Oracle people change password without warning

2013-11-12 Thread Alan Truelove
Remedy 7.6.04/Oracle installation - at a Govt facility that shall remain 
nameless, the Oracle db admins are mandated to change password at intervals. 
-- doing this without warning. This means that one cannot access the Remedy 
tools.  (And change the Oracle password stored there), Catch 22.

I had proposed using API to modify the Oracle password field in the appropriate 
tab of the  ' server info form' - but this it seems is not good enough-the 
ars.conf file has to be changed.  

Any suggestions?

___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Where the Answers Are, and have been for 20 years

Re: Oracle people change password without warning

2013-11-12 Thread LJ LongWing
Alan,
It is my understanding that changing the PW in the conf file, and
restarting remedy will re-encrpyt the password once started up...so
changing it in the conf file I believe is a valid optionbut honestly, a
policy that intentionally takes a service offline because of mandatory
without warning password changes sounds a bit insane.


On Tue, Nov 12, 2013 at 9:42 AM, Alan Truelove truelove.a...@yahoo.comwrote:

 **
 Remedy 7.6.04/Oracle installation - at a Govt facility that shall remain
 nameless, the Oracle db admins are mandated to change password at
 intervals.
 -- doing this without warning. This means that one cannot access the
 Remedy tools.  (And change the Oracle password stored there), Catch 22.

 I had proposed using API to modify the Oracle password field in the
 appropriate tab of the  ' server info form' - but this it seems is not good
 enough-the ars.conf file has to be changed.

 Any suggestions?

 _ARSlist: Where the Answers Are and have been for 20 years_

___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Where the Answers Are, and have been for 20 years


Re: Oracle people change password without warning

2013-11-12 Thread Rick Cook
Yeah, that should be covered by an RFC, so that the process is orderly at
least.

Rick


On Tue, Nov 12, 2013 at 8:50 AM, LJ LongWing lj.longw...@gmail.com wrote:

 **
 Alan,
 It is my understanding that changing the PW in the conf file, and
 restarting remedy will re-encrpyt the password once started up...so
 changing it in the conf file I believe is a valid optionbut honestly, a
 policy that intentionally takes a service offline because of mandatory
 without warning password changes sounds a bit insane.


 On Tue, Nov 12, 2013 at 9:42 AM, Alan Truelove truelove.a...@yahoo.comwrote:

 **
 Remedy 7.6.04/Oracle installation - at a Govt facility that shall remain
 nameless, the Oracle db admins are mandated to change password at
 intervals.
 -- doing this without warning. This means that one cannot access the
 Remedy tools.  (And change the Oracle password stored there), Catch 22.

 I had proposed using API to modify the Oracle password field in the
 appropriate tab of the  ' server info form' - but this it seems is not good
 enough-the ars.conf file has to be changed.

 Any suggestions?

 _ARSlist: Where the Answers Are and have been for 20 years_


 _ARSlist: Where the Answers Are and have been for 20 years_

___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Where the Answers Are, and have been for 20 years


Re: Oracle people change password without warning

2013-11-12 Thread michael campbell
pretty normal procedure when locking down environments,(stigging) can't have a 
password that does not expire. What ever they set it to, log into  outlook and 
set yourself a reminder, have remedy send an email a couple days before it 
expires too if you like. so you can then coordinate with dba to change it 
togethor.
 
mike
 
Date: Tue, 12 Nov 2013 09:50:45 -0700
From: lj.longw...@gmail.com
Subject: Re: Oracle people change password without warning
To: arslist@ARSLIST.ORG

**
Alan,It is my understanding that changing the PW in the conf file, and 
restarting remedy will re-encrpyt the password once started up...so changing it 
in the conf file I believe is a valid optionbut honestly, a policy that 
intentionally takes a service offline because of mandatory without warning 
password changes sounds a bit insane.


On Tue, Nov 12, 2013 at 9:42 AM, Alan Truelove truelove.a...@yahoo.com wrote:

**

Remedy 7.6.04/Oracle installation - at a Govt facility that shall remain 
nameless, the Oracle db admins are mandated to change password at intervals. -- 
doing this without warning. This means that one cannot access the Remedy tools. 
 (And change the Oracle password stored there), Catch 22.


I had proposed using API to modify the Oracle password field in the appropriate 
tab of the  ' server info form' - but this it seems is not good enough-the 
ars.conf file has to be changed. 
 

Any suggestions?


_ARSlist: Where the Answers Are and have been for 20 years_

_ARSlist: Where the Answers Are and have been for 20 years_   
  
___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Where the Answers Are, and have been for 20 years


Re: Oracle people change password without warning

2013-11-12 Thread pritch
Yes - pretty common process most places I've been too.  Best to work with the 
DBAs and have them do it during a regular patching cycle when (if) you have the 
system stopped and let the DBAs be responsible for updating it both in Oracle 
and in the conf file.  just save off a copy of the conf file before they go 
into it so that you have a copy of everything else.

- Original Message -
From: michael campbell soup...@hotmail.com
To: arslist@ARSLIST.ORG
Sent: Tuesday, November 12, 2013 11:58:51 AM
Subject: Re: Oracle people change password without warning

** 
pretty normal procedure when locking down environments,(stigging) can't have a 
password that does not expire. What ever they set it to, log into  outlook and 
set yourself a reminder, have remedy send an email a couple days before it 
expires too if you like. so you can then coordinate with dba to change it 
togethor. 
  
mike 
  


Date: Tue, 12 Nov 2013 09:50:45 -0700 
From: lj.longw...@gmail.com 
Subject: Re: Oracle people change password without warning 
To: arslist@ARSLIST.ORG 

** 
Alan, 
It is my understanding that changing the PW in the conf file, and restarting 
remedy will re-encrpyt the password once started up...so changing it in the 
conf file I believe is a valid optionbut honestly, a policy that 
intentionally takes a service offline because of mandatory without warning 
password changes sounds a bit insane. 



