Clear text files

[Vic S. Kelan]

Hi
I have a couple of clear text files with usernames and passwords listed in them.

They are used for example in letting tuxedo connect to an oracle DB etc... as xyz.pwd for example....

What is the best way for me to get the files encrypted or at least more secure....

THANKS!!

[harry d brown jr]

That's always an issue, and I've not seen anything that truley is safe to use.

You could encrypt the file and have a process running that can decrypt the data, and wait for an application to connect (an application that has a recongizable signature) that then pass the data on.

live free or die
harry d brown jr

[Steven E. Protter]

The real solutiong is to work with the various application vendors to configure the applications not to do this.

I don't know about tuxedo, but Oracle clearly can be configured to not do this.

When I have a choice, as a consultant, I insist on applications that do not do this. Usually its a support call or two to reconfigure the applications.

SEP

[RAC_1]

How about decrypting them on the fly when required?? At other times, let them keep encrypted.

Anil

[Kent Ostby]

man crypt

If this is like a file that you keep for yourself or something than you can just use crypt and decrypt it.

Of course you have to remember the password to the crypted password file.

[Duncan Edmonstone]

Seems to me you should talk to your DBA about changing your security settings in Oracle - its entirely possible for Oracle to 'trust' a specific UNIX user account and not require a password - and I'm not talking here about the oracle account itself (the one with SYSDBA privileges). I can't remember the specifics as its years since I had to do this... but it *is* possible and through TUXEDO as well...

HTH

Duncan