RE: Passwords in Scripts

I do basically the same thing, my korn-shell scripts will call another script that gets and returns the password from a particular file.

What is missing however is encryption which I have no experience with. Is there a way you could pass along how you encrypt/decrypt your file.... tools, code, books, examples... etc. to get me going.

It isn't a big hurry now because presently practically every script I presently have can log in as / as sysdba, but there are a couple still out there.

Joel Patterson
Database Administrator
joel.patterson_at_crowley.com
x72546
904 727-2546

-----Original Message-----
From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org] On Behalf Of fmhabash Sent: Wednesday, June 20, 2007 12:46 PM
To: ian_at_slac.stanford.edu
Cc: oracle-l_at_freelists.org
Subject: Re: Passwords in Scripts

I personally developed all my DBA management tools using PERL for monitoring, backups, and OS based jobs. I save passwords in flat files encrypted 128-bit. These tools decrypt them at run time only. DBAs have their interfaces to these files using their own individual keys. You can

also put them in some database of your liking and the major players have

packages to en/decrypt data.

Fred Habash (OCP 8i,9i)
ACS Healthcare
Off: 248-226-8778
http://www.acs-inc.com/index.html

MacGregor, Ian A. wrote:
> How are people handling the presence of database passwords in scripts
on client machines? I'm talking about Perl, Java, .NET, SQL*Plus and other programs running on Solaris, Linux, and Windows clients which have an Oracle password inside the program or reference a file which has one.

>
>
> I tried Oracle's password safe problem to see if would fix the problem
of having the rman catalog password in backup scripts. The client here is different as it is also another database server. Two things happened, the account under which the Oracle software was installed w could not log on to Oracle is a also an externally identified Oracle without a password. This was due to the authentication being switched from the operating system to the password safe. Not what was wanted. The other thing that happened was that the Context option broke. I could understand that if the indexes were on binary data where an external procedure call needs to be made; however this was on character data, and it happened on two different systems. Is it possible to have both OS and password authentication active simultaneously?
>
> The RMAN connections did work. However the connect sting is simply /.
If there are multiple accounts which need this ability on any one instance of Oracle, this does not seem a workable solution.
>
> What are others using as a password escrow system.
>
> Ian
> --
> http://www.freelists.org/webpage/oracle-l
>
>
>
>

--
http://www.freelists.org/webpage/oracle-l


--
http://www.freelists.org/webpage/oracle-l