如何隐藏或加密 Oracle 备份 RMAN脚本中的口令
今天有朋友问:如何隐藏RMAN备份脚本中的口令,起到安全防范的目的?
想到以前用的一个小方法,在Linux上,用openssl将加密后的口令写到口令文件中,调用时进行解密,当然你要保护这个口令文件的读取权限,以及,openssl 的调用权限:
[eygle@enmoteam1 ~]$ echo "eygle" |openssl enc -base64
ZXlnbGUK
[eygle@enmoteam1 ~]$ echo "eygle" |openssl enc -base64 > encpasswd
[eygle@enmoteam1 ~]$ mypwd=`cat encpasswd|openssl enc -base64 -d`
[eygle@enmoteam1 ~]$ echo "$mypwd"
eygle
[eygle@enmoteam1 ~]$ rman target eygle/${mypwd}
Recovery Manager: Release 11.2.0.3.0 - Production on Tue Apr 18 10:01:17 2017
Copyright (c) 1982, 2011, Oracle and/or its affiliates. All rights reserved.
connected to target database: ENMOT1 (DBID=1258229964)
RMAN> exit
Recovery Manager complete.
这个办法好不了多少,但是比直接的明文,安全了一点点。
By eygle on 2017-04-18 11:11 |
Comments (0) |
Advanced | 3245 |