Re: Securing passwords in scripts
me too. NT and unix , thank you paquette stephane wrote: Me too. On unix and NT --- Stephane Faroult [EMAIL PROTECTED] a écrit : O'Neill, Sean wrote: I have some scripts, O.S. command and SQL, which I use to perform COLD backups of DBs and other tasks. I'm not particularily happy about having username/password information in the scripts. Has anyone come up with a way to avoid same allowing for the fact the scripts should require no user input to execute. Sean :) I swear by externally identified accounts. -- Regards, Stephane Faroult Oriole Corporation -- http://www.oriolecorp.com, designed by Oracle DBAs for Oracle DBAs -- -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Stephane Faroult INET: [EMAIL PROTECTED] Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). = Stéphane Paquette DBA Oracle, consultant entrepôt de données Oracle DBA, datawarehouse consultant [EMAIL PROTECTED] ___ Do You Yahoo!? -- Vos albums photos en ligne, Yahoo! Photos : http://fr.photos.yahoo.com -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: =?iso-8859-1?q?paquette=20stephane?= INET: [EMAIL PROTECTED] Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). begin:vcard n:Açýkgöz;Bülent tel;fax:+903122101120 tel;work:+903122103382 x-mozilla-html:FALSE org:Middle East Technical University;Computer Center adr:;;Balgat;ANKARA;;06531;TURKIYE version:2.1 email;internet:[EMAIL PROTECTED] fn:Bülent Açýkgöz end:vcard
Re: Securing passwords in scripts
Sean, Not sure how you'd do this on NT, since I don't know how the identified externally accounts work on NT. On Unix you can create a user in the database with the same name as one of the Unix accounts. Default is ops$username, you can change or remove the ops$ requirement via one of the init.ora commands -- (remote_something or other, I'm at home right now and no access to look it up) grant the privileges necessary to this account, then when you need to log into the database you can use / to enter username/password: ex.sqlplus / and run what you need from cron from this Unix account. Rachel From: O'Neill, Sean [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Subject: Securing passwords in scripts Date: Thu, 26 Jul 2001 00:55:28 -0800 I have some scripts, O.S. command and SQL, which I use to perform COLD backups of DBs and other tasks. I'm not particularily happy about having username/password information in the scripts. Has anyone come up with a way to avoid same allowing for the fact the scripts should require no user input to execute. Sean :) Rookie Data Base Administrator Oracle 7.3.3, 8.0.5, 8.1.7 - NT, W2K [0%] OCP Oracle8i DBA [0%] OCP Oracle9i DBA Organon (Ireland) Ltd. E-mail: [EMAIL PROTECTED] [subscribed: Digest Mode] Visit: http://groups.yahoo.com/group/Oracle-OCP-DBA Nobody loves me but my mother... and she could be jivin' too. - BB King -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: O'Neill, Sean INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Rachel Carmichael INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Securing passwords in scripts
I hv a workaround Change platform to Unix and set permission as 700 ;-)) -Original Message- Sean Sent: Thursday, July 26, 2001 12:55 PM To: Multiple recipients of list ORACLE-L I have some scripts, O.S. command and SQL, which I use to perform COLD backups of DBs and other tasks. I'm not particularily happy about having username/password information in the scripts. Has anyone come up with a way to avoid same allowing for the fact the scripts should require no user input to execute. Sean :) Rookie Data Base Administrator Oracle 7.3.3, 8.0.5, 8.1.7 - NT, W2K [0%] OCP Oracle8i DBA [0%] OCP Oracle9i DBA Organon (Ireland) Ltd. E-mail: [EMAIL PROTECTED] [subscribed: Digest Mode] Visit: http://groups.yahoo.com/group/Oracle-OCP-DBA Nobody loves me but my mother... and she could be jivin' too. - BB King -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: O'Neill, Sean INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Rajesh Dayal INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: Securing passwords in scripts
O'Neill, Sean wrote: I have some scripts, O.S. command and SQL, which I use to perform COLD backups of DBs and other tasks. I'm not particularily happy about having username/password information in the scripts. Has anyone come up with a way to avoid same allowing for the fact the scripts should require no user input to execute. Sean :) I swear by externally identified accounts. -- Regards, Stephane Faroult Oriole Corporation -- http://www.oriolecorp.com, designed by Oracle DBAs for Oracle DBAs -- -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Stephane Faroult INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: Securing passwords in scripts
