Home » RDBMS Server » Security » How i can prevent login as os authintication
How i can prevent login as os authintication [message #391901] Sat, 14 March 2009 07:43 Go to next message
eng.oracle
Messages: 46
Registered: December 2007
Member
Hi every one,
How i can prevent login as os authintication ?

also after login to os as administration user.

- pls note that
* i remove the ora_dba from member of administration but any one login to os as admin can add ora_dba and then login to db
as conn / as sysdba ?!!!

Re: How i can prevent login as os authintication [message #391916 is a reply to message #391901] Sat, 14 March 2009 10:07 Go to previous messageGo to next message
Michel Cadot
Messages: 59794
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
You cannot prevent from an administrator to do what he/she wants.
Anything you can do, he/she can undo.

Regards
Michel
Re: How i can prevent login as os authintication [message #391918 is a reply to message #391901] Sat, 14 March 2009 10:12 Go to previous messageGo to next message
eng.oracle
Messages: 46
Registered: December 2007
Member
THANKS for replaying
i'm working as dba and devloper in a small project.
and may pepole can used my server so i need to pervent authintication done by OS.

Can i do that ..
Re: How i can prevent login as os authintication [message #391920 is a reply to message #391918] Sat, 14 March 2009 10:20 Go to previous messageGo to next message
Michel Cadot
Messages: 59794
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
You already said you removed the group but it can be added.
You can also set SQLNET.AUTHENTICATION_SERVICES = (NONE) in sqlnet.ora but it can be reset back.

As I said, if you want to prevent access from an administrator, you can't.

Regards
Michel
Re: How i can prevent login as os authintication [message #391925 is a reply to message #391901] Sat, 14 March 2009 11:25 Go to previous messageGo to next message
eng.oracle
Messages: 46
Registered: December 2007
Member
thank you Razz
Re: How i can prevent login as os authintication [message #411901 is a reply to message #391901] Tue, 07 July 2009 05:02 Go to previous messageGo to next message
surenhr
Messages: 45
Registered: August 2007
Location: gurgoan
Member
I didnt understand how the
other OS admin user have their oracle users created before hand
in the format

create user "OPS$DOMAIN.NAME\USER" identified externally;


Only after this user is present in DB, they can login.
Re: How i can prevent login as os authintication [message #411940 is a reply to message #411901] Tue, 07 July 2009 05:54 Go to previous messageGo to next message
Michel Cadot
Messages: 59794
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Do not spread your question in several topics.
How could we and you syncrhonize the answers in both of them.

Original is http://www.orafaq.com/forum/t/147206/102589/, please do not answer here.

Regards
Michel
Re: How i can prevent login as os authintication [message #411995 is a reply to message #391901] Tue, 07 July 2009 07:10 Go to previous messageGo to next message
surenhr
Messages: 45
Registered: August 2007
Location: gurgoan
Member
Dear Michel ,

I was not trying to spread my question here and there .

Actually i was just curious to know that how other user

can log in to his DB after login to OS as they would need to have

corresponding users in DB first .
Re: How i can prevent login as os authintication [message #412009 is a reply to message #411995] Tue, 07 July 2009 07:33 Go to previous messageGo to next message
Michel Cadot
Messages: 59794
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
If you are in ORA_DBA group you can always connect as SYS (unless you set sqlnet.ora as previously said).

Regards
Michel
Re: How i can prevent login as os authintication [message #414430 is a reply to message #391901] Wed, 22 July 2009 02:13 Go to previous message
nancy1122
Messages: 1
Registered: July 2009
Location: United States
Junior Member
It's ok Suren.... We can understand..Hope you were benefited here...

[Updated on: Wed, 22 July 2009 03:04] by Moderator

Report message to a moderator

Previous Topic: Connect sys@my_tns as sysdba, fail (ora-1031)
Next Topic: Lock user / ACCOUNT_STATUS in DBA_USERS (merged)
Goto Forum:
  


Current Time: Wed Nov 26 23:49:20 CST 2014

Total time taken to generate the page: 0.20717 seconds