Message-Id: <10557.111946@fatcity.com> From: "Turnbull, Karen (BSA)" Date: Thu, 13 Jul 2000 16:00:01 +0200 Subject: RE: Account administration guidelines This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01BFECD2.A34219EE Content-Type: text/plain; charset="iso-8859-1" Thanks Jeffery This has been a marvelous help Karen -----Original Message----- From: Jeffery Stevenson [mailto:jeff@mpv.com] Sent: Monday, July 10, 2000 5:34 PM To: Multiple recipients of list ORACLE-L Subject: RE: Account administration guidelines You could take a look at the O'Reilly Oracle Security book and see if that has the information you need. Here is the table of contents: http://www.oreilly.com/catalog/orasec/toc.html and here is a sample chapter, "Developing a Database Security Plan": http://www.oreilly.com/catalog/orasec/chapter/ch07.html HTH Jeffery Stevenson Chief Database Geek Medical Present Value, Inc. Austin, TX -----Original Message----- From: root@fatcity.com [mailto:root@fatcity.com]On Behalf Of Turnbull, Karen (BSA) Sent: Monday, July 10, 2000 7:55 AM To: Multiple recipients of list ORACLE-L Subject: Account administration guidelines Hi Does any have (or can you refer me to) documentation re account admin guidelines for an Oracle environment? I am having no luck with Oracle support or Metalink. We have a fairly extended environment - 2 Financials databases and a datawarehouse (in development). I need some idea of "best of breed" - for example what format the username should be, must the password be set to expire after a certain time, do I use roles or not etc. Any help would be much appreciated Karen Turnbull Billiton SA This message and any attachments may be confidential and may also be privileged or otherwise protected from disclosure. They are sent for the attention of the named addressee(s) only. If you are not the named addressee(s) please notify the sender immediately and destroy this message. In this case, you should not copy or distribute this message or attachments, use it for any purpose or disclose its contents to any other person. Opinions, conclusions and other information in this message that do not relate to the official business of my firm/company shall be understood as neither given nor endorsed by it. This message and any attachments may be confidential and may also be privileged or otherwise protected from disclosure. They are sent for the attention of the named addressee(s) only. If you are not the named addressee(s) please notify the sender immediately and destroy this message. In this case, you should not copy or distribute this message or attachments, use it for any purpose or disclose its contents to any other person. Opinions, conclusions and other information in this message that do not relate to the official business of my firm/company shall be understood as neither given nor endorsed by it. ------_=_NextPart_001_01BFECD2.A34219EE Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Account administration guidelines
Thanks=20 Jeffery
This has been a marvelous = help
 
Karen
-----Original Message-----
From: Jeffery = Stevenson=20 [mailto:jeff@mpv.com]
Sent: Monday, July 10, 2000 5:34=20 PM
To: Multiple recipients of list = ORACLE-L
Subject: RE:=20 Account administration guidelines

You could take a=20 look at the O'Reilly Oracle Security book and see if that has the=20 information you need.  Here is the table of=20 contents:
 
http://www.oreil= ly.com/catalog/orasec/toc.html
 
and here is a=20 sample chapter, "Developing a Database Security=20 Plan":
 
http://= www.oreilly.com/catalog/orasec/chapter/ch07.html
=
 
HTH

Jeffery Stevenson
Chief Database=20 Geek
Medical Present Value, Inc.
Austin, TX  =

-----Original Message-----
From: = root@fatcity.com=20 [mailto:root@fatcity.com]On Behalf Of Turnbull, Karen=20 (BSA)
Sent: Monday, July 10, 2000 7:55 = AM
To:=20 Multiple recipients of list ORACLE-L
Subject: Account = administration guidelines

Hi

Does any have (or can you refer = me to)=20 documentation re account admin guidelines for an Oracle=20 environment?
I am having = no luck with=20 Oracle support or Metalink.
We have a=20 fairly extended environment - 2 Financials databases and a = datawarehouse=20 (in development).  I need some idea of "best of = breed" -=20 for example what format the username should be, must the = password be set=20 to expire after a certain time, do I use roles or not = etc.

Any help would be much = appreciated=20

Karen Turnbull
Billiton SA
This message and=20 any attachments may be confidential and may also be privileged = or=20 otherwise protected from disclosure. They are sent for the = attention of=20 the named addressee(s) only. If you are not the named = addressee(s)=20 please notify the sender immediately and destroy this message. = In this=20 case, you should not copy or distribute this message or = attachments, use=20 it for any purpose or disclose its contents to any other = person.=20 Opinions, conclusions and other information in this message = that do not=20 relate to the official business of my firm/company shall be = understood=20 as neither given nor endorsed by=20 it.

This message and any attachments may = be confidential and may also be privileged or otherwise protected from = disclosure. They are sent for the attention of the named addressee(s) = only. If you are not the named addressee(s) please notify the sender = immediately and destroy this message. In this case, you should not copy = or distribute this message or attachments, use it for any purpose or = disclose its contents to any other person. Opinions, conclusions and = other information in this message that do not relate to the official =