Re: How to encrypt Password in Export script file ?
a) Changet the script to print system/password | exp full=y ... so no-one can see it with a 'ps' b) chmod 700 daily_exp.sh so no-one except the (presumably) oracle account can see the script hth connor --- CHAN Chor Ling Catherine (CSC) [EMAIL PROTECTED] wrote: Hi Unix Gurus, My daily export file (daily_exp.sh) contains : exp userid='system/password' file=file_name.dmp grants=y rows=y constraints=y compress=y full=y inctype=complete log=file_name.log The system password is stated clearly in the export script file. Has anyone encrypt/decrypt the system password before passing it as a variable to the export script ? If yes, could I have a copy of your script ? Thanks. Regds, New Bee in Unix -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: CHAN Chor Ling Catherine (CSC) INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). = Connor McDonald http://www.oracledba.co.uk (mirrored at http://www.oradba.freeserve.co.uk) Some days you're the pigeon, some days you're the statue Do You Yahoo!? Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk or your free @yahoo.ie address at http://mail.yahoo.ie -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: =?iso-8859-1?q?Connor=20McDonald?= INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: How to encrypt Password in Export script file ?
instead of that, I create an account in the database that is identified externally (can only run from that server, and does not have a login password). You will need a matching Unix account for it, if the unix account is exportacct then create the database account as ops$exportacct grant this account create session and exp_full_database then change your shell script to read userid=/ and run the script from the exportacct account this way you don't need to hardcode a password ANYWHERE Rachel From: CHAN Chor Ling Catherine (CSC) [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Subject: How to encrypt Password in Export script file ? Date: Thu, 31 May 2001 00:50:22 -0800 Hi Unix Gurus, My daily export file (daily_exp.sh) contains : exp userid='system/password' file=file_name.dmp grants=y rows=y constraints=y compress=y full=y inctype=complete log=file_name.log The system password is stated clearly in the export script file. Has anyone encrypt/decrypt the system password before passing it as a variable to the export script ? If yes, could I have a copy of your script ? Thanks. Regds, New Bee in Unix -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: CHAN Chor Ling Catherine (CSC) INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). _ Get your FREE download of MSN Explorer at http://explorer.msn.com -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Rachel Carmichael INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: How to encrypt Password in Export script file ?
I also did this on all my databases - works very slick. Julie Fisher Sandia National Laboratories Oracle 8i DBA - OCP8i Solaris 2.6,7/HP-UX 11.0 System Administrator Web Server Administrator -Original Message- Sent: May 31, 2001 7:20 AM To: Multiple recipients of list ORACLE-L instead of that, I create an account in the database that is identified externally (can only run from that server, and does not have a login password). You will need a matching Unix account for it, if the unix account is exportacct then create the database account as ops$exportacct grant this account create session and exp_full_database then change your shell script to read userid=/ and run the script from the exportacct account this way you don't need to hardcode a password ANYWHERE Rachel From: CHAN Chor Ling Catherine (CSC) [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Subject: How to encrypt Password in Export script file ? Date: Thu, 31 May 2001 00:50:22 -0800 Hi Unix Gurus, My daily export file (daily_exp.sh) contains : exp userid='system/password' file=file_name.dmp grants=y rows=y constraints=y compress=y full=y inctype=complete log=file_name.log The system password is stated clearly in the export script file. Has anyone encrypt/decrypt the system password before passing it as a variable to the export script ? If yes, could I have a copy of your script ? Thanks. Regds, New Bee in Unix -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: CHAN Chor Ling Catherine (CSC) INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). _ Get your FREE download of MSN Explorer at http://explorer.msn.com -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Rachel Carmichael INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Fisher, Julie INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: How to encrypt Password in Export script file ?
-Original Message- From: Fisher, Julie [SMTP:[EMAIL PROTECTED]] Sent: Thursday, May 31, 2001 6:16 PM To: Multiple recipients of list ORACLE-L Subject: RE: How to encrypt Password in Export script file ? I also did this on all my databases - works very slick. Julie Fisher Sandia National Laboratories Oracle 8i DBA - OCP8i Solaris 2.6,7/HP-UX 11.0 System Administrator Web Server Administrator -Original Message- Sent: May 31, 2001 7:20 AM To: Multiple recipients of list ORACLE-L instead of that, I create an account in the database that is identified externally (can only run from that server, and does not have a login password). You will need a matching Unix account for it, if the unix account is exportacct then create the database account as ops$exportacct grant this account create session and exp_full_database then change your shell script to read userid=/ and run the script from the exportacct account this way you don't need to hardcode a password ANYWHERE Rachel From: CHAN Chor Ling Catherine (CSC) [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Subject: How to encrypt Password in Export script file ? Date: Thu, 31 May 2001 00:50:22 -0800 Hi Unix Gurus, My daily export file (daily_exp.sh) contains : exp userid='system/password' file=file_name.dmp grants=y rows=y constraints=y compress=y full=y inctype=complete log=file_name.log The system password is stated clearly in the export script file. Has anyone encrypt/decrypt the system password before passing it as a variable to the export script ? If yes, could I have a copy of your script ? Thanks. Regds, New Bee in Unix -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: CHAN Chor Ling Catherine (CSC) INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). _ Get your FREE download of MSN Explorer at http://explorer.msn.com -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Rachel Carmichael INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Fisher, Julie INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Nirmal Kumar Muthu Kumaran INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: How to encrypt Password in Export script file ?
