I just thought of the solution to my problem of using the external password store with RMAN. I can set up a separate TNS_ADMIN area. That way scripts which rely on local OS authentication to run can use one, and scripts which use the external password store can use the other. Ian -- //www.freelists.org/webpage/oracle-l