| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> RE: SQL parameter for batch runs [NT]
I'm not a Windows NT administrator. However, based on the procedures in place at the company I work for, this is how I'd do it. First, the only people who should have access to the database server are the network admins and the dbas. Whoever is a machine administrator is going to be able to read your scripts. If you are worried about security from those people, then you have a bigger problem. Then allow developer access to the database via sqlnet. NT doesn't have the security that UNIX does, but by limiting physical access, and limiting the number of people who have remote access, you can cut down the security risk. You might also change passwords regularly.
Dan
-----Original Message-----
Sent: Thursday, February 08, 2001 10:26 AM
To: Multiple recipients of list ORACLE-L
We do thing a little different.
First, only the IS staff has access to the UNIX prompt.
Second, there is a file maintained by ROOT which contains both login id and
passwords. These values are loaded through a . script loading Sys_Name and
Sys_Password.
Third, all sql's, sqlload, exports are executed using the
$Sys_Name/$Sys_Password syntax. That way, we can change passwords at a
whim, update the controlling . file and all scripts continue as though
nothing has changed.
-----Original Message-----
From: O'Neill, Sean [SMTP:Sean.ONeill_at_organon.ie]
Sent: Thursday, February 08, 2001 8:50 AM
To: Multiple recipients of list ORACLE-L Subject: SQL parameter for batch runs [NT]
Hi Folks,
I have some SQL scripts which I use to Shutdown and Startup DBs. The SQL
scripts are called from OS batch files and run using AT schedule service.
Problem, or so I perceive it as being, is that I use SYSTEM user as part of
script to connect to DB to Startup/Shutdown and I have the password for
same
(horror of horrors???) in the SQL script. So I'm wondering how othger
folks
manage the same process. Do you use the OS file protection to protect the
SQL file from prying eyes or perhaps a particular Oracle account stripped
of
unecessary privs etc to include in script OR is there a antoher more secure
way around this issue that I just have not realised?.
Sean :)
Rookie Data Base Administrator
[0%] OCP Oracle8i DBA
[0%] OCP Oracle9i DBA
Visit: http:\\groups.yahoo.com/group/Oracle-OCP-DBA
"They tell me nothing, but expect me to know everything!"
-- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: O'Neill, Sean INET: Sean.ONeill_at_organon.ie Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-LReceived on Thu Feb 08 2001 - 13:31:15 CST
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: William Rogge INET: William_Rogge_at_voltek.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing). _____________________________________________________________________ This message has been checked for all known viruses by UUNET delivered through the MessageLabs Virus Control Centre. For further information visit http://www.uk.uu.net/products/security/virus/ -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Dasko, Dan INET: Dan.Dasko_at_cdicorp.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
 |
 |