On Tue, Nov 12, 2013 at 9:42 AM, Alan Truelove  truelove.a...@yahoo.com  
wrote: 


** 





Remedy 7.6.04/Oracle installation - at a Govt facility that shall remain 
nameless, the Oracle db admins are mandated to change password at intervals.  
-- doing this without warning. This means that one cannot access the Remedy 
tools.  (And change the Oracle password stored there), Catch 22. 

I had proposed using API to modify the Oracle password field in the appropriate 
tab of the  ' server info form' - but this it seems is not good enough-the 
ars.conf file has to be changed.  

Any suggestions? 


_ARSlist: Where the Answers Are and have been for 20 years_ 
_ARSlist: Where the Answers Are and have been for 20 years_ _ARSlist: Where 
the Answers Are and have been for 20 years_

___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Where the Answers Are, and have been for 20 years


Re: Oracle people change password without warning

2013-11-12 Thread Jason Miller
I have heard this too but have never seen it happen.  I just verified with
an 8.1 system.  I set the password in the ar.cfg file and restarted.  The
password is still clear text.

What I do when I need to sync up passwords between AR System and the DB is
set the password in the DB and in the config file, start the system and
then change the password via Server Information.

Alan, I am assuming your team is not to know the password?  If not why not
sit down with the DBAs and have them enter it into the Server Info form
(they probably could even remote your PC)?  It doesn't require a restart
and will keep AR System and the DB in sync.

Jason


On Tue, Nov 12, 2013 at 8:50 AM, LJ LongWing lj.longw...@gmail.com wrote:

 **
 Alan,
 It is my understanding that changing the PW in the conf file, and
 restarting remedy will re-encrpyt the password once started up...so
 changing it in the conf file I believe is a valid optionbut honestly, a
 policy that intentionally takes a service offline because of mandatory
 without warning password changes sounds a bit insane.


 On Tue, Nov 12, 2013 at 9:42 AM, Alan Truelove truelove.a...@yahoo.comwrote:

 **
 Remedy 7.6.04/Oracle installation - at a Govt facility that shall remain
 nameless, the Oracle db admins are mandated to change password at
 intervals.
 -- doing this without warning. This means that one cannot access the
 Remedy tools.  (And change the Oracle password stored there), Catch 22.

 I had proposed using API to modify the Oracle password field in the
 appropriate tab of the  ' server info form' - but this it seems is not good
 enough-the ars.conf file has to be changed.

 Any suggestions?

 _ARSlist: Where the Answers Are and have been for 20 years_


 _ARSlist: Where the Answers Are and have been for 20 years_


___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Where the Answers Are, and have been for 20 years


Re: Oracle people change password without warning

2013-11-12 Thread Patrick Zandi
Exactly! 
Set password from the SQL first
Put password in clear text in the ar.config
Startup
Login as admin, go to first screen under database (admin tab) and enter 
password there apply)... Go look in the at.conf it is now encrypted

Sent from my iPhone

 On Nov 12, 2013, at 19:30, Jason Miller jason.mil...@gmail.com wrote:
 
 **
 I have heard this too but have never seen it happen.  I just verified with an 
 8.1 system.  I set the password in the ar.cfg file and restarted.  The 
 password is still clear text.
 
 What I do when I need to sync up passwords between AR System and the DB is 
 set the password in the DB and in the config file, start the system and then 
 change the password via Server Information.
 
 Alan, I am assuming your team is not to know the password?  If not why not 
 sit down with the DBAs and have them enter it into the Server Info form (they 
 probably could even remote your PC)?  It doesn't require a restart and will 
 keep AR System and the DB in sync.
 
 Jason
 
 
 On Tue, Nov 12, 2013 at 8:50 AM, LJ LongWing lj.longw...@gmail.com wrote:
 **
 Alan,
 It is my understanding that changing the PW in the conf file, and restarting 
 remedy will re-encrpyt the password once started up...so changing it in the 
 conf file I believe is a valid optionbut honestly, a policy that 
 intentionally takes a service offline because of mandatory without warning 
 password changes sounds a bit insane.
 
 
 On Tue, Nov 12, 2013 at 9:42 AM, Alan Truelove truelove.a...@yahoo.com 
 wrote:
 **
 Remedy 7.6.04/Oracle installation - at a Govt facility that shall remain 
 nameless, the Oracle db admins are mandated to change password at 
 intervals. 
 -- doing this without warning. This means that one cannot access the Remedy 
 tools.  (And change the Oracle password stored there), Catch 22.
 
 I had proposed using API to modify the Oracle password field in the 
 appropriate tab of the  ' server info form' - but this it seems is not good 
 enough-the ars.conf file has to be changed.  
 
 Any suggestions?
 
 _ARSlist: Where the Answers Are and have been for 20 years_
 
 _ARSlist: Where the Answers Are and have been for 20 years_
 
 _ARSlist: Where the Answers Are and have been for 20 years_

___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
Where the Answers Are, and have been for 20 years