Home » RDBMS Server » Security » bad linux login (11g)
icon4.gif  bad linux login [message #588080] Thu, 20 June 2013 13:18 Go to next message
mryasyam
Messages: 2
Registered: June 2013
Junior Member
hello everyone
i would like to ask a question

A database administrator has used to connect to oracle database on unix
operating system by using the following:

$ sqlplus sys/sysPass1@orcl as sysdba

What are the big mistakes in the previous method to connect?
What do you suggest to avoid such mistakes?


thanks

Report message to a moderator

Re: bad linux login [message #588081 is a reply to message #588080] Thu, 20 June 2013 13:26 Go to previous messageGo to next message
BlackSwan
Messages: 26759
Registered: January 2009
Location: SoCal
Senior Member
>What are the big mistakes in the previous method to connect?
Allowing "as sysdba" access across the network.

>What do you suggest to avoid such mistakes?
remote_login_passwordfile=NONE

Report message to a moderator

Re: bad linux login [message #588082 is a reply to message #588080] Thu, 20 June 2013 13:28 Go to previous messageGo to next message
John Watson
Messages: 8499
Registered: January 2010
Location: Global Village
Senior Member
Welcome to the forum. Please read our OraFAQ Forum Guide and How to use [code] tags and make your code easier to read

Why do you think there are any mistakes in the example you have given?

Report message to a moderator

Re: bad linux login [message #588085 is a reply to message #588082] Thu, 20 June 2013 13:42 Go to previous messageGo to next message
Michel Cadot
Messages: 67745
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
It is a question his teacher or interviewer asked him. Wink

Regards
Lichel

Report message to a moderator

Re: bad linux login [message #588090 is a reply to message #588085] Thu, 20 June 2013 16:17 Go to previous messageGo to next message
Littlefoot
Messages: 21654
Registered: June 2005
Location: Croatia, Europe
Senior Member
Account Moderator
Michel Cadot wrote on Thu, 20 June 2013 20:42
Lichel

/forum/fa/449/0/

Report message to a moderator

Re: bad linux login [message #588140 is a reply to message #588081] Fri, 21 June 2013 05:53 Go to previous messageGo to next message
mryasyam
Messages: 2
Registered: June 2013
Junior Member
thank you very much guys Cool Cool Razz

[Updated on: Fri, 21 June 2013 05:54]

Report message to a moderator

Re: bad linux login [message #592781 is a reply to message #588080] Mon, 12 August 2013 06:14 Go to previous messageGo to next message
8939513598$
Messages: 103
Registered: July 2013
Location: chennai
Senior Member
Hi,
why REMOTE_LOGIN_PASSWORDFILE=NONE ? let it be REMOTE_LOGIN_PASSWORDFILE=EXCLUSIVE,so that the particular user can access the database?
Thanks & Regards,
Rajagopal S

Report message to a moderator

Re: bad linux login [message #592791 is a reply to message #592781] Mon, 12 August 2013 06:50 Go to previous message
Michel Cadot
Messages: 67745
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
REMOTE_LOGIN_PASSWORDFILE is meaningful ONLY for SYSOPER and SYSDBA connections.
Putting it to NONE forbid any remote connection of these kinds which is a good practice for security.

Regards
Michel

Report message to a moderator

Previous Topic: Password aging without expiry
Next Topic: v$pwfile_users
Goto Forum:
  

[ Syndicate this forum (XML) ] [ RSS ]

Current Time: Sun Feb 28 10:58:12 CST 2021
.:: Forum Home :: Blogger Home :: Wiki Home :: Contact :: Privacy ::.