Hi All,

I am hving real trouble with this one. Basically I've been asked to
crack down on database security. Everyone knows all the passwords to
all the schemas.

The problem is this place has several Visual Basic applications where
the password is hard coded into the code. This does me no good,
because once I change the password, I need to tell the developer what
it is......it defeats the purpose of changing the password.

What options are available to me? We are running Oracle 8.1.7.3. I
need to hide the passwords from everyone. But I'm not sure what
options I have over a network......

Thanks,

Arthur

amerar (AT) iwc (DOT) net wrote:
http://www.petefinnigan.com/

There is a wealth of information there, some of which I'm sure can get
you pointed in the right direction.

<amerar (AT) iwc (DOT) net> schrieb im Newsbeitrag news:1102432338.770876.210810 (AT) f14g2000cwb (DOT) googlegroups.com...

have to go from the apps. Users have to type them in each time they log on.


Lots of Greetings!
Volker

Volker Hetzer wrote:
This issue here is that the developers know the password, and go into
production and change stuff. If I tell the developer what the password
is, it defeats the purpose of changing the password.

However, I like the idea of hiding it in the registry. That can open
up several possibilities.

Arthur

amerar (AT) iwc (DOT) net wrote:

One solution to developers going into production is to exclude them
using EXCLUDED NODES. Another is a log on trigger and a threat from
management to replace them if they ever log onto production. The later
is remarkably effective if serious.

--
Daniel A. Morgan
University of Washington
damorgan@x.washington.edu
(replace 'x' with 'u' to respond)

<amerar (AT) iwc (DOT) net> schrieb im Newsbeitrag news:1102612813.056970.16540 (AT) c13g2000cwb (DOT) googlegroups.com...
in the password. Then the developers won't know it. Doing a proper
password management is the only solution that works in the long term.


Lots of Greetings!
Volker