Shell Programming and Scripting

Does anyone have any experience with this? I am trying to figure out how it works and how you pass the password on within a script so that you aren't prompted for a password.

You can use also expect script.
So if you prompt for password the script enter automatically the predifined pass.

thanks can you elaborate?

I was told to use the command
getpw -label <label>

but all that does is run the job and go back to command line. If I set the password variable equal to that like..

password=`getpw -label <label>`

I am having trouble passing that to sqlplus

You realize the instant the password leaves the cryptovault it's no longer safe. If you pass it as a commandline parameter, anything could see it.

yes i finally got it working and just realized this. Is there anyway to keep it safe and still be able to pass it to sqlplus within a shell script?

I guess one positive is that the password isn't just hard coded in my param file anymore...

You may want to set up circumstances wherein this one, specific user can login this one, specific way without a password. Or some sort of noninteractive login method, if applicable. If and how this can be done varies by DBMS.

If this isn't applicable it is much better to write the password to a pipe than to write it to a file or to pass it as a commandline parameter. If this means writing to a password prompt that insists on a TTY, the expect tool may be able to help you...

No, just the parameters for using your cryptovault... If your shell script can use the cryptovault noninteractively, what's stopping anyone else from doing so?