SEO

Hi all,
We created a user in Oracle 9i and use it to run nightly processing via
scheduler (3rd party) by executing .bat files (windows 2003).
Works fine, but there is one little thing: the user/pass is visible in
the string.
Here is the example:
..bat
-----------------
sqlplusw.EXE USER/PASS@DB @c:\jobs\job1.sql
-----------------

What do I need to do to hide the password?

Thanks,
Eugene

> Hi all,
> We created a user in Oracle 9i and use it to run nightly processing via
> scheduler (3rd party) by executing .bat files (windows 2003).
> Works fine, but there is one little thing: the user/pass is visible in
> the string.
> Here is the example:
> .bat
> -----------------
> sqlplusw.EXE USER/PASS@DB @c:\jobs\job1.sql
> -----------------
>
> What do I need to do to hide the password?

Move the tasks to oracle queue (use jobs)?

Regards,
Jan

On 17 Feb 2006 11:06:53 -0800, epipko@gmail.com wrote:

>Hi all,
>We created a user in Oracle 9i and use it to run nightly processing via
>scheduler (3rd party) by executing .bat files (windows 2003).
>Works fine, but there is one little thing: the user/pass is visible in
>the string.
>Here is the example:
>.bat
>-----------------
>sqlplusw.EXE USER/PASS@DB @c:\jobs\job1.sql
>-----------------
>
>What do I need to do to hide the password?
>
>Thanks,
>Eugene


either convert to a stored procedure and schedule through dbms_jobs,
or start using O/S authenticated accounts, so you can use sqlplus /@db
@....

--
Sybrand Bakker, Senior Oracle DBA

On Fri, 17 Feb 2006 11:06:53 -0800, epipko wrote:

> Hi all,
> We created a user in Oracle 9i and use it to run nightly processing via
> scheduler (3rd party) by executing .bat files (windows 2003).
> Works fine, but there is one little thing: the user/pass is visible in
> the string.
> Here is the example:
> .bat
> -----------------
> sqlplusw.EXE USER/PASS@DB @c:\jobs\job1.sql
> -----------------
>
> What do I need to do to hide the password?
>
> Thanks,
> Eugene

Depends on WHERE you are executing the batch job.

Look at the following use of *external authorization*. It's on Linux, but
should be valid in Windows as well. Basically:

1) create a user in the OS, with the appropriate permissions (testit);
2) create a user in Oracle with the appropriate permissions (ops$testit);
3) log on using external authentication (sqlplus / @C:\jobs...)


pop2@fuzzy:~> sqlplus / as sysdba

SQL*Plus: Release 10.2.0.1.0 - Beta on Fri Feb 17 13:32:58 2006

Copyright (c) 1982, 2005, Oracle. All rights reserved.


Connected to:
Oracle Database 10g Express Edition Release 10.2.0.1.0 - Beta

SQL> create user ops$testit identified externally;

User created.

SQL> grant create session to ops$testit;

Grant succeeded.

SQL> exit
Disconnected from Oracle Database 10g Express Edition Release 10.2.0.1.0 - Beta
pop2@fuzzy:~> su - testit
Password:
testit@fuzzy:~> . oraenv
testit@fuzzy:~> sqlplus /

SQL*Plus: Release 10.2.0.1.0 - Beta on Fri Feb 17 13:34:01 2006

Copyright (c) 1982, 2005, Oracle. All rights reserved.


Connected to:
Oracle Database 10g Express Edition Release 10.2.0.1.0 - Beta

SQL> select * from dual;

DUM
---
X

SQL> exit
Disconnected from Oracle Database 10g Express Edition Release 10.2.0.1.0 - Beta
testit@fuzzy:~>




--
Hans Forbrich
Canada-wide Oracle training and consulting
mailto: Fuzzy.GreyBeard_at_gmail.com
*** Top posting [replies] guarantees I won't respond. ***

epipko@gmail.com wrote:
> Hi all,
> We created a user in Oracle 9i and use it to run nightly processing via
> scheduler (3rd party) by executing .bat files (windows 2003).
> Works fine, but there is one little thing: the user/pass is visible in
> the string.
> Here is the example:
> .bat
> -----------------
> sqlplusw.EXE USER/PASS@DB @c:\jobs\job1.sql
> -----------------
>
> What do I need to do to hide the password?
>
> Thanks,
> Eugene
>

sqlplusw.EXE @c:\jobs\job1.sql
and start job1.sql with
connect user/pass@db
--
Regards,
Frank van Bortel

Top-posting is one way to shut me up...

Oracle 10g R1 (10.1.0.4) on Linux (RHEL 4 AS U2) does not have this
issue as the password is not visible via ps command.

Oracle 10g R1 (10.1.0.4) on w2k adv server does have this issue, when
process explorer is used to examine the calling statement.

Yet another reason to make the switch.

-bdbafh

On Fri, 17 Feb 2006 11:06:53 -0800, epipko wrote:

> What do I need to do to hide the password?

Switch to an operating system whose name ends in the letter "x".
Bear in mind that "Windex" is not an operating system. It's a
detergent.

--
http://www.mgogala.com

"Mladen Gogala" <gogala@sbcglobal.net> wrote in message
newsan.2006.02.18.04.46.08.652668@sbcglobal.net. ..
> On Fri, 17 Feb 2006 11:06:53 -0800, epipko wrote:
>
> > What do I need to do to hide the password?
>
> Switch to an operating system whose name ends in the letter "x".
> Bear in mind that "Windex" is not an operating system. It's a
> detergent.
>
> --
> http://www.mgogala.com
>
But you can use it for just about everything. (cold sores, pimples, etc. See
My Big Fat Greek Wedding)
Jim