OraFAQ Forum: Security » Automating Password Changes

Home » RDBMS Server » Security » Automating Password Changes

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

Automating Password Changes [message #528583]

Tue, 25 October 2011 15:13

bdgood
Messages: 1
Registered: October 2011

Junior Member

I'm working for a credit card company and on a security project. We have oracle databases. Currently the passwords have to be changed every so often for key accounts for security purposes.

Does anyone know of a tool to automate the process?

Ideally it would be a way to automate password changes on many accounts where only some people would be able to get the new password once it was changed.

Also, these IDs/passwords are sometimes used by applications to connect to the database so .ini files or some type of connection file would need to be changed automatically also.

Just wondering if anything already exists or if we will need to build this.

Thanks

Report message to a moderator

Re: Automating Password Changes [message #528586 is a reply to message #528583]

Tue, 25 October 2011 15:33

BlackSwan
Messages: 20109
Registered: January 2009

Senior Member

It would be helpful if you followed Posting Guidelines - http://www.orafaq.com/forum/t/88153/0/

passwords in Oracle are changed as below

ALTER USER1 IDENTIFIED BY PASS1;
ALTER USER2 IDENTIFIED BY PASS2;
ALTER USER3 IDENTIFIED BY PASS3;

so all that needs to be done is write some software that generates a text file that conform to valid SQL syntax.
then invoke that file in sqlplus or similar client

Report message to a moderator

Re: Automating Password Changes [message #528608 is a reply to message #528583]

Wed, 26 October 2011 01:09

Michel Cadot
Messages: 54239
Registered: March 2007
Location: Nanterre, France, http://...

Senior Member
Account Moderator

Quote:

Currently the passwords have to be changed every so often for key accounts for security purposes.

Use Oracle profile to constrain people to change their password.

Quote:

Also, these IDs/passwords are sometimes used by applications to connect to the database so .ini files or some type of connection file would need to be changed automatically also.

It is a very bad idea to store password in a file unless it is encrypted, is this your case?

Regards
Michel

Report message to a moderator

Previous Topic:	oracle account limitation
Next Topic:	Oracle Access Manager Installation Error

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sat May 25 02:44:06 CDT 2013

Total time taken to generate the page: 0.15942 seconds