Re: Hiding the password in UNIX?

From: Violin <violin.hsiao_at_mail.pouchen.com.tw>
Date: 2000/05/24
Message-ID: <392b28fa.1066763@172.16.7.5>#1/1

On 23 May 2000 20:53:40 GMT, dlane_at_cix.compulink.co.uk wrote:

Hello,
the following shell script is from Albert Balbekov. (abalbekov_at_my-dejanews.com) He suggested you can substitute actual sqlplus with UNIX script to check if username/password is passed before invoking actual sqlplus.

Steps are:

1.rename sqlplus with new name (like sqlplus.bin)

2.edit a shell named sqlplus , like this #!/usr/bin/sh
if [ `echo $1 | grep / | wc -l` -eq 1 ]
then

        echo "Error: don't type password at command line.."
        exit

fi
if [ `echo $2 | grep / | wc -l` -eq 1 ]
then

        echo "Error: don't type password at command line.."
        exit

fi
sqlplus.bin $*

3.chmod sqlplus shell read only and test if it works !!

Hope this helps

Violin.
violin.hsiao_at_mail.pouchen.com.tw

>In article <8fpfhh$75tq$1_at_node17.cwnet.frontiernet.net>,
>scruiz_at_frontiernet.net (Stephen W Ruiz) wrote:
>
>> Does anyone know a good way to let users use sqlplus without entering
>> their
>> username/password on the command line. It shows up when you grep for
>> sqlplus. How do you get arround this issue. In our Sybase
>> environments we
>> echo a parameter to isql, but that did not work with Oracle for some
>> reason.
>> Thanks for your response.
>
>There's some c source on the web somewhere called "hide.c" .... you can
>use this to hide parameters to a call - Create your own sqlplus script
>which uses this and your parameters will disappear
>
>Dave Lane (dlane_at_pt.lu)
Received on Wed May 24 2000 - 00:00:00 CDT