CHAN Chor Ling Catherine (CSC) wrote: Hi Unix Gurus, My daily export file (daily_exp.sh) contains : exp userid='system/password' file=file_name.dmp grants=y rows=y constraints=y compress=y full=y inctype=complete log=file_name.log The system password is stated clearly in the export script file. Has anyone encrypt/decrypt the system password before passing it as a variable to the export script ? If yes, could I have a copy of your script ? Thanks. Regds, New Bee in Unix Create an externally identified Oracle account with the suitable privileges, and run your script from this account using userid=/ -- Regards, Stephane Faroult Oriole Corporation Voice: +44 (0) 7050-696-269 Fax:+44 (0) 7050-696-449 Performance Tools Free Scripts -- http://www.oriole.com, designed by Oracle DBAs for Oracle DBAs -- -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Stephane Faroult INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: How to encrypt Password in Export script file ?
put your userid and password and all other parameters in parfile and run. exp parfile=abc.parfile It will hide your password on unix level. your password file should be readable by you only... Regards Rafiq Reply-To: [EMAIL PROTECTED] To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Date: Thu, 31 May 2001 05:07:24 -0800 a) Changet the script to print system/password | exp full=y ... so no-one can see it with a 'ps' b) chmod 700 daily_exp.sh so no-one except the (presumably) oracle account can see the script hth connor --- CHAN Chor Ling Catherine (CSC) [EMAIL PROTECTED] wrote: Hi Unix Gurus, My daily export file (daily_exp.sh) contains : exp userid='system/password' file=file_name.dmp grants=y rows=y constraints=y compress=y full=y inctype=complete log=file_name.log The system password is stated clearly in the export script file. Has anyone encrypt/decrypt the system password before passing it as a variable to the export script ? If yes, could I have a copy of your script ? Thanks. Regds, New Bee in Unix -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: CHAN Chor Ling Catherine (CSC) INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). = Connor McDonald http://www.oracledba.co.uk (mirrored at http://www.oradba.freeserve.co.uk) Some days you're the pigeon, some days you're the statue Do You Yahoo!? Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk or your free @yahoo.ie address at http://mail.yahoo.ie -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: =?iso-8859-1?q?Connor=20McDonald?= INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). _ Get your FREE download of MSN Explorer at http://explorer.msn.com -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Mohammad Rafiq INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: How to encrypt Password in Export script file ?
Hi Gurus, Thanks to those who replied. We feel that Unix account is easily hacked, so we will not implement the method that Rachel mentioned. We will probably encrypt the password in another file. Before exporting, we will decrypt the password before passing the password to the export script. Thanks. Regds, New Bee -Original Message- From: Fisher, Julie [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 31, 2001 11:16 PM To: Multiple recipients of list ORACLE-L Subject:RE: How to encrypt Password in Export script file ? I also did this on all my databases - works very slick. Julie Fisher Sandia National Laboratories Oracle 8i DBA - OCP8i Solaris 2.6,7/HP-UX 11.0 System Administrator Web Server Administrator -Original Message- Sent: May 31, 2001 7:20 AM To: Multiple recipients of list ORACLE-L instead of that, I create an account in the database that is identified externally (can only run from that server, and does not have a login password). You will need a matching Unix account for it, if the unix account is exportacct then create the database account as ops$exportacct grant this account create session and exp_full_database then change your shell script to read userid=/ and run the script from the exportacct account this way you don't need to hardcode a password ANYWHERE Rachel From: CHAN Chor Ling Catherine (CSC) [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Subject: How to encrypt Password in Export script file ? Date: Thu, 31 May 2001 00:50:22 -0800 Hi Unix Gurus, My daily export file (daily_exp.sh) contains : exp userid='system/password' file=file_name.dmp grants=y rows=y constraints=y compress=y full=y inctype=complete log=file_name.log The system password is stated clearly in the export script file. Has anyone encrypt/decrypt the system password before passing it as a variable to the export script ? If yes, could I have a copy of your script ? Thanks. Regds, New Bee in Unix -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: CHAN Chor Ling Catherine (CSC) INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). _ Get your FREE download of MSN Explorer at http://explorer.msn.com -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Rachel Carmichael INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Fisher, Julie INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists
