Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RE: Securing passwords in scripts

RE: Securing passwords in scripts

From: Rachel Carmichael <carmichr_at_hotmail.com>
Date: Thu, 26 Jul 2001 16:38:23 -0700
Message-ID: <F001.00356B6F.20010726164023@fatcity.com>

Ian,

thank you. at 4:30 in the morning, I'm barely able to remember my name, let alone init.ora parameters

Rachel

>From: "MacGregor, Ian A." <ian_at_SLAC.Stanford.EDU>
>Reply-To: ORACLE-L_at_fatcity.com
>To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
>Subject: RE: Securing passwords in scripts
>Date: Thu, 26 Jul 2001 13:41:17 -0800
>
>The parameter of which Rachael speaks is os_authent_prefix. For example
>
>os_authent_prefix = ""
>
>which means no prefix is required.
>
>Do Not!!!!! set remote_os_authent to TRUE. The authentication method is
>quite easily spoofed from client machines.
>
>Ian MacGregor
>Stanford Linear Accelerator Center
>ian_at_slac.stanford.edu
>
>-----Original Message-----
>Sent: Thursday, July 26, 2001 2:37 AM
>To: Multiple recipients of list ORACLE-L
>
>
>
>Sean,
>
>Not sure how you'd do this on NT, since I don't know how the "identified
>externally" accounts work on NT.
>
>On Unix you can create a user in the database with the same name as one of
>the Unix accounts. Default is "ops$"<username>, you can change or remove
>the
>"ops$" requirement via one of the init.ora commands -- (remote_<something
>or
>other>, I'm at home right now and no access to look it up)
>
>grant the privileges necessary to this account, then when you need to log
>into the database you can use / to enter username/password:
>
>ex. sqlplus "/"
>
>and run what you need from cron from this Unix account.
>
>Rachel
>
> >From: "O'Neill, Sean" <Sean.ONeill_at_organon.ie>
> >Reply-To: ORACLE-L_at_fatcity.com
> >To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
> >Subject: Securing passwords in scripts
> >Date: Thu, 26 Jul 2001 00:55:28 -0800
> >
> >I have some scripts, O.S. command and SQL, which I use to perform COLD
> >backups of DBs and other tasks. I'm not particularily happy about having
> >username/password information in the scripts. Has anyone come up with a
> >way
> >to avoid same allowing for the fact the scripts should require no user
> >input
> >to execute.
> >
> >
> >Sean :)
> >
> >Rookie Data Base Administrator
> >Oracle 7.3.3, 8.0.5, 8.1.7 - NT, W2K
> >[0%] OCP Oracle8i DBA
> >[0%] OCP Oracle9i DBA
> >-------------------------------- ------------
> >Organon (Ireland) Ltd.
> >E-mail: sean.oneill_at_organon.ie [subscribed: Digest Mode]
> >
> >Visit: http://groups.yahoo.com/group/Oracle-OCP-DBA
> >
> >"Nobody loves me but my mother... and she could be jivin' too." - BB
>King
> >
> >--
> >Please see the official ORACLE-L FAQ: http://www.orafaq.com
> >--
> >Author: O'Neill, Sean
> > INET: Sean.ONeill_at_organon.ie
> >
> >Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> >San Diego, California -- Public Internet access / Mailing Lists
> >--------------------------------------------------------------------
> >To REMOVE yourself from this mailing list, send an E-Mail message
> >to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> >the message BODY, include a line containing: UNSUB ORACLE-L
> >(or the name of mailing list you want to be removed from). You may
> >also send the HELP command for other information (like subscribing).
>
>
>_________________________________________________________________
>Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
>
>--
>Please see the official ORACLE-L FAQ: http://www.orafaq.com
>--
>Author: Rachel Carmichael
> INET: carmichr_at_hotmail.com
>
>Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
>San Diego, California -- Public Internet access / Mailing Lists
>--------------------------------------------------------------------
>To REMOVE yourself from this mailing list, send an E-Mail message
>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>the message BODY, include a line containing: UNSUB ORACLE-L
>(or the name of mailing list you want to be removed from). You may
>also send the HELP command for other information (like subscribing).
>--
>Please see the official ORACLE-L FAQ: http://www.orafaq.com
>--
>Author: MacGregor, Ian A.
> INET: ian_at_SLAC.Stanford.EDU
>
>Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
>San Diego, California -- Public Internet access / Mailing Lists
>--------------------------------------------------------------------
>To REMOVE yourself from this mailing list, send an E-Mail message
>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>the message BODY, include a line containing: UNSUB ORACLE-L
>(or the name of mailing list you want to be removed from). You may
>also send the HELP command for other information (like subscribing).



Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Rachel Carmichael
  INET: carmichr_at_hotmail.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Thu Jul 26 2001 - 18:38:23 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US