Re: How to logon via SQL*NET as OPS$USERS

From: Ed Kulis <ekulis_at_apple.com>
Date: 2000/06/06
Message-ID: <393D8EB4.1C23C02E_at_apple.com>#1/1


Hi there,

There's another way to get the OPS$ effect that will work remotely as well as locally.
I've had the same problem with remote auth and I never looked into it to fix it.

In the DB create a schema/user name of "login" and give it a passwd of "login".
grant connect and create session to "login" and don't grant anything else.

Now you can sign in as say

    sqlplus login/login_at_remoteserver
or just

     sqlplus login/login
locally.

There's no real danger because the login name can't access or run anything with out any grants. Make the username and passwd bizarre if you don't want any outsiders who read this news group guessing at it.

Once at the SQL> prompt you can

        connect realschema/realpasswd

This prevents the name/passwd from appearing in the Unix ps list as well.

Even better is to create some script that echos the name and passwd string and access it from the SQL prompt with the backtick method

    connect `namepasswd.acn` ;

The script echos 'realschema/realpasswd` to stdout and thus sqlplus sees

    connect realschema/realpasswd ;
and your in.

    chmod 500 namepasswd.acn
will make it so that only the unix user can actually run the script.

If you organize your Unix groups and put the script in a standard path directory then

    chmod 550 namepasswd.acn
will allow the trusted group members to use the script and no one will need to hard code the name and passwd into the sqlplus script.

-ed

Michael wrote:

> Dear all,
>
> I am newbie of ORACLE. Thanks a lot if someone can help me.
>
> I create a operating system user USERS and create a oracle user OPS$USERS.
> Now I can access it on the local SCO Unix, but I can't access it through
> SQL*NET on another PC.
> I have set remote_os_authent in init.ora to TRUE.
> Is there anything I miss?
>
> Thanks a lot!
>
> Michael
> gzwjt_at_21cn.com

--
- Ed Kulis    --CRM Data Lead(IS&T)-- email: ekulis_at_apple.com
- Apple       --Building: VG 6 West-- voice: 408-974-3998
- 1 Infinite Loop, MS: 60-CAR         fax  : 408-974-6528
- Cupertino, CA 95014                 cell : 408-406-5190
Received on Tue Jun 06 2000 - 00:00:00 CEST

Original text of this message