OraFAQ Forum: Security » bad linux login

Home » RDBMS Server » Security » bad linux login (11g)

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

bad linux login [message #588080]

Thu, 20 June 2013 13:18

mryasyam
Messages: 2
Registered: June 2013

Junior Member

hello everyone
i would like to ask a question

A database administrator has used to connect to oracle database on unix
operating system by using the following:

$ sqlplus sys/sysPass1@orcl as sysdba

What are the big mistakes in the previous method to connect?
What do you suggest to avoid such mistakes?

thanks

Report message to a moderator

Re: bad linux login [message #588081 is a reply to message #588080]

Thu, 20 June 2013 13:26

BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal

Senior Member

>What are the big mistakes in the previous method to connect?
Allowing "as sysdba" access across the network.

>What do you suggest to avoid such mistakes?
remote_login_passwordfile=NONE

Report message to a moderator

Re: bad linux login [message #588082 is a reply to message #588080]

Thu, 20 June 2013 13:28

John Watson
Messages: 8997
Registered: January 2010
Location: Global Village

Senior Member

Welcome to the forum. Please read our OraFAQ Forum Guide and How to use [code] tags and make your code easier to read

Why do you think there are any mistakes in the example you have given?

Report message to a moderator

Re: bad linux login [message #588085 is a reply to message #588082]

Thu, 20 June 2013 13:42

Michel Cadot
Messages: 68775
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

It is a question his teacher or interviewer asked him. Wink

Regards
Lichel

Report message to a moderator

Re: bad linux login [message #588090 is a reply to message #588085]

Thu, 20 June 2013 16:17

Littlefoot
Messages: 21826
Registered: June 2005
Location: Croatia, Europe

Senior Member
Account Moderator

Michel Cadot wrote on Thu, 20 June 2013 20:42

Lichel

Report message to a moderator

Re: bad linux login [message #588140 is a reply to message #588081]

Fri, 21 June 2013 05:53

mryasyam
Messages: 2
Registered: June 2013

Junior Member

thank you very much guys Cool

[Updated on: Fri, 21 June 2013 05:54]

Report message to a moderator

Re: bad linux login [message #592781 is a reply to message #588080]

Mon, 12 August 2013 06:14

8939513598$
Messages: 103
Registered: July 2013
Location: chennai

Senior Member

Hi,
why REMOTE_LOGIN_PASSWORDFILE=NONE ? let it be REMOTE_LOGIN_PASSWORDFILE=EXCLUSIVE,so that the particular user can access the database?
Thanks & Regards,
Rajagopal S

Report message to a moderator

Re: bad linux login [message #592791 is a reply to message #592781]

Mon, 12 August 2013 06:50

Michel Cadot
Messages: 68775
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

REMOTE_LOGIN_PASSWORDFILE is meaningful ONLY for SYSOPER and SYSDBA connections.
Putting it to NONE forbid any remote connection of these kinds which is a good practice for security.

Regards
Michel

Report message to a moderator

Previous Topic:	Password aging without expiry
Next Topic:	v$pwfile_users

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Mon Mar 09 05:10:00 CDT 2026