Re: ? Passing userid/password
From: David Thornewill von Essen <ttg242_at_newton.sps.mot.com>
Date: Wed, 30 Jun 1993 14:31:30 GMT
Message-ID: <1993Jun30.143130.19167_at_newsgate.sps.mot.com>
Date: Wed, 30 Jun 1993 14:31:30 GMT
Message-ID: <1993Jun30.143130.19167_at_newsgate.sps.mot.com>
In article 68s_at_uk.ac.brookes, p0070621_at_oxford-brookes.ac.uk (Tommy Wareing) writes:
Stuff deleted ...
>Under our version of Unix (SunOS version something), using there is
>an option on ps (e to be precise) to display all the enviroment variables
>available to a process.
>
>***HAVING THE PASSWORD AS AN ENVIRONMENT VARIABLE IS NOT SAFE***
>
>This may not be the case under other OS's, but do you really want to
>risk this?
>
>Either use an OPS$ username, or make it a user exit (which will give
>you the most flexability anyway).
>
Also not secure in a SQL*Net environment. I can create a user on my
machine with your userid and use that to log into your OPS$ account
on your machine (or any other come to that).
--- Regards, David TvE +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- David Thornewill von Essen Sr. Systems Analyst Motorola ASIC Division I don't speak for Mot. Chandler, AZ-85224 fax: (602) 814-4451 email: ttg242_at_email.sps.mot.com tel: (602) 814-4395 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-Received on Wed Jun 30 1993 - 16:31:30 CEST