[1549] in bugtraq
Password Storage as Environment Variable
daemon@ATHENA.MIT.EDU (Bill Bradley)
Thu Apr 20 01:07:56 1995
Date: Wed, 19 Apr 1995 20:35:26 -0600
To: bugtraq@fc.net
From: bbradley@rmii.com (Bill Bradley)
In an HP-UX/Oracle 7 configuration, where an authenticated userid is passed
from the operating system to Oracle as a valid authorized user, is there a
way to configure the handling of the password to prohibit going around the
UNIX password mechanism and going right into the database using a commonly
known userid? Is a second password (used by Oracle) better stored as an
environment variable or a global variable? Thanks