Sql*Plus User’s Guide and Reference

Secure External Password Store
As a command-line alternative for large-scale deployments where applications use 
password credentials to connect to databases, it is possible to store such credentials in 
a client-side Oracle wallet. An Oracle wallet is a secure software container that is used 
to store authentication and signing credentials. 
Storing database password credentials in a client-side Oracle wallet eliminates the 
need to embed usernames and passwords in application code, batch jobs, or scripts. 
This reduces the risk of exposing passwords in the clear in scripts and application 
code, and simplifies maintenance because you need not change your code each time 
usernames and passwords change. In addition, not having to change application code 
also makes it easier to enforce password management policies for these user accounts.
When you configure a client to use the external password store, applications can use 
the following syntax to connect to databases that use password authentication:
CONNECT /@
database_alias
Note that you need not specify database login credentials in this 
CONNECT
statement. 
Instead your system looks for database login credentials in the client wallet.
Expired Password
In the command-line interface, if your password has expired, SQL*Plus prompts you 
to change it when you attempt to log in. You are logged in once you successfully 
change your password. 
Changing your Password
In the command-line interface, you can change your password with the PASSWORD 
command. See 
PASSWORD
 on page 12-69. 
Connecting to a Database
You must connect to an Oracle Database (instance) before you can query or modify 
data in that database. You can connect to the default database and to other databases 
accessible through your network. To connect to another database over a network, both 
databases must have Oracle Net configured, and have compatible network drivers. 
See Also:
Oracle Database Administrator's Guide for information 
about configuring your client to use secure external password store 
and for information about managing credentials in it.

---

Connecting to a Database
Starting SQL*Plus
3-3
You must enter either a connection identifier or a net service name to connect to a 
database other than the default.
The connection identifier or net service name is entered:
■
as an argument to the 
SQLPLUS Program Syntax
when starting a command-line 
session.
■
as an argument to the 
CONNECT
 command from a current session. For detailed 
usage, see Accessing a Container in a CDB in the Oracle Database Administrator's 
Guide.