re SYSDBA

  • From: Hemant K Chitale <hkchital@xxxxxxxxxxxxxx>
  • To: oracle-l@xxxxxxxxxxxxx
  • Date: Mon, 12 Jul 2004 23:10:16 +0800


As a rule, I prefer "REMOTE_LOGIN_PASSWORDFILE=NONE "


Thus, only a local account in the "dba" group can login
as SYSDBA, preventing logins over remote connections.

I even had an auditor point to my Plumtree database
{where Plumtree's init.ora used a REMOTE_LOGIN_PASSWORDFILE=EXCLUSIVE}
and ask me to disable it.

Hemant



At 10:35 PM Monday, you wrote:
>I would only add that you have to give the number of entries as well as the
>filename and password.   The number of entries probably should be more than
>one if you have sys logged on anywhere.



Hemant K Chitale
Oracle 9i Database Administrator Certified Professional
http://web.singnet.com.sg/~hkchital
"A man's reputation is what other people think of him; his character is 
what he really is."
                                         -- Miner, Jack

----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to:  oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------

Other related posts: