[comp.databases] Oracle OPS$ account and unix set-uid programs ??'s

apple@nprdc.navy.mil (Jim Apple) (09/26/90)

	I want to use a OPS$ account to log into oracle from a set uid
program.  My program is owned by "super_oracle_person" and set uid to
"super_oracle_person".  "super_oracle_person" has a OPS$ account that works
fine in sqlplus.  But when I execute the program as myself Oracle will not connect.
I checked the processes table and it shows "super_oracle_person"
as the owner of the program. If I switch user to "super_oracle_person"
everything works great.

	Any help would be great.

	Thanks in advance.

Bye.

(619)-553-9276
	Jim Apple 			apple@nprdc.navy.mil
	WB1DOG				...}ucsd!nprdc!apple

nvosd@nwnexus.WA.COM (UW West ) (09/27/90)

Basically, what Oracle does (as far as we can tell) is a getpwent for
the REAL user id (not the effective userid) and then looks in /etc/passwd
on the SERVER machine to see if you're who you say you are.

So, setuid programs don't work.  In addition, this means that if you
are running client-server, you MUST have password file entries on
BOThH the server AND the client.

I can see WHY they did it, but there's gotta be a better way....

Clay Jackson