 |
|
Oracle Tips by Burleson |
Chapter 7 Oracle Network Security
some parameter files on the server with the
following lines.
tcp.validnode_checking = yes
tcp.excluded_nodes = (enrollment1, enrollment2)
tcp.invited_nodes = (claims1, claims2)
The location of these parameters varies from
version to version. In Oracle 8i, these are set in a file named
protocol.ora; in Oracle 9i, these are set in sqlnet.ora. Both of
these files are located in the directory specified by the
environmental variable tns_admin, which defaults to $ORACLE_HOME/network/admin
in UNIX or %ORACLE_HOME%\network\admin in Windows.
Important: The parameters are set in sqlnet.ora
in Oracle9i and protocol.ora in Oracle 8i.
These parameters are intuitively
self-explanatory. The first line “tcp.validnode_checking = yes”
specifies that the nodes are to be validated before accepting the
connection.
The second line specifies that the nodes
enrollment1 and enrollment2 are not allowed to connect to the
listener. The nodes are indicated either by IP Address (e.g.
192.168.1.100), or the node names as shown above. A single line that
is separated by commas specifies the list of node names. The single
line is important – you can't break the line.
The third
line states that the nodes claims1 and claims2 are allowed. This is
important if you specify some node named in the excluded list, but
then specify that node as
The above text is
an excerpt from
the bestselling book:
Oracle
Privacy Security Auditing.
It's only $39.95 and has an
download of working security scripts:
This is the only authoritative
book on Oracle Security, Oracle Privacy, and Oracle Auditing written
by two of the world’s leading Oracle Security experts.
This indispensable book is only $39.95 and has an
download of working security scripts:
http://rampant-books.com/book_2003_2_audit.htm
Download your Oracle scripts now:
www.oracle-script.com
The
definitive Oracle Script collection for every Oracle professional DBA
|
|