<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Thanks Larry ! The concern was more about having all credentials stored in one single location . I will check out the sites .<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Venky<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Larry Barber [mailto:lebarber@gmail.com]
<br>
<b>Sent:</b> Wednesday, October 31, 2012 7:30 PM<br>
<b>To:</b> Venkatesh Subbaramu<br>
<b>Cc:</b> xymon@xymon.com<br>
<b>Subject:</b> Re: [Xymon] Database Monitoring<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">You're still going to need to have the account name and password stored somewhere, even if it is local to the database machine. The real way to provide good security in this case is to make sure the account that Xymon uses only has the
permissions it needs, only "select" permissions on the DBA tables. This way nobody can use the account information to subvert your database nor will they be able to use it to obtain sensitive information. You can also make the file holding the passwords hard
to access, zero out the permissions using chmod and then use setfacl to add in read permissions for the Xymon user. <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I haven't used <a href="http://dbcheck.pl">dbcheck.pl</a>, but I strongly suspect that you could run on the Xymon clients that are hosting your databases, there are certainly other monitoring scripts, available at Xymonton and deadcat that
do operate locally, but you will still need passwords stored in a plain text file somewhere. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Larry Barber<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Wed, Oct 31, 2012 at 7:41 AM, Venkatesh Subbaramu <<a href="mailto:Venkatesh_S04@infosys.com" target="_blank">Venkatesh_S04@infosys.com</a>> wrote:<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Hi All ,<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">We have implemented db monitoring using
<a href="http://dbcheck.pl" target="_blank">dbcheck.pl</a> for our Oracle and SQL Server databases which requires the database user id and password to be stored in dbcheck.ini (its config file) .However the security team has raised concerns about this and
proposed that we instead go for a agent based model like say leverage the BBWIN agent for windows to perform the database monitoring as well . Can you please let me know if this is possible to implement .If yes ,please provide some details /sample scripts
for implementation .<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Thank You,<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Regards,<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Venky<o:p></o:p></p>
</div>
</div>
<table class="MsoNormalTable" border="0" cellpadding="0">
<tbody>
<tr>
<td style="background:white;padding:.75pt .75pt .75pt .75pt">
<pre><span style="color:black">**************** CAUTION - Disclaimer *****************<o:p></o:p></span></pre>
<pre><span style="color:black">This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely <o:p></o:p></span></pre>
<pre><span style="color:black">for the use of the addressee(s). If you are not the intended recipient, please <o:p></o:p></span></pre>
<pre><span style="color:black">notify the sender by e-mail and delete the original message. Further, you are not <o:p></o:p></span></pre>
<pre><span style="color:black">to copy, disclose, or distribute this e-mail or its contents to any other person and <o:p></o:p></span></pre>
<pre><span style="color:black">any such actions are unlawful. This e-mail may contain viruses. Infosys has taken <o:p></o:p></span></pre>
<pre><span style="color:black">every reasonable precaution to minimize this risk, but is not liable for any damage <o:p></o:p></span></pre>
<pre><span style="color:black">you may sustain as a result of any virus in this e-mail. You should carry out your <o:p></o:p></span></pre>
<pre><span style="color:black">own virus checks before opening the e-mail or attachment. Infosys reserves the <o:p></o:p></span></pre>
<pre><span style="color:black">right to monitor and review the content of all messages sent to or from this e-mail <o:p></o:p></span></pre>
<pre><span style="color:black">address. Messages sent to or from this e-mail address may be stored on the <o:p></o:p></span></pre>
<pre><span style="color:black">Infosys e-mail system.<o:p></o:p></span></pre>
<pre><span style="color:black">***INFOSYS******** End of Disclaimer ********INFOSYS***<o:p></o:p></span></pre>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
_______________________________________________<br>
Xymon mailing list<br>
<a href="mailto:Xymon@xymon.com" target="_blank">Xymon@xymon.com</a><br>
<a href="http://lists.xymon.com/mailman/listinfo/xymon" target="_blank">http://lists.xymon.com/mailman/listinfo/xymon</a><o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>