Re: How to encrypt Password in Export script file ?
a) Changet the script to print "system/password" | exp full=y ... so no-one can see it with a 'ps' b) chmod 700 daily_exp.sh so no-one except the (presumably) oracle account can see the script hth connor --- "CHAN Chor Ling Catherine (CSC)" <[EMAIL PROTECTED]> wrote: > Hi Unix Gurus, > > My daily export file (daily_exp.sh) contains : > exp userid='system/password' file=file_name.dmp > grants=y rows=y > constraints=y compress=y full=y inctype=complete > log=file_name.log > > The system password is stated clearly in the export > script file. Has anyone > encrypt/decrypt the system password before passing > it as a variable to the > export script ? If yes, could I have a copy of your > script ? Thanks. > > Regds, > New Bee in Unix > -- > Please see the official ORACLE-L FAQ: > http://www.orafaq.com > -- > Author: CHAN Chor Ling Catherine (CSC) > INET: [EMAIL PROTECTED] > > Fat City Network Services-- (858) 538-5051 FAX: > (858) 538-5051 > San Diego, California-- Public Internet > access / Mailing Lists > > To REMOVE yourself from this mailing list, send an > E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of > 'ListGuru') and in > the message BODY, include a line containing: UNSUB > ORACLE-L > (or the name of mailing list you want to be removed > from). You may > also send the HELP command for other information > (like subscribing). = Connor McDonald http://www.oracledba.co.uk (mirrored at http://www.oradba.freeserve.co.uk) "Some days you're the pigeon, some days you're the statue" Do You Yahoo!? Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk or your free @yahoo.ie address at http://mail.yahoo.ie -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: =?iso-8859-1?q?Connor=20McDonald?= INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: How to encrypt Password in Export script file ?
instead of that, I create an account in the database that is identified externally (can only run from that server, and does not have a login password). You will need a matching Unix account for it, if the unix account is "exportacct" then create the database account as "ops$exportacct" grant this account create session and exp_full_database then change your shell script to read userid="/" and run the script from the exportacct account this way you don't need to hardcode a password ANYWHERE Rachel >From: "CHAN Chor Ling Catherine (CSC)" <[EMAIL PROTECTED]> >Reply-To: [EMAIL PROTECTED] >To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]> >Subject: How to encrypt Password in Export script file ? >Date: Thu, 31 May 2001 00:50:22 -0800 > >Hi Unix Gurus, > >My daily export file (daily_exp.sh) contains : >exp userid='system/password' file=file_name.dmp grants=y rows=y >constraints=y compress=y full=y inctype=complete log=file_name.log > >The system password is stated clearly in the export script file. Has anyone >encrypt/decrypt the system password before passing it as a variable to the >export script ? If yes, could I have a copy of your script ? Thanks. > >Regds, >New Bee in Unix >-- >Please see the official ORACLE-L FAQ: http://www.orafaq.com >-- >Author: CHAN Chor Ling Catherine (CSC) > INET: [EMAIL PROTECTED] > >Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 >San Diego, California-- Public Internet access / Mailing Lists > >To REMOVE yourself from this mailing list, send an E-Mail message >to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in >the message BODY, include a line containing: UNSUB ORACLE-L >(or the name of mailing list you want to be removed from). You may >also send the HELP command for other information (like subscribing). _ Get your FREE download of MSN Explorer at http://explorer.msn.com -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Rachel Carmichael INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: How to encrypt Password in Export script file ?
Hi, Pl look into the parfile option for export/import. You can keep all your export/import command line parameters in there, including userid/password. Parfile (with chmod 700) is only accessible to the owner, so no one else can see what is in it. And when you run exp/imp nothing from the parfile will be displayed in the 'ps' output either. You can refer to Oracle Utilities Guide for more information on exp/imp. HTH, Regards, - Kirti Deshpande Verizon Information Services http://www.superpages.com > -Original Message- > From: CHAN Chor Ling Catherine (CSC) [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, May 31, 2001 3:50 AM > To: Multiple recipients of list ORACLE-L > Subject: How to encrypt Password in Export script file ? > > Hi Unix Gurus, > > My daily export file (daily_exp.sh) contains : > exp userid='system/password' file=file_name.dmp grants=y rows=y > constraints=y compress=y full=y inctype=complete log=file_name.log > > The system password is stated clearly in the export script file. Has > anyone > encrypt/decrypt the system password before passing it as a variable to the > export script ? If yes, could I have a copy of your script ? Thanks. > > Regds, > New Bee in Unix > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.com > -- > Author: CHAN Chor Ling Catherine (CSC) > INET: [EMAIL PROTECTED] > > Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 > San Diego, California-- Public Internet access / Mailing Lists > > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Deshpande, Kirti INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: How to encrypt Password in Export script file ?
