avoid use connect username/password, better connect username and enter the password when sql*plus asks you