Home » RDBMS Server » Security » Cobol program that accesses Oracle database
Cobol program that accesses Oracle database [message #408777] Wed, 17 June 2009 15:19 Go to next message
aft5425
Messages: 5
Registered: October 2008
Junior Member
I have a MicroFocus Cobol program that executes on a unix (HP-UX) and accesses an oracle database (9.2.0.5). In the test environment, we hardcode the specific userid and password in the program that should be used in querying the oracle database.

However, in production, we don't want to hardcode the specific userid and password to access the oracle database with. How can we modify the program or the userid for production to know which userid and password to use to query the database?

Technically, we can get the program to use the correct userid in production. But is there something we need to do to the userid or the oracle database so that the userid doesn't need a password in production?
Re: Cobol [message #408787 is a reply to message #408777] Wed, 17 June 2009 15:56 Go to previous messageGo to next message
Littlefoot
Messages: 21823
Registered: June 2005
Location: Croatia, Europe
Senior Member
Account Moderator
Search for "OPS$" (Operating System Authenticated user); perhaps it'll help.
Re: Cobol [message #408790 is a reply to message #408787] Wed, 17 June 2009 16:19 Go to previous messageGo to next message
andrew again
Messages: 2577
Registered: March 2000
Senior Member
Yes, OPS$ could help but creates loopholes. Reading user & pass from an external file and using those values in your cobol program would be a more common solution. I bet all your other clients supply their own user/pass.
Re: Cobol [message #408792 is a reply to message #408787] Wed, 17 June 2009 16:28 Go to previous messageGo to next message
aft5425
Messages: 5
Registered: October 2008
Junior Member
ok thanks, i'll look this up
Re: Cobol program that accesses Oracle database [message #408816 is a reply to message #408777] Wed, 17 June 2009 23:20 Go to previous messageGo to next message
Michel Cadot
Messages: 68728
Registered: March 2007
Location: Saint-Maur, France, https...
Senior Member
Account Moderator
You can use externally identified user (aka ops$ user) or Oracle secure external password store.

Regards
Michel
Re: Cobol [message #408820 is a reply to message #408790] Wed, 17 June 2009 23:33 Go to previous message
BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal
Senior Member
andrew again wrote on Wed, 17 June 2009 14:19
Yes, OPS$ could help but creates loopholes. Reading user & pass from an external file


Having username & password in text file creates security loophole.

Tradeoffs.
Previous Topic: Determine locked users from sqlplus?
Next Topic: audit index usage
Goto Forum:
  


Current Time: Sun Dec 22 00:44:24 CST 2024