Re: oracle8 on NT - password security

It is just as pointless as posting to all Oracle newsgroups.

Also, it is not the SYSDBA password, but the internal password, which are two completely different things.
The password file and this script are stored on a system which should be accessible by administrators only!
The password file has been designed to get remote SYSDBA access (ie SYSDBA access by other computers in the network). The script normally is not accessible to other people than administrators. You only have a point if you normally share your C-drive to all users on your network.
Finally the internal account will be removed in a future release. You should use the OS_OPER and OS_DBA groups instead.

Hth,

Sybrand Bakker, Oracle DBA

<curley_joe_at_my-deja.com> wrote in message news:8m9ppf$75a$1_at_nnrp1.deja.com...
> what's the point of having an encrypted password file if you can
> find the unencrypted version of the SYSDBA password in
> the "strtorcl.cmd" file that's called by the OracleStartORCL service?
> seems kind of pointless....
>
>
> Sent via Deja.com http://www.deja.com/
> Before you buy.
Received on Wed Aug 02 2000 - 00:00:00 CDT