Suppressing passwd when calling sqlplus from shell

Question

My script calls sqlplus in the standard format:

sqlplus $USER/$PASSWD@$DBNAME

Obviously, this is not very safe because ps -ef displays the entire command, including the passwd.

How can I invoke sqlplus without a manual prompt but still hide the passwd?

Thanks

Answer 1

What you need is a different method of authentication, such as the Oracle Wallet.

Here's a walk-through in the documentation.

http://docs.oracle.com/cd/E11882_01/network.112/e16543/authentication.htm#CBHGEBEI

Answer 2

BAD:

sqlplus $USER/$PASSWD@$SID<<!!

...
--some SQL
...

!!

ps -ef displays connect string

GOOD:

sqlplus /nolog<<!!

connect $USER/$PASSWD@$SID;

...
--some SQL
...

!!

ps -ef does not display connect string