If you're going to be doing DBA tasks like you describe (backups which require you to shutdown the database, etc.), you can just use / as sysdba in sqlplus. This works all the way back to 7.3 as far as I know. For it to work, however, the OS account that is being used must be a member of the DBA group (Unix) or the ORA_DBA group (NT). In a UNIX script, I use it like this: sqlplus EOF / as sysdba shutdown immediate exit EOF In NT, it would be a matter of putting all the commands in a .sql script and executing the script like this: sqlplus / as sysdba @myscript.sql Hope this helps. Jon Walthour - Original Message - To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Sent: Thursday, July 26, 2001 4:55 AM I have some scripts, O.S. command and SQL, which I use to perform COLD backups of DBs and other tasks. I'm not particularily happy about having username/password information in the scripts. Has anyone come up with a way to avoid same allowing for the fact the scripts should require no user input to execute. Sean :) Rookie Data Base Administrator Oracle 7.3.3, 8.0.5, 8.1.7 - NT, W2K [0%] OCP Oracle8i DBA [0%] OCP Oracle9i DBA Organon (Ireland) Ltd. E-mail: [EMAIL PROTECTED] [subscribed: Digest Mode] Visit: http://groups.yahoo.com/group/Oracle-OCP-DBA Nobody loves me but my mother... and she could be jivin' too. - BB King -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: O'Neill, Sean INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Jon Walthour INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: Securing passwords in scripts
Me too. On unix and NT --- Stephane Faroult [EMAIL PROTECTED] a écrit : O'Neill, Sean wrote: I have some scripts, O.S. command and SQL, which I use to perform COLD backups of DBs and other tasks. I'm not particularily happy about having username/password information in the scripts. Has anyone come up with a way to avoid same allowing for the fact the scripts should require no user input to execute. Sean :) I swear by externally identified accounts. -- Regards, Stephane Faroult Oriole Corporation -- http://www.oriolecorp.com, designed by Oracle DBAs for Oracle DBAs -- -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Stephane Faroult INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). = Stéphane Paquette DBA Oracle, consultant entrepôt de données Oracle DBA, datawarehouse consultant [EMAIL PROTECTED] ___ Do You Yahoo!? -- Vos albums photos en ligne, Yahoo! Photos : http://fr.photos.yahoo.com -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: =?iso-8859-1?q?paquette=20stephane?= INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: Securing passwords in scripts
Interesting topic. Would anyone be interested in a password server? Not foolproof, but considerably more secure than putting passwords in a script, and infinitely more flexible. Jared O'Neill, SeanTo: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Sean.ONeill@o cc: rganon.ie Subject: Securing passwords in scripts Sent by: [EMAIL PROTECTED] om 07/26/01 01:55 AM Please respond to ORACLE-L I have some scripts, O.S. command and SQL, which I use to perform COLD backups of DBs and other tasks. I'm not particularily happy about having username/password information in the scripts. Has anyone come up with a way to avoid same allowing for the fact the scripts should require no user input to execute. Sean :) Rookie Data Base Administrator Oracle 7.3.3, 8.0.5, 8.1.7 - NT, W2K [0%] OCP Oracle8i DBA [0%] OCP Oracle9i DBA Organon (Ireland) Ltd. E-mail: [EMAIL PROTECTED] [subscribed: Digest Mode] Visit: http://groups.yahoo.com/group/Oracle-OCP-DBA Nobody loves me but my mother... and she could be jivin' too. - BB King -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: O'Neill, Sean INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Securing passwords in scripts
