Re: ? Passing userid/password

From: David Thornewill von Essen <ttg242_at_newton.sps.mot.com>
Date: Wed, 30 Jun 1993 14:31:30 GMT
Message-ID: <1993Jun30.143130.19167_at_newsgate.sps.mot.com>


In article 68s_at_uk.ac.brookes, p0070621_at_oxford-brookes.ac.uk (Tommy Wareing) writes: Stuff deleted ...
>Under our version of Unix (SunOS version something), using there is
>an option on ps (e to be precise) to display all the enviroment variables
>available to a process.
>
>***HAVING THE PASSWORD AS AN ENVIRONMENT VARIABLE IS NOT SAFE***
>
>This may not be the case under other OS's, but do you really want to
>risk this?
>
>Either use an OPS$ username, or make it a user exit (which will give
>you the most flexability anyway).
>
Also not secure in a SQL*Net environment. I can create a user on my machine with your userid and use that to log into your OPS$ account on your machine (or any other come to that).

---
Regards,
David TvE

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
David Thornewill von Essen                           Sr. Systems Analyst
Motorola ASIC Division                            I don't speak for Mot.
Chandler, AZ-85224                                   fax: (602) 814-4451
email: ttg242_at_email.sps.mot.com                      tel: (602) 814-4395
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
Received on Wed Jun 30 1993 - 16:31:30 CEST

Original text of this message