Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: protocol.ora security question

Re: protocol.ora security question

From: Daniel Morgan <damorgan_at_x.washington.edu>
Date: Mon, 20 Oct 2003 10:59:58 -0700
Message-ID: <1066586409.287279@yasure>


Didier wrote:

>Hi,
>I'm running w2ksp4 & oracle Release 9.2.0.1.
>The oracle server has the following ip address: 10.0.0.10
>
>I've created: oracle\ora92\network\admin\protocol.ora.
>The file only contains the following lines:
>
>tcp.validnode_checking = YES
>tcp.invited_nodes = (10.0.0.10)
>
>I've restarted "every" oracle services (even a few times). I can still
>use "oracle sql*plus" from any workstation on our network (for example
>10.0.0.50, 10.0.0.8 etc.) to connect to our test database!
>1) Why does that still work?
>I thought putting "tcp.validnode_checking=YES" would disallow every
>host that is not exlictly listed in "tcp-invited_nodes".
>
>2) Can you put a network range in the file like:
>tcp.invited_nodes=(10.0.0.0/24)?
>
>Thanks a lot
>Didier
>
>

In addition to Sybrand's advice ... with 9i the protocol.ora entries can be placed into sqlnet.ora
so the use of Connection Manager is not required.

-- 
Daniel Morgan
http://www.outreach.washington.edu/ext/certificates/oad/oad_crs.asp
http://www.outreach.washington.edu/ext/certificates/aoa/aoa_crs.asp
damorgan_at_x.washington.edu
(replace 'x' with a 'u' to reply)
Received on Mon Oct 20 2003 - 12:59:58 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US