Only if it's written in secure, encrypted, object oriented Perl. -Original Message- Sent: Thursday, July 26, 2001 12:06 PM To: Multiple recipients of list ORACLE-L Interesting topic. Would anyone be interested in a password server? Not foolproof, but considerably more secure than putting passwords in a script, and infinitely more flexible. Jared O'Neill, SeanTo: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Sean.ONeill@o cc: rganon.ie Subject: Securing passwords in scripts Sent by: [EMAIL PROTECTED] om 07/26/01 01:55 AM Please respond to ORACLE-L I have some scripts, O.S. command and SQL, which I use to perform COLD backups of DBs and other tasks. I'm not particularily happy about having username/password information in the scripts. Has anyone come up with a way to avoid same allowing for the fact the scripts should require no user input to execute. Sean :) Rookie Data Base Administrator Oracle 7.3.3, 8.0.5, 8.1.7 - NT, W2K [0%] OCP Oracle8i DBA [0%] OCP Oracle9i DBA Organon (Ireland) Ltd. E-mail: [EMAIL PROTECTED] [subscribed: Digest Mode] Visit: http://groups.yahoo.com/group/Oracle-OCP-DBA Nobody loves me but my mother... and she could be jivin' too. - BB King -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: O'Neill, Sean INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Orr, Steve INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Securing passwords in scripts
Hi Jared, I'd be interrested in a password server... you got one? Steve Orr -Original Message- Sent: Thursday, July 26, 2001 12:06 PM To: Multiple recipients of list ORACLE-L Interesting topic. Would anyone be interested in a password server? Not foolproof, but considerably more secure than putting passwords in a script, and infinitely more flexible. Jared O'Neill, SeanTo: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Sean.ONeill@o cc: rganon.ie Subject: Securing passwords in scripts Sent by: [EMAIL PROTECTED] om 07/26/01 01:55 AM Please respond to ORACLE-L I have some scripts, O.S. command and SQL, which I use to perform COLD backups of DBs and other tasks. I'm not particularily happy about having username/password information in the scripts. Has anyone come up with a way to avoid same allowing for the fact the scripts should require no user input to execute. Sean :) Rookie Data Base Administrator Oracle 7.3.3, 8.0.5, 8.1.7 - NT, W2K [0%] OCP Oracle8i DBA [0%] OCP Oracle9i DBA Organon (Ireland) Ltd. E-mail: [EMAIL PROTECTED] [subscribed: Digest Mode] Visit: http://groups.yahoo.com/group/Oracle-OCP-DBA Nobody loves me but my mother... and she could be jivin' too. - BB King -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: O'Neill, Sean INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Orr, Steve INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Securing passwords in scripts
The parameter of which Rachael speaks is os_authent_prefix. For example os_authent_prefix = which means no prefix is required. Do Not! set remote_os_authent to TRUE. The authentication method is quite easily spoofed from client machines. Ian MacGregor Stanford Linear Accelerator Center [EMAIL PROTECTED] -Original Message- Sent: Thursday, July 26, 2001 2:37 AM To: Multiple recipients of list ORACLE-L Sean, Not sure how you'd do this on NT, since I don't know how the identified externally accounts work on NT. On Unix you can create a user in the database with the same name as one of the Unix accounts. Default is ops$username, you can change or remove the ops$ requirement via one of the init.ora commands -- (remote_something or other, I'm at home right now and no access to look it up) grant the privileges necessary to this account, then when you need to log into the database you can use / to enter username/password: ex.sqlplus / and run what you need from cron from this Unix account. Rachel From: O'Neill, Sean [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Subject: Securing passwords in scripts Date: Thu, 26 Jul 2001 00:55:28 -0800 I have some scripts, O.S. command and SQL, which I use to perform COLD backups of DBs and other tasks. I'm not particularily happy about having username/password information in the scripts. Has anyone come up with a way to avoid same allowing for the fact the scripts should require no user input to execute. Sean :) Rookie Data Base Administrator Oracle 7.3.3, 8.0.5, 8.1.7 - NT, W2K [0%] OCP Oracle8i DBA [0%] OCP Oracle9i DBA Organon (Ireland) Ltd. E-mail: [EMAIL PROTECTED] [subscribed: Digest Mode] Visit: http://groups.yahoo.com/group/Oracle-OCP-DBA Nobody loves me but my mother... and she could be jivin' too. - BB King -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: O'Neill, Sean INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Rachel Carmichael INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: MacGregor, Ian A. INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: Securing passwords in scripts
