From oracle-l-bounce@freelists.org Thu Jun 17 08:49:59 2004 Return-Path: Received: from air189.startdedicated.com (root@localhost) by orafaq.com (8.11.6/8.11.6) with ESMTP id i5HDnYp32054 for ; Thu, 17 Jun 2004 08:49:44 -0500 X-ClientAddr: 206.53.239.180 Received: from turing.freelists.org (freelists-180.iquest.net [206.53.239.180]) by air189.startdedicated.com (8.11.6/8.11.6) with ESMTP id i5HDnO632001 for ; Thu, 17 Jun 2004 08:49:34 -0500 Received: from localhost (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 2D25B72D185; Thu, 17 Jun 2004 08:33:50 -0500 (EST) Received: from turing.freelists.org ([127.0.0.1]) by localhost (turing [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 19082-02; Thu, 17 Jun 2004 08:33:49 -0500 (EST) Received: from turing (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 366F572D16C; Thu, 17 Jun 2004 08:33:49 -0500 (EST) Received: with ECARTIS (v1.0.0; list oracle-l); Thu, 17 Jun 2004 08:32:22 -0500 (EST) X-Original-To: oracle-l@freelists.org Delivered-To: oracle-l@freelists.org Received: from localhost (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 13E9972D0EF for ; Thu, 17 Jun 2004 08:32:22 -0500 (EST) Received: from turing.freelists.org ([127.0.0.1]) by localhost (turing [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 16508-100 for ; Thu, 17 Jun 2004 08:32:21 -0500 (EST) Received: from smtpgate.vicr.com (smtpgate.vicr.com [207.141.187.5]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 99C9472D132 for ; Thu, 17 Jun 2004 08:32:21 -0500 (EST) Received: from 25exch1.vicorpower.vicr.com ([172.20.20.30]) by exchgate.vicorpower.vicr.com with Microsoft SMTPSVC(5.0.2195.6713); Thu, 17 Jun 2004 09:52:57 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0 content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C45472.6556C7CC" Subject: connect as sysdba Date: Thu, 17 Jun 2004 09:52:57 -0400 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: connect as sysdba Thread-Index: AcRUblnwXKG6K548Thyuz5RKy1RSPAAAl31Q From: "Zeng, Lei" To: X-OriginalArrivalTime: 17 Jun 2004 13:52:57.0745 (UTC) FILETIME=[6566B010:01C45472] X-Virus-Scanned: by amavisd-new at freelists.org X-archive-position: 2880 X-ecartis-version: Ecartis v1.0.0 Sender: oracle-l-bounce@freelists.org Errors-To: oracle-l-bounce@freelists.org X-original-sender: LZeng@vicr.com Precedence: normal Reply-To: oracle-l@freelists.org X-list: oracle-l X-Virus-Scanned: by amavisd-new at freelists.org ------_=_NextPart_001_01C45472.6556C7CC Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable It is possible to block members of Unix 'dba' group to connect as sysdba. Two things to check: 1. set REMOTE_LOGIN_PASSWORDFILE=3DEXCLUSIVE in init.ora or spfile 2. check file $ORACLE_HOME/rdbms/lib/config.c and make sure 'dba' is not in following entries =20 #define SS_DBA_GRP=20 #define SS_OPER_GRP=20 =20 Default is 'dba'. Change it to 'nogroup' or anything else, re-compile it to get a new config.o.=20 Lei ------_=_NextPart_001_01C45472.6556C7CC Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

It is=20 possible to block members of Unix 'dba' group to connect as sysdba. Two = things=20 to check:

1. set REMOTE_LOGIN_PASSWORDFILE=3DEXCLUSIVE =20 in init.ora or spfile

2.=20 check file $ORACLE_HOME/rdbms/lib/config.c and make = sure 'dba' is=20 not in following entries

#define SS_DBA_GRP

#define SS_OPER_GRP

Default is = 'dba'.=20 Change it to 'nogroup' or anything else, re-compile it to get = a new=20 config.o.

Lei

------_=_NextPart_001_01C45472.6556C7CC-- ---------------------------------------------------------------- Please see the official ORACLE-L FAQ: http://www.orafaq.com ---------------------------------------------------------------- To unsubscribe send email to: oracle-l-request@freelists.org put 'unsubscribe' in the subject line. -- Archives are at http://www.freelists.org/archives/oracle-l/ FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html -----------------------------------------------------------------