RE: Wherefore AURORA$ORB$UNAUTHENTICATED

From: <Milos.Martinovic_at_slovnaft.sk>
Date: Fri, 19 May 2000 12:30:00 +0100
Message-Id: <10502.106066@fatcity.com>

It is created with $ORACLE_HOME/javavm/install/init_orb.sql (that is called from init_jvm.sql that installs the Java Virtual Machine) and the section is :

Create the public user for the Aurora/ORB.
This is the identity any non-validated ORB client
will run as
This is the user for users who don't authenticate in the Aurora/ORB create user AURORA$ORB$UNAUTHENTICATED identified by INVALID; grant CREATE SESSION to AURORA$ORB$UNAUTHENTICATED;

Milos Martinovic
DBA -----Original Message-----
From: MacGregor, Ian A. [mailto:ian_at_SLAC.Stanford.EDU] Sent: Friday, May 19, 2000 9:29 AM
To: Multiple recipients of list ORACLE-L Subject: RE: Wherefore AURORA$ORB$UNAUTHENTICATED

Yes, the AURORA$ suggests that. I'm trying to find out exacty what it is used for. It's another one of those accounts that Oracle sneakily creates. It is a potential target for a denial of service attack.

I have already taken appropriate preventitive steps, but I don't like removing create session privileges, and/or changing the password from an account whose purpose is unknown.

Ian MacGregor
Stanford Linear Accelerator Center
ian_at_slac.stanford.edu

-----Original Message-----
Sent: Thursday, May 18, 2000 8:55 PM
To: Multiple recipients of list ORACLE-L

I *believe* (but don't quote me on this) that it has to do with Oracle's JVM... at least that's what a developer friend told me

Rachel

>From: "MacGregor, Ian A." <ian_at_SLAC.Stanford.EDU>
>Reply-To: ORACLE-L_at_fatcity.com
>To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
>Subject: Wherefore AURORA$ORB$UNAUTHENTICATED
>Date: Thu, 18 May 2000 16:34:00 -0800
>
>What is the purpose of this account. It looks java related and has no
>privileges other than create session.
>
>Ian MacGregor
>Stanford Linear Accelererator Center
>ian_at_slac.stanford.edu
>--
>Author: MacGregor, Ian A.
> INET: ian_at_SLAC.Stanford.EDU
>
>Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
>San Diego, California -- Public Internet access / Mailing Lists
>--------------------------------------------------------------------
>To REMOVE yourself from this mailing list, send an E-Mail message
>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>the message BODY, include a line containing: UNSUB ORACLE-L
>(or the name of mailing list you want to be removed from). You may
>also send the HELP command for other information (like subscribing).

Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

-- 
Author: Rachel Carmichael
  INET: carmichr_at_hotmail.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Author: MacGregor, Ian A.
  INET: ian_at_SLAC.Stanford.EDU

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may

Received on Fri May 19 2000 - 06:30:00 CDT