1833984 Members
1943 Online
110063 Solutions
New Discussion

Re: Clear text files

 
Vic S. Kelan
Regular Advisor

Clear text files

Hi
I have a couple of clear text files with usernames and passwords listed in them.

They are used for example in letting tuxedo connect to an oracle DB etc... as xyz.pwd for example....

What is the best way for me to get the files encrypted or at least more secure....

THANKS!!
5 REPLIES 5
harry d brown jr
Honored Contributor

Re: Clear text files


That's always an issue, and I've not seen anything that truley is safe to use.

You could encrypt the file and have a process running that can decrypt the data, and wait for an application to connect (an application that has a recongizable signature) that then pass the data on.

live free or die
harry d brown jr
Live Free or Die
Steven E. Protter
Exalted Contributor

Re: Clear text files

The real solutiong is to work with the various application vendors to configure the applications not to do this.

I don't know about tuxedo, but Oracle clearly can be configured to not do this.

When I have a choice, as a consultant, I insist on applications that do not do this. Usually its a support call or two to reconfigure the applications.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
RAC_1
Honored Contributor

Re: Clear text files

How about decrypting them on the fly when required?? At other times, let them keep encrypted.

Anil
There is no substitute to HARDWORK
Kent Ostby
Honored Contributor

Re: Clear text files

man crypt

If this is like a file that you keep for yourself or something than you can just use crypt and decrypt it.

Of course you have to remember the password to the crypted password file.
"Well, actually, she is a rocket scientist" -- Steve Martin in "Roxanne"

Re: Clear text files

Seems to me you should talk to your DBA about changing your security settings in Oracle - its entirely possible for Oracle to 'trust' a specific UNIX user account and not require a password - and I'm not talking here about the oracle account itself (the one with SYSDBA privileges). I can't remember the specifics as its years since I had to do this... but it *is* possible and through TUXEDO as well...

HTH

Duncan

I am an HPE Employee
Accept or Kudo