Re: Managing Oracle with R-commands vs. SSH

Frank wrote:
> Chuck wrote:
>

>>

>>
>> Also note that once you force them to use ssh, they will soon want ssh 
>> public keys w/o passphrases so that they can operate w/o using 
>> password. Avoid this as well.
>>
>> -Chuck
>>

I personally do, it depends on your paranoi level and security concerns. If I was protecting patient health care data I would defintely do more research and security testing before implementing anything.

The main benefit of ssh is that everything is encrypted before it leaves the system. The sshd server can also be configured to make brute force attacks and other various crack attempts much harder. (but configurable timeouts, bad passwords, etc...)

In my 10 years I have only worked 2 places where R commands were allowed and that was because noone that was previoulsy there knew better so there were no policies or SOPs.

We currently use R commands only within our 500-node Linux cluster that is on a dedicated network. This is because the ssh connection overhead is much greater than rsh and when migrating millions of operations between the nodes, the difference is in order of magnitudes. (If you are familiar with Mosix beowulf clustering, it is pretty much dependent on rsh)

-Chuck

-----------== Posted via Newsfeed.Com - Uncensored Usenet News ==----------

   http://www.newsfeed.com The #1 Newsgroup Service in the World! -----= Over 100,000 Newsgroups - Unlimited Fast Downloads - 19 Servers =----- Received on Wed Mar 26 2003 - 14:45:27 CST