Oracle Script & Password Management

[Amit Dixit_2]

Hi,
I am running HP Open VMS 7.2 and Oracle on it.

We have a SQL-PLUS Script which gets executed by a cron job to perform some data extration every night.

We have right now hard coded the username/password in the script which it uses to connect to the database, we are looking for a better and more secure way to manage password also we want that whenever we want to change the password the new process should be hassle free and better managed.

Any Suggestions.

Thanks,
Amit

[Thomas Ritter]

This is not an uncommon problem. While I cannot offer an alternative authentication method, I can say we responded to this type of problem by make access limited to source and destination IP combinations using Firewalls. This methods requires static IPs. In the UAF only non-interactive access is authorized and this coupled with the Firewall control makes an undesirable authentication method reasonably secure. Ensure the VMS accounts is non-privileged. The password can be set to not expire.

On top of this we have daily audit reports to monitor usage.

[Amit Dixit_2]

What about configuring the database for OPS$ and then using OPS$ to connect to database and then we do not need to specify username/password in the script