Oracle-L: RE: Hiding passwords

From: <Jared.Still_at_radisys.com>
Date: Wed, 24 Sep 2003 10:54:45 -0800
Message-ID: <F001.005D0F13.20030924105445@fatcity.com>

Yes, I could do that, but I won't.

It's fraught with security problems.

"Reardon, Bruce (CALBBAY)" <Bruce.Reardon_at_comalco.riotinto.com.au> Sent by: ml-errors_at_fatcity.com
09/23/2003 06:14 PM
Please respond to ORACLE-L

        To:     Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
        cc: 
        Subject:        RE: Hiding passwords

Jared,
Not saying this is elegant or does the same thing yet but couldn't you do something like this:
"
C:\Temp>copy con: pwd.txt
orcl tiger !my Orcl instance
^Z

1 file(s) copied.

C:\Temp>type pwd.txt
orcl tiger !my Orcl instance

C:\Temp>get_pwd
Instance is [orcl]
pwd is [tiger]

C:\Temp>
C:\Temp>type get_pwd.bat
@ECHO OFF
FOR /F "tokens=1-2 delims= eol=!" %%i IN (pwd.txt) DO call :get_pwd %%i %%j

GOTO :end

:get_pwd

(SET theinst=%1)
(SET thepwd=%2)

ECHO Instance is [%theinst%]
ECHO pwd is [%thepwd%]

:end

(SET theinst=)
(SET thepwd=)

C:\Temp>
"

Enhance the batch to take some parameters and enhance get_pwd subroutine to search for that which matches the parameters.

Anyway hope this is of use to some.
Regards,
Bruce Reardon

-----Original Message-----
Sent: Wednesday, 24 September 2003 9:45 AM

there is no command.com equivalent for this: MY_PASSWORD=$(pwc.pl -instance dv01 -username scott)

Simple in ksh, impossible in un-enhanced Windohs.

That previous bit is something I use in several cron jobs for retrieving passwords,
as well as command line logins to several databases as many different users.

To do this in Windohs, you must embed the entire job in Perl.

HTH Jared

Wolfgang Breitling <breitliw_at_centrexcc.com> Sent by: ml-errors_at_fatcity.com
09/23/2003 03:29 PM

I don't quite get that. Why can't you set a local environment variable from
a script? If you could, where do you propose to get the value that you want
to put into an environment variable?

At 01:59 PM 9/23/2003 -0800, you wrote:

>Paul,
>
>Any chance these scripts could be run from Cygwin, Uwin, MKS Toolkit,
>or anything that will let you use a korn shell?
>
>That would simplify things tremendously.
>
>One of the problems with Windohs is that you cannot execute a script
>or program so that it can return a value to a local environment variable.
>
>That ability would make this task simple from command.com.
>
>Another possibility is to put your passwords in the registry, restrict

that
>portion of the registry, ( or the whole thing ), and use a Perl script to

>retrieve
>the passwords and kick off the other jobs.
>
>What I do in linux is use a password server ( as seen in "Perl for Oracle 

>DBA's")
>and retrieve the password across the network, encrypted of course.

>
>This works on windows as well, though you're there restricted to doing this

>strictly from within the Perl script.
>
>Jared

Wolfgang Breitling
Oracle7, 8, 8i, 9i OCP DBA
Centrex Consulting Corporation
http://www.centrexcc.com

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Reardon, Bruce (CALBBAY)
  INET: Bruce.Reardon_at_comalco.riotinto.com.au

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).



-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: 
  INET: Jared.Still_at_radisys.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Received on Wed Sep 24 2003 - 13:54:45 CDT