Re: Accounts for dbsnmp and tracesvr

  • From: Pete Finnigan <oracle_list@xxxxxxxxxxxxxxxxxxxxxxxxx>
  • To: oracle-l@xxxxxxxxxxxxx
  • Date: Wed, 7 Apr 2004 21:06:44 +0100

Hi,

you can also change the name of DBSNMP i.e. it doesn't need to be called
DBSNMP, well you can create a new user and drop DBSNMP. If you do you
need to add a new line to the $ORACLE_HOME/network/admin/snmp_rw.ora
file - you should also set a password in the same file. So adding two
lines as follows:

snmp_connect.{service name}.name={new name}
snmp_connect.{service name}.password={password}

The first time the inteligent agent runs it encrypts the password - this
is 9i and above, in 8i you need to secure the file as the password
remains in clear text. You should secure the file anyway in 9i so that
only the owner of the oracle software can access it.

TRACESVR is the user needed for oracle trace. You can remove oracle
trace (otrace) if you are not using it by deleting the
$ORACLE_HOME/otrace/admin files process.dat, collect.dat and regid.dat.
Metalink note 1020763.6 describes removing otrace.

hth

kind regards

Pete
-- 
Pete Finnigan
email:pete@xxxxxxxxxxxxxxxx
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.

----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to:  oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------

Other related posts: