As a rule, I prefer "REMOTE_LOGIN_PASSWORDFILE=NONE " Thus, only a local account in the "dba" group can login as SYSDBA, preventing logins over remote connections. I even had an auditor point to my Plumtree database {where Plumtree's init.ora used a REMOTE_LOGIN_PASSWORDFILE=EXCLUSIVE} and ask me to disable it. Hemant At 10:35 PM Monday, you wrote: >I would only add that you have to give the number of entries as well as the >filename and password. The number of entries probably should be more than >one if you have sys logged on anywhere. Hemant K Chitale Oracle 9i Database Administrator Certified Professional http://web.singnet.com.sg/~hkchital "A man's reputation is what other people think of him; his character is what he really is." -- Miner, Jack ---------------------------------------------------------------- Please see the official ORACLE-L FAQ: http://www.orafaq.com ---------------------------------------------------------------- To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx put 'unsubscribe' in the subject line. -- Archives are at //www.freelists.org/archives/oracle-l/ FAQ is at //www.freelists.org/help/fom-serve/cache/1.html -----------------------------------------------------------------