Re: SQL script without password

Robert,

You don't say what platform you are working on. In Unix it is possible to do what you want, so long as the process is run by a Unix user that can connect to internal.

Let me explain.

Usually, you are asked to create two users:

orainst: specifically for installing oracle; oracle: the *unix* oracle system user.

Both of these will belong to the administration group identified on installation (usually dba).

Some people use "oracle" for both and don't bother with orainst. Some also do all the installation as root - a very bad idea.

If you can log in as this user (lets assume it's "oracle"), then you can connect to either svrmgrl or sqlplus as internal. In both cases, you will not be prompted for a password. (If you are, you are not in the right unix user!).

So, we will assume you are going to use sqlplus (because svrmgrl is going to be phased out). You can write a script like this:

sqlplus << ! > extra_sure.log
internal

   spool normal.log

• normal queries or anonymous PL/SQL goes here

!

(Obviously, you will dress the script up. Note that the "internal" and "!" *must* go on the left - no spaces. Note also that the internal should go on a separate line so that the process does not give your user away.)

And, hey presto, you have your password-less script.

If you are running scheduled tasks, yo can either issue it as oracle or as root. From cron, for example, it might look something like:

00 2 * * 2-6 su - oracle -c "/xyz/yourscript param1 param2" # Comment

Pause

There are other ways. Another way was the creative use of sudo.

If you are using NT, you don't have the same freedom: internal requires a password - but I think you can use password files.

Len

>
>Is there some way for SQL scripts to connect to database without
>password? We have many scripts that calls sqlplus and issue SQL
>commands, and we want to avoid hard-coded passwords in the scripts.
>We do not want to use OS authentication method, because the scripts
>need to be run from remote machines and using OS authentication from
>remote machine can open up security hole. Thank you in advance.
>
>
>
Received on Sat May 12 2001 - 14:02:38 CDT