I also did this on all my databases - works very slick. Julie Fisher Sandia National Laboratories Oracle 8i DBA - OCP8i Solaris 2.6,7/HP-UX 11.0 System Administrator Web Server Administrator -Original Message- Sent: May 31, 2001 7:20 AM To: Multiple recipients of list ORACLE-L instead of that, I create an account in the database that is identified externally (can only run from that server, and does not have a login password). You will need a matching Unix account for it, if the unix account is "exportacct" then create the database account as "ops$exportacct" grant this account create session and exp_full_database then change your shell script to read userid="/" and run the script from the exportacct account this way you don't need to hardcode a password ANYWHERE Rachel >From: "CHAN Chor Ling Catherine (CSC)" <[EMAIL PROTECTED]> >Reply-To: [EMAIL PROTECTED] >To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]> >Subject: How to encrypt Password in Export script file ? >Date: Thu, 31 May 2001 00:50:22 -0800 > >Hi Unix Gurus, > >My daily export file (daily_exp.sh) contains : >exp userid='system/password' file=file_name.dmp grants=y rows=y >constraints=y compress=y full=y inctype=complete log=file_name.log > >The system password is stated clearly in the export script file. Has anyone >encrypt/decrypt the system password before passing it as a variable to the >export script ? If yes, could I have a copy of your script ? Thanks. > >Regds, >New Bee in Unix >-- >Please see the official ORACLE-L FAQ: http://www.orafaq.com >-- >Author: CHAN Chor Ling Catherine (CSC) > INET: [EMAIL PROTECTED] > >Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 >San Diego, California-- Public Internet access / Mailing Lists > >To REMOVE yourself from this mailing list, send an E-Mail message >to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in >the message BODY, include a line containing: UNSUB ORACLE-L >(or the name of mailing list you want to be removed from). You may >also send the HELP command for other information (like subscribing). _ Get your FREE download of MSN Explorer at http://explorer.msn.com -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Rachel Carmichael INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Fisher, Julie INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: How to encrypt Password in Export script file ?
> -Original Message- > From: Fisher, Julie [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, May 31, 2001 6:16 PM > To: Multiple recipients of list ORACLE-L > Subject: RE: How to encrypt Password in Export script file ? > > I also did this on all my databases - works very slick. > > Julie Fisher > Sandia National Laboratories > Oracle 8i DBA - OCP8i > Solaris 2.6,7/HP-UX 11.0 System Administrator > Web Server Administrator > > > -Original Message- > Sent: May 31, 2001 7:20 AM > To: Multiple recipients of list ORACLE-L > > > instead of that, I create an account in the database that is identified > externally (can only run from that server, and does not have a login > password). You will need a matching Unix account for it, if the unix > account > > is "exportacct" then create the database account as "ops$exportacct" > > grant this account create session and exp_full_database > > then change your shell script to read userid="/" and run the script from > the exportacct account > > this way you don't need to hardcode a password ANYWHERE > > Rachel > > > >From: "CHAN Chor Ling Catherine (CSC)" <[EMAIL PROTECTED]> > >Reply-To: [EMAIL PROTECTED] > >To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]> > >Subject: How to encrypt Password in Export script file ? > >Date: Thu, 31 May 2001 00:50:22 -0800 > > > >Hi Unix Gurus, > > > >My daily export file (daily_exp.sh) contains : > >exp userid='system/password' file=file_name.dmp grants=y rows=y > >constraints=y compress=y full=y inctype=complete log=file_name.log > > > >The system password is stated clearly in the export script file. Has > anyone > >encrypt/decrypt the system password before passing it as a variable to > the > >export script ? If yes, could I have a copy of your script ? Thanks. > > > >Regds, > >New Bee in Unix > >-- > >Please see the official ORACLE-L FAQ: http://www.orafaq.com > >-- > >Author: CHAN Chor Ling Catherine (CSC) > > INET: [EMAIL PROTECTED] > > > >Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 > >San Diego, California-- Public Internet access / Mailing Lists > > > >To REMOVE yourself from this mailing list, send an E-Mail message > >to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > >the message BODY, include a line containing: UNSUB ORACLE-L > >(or the name of mailing list you want to be removed from). You may > >also send the HELP command for other information (like subscribing). > > _ > Get your FREE download of MSN Explorer at http://explorer.msn.com > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.com > -- > Author: Rachel Carmichael > INET: [EMAIL PROTECTED] > > Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 > San Diego, California-- Public Internet access / Mailing Lists > > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.com > -- > Author: Fisher, Julie > INET: [EMAIL PROTECTED] > > Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 > San Diego, California-- Public Internet access / Mailing Lists > > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Nirmal Kumar Muthu Kumaran INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: How to encrypt Password in Export script file ?
