authentication - How to authenticate Oracle login using encrypted password -
we connecting oracle using kornshell (ksh) scripts, use sql*plus connect oracle. oracle database on same solaris box. currently, storing oracle user id , password (plain text) in file in .ssh folder of connecting user, 400 permission bits.
the dbas objecting way of working, citing fact using plain text password authentication. when offered encode password using base64, still did not idea, citing still decrypt password in shell script , transmit password on network.
now, want understand this-
i have been reading oracle encrypts/hashes password string, before transmitting it. can not find reference right though, however, still want confirm understanding. this? on 11g r2, make difference?
would able login sql*plus without decrypting password hash? e.g., dbas set password, pass on hash me. put in file, , supply sql*plus parameter. there way kind of authentication work? know tools allow that, if encode using tool, able decrypt value , use authentication. oracle?
help me fellas.
its been while since doing (and don't have linux box handy atm), can try hide details ps:
echo password | sqlplus -s username@database @myscript.sql
note -s silent mode sqlplus. believe can put password in "protected" file (i use term loosely, set bits 400) , cat file, piping sqlplus above.
edit: if dbas concerned passwords, how using no passwords. can try os authentication, need setup first. example:
--in oracle, create new user
create user ops$batch_user identified externally; grant connect ops$batch_user;
-- in unix (login batch_user, or use su command)
export oracle_home=/app/oracle/product/11.2 export path=$path:$oracle_home/bin export oracle_sid=dev sqlplus /
note no passwords used since user authenticated os. less complicated oracle wallet imo, not perfect either.
Comments
Post a Comment