OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1995: Password Storage as Environment Variable

Password Storage as Environment Variable

Bill Bradley (bbradleyrmii.com)
Wed, 19 Apr 1995 20:35:26 -0600

In an HP-UX/Oracle 7 configuration, where an authenticated userid is passed
from the operating system to Oracle as a valid authorized user, is there a
way to configure the handling of the password to prohibit going around the
UNIX password mechanism and going right into the database using a commonly
known userid?  Is a second password (used by Oracle) better stored as an
environment variable or a global variable?  Thanks