Re: Q: embedding userid/password in scripts?

John P DeVoy wrote:
>
> I'm new to UNIX, and I want to develop some cron scripts that I
> can have log into the database and do some chores for me. I can
> do that trick just fine, but I'm not certain I'm handling the
> account name and password in the most secure manner possible.
>
> If you've done similar stuff in your shop, can you share with us
> how you handle the account name and password, together with any
> security issues. Thanks!!
> --
> ----------------------------------------------------------------
> John P De Voy "When amatuers dabble in databases ()
> DBA, NeXT Software Inc. people get hurt!" /\

If you are going to log onto the database as yourself, you may consider using the operating system level validation. Here a simple "/" would get you onto the database.

The way it works is; if your UNIX username is fred then there must be a corresponding user ops$fred on your database (assuming that the init.ora parameter OS_AUTHENTICATION_PREFIX is set to OPS$). A simple "/" with any oracle database application where username/password is required would then suffice for you to log onto the database.

Hence instaed of "sqlplus fred/fredpwd" you will type "sqlplus /". This method is almost invaluable when writing scripts that access the database and need username password. Here you don't need to hardcode any passwords.

Refer to the documentation relating to OS_AUTHENTICATION_PREFIX init.ora parameter for more info.

Sorry, but I've got to get on with some work now, I hope the hints above would point you in the right direction. If you need further assistance don't hesitate to mail me. Received on Mon Nov 18 1996 - 00:00:00 CST