: [EMAIL PROTECTED]
Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
San Diego, California -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Gene Sais
INET: [EMAIL PROTECTED]
Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
San Diego, California -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
