Re: Block db access by IP and username

From: Rakesh Tikku <rakesh.tikku_at_gmail.com>
Date: Mon, 31 Aug 2009 13:07:07 -0700
Message-ID: <4643fc610908311307u7657be06kd6f8f79c770c57bd_at_mail.gmail.com>



Hi Gabriel,

check out Oracle Connection Manger. It provides much more flexible options to secure access to you database.

Rakesh

On Mon, Aug 31, 2009 at 12:53 PM, Aragon, Gabriel (GE, Corporate, consultant)<gabriel.aragon_at_ge.com> wrote:
> Hi all,
>
> long time no checking this list. I have a security question. I need to block
> access to db by IP and username, let's say that I need that user XXXX can
> connect ONLY from IP aaa.bbb.ccc.ddd, that is, if user XXXX wants to connect
> from another IP, access will be denied.
>
> I was thinking about using an after logon trigger to detect username and IP
> and kill session if it doest fit with required values, but I think this is a
> little bit rude. The other option I verified was using sqlnet.ora
> configuration but this only filters by IP and I would have to add all
> posssible IP's but doesnt filter users, and this is not what I need.
>
> Any ideas?
>
> TIA
> Gabriel

--
http://www.freelists.org/webpage/oracle-l
Received on Mon Aug 31 2009 - 15:07:07 CDT

Original text of this message