Tom,
As Dave Barry would say, Har!
Unfortunately, we are talking about 3rd-party people who have the 'right' to log in for support (debugging their ^%(^#@ products, and installing updates). I've got them under local admin accounts (as opposed to domain accounts), so they can only get to their own servers. BUT... that's as far as I can go to secure things except at the folder level (and Oracle loves it (!) when you try and do folder security on the datafiles, controlfiles, etc.). I appreciate the thought, but you did not go far enough... Kill them all, and save on security hardware. Any workable ideas?
Desperately yours,
Paul R. Sherman
DBA/Sr. Appl. Analyst
Bacou-Dalloz
office - 401-232-1200 x200
cell - 401-935-2802
"Mercadante, Thomas F"
<[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED] 09/23/2003 04:24 PM
|
To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]> cc: Subject: RE: Hiding passwords |
Paul,
It's simple really. Do not allow them to log-on to the Win2k server - don't give them an account; keep the passwords secret; and keep the machine in a locked room.
Tom Mercadante
Oracle Certified Professional
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 23, 2003 4:15 PM
To: Multiple recipients of list ORACLE-L
Subject: Re: Hiding passwords
Hello,
If you do that in Win2k, then you have more env variables for 'authorized' people to see when they do a SET <cr>.
Now, to be frank, I have an ulterior (a 'maxed-out' interior or exterior) motive in this reply. I have yet to see an intelligent (never mind elegant) of protecting system variables from someone's view when they do a SET in a DOS session. You can keep them out of Control Panel/System/Advanced/Environmental Variables, but you can't keep them out of DOS, so whaddya do? That's what I want to know. Has anyone confronted this issue and won?
Thank you,
Paul R. Sherman
DBA/Sr. Appl. Analyst
Bacou-Dalloz
office - 401-232-1200 x200
cell - 401-935-2802
"M.Godlewski"
<[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 09/23/2003 02:15 PM
| To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]> cc: Subject: Re: Hiding passwords |
You could set up environment variables and then reference the environment variable in your script.
HTH
M.
[EMAIL PROTECTED] wrote:
There is a good discussion in asktom website on this topic.
Here is the link :
http://asktom.oracle.com/pls/ask/f?p=4950:8:::::F4950_P8_DISPLAYID:142212348066
Hth.
Best Regards,
Prasad
"O'Neill, Sean"
non.ie> cc:
Sent by: Subject: Hiding passwords
[EMAIL PROTECTED]
.com
09/23/2003 10:24
AM
Please respond to
ORACLE-L
So the story goes like this. We're a NT/W2K shop. We have various scripts
that run DB related jobs but these are in plain text and we'd like to
"hide"
these passwords in some way to allow scripts to run but the passwords not
be
"visible" to potential prying eyes. Has anyone cracked this one yet. I've
had a trawl around MetaLink but found nothing of substance.
-------------------------
Seán O' Neill
Organon (Ireland) Ltd.
[subscribed: digest mode]
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: O'Neill, Sean
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author:
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVEE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software