Security Question
DBAsupport.com Forums - Powered by vBulletin
Results 1 to 8 of 8

Thread: Security Question

  1. #1
    Join Date
    May 2002
    Posts
    163

    Angry Security Question

    Hi All,

    Once the database has been created I changed the default password for System and Sys. But later, just to make sure, when I tried

    $ Sqlplus /nolog
    $ conn sys/< old password or any other word as password> as sysdba

    It is connecting to the database and allowing me to query the dictionary tables. It is really strange to me.

    Did I make any mistake? Or I have to do something else to restrict that?

    Please give me the solution.
    Nwcomer
    Student

  2. #2
    Join Date
    Jan 2003
    Location
    Delhi
    Posts
    63
    That means u are connecting to database using Operating system authentication .

  3. #3
    Join Date
    May 2002
    Posts
    163
    How can I?

    1. I donot have any O/S user as SYS
    2. I did not create any O/S authentication user as externally.

    Friends, can you please put some of ur valuable inputs.

    Thanks
    Nwcomer
    Student

  4. #4
    Join Date
    Jan 2003
    Location
    Delhi
    Posts
    63
    What is the operating system u are using .

  5. #5
    Join Date
    Jan 2003
    Location
    Delhi
    Posts
    63
    Check the Os login id may be part of ora_dba group (if nt)
    or dba group (if unix)

  6. #6
    Join Date
    Apr 2002
    Location
    France
    Posts
    118
    In your sqlnet.ora if you have SQLNET.AUTHENTICATION_SERVICES = (NTS), Oracle will rely on the OS.

    Delete/comment that line to "avoid" this.
    If there is no solution, it is because there is no problem - Shadok -

  7. #7
    Join Date
    Aug 2002
    Posts
    10
    ORACLE Authentication
    Attached Images Attached Images
    • File Type: jpg 1.jpg (18.4 KB, 82 views)

  8. #8
    Join Date
    Aug 2002
    Posts
    10
    On Unix,u can set REMOTE_LOGIN_PASSWORDFILE=EXCLUSIVE in init.ora.
    On WinNT,set SQLNET.AUTHENTICATION_SERVICES = (NONE) on sqlnet.ora
    and set REMOTE_LOGIN_PASSWORDFILE=EXCLUSIVE in init.ora.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  



Click Here to Expand Forum to Full Width