Orr, Steve wrote: Hi Jared, I'd be interrested in a password server... you got one? Steve Orr count me in. -- Bill Shrek Thater Certifiable ORACLE DBA Telergy, Inc[EMAIL PROTECTED] You gotta program like you don't need the money, You gotta compile like you'll never get hurt, You gotta run like there's nobody watching, It's gotta come from the heart if you want it to work! -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Thater, William INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Securing passwords in scripts
Steve said: Only if it's written in secure, encrypted, object oriented Perl. Perl: Yes. OOP: Yes Secure and Encrypted: not yet, working on it Jared Orr, Steve sorr@rightnow To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] .comcc: Sent by: Subject: RE: Securing passwords in scripts [EMAIL PROTECTED] om 07/26/01 02:22 PM Please respond to ORACLE-L Only if it's written in secure, encrypted, object oriented Perl. -Original Message- Sent: Thursday, July 26, 2001 12:06 PM To: Multiple recipients of list ORACLE-L Interesting topic. Would anyone be interested in a password server? Not foolproof, but considerably more secure than putting passwords in a script, and infinitely more flexible. Jared O'Neill, SeanTo: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Sean.ONeill@o cc: rganon.ie Subject: Securing passwords in scripts Sent by: [EMAIL PROTECTED] om 07/26/01 01:55 AM Please respond to ORACLE-L I have some scripts, O.S. command and SQL, which I use to perform COLD backups of DBs and other tasks. I'm not particularily happy about having username/password information in the scripts. Has anyone come up with a way to avoid same allowing for the fact the scripts should require no user input to execute. Sean :) Rookie Data Base Administrator Oracle 7.3.3, 8.0.5, 8.1.7 - NT, W2K [0%] OCP Oracle8i DBA [0%] OCP Oracle9i DBA Organon (Ireland) Ltd. E-mail: [EMAIL PROTECTED] [subscribed: Digest Mode] Visit: http://groups.yahoo.com/group/Oracle-OCP-DBA Nobody loves me but my mother... and she could be jivin' too. - BB King -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: O'Neill, Sean INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Orr, Steve INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet
RE: Securing passwords in scripts
Ian, thank you. at 4:30 in the morning, I'm barely able to remember my name, let alone init.ora parameters Rachel From: MacGregor, Ian A. [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Subject: RE: Securing passwords in scripts Date: Thu, 26 Jul 2001 13:41:17 -0800 The parameter of which Rachael speaks is os_authent_prefix. For example os_authent_prefix = which means no prefix is required. Do Not! set remote_os_authent to TRUE. The authentication method is quite easily spoofed from client machines. Ian MacGregor Stanford Linear Accelerator Center [EMAIL PROTECTED] -Original Message- Sent: Thursday, July 26, 2001 2:37 AM To: Multiple recipients of list ORACLE-L Sean, Not sure how you'd do this on NT, since I don't know how the identified externally accounts work on NT. On Unix you can create a user in the database with the same name as one of the Unix accounts. Default is ops$username, you can change or remove the ops$ requirement via one of the init.ora commands -- (remote_something or other, I'm at home right now and no access to look it up) grant the privileges necessary to this account, then when you need to log into the database you can use / to enter username/password: ex.sqlplus / and run what you need from cron from this Unix account. Rachel From: O'Neill, Sean [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Subject: Securing passwords in scripts Date: Thu, 26 Jul 2001 00:55:28 -0800 I have some scripts, O.S. command and SQL, which I use to perform COLD backups of DBs and other tasks. I'm not particularily happy about having username/password information in the scripts. Has anyone come up with a way to avoid same allowing for the fact the scripts should require no user input to execute. Sean :) Rookie Data Base Administrator Oracle 7.3.3, 8.0.5, 8.1.7 - NT, W2K [0%] OCP Oracle8i DBA [0%] OCP Oracle9i DBA Organon (Ireland) Ltd. E-mail: [EMAIL PROTECTED] [subscribed: Digest Mode] Visit: http://groups.yahoo.com/group/Oracle-OCP-DBA Nobody loves me but my mother... and she could be jivin' too. - BB King -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: O'Neill, Sean INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Rachel Carmichael INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: MacGregor, Ian A. INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Rachel Carmichael INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling
