Kbase P157627: What is the best approach to secure clear text oracle user name and password?
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
18/12/2009 |
|
Status: Unverified
GOAL:
What is the best approach to secure clear text oracle user name and password?
GOAL:
How do I secure Oracle user name and password as they are passed by DataServer as clear text?
FACT(s) (Environment):
All Supported Operating Systems
Progress 9.x
OpenEdge 10.x
Oracle DataServer
FIX:
Oracle DataServer passes user name and password to Oracle as clear text. Two strategies to secure user name and password so they are not visible to regular users:
1. Store them in schema holder connection parameters field
2. Use a Progress database table to store these information, secure this table in Progress, then use a query to retrieve the user name / password and pass to Oracle connection string