Home » RDBMS Server » Server Utilities » How i can prevent backup for specific IP Address
How i can prevent backup for specific IP Address [message #407647] Wed, 10 June 2009 23:34 Go to next message
eng.oracle
Messages: 48
Registered: December 2007
Member
Hello every one ...
How i can prevent backup for specific IP Address.

when try to make backup get error message !!

thank you
Re: How i can prevent backup for specific IP Address [message #407648 is a reply to message #407647] Wed, 10 June 2009 23:37 Go to previous messageGo to next message
BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal
Senior Member
eng.oracle wrote on Wed, 10 June 2009 21:34
Hello every one ...
How i can prevent backup for specific IP Address.

when try to make backup get error message !!

thank you


HUH?

What was done?

What is error message?

What does post have to do with Oracle?
Re: How i can prevent backup for specific IP Address [message #407936 is a reply to message #407647] Fri, 12 June 2009 07:39 Go to previous messageGo to next message
eng.oracle
Messages: 48
Registered: December 2007
Member
Thanks for replaying

I need when someone try to make backup get error message or can't do that.
Re: How i can prevent backup for specific IP Address [message #407938 is a reply to message #407936] Fri, 12 June 2009 07:45 Go to previous messageGo to next message
ThomasG
Messages: 3211
Registered: April 2005
Location: Heilbronn, Germany
Senior Member
What? What does "try to make backup" mean? Who is "someone"? What do you mean by "can't do that"?

Is this somehow related to Oracle or do you talk about something completely different?

Re: How i can prevent backup for specific IP Address [message #407940 is a reply to message #407647] Fri, 12 June 2009 07:52 Go to previous messageGo to next message
eng.oracle
Messages: 48
Registered: December 2007
Member
Okay, thank's for replaying

-- In another way ..
I need to prevent Any one have prevliage to make backup to make it from out side of company.

For Exceample :
IF range of ip address between 10.20.60.1 to 10.20.60.255 then
let user to make backup
else
message('Sorry you must be in a company to make backup.');
end if;


That's all
Re: How i can prevent backup for specific IP Address [message #407946 is a reply to message #407940] Fri, 12 June 2009 08:44 Go to previous messageGo to next message
JRowbottom
Messages: 5933
Registered: June 2006
Location: Sunny North Yorkshire, ho...
Senior Member
I'm guessing you have only a vague grasp on what 'making a backup' involves.

The standard ways of making a backup (Hot backup, cold backup & RMAN) all require you to have access to the server and/or to priviliged accounts in Oracle.

Many people consider (wrongly) that an Export DMP file is a backup - is this what you're trying to stop?

Are you saying that you're in a position where people from outside the company can easily connect to your databases?
Re: How i can prevent backup for specific IP Address [message #407963 is a reply to message #407647] Fri, 12 June 2009 10:51 Go to previous messageGo to next message
eng.oracle
Messages: 48
Registered: December 2007
Member

THANKS for replaying
yes i need to prevent Export DMP file is a backup

How ??
Re: How i can prevent backup for specific IP Address [message #407965 is a reply to message #407963] Fri, 12 June 2009 10:58 Go to previous messageGo to next message
Michel Cadot
Messages: 68641
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Quote:
Export DMP file is a backup

No it is not.

Use IP features from sqlnet.ora you will find in Net Services Reference

Regards
Michel
Re: How i can prevent backup for specific IP Address [message #407966 is a reply to message #407647] Fri, 12 June 2009 11:00 Go to previous messageGo to next message
eng.oracle
Messages: 48
Registered: December 2007
Member
Thank's for replaying
i will read subject
Re: How i can prevent backup for specific IP Address [message #407968 is a reply to message #407647] Fri, 12 June 2009 11:17 Go to previous messageGo to next message
eng.oracle
Messages: 48
Registered: December 2007
Member
Please Help me
I need to make a security to my DB from hacking so
i need to prevent make EXP or Any type of backup from outside of Compay.
Re: How i can prevent backup for specific IP Address [message #407969 is a reply to message #407968] Fri, 12 June 2009 11:20 Go to previous messageGo to next message
Michel Cadot
Messages: 68641
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
* Don't allow connection from any IP outsite your company.
* Don't allow sysdba from outside your company.
* Don't allow privileged login from outside your company.
* Otherwise you can't

Regards
Michel
Re: How i can prevent backup for specific IP Address [message #407970 is a reply to message #407647] Fri, 12 June 2009 11:21 Go to previous messageGo to next message
BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal
Senior Member
@09:00 i will read subject
@09:17 Please Help me

WOW! sped read the whole manual in under 20 minutes.

The solution is to ensure only authorized folks have valid username & password.

