Shell Programming and Scripting

I "inherited" these scripts which are used to access an Oracle DB on a test envoiroment. Originaly someone from our security team would add an system user and password to the otherwise finished script and encrypt the whole thing. The encrypted file (script.x) would then be scheduled with Control-M.

Recently we decided to test new ways to connect to the DB and managed the following solution:

Code:

${ORACLE_HOME}/bin/sqlplus "`decrypt -a 3des -k ${DIR_CHAVES}/key.3des.aga -i ${DIR_CHAVES}/login.aga`"@orahmp01 <<EOF

Where login.aga is an encrypted file with DB user and password, key.3des.aga the key file for decryption, ${DIR_CHAVES} stores the path to the key diractory and orahmp01 is the DB instance.

It does work, however the system user and password are visible as clear text on the job sysout in Control-M.

Does anyone know how I can hide the decrypt output (user and password) and still logon to the database?

Thanks in advance.

There are examples in this current thread. We just move the connect string to the program rather than stating it in the command line.

https://www.unix.com/shell-programmin...sqlplus-4.html

I am not sure , but can you try by

Code:

 
 
option 1. Redirecting the output of the command to /dev/null
             1>/dev/null
         2. connect to the SQLPLUS using sqlplus -s

Let me know if things work out?

Hi, Panyam, thank you for your answer.

So far using sqlplus -s had no effect and I haven't found a way to redirect the command output without causing the script to end with an error.

The Connecting to Oracle DB using sqlplus thread didn't help either.

I'm also asking about this on http://www.scheduler-usage.com and it seems that on top of things I'm having permission problems because although I can order jobs and edit the shell script through Control-M, some job definition functions aren't working.

Right now the line looks like this:

Code:

${ORACLE_HOME}/bin/sqlplus -s "`decrypt -a 3des -k ${DIR_CHAVES}/key.3des.aga -i ${DIR_CHAVES}/login.aga`"@orahmp01 2>&1 > ${SQL_LOG} <<EOF

${SQL_LOG} captures only the result of the SQL query and saves it to a log, without username/password, but that's still showing on Control-M sysout.

Are you using Control-M for Databases or just the scheduler?

---------- Post updated at 08:13 AM ---------- Previous update was at 08:01 AM ----------

I can't find any documentation on the distributed product, but in the zOS version of Control-M when you set up a job and the shouts that it will perform after completion, you can select the destination. On the PostProc tab instead of the "TO" field being the console or the log, select your userid, or that of the DBA's. They will get the message, but it won't display in the log, or at least it isn't supposed to.

Maybe that will help a little. Sorry I don't know more.

Did you try this:

Code:

${ORACLE_HOME}/bin/sqlplus "`decrypt -a 3des -k ${DIR_CHAVES}/key.3des.aga -i ${DIR_CHAVES}/login.aga >/dev/null`"@orahmp01 <<EOF

Thanks everyone!

So far all attempts ro redirect the output in the code prevented logon to the database and caused the job to abend. I did get an answer here: Scheduler-Usage. I'm using the delete option under sysout handling (postproc tab).