| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Usenet -> c.d.o.server -> Re: Known passwords and sqlplus
I haven't done this, but another app I know of hashes the
userid/password the user supplies to generate their unknown read/write
enabled userid/password. If the user tries the userid/password that they
know about they only get read privileges.
nieuws net wrote:
>
> Hi
>
> We have an application redbox on an unix server with oracle as
> the database.
> The problem is that the application has several hardcoded userid/passwords
> unix and oracle)
> There is a need to do sqlplus from the client , but if those passwords
> are commonly known then there is a possible security gap.
> How do i prevent users who can do sqlplus from there client that they
> use the userids known in the application?
>
> thanks in advance
> gkor_at_rdw.nl
--
 |
 |