re SYSDBA

From: Hemant K Chitale <hkchital_at_singnet.com.sg>
Date: Mon, 12 Jul 2004 23:10:16 +0800
Message-Id: <6.1.0.6.0.20040712230957.0243c898@pop.singnet.com.sg>

As a rule, I prefer "REMOTE_LOGIN_PASSWORDFILE=NONE "

Thus, only a local account in the "dba" group can login as SYSDBA, preventing logins over remote connections.

I even had an auditor point to my Plumtree database {where Plumtree's init.ora used a REMOTE_LOGIN_PASSWORDFILE=EXCLUSIVE} and ask me to disable it.

Hemant

At 10:35 PM Monday, you wrote:
>I would only add that you have to give the number of entries as well as the
>filename and password. The number of entries probably should be more than
>one if you have sys logged on anywhere.

Hemant K Chitale
Oracle 9i Database Administrator Certified Professional http://web.singnet.com.sg/~hkchital
"A man's reputation is what other people think of him; his character is what he really is."

Miner, Jack

Please see the official ORACLE-L FAQ: http://www.orafaq.com

To unsubscribe send email to: oracle-l-request_at_freelists.org put 'unsubscribe' in the subject line.

--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------

Received on Mon Jul 12 2004 - 10:18:08 CDT