Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: Password management

Re: Password management

From: Jerry Gitomer <jgitomer_at_erols.com>
Date: 2000/03/25
Message-ID: <954046951.198839418@news.erols.com>#1/1

On Sat, 25 Mar 2000, robertchung0909_at_my-deja.com wrote:
>I would like to hear from other people how they manage their Oracle
>schema passwords. My problem is the fact that I have to update all the
>hard-coded passwords in all database scripts whenever passwords are
>changed. We do not use Oracle's OS authentication feature because
>neither NT nor UNIX are hecker proof (even though you can basically
>assume Oracle is compromised when the hecker gets OS's super
>user/administrator access).
>
>Basically, the goal is to change passwords periodically, and avoid hard-
>coded passwords from database scripts that we have to update whenever
>passwords are changed. Should we just use Oracle's OS authentication
>feature? Any better idea? Thank you in advance.
>
>
>
>Sent via Deja.com http://www.deja.com/
>Before you buy.

        Look into having the operating system authenticate your passwords. You will require a one time change to each of your Oracle instances for the Oracle user name you are using in your scripts, e.g. user ORACLE will become user OP$ORACLE

--
Jerry Gitomer 
Once I learned how to spell DBA, I became one
Received on Sat Mar 25 2000 - 00:00:00 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US