Re: Using thycotic secret server to serve up oracle passwords

From: Mladen Gogala <gogala.mladen_at_gmail.com>
Date: Tue, 22 Mar 2016 17:57:42 -0400
Message-ID: <56F1BFD6.7040603_at_gmail.com>



There is also an open source solution called KeePass, that I've seen used quite a few times. Looks better than Excel and is cheaper, too.

On 03/22/2016 04:50 PM, MJ Mody wrote:
> Hey Matt,
> Our IS Security group recently procured this software for
> enterprise-wide password management and auditing. It is better than
> saving passwords in spreadsheet called password.xlsx only to allow
> malware to act on threat vector.
> Initial DBA objection was in light of oracle key vault which in later
> phase integrates key management with database. Nonetheless, we are in
> the process of importing all passwords into software and extending
> capabilities with powershell.
> From bc/dr perspective, we use double-take which has powershell
> capabilities as well. Looking to see how to better integrate
> failover/failback scripts.
> Side note, Oracle SEPS (secure external password store) may be an
> option to 'remove oracle passwords from automated jobs/shell scripts'.
>
> Hope this helps
>
> On Mar 22, 2016, at 2:38 PM, Matt Adams<MAdams_at_TroverSolutions.com
> <mailto:MAdams_at_troversolutions.com>> wrote:
>
>> If anybody on the list has ever used the Thycotic Secret Server java
>> console api to remove oracle passwords from automated jobs/shell
>> scripts and would like to share their experiences (and perhaps answer
>> a question or two), I’d love to hear from you….on-list or off-list,
>> either is fine with me.
>>
>> Matt Adams
>>
>> **** This communication may contain privileged and/or confidential
>> information. If you are not the intended recipient, you are hereby
>> notified that disclosing, copying, or distributing of the contents is
>> strictly prohibited. If you have received this message in error,
>> please contact the sender immediately and destroy any copies of this
>> document. ****
>>

-- 
Mladen Gogala
Oracle DBA
Tel: (347) 321-1217


--
http://www.freelists.org/webpage/oracle-l
Received on Tue Mar 22 2016 - 22:57:42 CET

Original text of this message