"CHAN Chor Ling Catherine (CSC)" wrote: > > Hi Unix Gurus, > > My daily export file (daily_exp.sh) contains : > exp userid='system/password' file=file_name.dmp grants=y rows=y > constraints=y compress=y full=y inctype=complete log=file_name.log > > The system password is stated clearly in the export script file. Has anyone > encrypt/decrypt the system password before passing it as a variable to the > export script ? If yes, could I have a copy of your script ? Thanks. > > Regds, > New Bee in Unix > Create an externally identified Oracle account with the suitable privileges, and run your script from this account using userid=/ -- Regards, Stephane Faroult Oriole Corporation Voice: +44 (0) 7050-696-269 Fax:+44 (0) 7050-696-449 Performance Tools & Free Scripts -- http://www.oriole.com, designed by Oracle DBAs for Oracle DBAs -- -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Stephane Faroult INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: How to encrypt Password in Export script file ?
put your userid and password and all other parameters in parfile and run. exp parfile=abc.parfile It will hide your password on unix level. your password file should be readable by you only... Regards Rafiq Reply-To: [EMAIL PROTECTED] To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]> Date: Thu, 31 May 2001 05:07:24 -0800 a) Changet the script to print "system/password" | exp full=y ... so no-one can see it with a 'ps' b) chmod 700 daily_exp.sh so no-one except the (presumably) oracle account can see the script hth connor --- "CHAN Chor Ling Catherine (CSC)" <[EMAIL PROTECTED]> wrote: > Hi Unix Gurus, > > My daily export file (daily_exp.sh) contains : > exp userid='system/password' file=file_name.dmp > grants=y rows=y > constraints=y compress=y full=y inctype=complete > log=file_name.log > > The system password is stated clearly in the export > script file. Has anyone > encrypt/decrypt the system password before passing > it as a variable to the > export script ? If yes, could I have a copy of your > script ? Thanks. > > Regds, > New Bee in Unix > -- > Please see the official ORACLE-L FAQ: > http://www.orafaq.com > -- > Author: CHAN Chor Ling Catherine (CSC) > INET: [EMAIL PROTECTED] > > Fat City Network Services-- (858) 538-5051 FAX: > (858) 538-5051 > San Diego, California-- Public Internet > access / Mailing Lists > > To REMOVE yourself from this mailing list, send an > E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of > 'ListGuru') and in > the message BODY, include a line containing: UNSUB > ORACLE-L > (or the name of mailing list you want to be removed > from). You may > also send the HELP command for other information > (like subscribing). = Connor McDonald http://www.oracledba.co.uk (mirrored at http://www.oradba.freeserve.co.uk) "Some days you're the pigeon, some days you're the statue" Do You Yahoo!? Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk or your free @yahoo.ie address at http://mail.yahoo.ie -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: =?iso-8859-1?q?Connor=20McDonald?= INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). _ Get your FREE download of MSN Explorer at http://explorer.msn.com -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Mohammad Rafiq INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: How to encrypt Password in Export script file ?
Hi Gurus, Thanks to those who replied. We feel that Unix account is easily hacked, so we will not implement the method that Rachel mentioned. We will probably "encrypt" the password in another file. Before exporting, we will decrypt the password before passing the password to the export script. Thanks. Regds, New Bee -Original Message- From: Fisher, Julie [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 31, 2001 11:16 PM To: Multiple recipients of list ORACLE-L Subject: RE: How to encrypt Password in Export script file ? I also did this on all my databases - works very slick. Julie Fisher Sandia National Laboratories Oracle 8i DBA - OCP8i Solaris 2.6,7/HP-UX 11.0 System Administrator Web Server Administrator -Original Message- Sent: May 31, 2001 7:20 AM To: Multiple recipients of list ORACLE-L instead of that, I create an account in the database that is identified externally (can only run from that server, and does not have a login password). You will need a matching Unix account for it, if the unix account is "exportacct" then create the database account as "ops$exportacct" grant this account create session and exp_full_database then change your shell script to read userid="/" and run the script from the exportacct account this way you don't need to hardcode a password ANYWHERE Rachel >From: "CHAN Chor Ling Catherine (CSC)" <[EMAIL PROTECTED]> >Reply-To: [EMAIL PROTECTED] >To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]> >Subject: How to encrypt Password in Export script file ? >Date: Thu, 31 May 2001 00:50:22 -0800 > >Hi Unix Gurus, > >My daily export file (daily_exp.sh) contains : >exp userid='system/password' file=file_name.dmp grants=y rows=y >constraints=y compress=y full=y inctype=complete log=file_name.log > >The system password is stated clearly in the export script file. Has anyone >encrypt/decrypt the system password before passing it as a variable to the >export script ? If yes, could I have a copy of your script ? Thanks. > >Regds, >New Bee in Unix >-- >Please see the official ORACLE-L FAQ: http://www.orafaq.com >-- >Author: CHAN Chor Ling Catherine (CSC) > INET: [EMAIL PROTECTED] > >Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 >San Diego, California-- Public Internet access / Mailing Lists > >To REMOVE yourself from this mailing list, send an E-Mail message >to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in >the message BODY, include a line containing: UNSUB ORACLE-L >(or the name of mailing list you want to be removed from). You may >also send the HELP command for other information (like subscribing). _ Get your FREE download of MSN Explorer at http://explorer.msn.com -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Rachel Carmichael INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Fisher, Julie IN
