OraFAQ Forum: Security » How i can prevent login as os authintication

Home » RDBMS Server » Security » How i can prevent login as os authintication

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

How i can prevent login as os authintication [message #391901]

Sat, 14 March 2009 07:43

eng.oracle
Messages: 48
Registered: December 2007

Member

Hi every one,
How i can prevent login as os authintication ?

also after login to os as administration user.

- pls note that
* i remove the ora_dba from member of administration but any one login to os as admin can add ora_dba and then login to db
as conn / as sysdba ?!!!

Report message to a moderator

Re: How i can prevent login as os authintication [message #391916 is a reply to message #391901]

Sat, 14 March 2009 10:07

Michel Cadot
Messages: 68775
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

You cannot prevent from an administrator to do what he/she wants.
Anything you can do, he/she can undo.

Regards
Michel

Report message to a moderator

Re: How i can prevent login as os authintication [message #391918 is a reply to message #391901]

Sat, 14 March 2009 10:12

eng.oracle
Messages: 48
Registered: December 2007

Member

THANKS for replaying
i'm working as dba and devloper in a small project.
and may pepole can used my server so i need to pervent authintication done by OS.

Can i do that ..

Report message to a moderator

Re: How i can prevent login as os authintication [message #391920 is a reply to message #391918]

Sat, 14 March 2009 10:20

Michel Cadot
Messages: 68775
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

You already said you removed the group but it can be added.
You can also set SQLNET.AUTHENTICATION_SERVICES = (NONE) in sqlnet.ora but it can be reset back.

As I said, if you want to prevent access from an administrator, you can't.

Regards
Michel

Report message to a moderator

Re: How i can prevent login as os authintication [message #391925 is a reply to message #391901]

Sat, 14 March 2009 11:25

eng.oracle
Messages: 48
Registered: December 2007

Member

thank you

Report message to a moderator

Re: How i can prevent login as os authintication [message #411901 is a reply to message #391901]

Tue, 07 July 2009 05:02

surenhr
Messages: 45
Registered: August 2007
Location: gurgoan

Member

I didnt understand how the
other OS admin user have their oracle users created before hand
in the format

create user "OPS$DOMAIN.NAME\USER" identified externally;

Only after this user is present in DB, they can login.

Report message to a moderator

Re: How i can prevent login as os authintication [message #411940 is a reply to message #411901]

Tue, 07 July 2009 05:54

Michel Cadot
Messages: 68775
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

Do not spread your question in several topics.
How could we and you syncrhonize the answers in both of them.

Original is http://www.orafaq.com/forum/t/147206/102589/, please do not answer here.

Regards
Michel

Report message to a moderator

Re: How i can prevent login as os authintication [message #411995 is a reply to message #391901]

Tue, 07 July 2009 07:10

surenhr
Messages: 45
Registered: August 2007
Location: gurgoan

Member

Dear Michel ,

I was not trying to spread my question here and there .

Actually i was just curious to know that how other user

can log in to his DB after login to OS as they would need to have

corresponding users in DB first .

Report message to a moderator