Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.tools -> Re: SQL script without password

Re: SQL script without password

From: Stephan Langer <slanger_at_dixi-wc.de>
Date: Mon, 14 May 2001 08:32:16 +0200
Message-ID: <3AFF7BF0.E3914F6B@dixi-wc.de>

How about starting sqlplus with nolog option an call the authentification-(sub)script in the first lines of the script ?

hth
Stephan

61.12.128.6, [Igor, Laletin] schrieb:

> [skipped]
>
> > I code a $SYSPASS into my (our) scripts. Then set this at login.
> >
> > SYSPASS=manager; export SYSPASS
> >
> > at the command line.
>
> Unfortunately this is also insecure. At least on Solaris where you still have BSD ps (/usr/ucb/ps). And it can show you other process environment. Try /usr/ucb/ps -wwe <pid>
>
> > (there is also a hidden file in /etc that I use for crontab items,
> > that will set the env variable). This way my scripts are
> > transportable (db to db, machine to machine), and I minimize the
> > security risk.
> >
> > I also clear the variable in setenv - this keeps things clean.
>
> Doesn't really matter. Even if you clean both environments (parent-shell and child-script) there is moment when SYSPASS is visible.
>
> Regards,
> Igor.
>
> ==================================
> Poster's IP address: 61.12.128.6
> Posted via http://nodevice.com
> Linux Programmer's Site
  Received on Mon May 14 2001 - 01:32:16 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US