Like someone else stated, we use external authentication for our batch
jobs. So we have a userid created at the OS level, and then in the
database, we create that same id in the database (init.ora parm
os_authent_prefix=''). Then batch jobs execute and connect to the
database using "sqlplus /@dbname". We did this to remove any
userid/password from being coded in the scripts to comply with auditing
requirements.

Brett N Exton wrote:

>Hi !
>
>I have lots of batch files (windows) which call SQL scripts that have the
>userid/password hard coded into the script
>
>e.g. sqlplus -s userid/password
>
>The passwords have to be in the scripts because these scripts are timed to run
>at various times of the day/night.
>
>Consequently, if the permissions on a script was left open and a user got to
>view the script then...who knows!
>
>I am mulling some different ideas around as to how best to secure these scripts
>but would welcome some ideas.
>
>Thanks!
>--
>Brett Exton
>
>
>
>________________________________________________________________________
>This e-mail and any attachments transmitted with it represents the
>views of the individual(s) who sent them and should not be regarded
>as the official view of Bridgend County Borough Council. The contents
>are confidential and intended solely for the use of the addressee. If
>you have received it in error, please inform the system administrator
>on (+44) 01656 642111.
>
>This e-mail and any attachments have been scanned with 'MessageLabs SkyScan' - http://www.messagelabs.com/
>
>________________________________________________________________________
>Maer'r e-bost hwn ac unrhyw atodiadau a drosglwddir gydag ef yn cynrychioli
>safbwyntiau'r unigolyn (unigolion) a'u hanfonodd ac ni ddylid eu hystyried fel
>safbwynt swyddogol Cyngor Bwrdeistref Sirol Pen-y-bont ar Ogwr. Mae'r cynnwy
>syn gyfrinachol ac wedi'i fwriadu at ddefnydd y person y'i cyfeiriwyd ato yn
>unig. Os ydych wedi ei dderbyn mewn camgymeriad, rhowch wybod i weinyddwry system ar (+44) 01656 642111.
>
>Mae'r e-bost hwn ac unrhyw atodiadau wedi cael eu sganio gyda 'MessageLabs SkyScan' - http://www.messagelabs.com/
>________________________________________________________________________
>
>
>--------
>website: http://www.LazyDBA.com
>Please don't reply to RTFM questions
>Oracle documentation is here: http://tahiti.oracle.com
>To unsubscribe: see http://www.lazydba.com/unsubscribe.html
>To subscribe: see http://www.lazydba.com
>By using this list you agree to these terms:http://www.lazydba.com/legal.html
>
>
>
>


Oracle LazyDBA home page