Hiding the database password with CONCSUB
Posted: 28 July 2005 09:50 PM
Newbie
Rank
Total Posts:  1
Joined  2005-07-28

We are eliminating the use of password files used by Oracle Financials.  I could not find a documented way of running CONCSUB without password files or harcoding the value itself.  In experimenting I arrived at the following solution utilizing the unix FCP_LOGIN variable that is populated for each concurrent request.  This was the only method that would also prevent the database password from appearing in the unix process list (via ps -ef).

The (HOST script) code is as follows:

echo Running CONCSUB with FCP_LOGIN
export ORACLE_USERID=`echo ${FCP_LOGIN}|cut -f1 -d”/”`
export ORACLE_PASSWD=`echo ${FCP_LOGIN}|cut -f2 -d”/”`

MSG=`echo ${ORACLE_PASSWD} | CONCSUB ${ORACLE_USERID} \
  SYSADMIN \
  ‘System Administrator’ \
  SYSADMIN \
  WAIT=5 \
  CONCURRENT \
  FND \
  FNDSCURS`

echo CONCSUB rc: $?
echo MSG: $MSG
MSG=`echo $MSG | cut -f3-100 -d’ ‘`
echo MSG: $MSG

——-

The resulting log is:

Running CONCSUB with FCP_LOGIN
CONCSUB rc: 0
MSG: ORACLE Password: Submitted request 793433 for CONCURRENT FND FNDSCURS Normal completion
MSG: Submitted request 793433 for CONCURRENT FND FNDSCURS Normal completion

Are there any other known methods to accomplish this?

Thank you, Ira

Profile
 
Posted: 07 August 2005 10:24 AM   [ # 1 ]
Newbie
Avatar
Rank
Total Posts:  11
Joined  2005-05-06

Under Concurrent program registration screen you have options field.You may pass ENCRYPT or SECURED as options.
If you pass ENCRYPT as option oracle will encrypt the oracle apps password.
You can directly use FCP_LOGIN inside the Shell.

SECURED will blank out FCP_LOGIN (apps login and password).This may be useful for FTP scripts etc.

Profile