Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: strange TNS-12154

Re: strange TNS-12154

From: Billy Verreynne <vslabs_at_onwe.co.za>
Date: 7 Jan 2004 02:35:18 -0800
Message-ID: <1a75df45.0401070235.1f946e4d@posting.google.com>


Ed Stevens <nospam_at_noway.nohow> wrote

> Problem is, with the registry entries set the way they are (and I
> confirmed myself that they are correct) I don't understand how
> anything he could have done to the local tnsnames could have had any
> effect. Or, alternatively, why the simple vb exe would have worked,
> but the asp page didn't.

My guess.

Different users. I'm pretty sure he ran that VB app as a desktop user with the standard set of superuser dev privs.

And I'm pretty sure that IIS on that same box is run in a guest account - or an account with minimal privs in order to secure the o/s as much as possible against hack attacks into the IIS server where the hacker gains access to the "processing space/environment" IIS runs in.

Do a desktop logon using the user account in which IIS runs. Check the registry entries (if you have access to it - if that IIS account is secure you should have minimal access to the registry). Determine what TNSNAMES file is used - and whether or not that file is readible from that user account.

--
Billy
Received on Wed Jan 07 2004 - 04:35:18 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US