Consultor Eletrônico



Kbase P157627: What is the best approach to secure clear text oracle user name and password?
Autor   Progress Software Corporation - Progress
Acesso   Público
Publicação   12/18/2009
Status: Unverified

GOAL:

What is the best approach to secure clear text oracle user name and password?

GOAL:

How do I secure Oracle user name and password as they are passed by DataServer as clear text?

FACT(s) (Environment):

All Supported Operating Systems
Progress 9.x
OpenEdge 10.x
Oracle DataServer

FIX:

Oracle DataServer passes user name and password to Oracle as clear text. Two strategies to secure user name and password so they are not visible to regular users:
1. Store them in schema holder connection parameters field
2. Use a Progress database table to store these information, secure this table in Progress, then use a query to retrieve the user name / password and pass to Oracle connection string