Have firm policy that unauthorized access will be summarily terminated.
Re: How i can prevent backup for specific IP Address [message #407971 is a reply to message #407647] Fri, 12 June 2009 11:22 Go to previous messageGo to next message
eng.oracle
Messages: 48
Registered: December 2007
Member
How i can do that ??
Re: How i can prevent backup for specific IP Address [message #407972 is a reply to message #407969] Fri, 12 June 2009 11:23 Go to previous messageGo to next message
eng.oracle
Messages: 48
Registered: December 2007
Member
Michel Cadot wrote on Fri, 12 June 2009 11:20
* Don't allow connection from any IP outsite your company.
* Don't allow sysdba from outside your company.
* Don't allow privileged login from outside your company.
* Otherwise you can't

Regards
Michel


How i can do that ??
Re: How i can prevent backup for specific IP Address [message #407974 is a reply to message #407971] Fri, 12 June 2009 11:25 Go to previous messageGo to next message
ThomasG
Messages: 3211
Registered: April 2005
Location: Heilbronn, Germany
Senior Member
eng.oracle wrote on Fri, 12 June 2009 18:22
How i can do that ??


Ummmmmmmm.... Don't publish your DBA username and password on Wikipedia?
Re: How i can prevent backup for specific IP Address [message #407975 is a reply to message #407647] Fri, 12 June 2009 11:27 Go to previous messageGo to next message
eng.oracle
Messages: 48
Registered: December 2007
Member
I'm So sorry i'm primery in DBA.
and i need to secure my Database.
Becuse another pepole try to attack it.
Re: How i can prevent backup for specific IP Address [message #407976 is a reply to message #407975] Fri, 12 June 2009 11:29 Go to previous messageGo to next message
ThomasG
Messages: 3211
Registered: April 2005
Location: Heilbronn, Germany
Senior Member
The first line of defense would actually be the network level.

WHY do people from outside the company have access to the server the database is on? Shouldn't the database be behind a firewall?
Re: How i can prevent backup for specific IP Address [message #407977 is a reply to message #407972] Fri, 12 June 2009 11:30 Go to previous messageGo to next message
Michel Cadot
Messages: 68641
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
eng.oracle wrote on Fri, 12 June 2009 18:23
Michel Cadot wrote on Fri, 12 June 2009 11:20
* Don't allow connection from any IP outsite your company.
* Don't allow sysdba from outside your company.
* Don't allow privileged login from outside your company.
* Otherwise you can't

Regards
Michel


How i can do that ??

1/
Quote:
Use IP features from sqlnet.ora you will find in Net Services Reference


2/
Don't use password file

3/
Trigger login that checks privileged username and if access is remote. See SYS_CONTEXT function.

Regards
Michel

Re: How i can prevent backup for specific IP Address [message #407978 is a reply to message #407647] Fri, 12 June 2009 11:32 Go to previous messageGo to next message
eng.oracle
Messages: 48
Registered: December 2007
Member
Thank's to all
Re: How i can prevent backup for specific IP Address [message #407979 is a reply to message #407647] Fri, 12 June 2009 11:37 Go to previous messageGo to next message
eng.oracle
Messages: 48
Registered: December 2007
Member
This some information about


SYS_CONTEXT is the function which returns information of the current session. It replaces the traditional USERENV function which is kept only for backward compatibility in Oracle 10g. Essentially it returns all the parameter values which were available through USERENV function.

SYS_CONTEXT take two arguments: namespace and the associated parameter. Oracle provides built-in namespace USERENV which returns information about the current session. Most common examples are getting osuser or getting session user, NLS values, IP Address etc. for the current session. Here is an example for few of the parameter values.



SQL Code
SQL> SELECT SYS_CONTEXT('USERENV','SESSION_USER') Session_User,
2 SYS_CONTEXT('USERENV','LANGUAGE') Language,
3 SYS_CONTEXT('USERENV','NLS_DATE_FORMAT') Date_Format,
4 SYS_CONTEXT('USERENV','Module') Module,
5 SYS_CONTEXT('USERENV','Action') Action
6 FROM DUAL; SESSION_USER LANGUAGE DATE_FORMAT MODULE ACTION
-------- -------------------- ------ ------- -------
SCOTT AMERICAN_AMERICA.WE8MSWIN1252 DD-MON-RR SQL*Plus



As mentioned earlier, these are few of the parameters. For complete list of parameters refer to Oracle manual. Value for parameters 'Module' and 'Action' can be set using dbms_application_info package to track the activity more precisely in the session. We will cover it in detail in another blog entry.

One can create user defined context using CREATE CONTEXT syntax. Specific attributes can also be assigned to the user defined context using DBMS_SESSION.set_context procedure. You can refer to Oracle SQL Reference manual for detailed explantion of how to create context and assign attribute to it. The session information can be useful for auditing purpose or for determining certain action based on certain parameter value. It also helps in determining the language specific parameters for current session.
.
.
.
To help others programmer
Re: How i can prevent backup for specific IP Address [message #407981 is a reply to message #407979] Fri, 12 June 2009 11:56 Go to previous messageGo to next message
Michel Cadot
Messages: 68641
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
IP_ADDRESS is the parameter you need in your case.
Always provide a link to what you quote, for instance
http://download.oracle.com/docs/cd/B19306_01/server.102/b14200/functions165.htm#i1038176

Regards
Michel
Re: How i can prevent backup for specific IP Address [message #407983 is a reply to message #407647] Fri, 12 June 2009 12:29 Go to previous message
eng.oracle
Messages: 48
Registered: December 2007
Member
tahnk's for helping me
Previous Topic: ORA-06502: PL/SQL: numeric or value error in EXPDP
Next Topic: export error
Goto Forum:
  


Current Time: Fri Apr 19 23:49:46 CDT 2024