Home » RDBMS Server » Security » Automating Password Changes
Automating Password Changes [message #528583] Tue, 25 October 2011 15:13 Go to next message
bdgood
Messages: 1
Registered: October 2011
Junior Member
I'm working for a credit card company and on a security project. We have oracle databases. Currently the passwords have to be changed every so often for key accounts for security purposes.

Does anyone know of a tool to automate the process?

Ideally it would be a way to automate password changes on many accounts where only some people would be able to get the new password once it was changed.

Also, these IDs/passwords are sometimes used by applications to connect to the database so .ini files or some type of connection file would need to be changed automatically also.

Just wondering if anything already exists or if we will need to build this.

Thanks
Re: Automating Password Changes [message #528586 is a reply to message #528583] Tue, 25 October 2011 15:33 Go to previous messageGo to next message
BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal
Senior Member
It would be helpful if you followed Posting Guidelines - http://www.orafaq.com/forum/t/88153/0/

passwords in Oracle are changed as below

ALTER USER1 IDENTIFIED BY PASS1;
ALTER USER2 IDENTIFIED BY PASS2;
ALTER USER3 IDENTIFIED BY PASS3;

so all that needs to be done is write some software that generates a text file that conform to valid SQL syntax.
then invoke that file in sqlplus or similar client
Re: Automating Password Changes [message #528608 is a reply to message #528583] Wed, 26 October 2011 01:09 Go to previous message
Michel Cadot
Messages: 68625
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Quote:
Currently the passwords have to be changed every so often for key accounts for security purposes.


Use Oracle profile to constrain people to change their password.

Quote:
Also, these IDs/passwords are sometimes used by applications to connect to the database so .ini files or some type of connection file would need to be changed automatically also.


It is a very bad idea to store password in a file unless it is encrypted, is this your case?

Regards
Michel
Previous Topic: oracle account limitation
Next Topic: Oracle Access Manager Installation Error
Goto Forum:
  


Current Time: Thu Mar 28 16:38:33 CDT 2024