topic Oracle Script & Password Management in Operating System - OpenVMS

Oracle Script & Password Management

Amit Dixit_2 — Thu, 08 Dec 2005 17:03:31 GMT

Hi,
I am running HP Open VMS 7.2 and Oracle on it.

We have a SQL-PLUS Script which gets executed by a cron job to perform some data extration every night.

We have right now hard coded the username/password in the script which it uses to connect to the database, we are looking for a better and more secure way to manage password also we want that whenever we want to change the password the new process should be hassle free and better managed.

Any Suggestions.

Thanks,
Amit

Re: Oracle Script & Password Management

Thomas Ritter — Thu, 08 Dec 2005 17:19:15 GMT

This is not an uncommon problem. While I cannot offer an alternative authentication method, I can say we responded to this type of problem by make access limited to source and destination IP combinations using Firewalls. This methods requires static IPs. In the UAF only non-interactive access is authorized and this coupled with the Firewall control makes an undesirable authentication method reasonably secure. Ensure the VMS accounts is non-privileged. The password can be set to not expire.

On top of this we have daily audit reports to monitor usage.

Re: Oracle Script & Password Management

Amit Dixit_2 — Thu, 08 Dec 2005 17:27:50 GMT

What about configuring the database for OPS$ and then using OPS$ to connect to database and then we do not need to specify username/password in the script