RE: password and dblink mgmt tool

  • From: "Reidy, Ron" <Ron.Reidy@xxxxxxxxxxxxxxxxxx>
  • To: <Tony.Vecchiet@xxxxxxxxxx>, "Oracle-L" <oracle-l@xxxxxxxxxxxxx>
  • Date: Tue, 1 Mar 2005 15:10:13 -0700


For storing passwords, I use Itanium's eWallet product.  Not my choice, =
but it is what I am stuck with.  I export the wallet files to text and I =
wrote a Perl module to read and tie the exported file into a hash.  I =
have written several programs (hoping to turn them into web services =
soon) to retrieve passwords, set passwords (for db links, etc.).

To generate passwords, I use a combination of the 'mkpasswd' utility =
(part of the distro for expect) and a Perl module to really randomize =
the characters in the passwords.

Finally, I have an Oracle password verification function that makes an =
extproc call out to the cracklib lib to verify password strength.

Our passwords expire every 90 days, and passwords can repeat once/year.

Ron Reidy
Lead DBA
Array BioPharma, Inc.

-----Original Message-----
From: oracle-l-bounce@xxxxxxxxxxxxx
[mailto:oracle-l-bounce@xxxxxxxxxxxxx]On Behalf Of Tony Vecchiet
Sent: Tuesday, March 01, 2005 2:56 PM
To: Oracle-L
Subject: password and dblink mgmt tool

does anyone have a tool to manage schema passwords and dblinks?
For SOX all apps have to rotate their passwords every 6 months, which
means changing all their dblinks too.
Also, any time a clone to test or dev is done, all the passwords have to
change and all the
dblinks too.


This electronic message transmission is a PRIVATE communication which =
information which may be confidential or privileged. The information is =
to be for the use of the individual or entity named above. If you are =
not the=20
intended recipient, please be aware that any disclosure, copying, =
or use of the contents of this information is prohibited. Please notify =
sender  of the delivery error by replying to this message, or notify us =
telephone (877-633-2436, ext. 0), and then delete it from your system.


Other related posts: