Re: spawning sqlplus from a pro*c app; security
From: Donald M. Brown <u570382_at_beta.lanl.gov>
Date: 27 Jan 1995 17:38:22 GMT
Message-ID: <3gbb2e$32a_at_newshost.lanl.gov>
Date: 27 Jan 1995 17:38:22 GMT
Message-ID: <3gbb2e$32a_at_newshost.lanl.gov>
In article <jason.lisenchuk-2501951137290001_at_47.169.3.254> jason.lisenchuk_at_nt.com (Jason Lisenchuk) writes:
:
:Please consider the following alternatives:
:
:1. Use private environment variable(s)
:
:echo $RPT_PW | sqlplus REPORT_ID
:
:
:2. Pipe info from plaintext file
:
:cat $RPT_LOGIN_PARMS | sqlplus
:
:
:3. Pipe info from encrypted file
:
:$DECRYPT $ENCR_RPT_LOGIN_PARMS | sqlplus
You could also put the username/password in the first line of the sqlplus script. It wouldn't show up in the ps -ef listing, but you would have to protect the scripts from prying eyes. Received on Fri Jan 27 1995 - 18:38:22 CET