The UNIX and Linux Forums  
Hello and Welcome from United States to the UNIX and Linux Forums! Thank You for Visiting and Joining Our Global Community.

Go Back   The UNIX and Linux Forums > Top Forums > High Level Programming
.
google unix.com



High Level Programming Post questions about C, C++, Java, SQL, and other programming languages here.

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
File password protection/encryption rdudejr AIX 2 07-09-2006 06:43 PM
File encryption/Key encryption ???? hugow UNIX for Dummies Questions & Answers 1 03-18-2006 04:29 PM
Password safe encryption strength keelba UNIX for Dummies Questions & Answers 1 10-19-2005 01:09 PM
Password encryption/decryption in flat-text files domivv High Level Programming 2 03-04-2005 10:38 AM
Zipping with password or encryption dsimpg1 UNIX for Dummies Questions & Answers 2 09-21-2001 12:57 AM

Closed Thread
English Japanese Spanish French German Portuguese Italian Dutch Swedish Russian Norwegian Hungarian Hebrew Danish Powered by Powered by Google
 
LinkBack Thread Tools Search this Thread Rate Thread Display Modes
  #1 (permalink)  
Old 03-19-2005
satguyz satguyz is offline
Registered User
  
 

Join Date: Mar 2005
Posts: 13
Thumbs up User name and password encryption

Hi,
I have usernames and passwords (to connect oracle DB) buried in so many shell scripts.
We want to externalize all usernames and passwords from those shell scripts and encrypt them and keep them in a file.
So far I found two choices,
1) Use some encryption algorithms like (RC5/MD5) to encrypt / decrypt username/password, so that shell scripts calls the algorithm to read encrypted username/password and decrypt them and call sqlplus to logon to oracle DB.

2) Use Crypt command to encrypt/ decrypt .

I enterned into Unix&C world recently. I need your help in making the decision.
If you have any better solution for this, please let me know.

Thanks in advance.
  #2 (permalink)  
Old 03-22-2005
blowtorch's Avatar
blowtorch blowtorch is offline Forum Advisor  
Supporter
  
 

Join Date: Dec 2004
Location: Singapore
Posts: 2,350
Go with option 1 definitely. crypt is not considered really secure any more.
  #3 (permalink)  
Old 03-22-2005
satguyz satguyz is offline
Registered User
  
 

Join Date: Mar 2005
Posts: 13
Thanks you very much.
  #4 (permalink)  
Old 03-22-2005
google's Avatar
google google is offline Forum Advisor  
Moderator
  
 

Join Date: Jul 2002
Location: Atlanta
Posts: 740
After your shell decrypts the password, and calls sqlplus, how do you intend to hide the UID and PWD from being seen in the environment? This is a common problem. Passwords can be easily ascertained by running the ps command.
  #5 (permalink)  
Old 03-23-2005
MxO_online MxO_online is offline
Registered User
  
 

Join Date: Mar 2005
Posts: 4
option 2 is out cuz if you can do it who is to say a "hacker" cant.
  #6 (permalink)  
Old 02-23-2007
kalpana.anuga kalpana.anuga is offline
Registered User
  
 

Join Date: Feb 2007
Posts: 5
Hi satguys,
Even we have the similar requirement.

What are the prerequisites to use RC5/MD5 (do we need to install any thing seperately) and how to use them .Please can you help us in using these .

Thanks
Sponsored Links
Closed Thread

Bookmarks

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT -4. The time now is 04:47 PM.


Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited. Language Translations Powered by .
vBCredits v1.4 Copyright ©2007 - 2008, PixelFX Studios
The UNIX and Linux Forums Content Copyright ©1993-2009. All Rights Reserved.Ad Management by RedTyger

Content Relevant URLs by vBSEO 3.2.0