Oracle-L: RE: Unix script to stop password-protected listener

From: Choudhary Rajendra (TTL_LKO) <rajan_at_telco.co.in>
Date: Mon, 07 Oct 2002 23:08:23 -0800
Message-ID: <F001.004E2F5D.20021007230823@fatcity.com>

Hi ,

We can very well protect the Server side executables by changing the permission of the

file . We had implemented this on all our database sites and normal user don't have access

to lsnrctl,svrmgrl,namesctl etc .You can also protect the listener.ora file by changing the

permission to 770 or 700 as applicable to your environment . The sqlnet.ora file need to

be given read access to all and also the tnsnames.ora file (If you have not gone for nameserver) .

Regards
Rajendra

-----Original Message-----
Sent: Tuesday, October 08, 2002 11:13 AM To: Multiple recipients of list ORACLE-L

Hi,
Solaris 8, Oracle 9i listener

It seems that anyone who has a login on Solaris can shut the listener down. I have tried with a non-dba userid and could stop the listener.

The default file permission for ORACLE_HOME/bin/lsnrctl is 751, and for ORACLE_HOME/network/admin/listener.ora file is 644. I asked Oracle if I could change them to 750 and 640 respectively and they said that you should not change the
defaults since they are verified against the system.

So I password protected it. However to stop a password-protect listener you need to do the following interactively: run lsnrctl, issue "set password" command, put in the password, issue "stop", issue "exit".

I need to implement this stop in a Shell script so that I can call the script at the server reboot time. Do you know how to supply a password to lsnrctl set password command in a script? Have attempted with the script but have not got it
worked yet.

Thanks
Long

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author:
INET: Long.Nguyen_at_csiro.au

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Choudhary Rajendra (TTL_LKO)
INET: rajan_at_telco.co.in

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------