Block / Sysdba

DBA Geral (instalação, configuração do banco, scripts do Sql*Plus, shell scripts, batch scripts, etc...)
Post Reply
elidias7
Rank: Analista Sênior
Rank: Analista Sênior
Posts: 153
Joined: Thu, 01 Nov 2007 2:53 pm
Location: Osasco
Eli Dias
Oracle Certified Professional

Environment information:
* Oracle version:
* Operating system:

Good morning personal, Someone knows some way to block SYSDBA access Database, different from change in sqlnet = (none) ???

Hugs,
gilbertoca
Rank: DBA Sênior
Rank: DBA Sênior
Posts: 372
Joined: Tue, 24 Jan 2006 3:33 pm
Location: Palmas - TO
Contact:

As you do not in God more information on the subject, the simplest is:

Select all

 
REVOKE SYSDBA FROM <user>; 
Take a look at this view to check the users with these permissions:

Select all

V$PWFILE_USERS
Reference: http://download.oracle.com/docs/cd/B141 ... m#i1006948
Gilberto
elidias7
Rank: Analista Sênior
Rank: Analista Sênior
Posts: 153
Joined: Thu, 01 Nov 2007 2:53 pm
Location: Osasco
Eli Dias
Oracle Certified Professional

Well, let's go.

I would like to prevent anyone from entering SQLPlus and can connect with the user / SYSDBA.

But the changes to this is not only made in SQLNET

Hugs,
gilbertoca
Rank: DBA Sênior
Rank: DBA Sênior
Posts: 372
Joined: Tue, 24 Jan 2006 3:33 pm
Location: Palmas - TO
Contact:

Anyone, even the bank administrator?
Because if you except the DBAs, I already answered your question.

Remove the privilege of SysDBA from whom you have it and take a test.

Gilberto
Tupi
Rank: Programador Sênior
Rank: Programador Sênior
Posts: 57
Joined: Wed, 26 Mar 2008 12:34 pm
Location: Porto Alegre

I think that only who can enter with sysdba are the user q has the role dba is not?


Hugs
elidias7
Rank: Analista Sênior
Rank: Analista Sênior
Posts: 153
Joined: Thu, 01 Nov 2007 2:53 pm
Location: Osasco
Eli Dias
Oracle Certified Professional

I think you continue without reading the question or I'm not expressing myself well.

I wanted to know if there is any way SQLPLUS does not accept the connection when someone typed / SYSDBA only.

I know that in SQLNET you can block it, but if another person knows this can go to the file and edit it.

I do not want to know about User SYS or others who have Sysdba's Grant, only the question I posted up above.

Hugs,
gilbertoca
Rank: DBA Sênior
Rank: DBA Sênior
Posts: 372
Joined: Tue, 24 Jan 2006 3:33 pm
Location: Palmas - TO
Contact:

elidias7 wrote: I think you continue without reading the question or I'm not expressing myself well.
Maybe!
Elidias7 wrote: I wanted to know if there is any way SQLPLus does not accept the connection when someone typed / SYSDBA only.
is an administrative issue, as this happens when the user logged in the system is the owner of Oracle binaries. In this case the Czech database / checks the level authentication and not at the database user level.
See this discussion: http://forums.oracle.com/forums/thread. ... dID=375626
Elidias7 wrote: I do not want to know about the user sys or others who have the Grant de Sysdba, only the issue I posted up again.
Hugs,
need to know yes, because even if the user has the property of Binarios, but does not belong to this group he can not do silly. So keep an eye!
Post Reply
  • Information
  • Who is online

    Users browsing this forum: No registered users and 1 guest