IP auditing for unsuccessful connections
- From: Dianna Gibbs <DIANNA.GIBBS@xxxxxxxxxxxxx>
- To: "'Oracle-L@xxxxxxxxxxxxx'" <Oracle-L@xxxxxxxxxxxxx>, Dianna Gibbs <DIANNA.GIBBS@xxxxxxxxxxxxx>
- Date: Thu, 28 Apr 2011 16:27:18 +0000
We have a new application that is multi-tiered with connections coming from
many different windows and websphere servers.
We've recently completed a new upgrade/install with several changes in servers.
Each environment has four databases,
so we have a total of 16 databases for this application (TST, DEV,STG,PRD).
Oracle 11.1.0.7 on AIX.
Something is constantly locking an oracle user account in two different
databases (one prd, one tst).
I'm trying to troubleshoot which servers have the incorrect passwords. We've
looked at log files, etc. and vendor cannot determine.
I'm looking at AUDIT SESSION and understand it will show both successful and
unsuccessful login attempts.
I also saw the Login Trigger SYS_CONTEXT.
I was wondering if someone had used either successful to catch unsuccessful
logins or had another suggestion on best way to monitor and
troubleshoot this issue? We don't need this turned on long-term, just until we
can catch which server has incorrect password.
Thanks in advance for any time and suggestions.
Dianna G.
</pre> <span style="color: rgb(0, 160, 0); font-weight: bold;">Please consider
the environment before printing this e-mail</span><br />
<br />
<span style="font-size: 8pt;">This e-mail, facsimile, or letter and any
files or attachments transmitted with it contains<br />
information that is confidential and privileged. This
information is intended only for the use of the <br />
individual(s) and entity(ies) to whom it is addressed. If you
are the intended recipient, further <br />
disclosures are prohibited without proper authorization. If you
are not the intended recipient, any <br />
disclosure, copying, printing, or use of this information is
strictly prohibited and possibly a <br />
violation of federal or state law and regulations. If you have
received this information in error, <br />
please notify Children's Medical Center Dallas immediately at
214-456-4444 or via e-mail at <br />
privacy@xxxxxxxxxxxxxx Children's Medical Center Dallas and its
affiliates hereby claim all <br />
applicable privileges related to this information.</span><br />
<br />
</html>
Other related posts:
