Security :: Disconnect From Oracle Database
Jul 21, 2010Is there any setting on oracle that allows to disconnect users automatically and display a message to users such: "Try a new connection to the db in 30 minutes"?
View 7 RepliesIs there any setting on oracle that allows to disconnect users automatically and display a message to users such: "Try a new connection to the db in 30 minutes"?
View 7 RepliesRecently I came across a problem that 'ORACLE Client Side Disconnect every 5mins in app server' these days.
Situation: We have 3 APP servers, which was configured the same OS and ORACLE Client version and 1 DB server. 2 app servers ORACLE Client Side Disconnect every 5mins.but it's ok in another App server.
1. both Oracle SQL PLUS and PLSQL have this problem.
2. SQLNET.EXPIRE_TIME is the same for 3 APP
3. 2 APP server are virtual machine and balance server
3. APP servers : OS: 2003 Server ORACLE 9i
DB server : ORACLE 11g
4. I don't think it's DB server problem because one App server hasn't this problem
I'm checking the possibility to use Active Directory to log on the our Oracle databases. But only for dba's and developers, not application users. We use Oracle 10.2.0.4 (and soon 11g) As OS on the databaseserver we use AIX5L 5.3
Is it possible to implement Active Directory on databases running on AIX ? If it is possible, what must be done to get it to work, software ... etc ?
Database 11.1.0.7
Applications 12.1.3
OS RHEL 5.5
how to configure log miner with oracle database 11g as we need to analyze redolog files.how to install,configure,use log miner.
Just installed the new 2.0.8 version. Its been a while I am interested on using PM for our company.The problem I have is creating an Oracle DB connection. When I create a new Oracle DB connection, and test it, Steps 3 and 4 fail.What is strange is that I followed the following procedure in PM 1.9-825 and worked fine. I am wondering if something changed in the new PM 2.0.8 version (I noticed that php_oci8.dll was commented out in php.ini).
Oracle Version is 10GR2
PM installed on clean XP sp3
1. Got a new Windows XP SP3 PC
2. Installed PM 2.0.8
3. Edited php.ini and uncommented [PHP_OCI8] and extension=php_oci8.dll
4. Installed oracle instant client “instantclient-basic-win32-10.2.0.5” in c:oracle
5. Installed oracle instant client “instantclient-sqlplus-win32-10.2.0.4” in c:oracle
6. Added c:oracle in PATH environment variable
7. Created ORACLE_HOME = c:oracle environment variable
8. Added TNS_ADMIN = c: environment variable
9. Copied working tnsnames.ora file into c:
10. Rebooted.
-------------------------------------
1. Tried sqlplus connection to my oracle db and worked.
2. Launched PM
3. Created a new process
4. Created a new DB connection as follows:
a. Engine:Oracle
b. Server:192.168.xxx.xxx
c. Database name: my_name (where my_name appears in tns_names.ora)
d. Username:my_username
e. Password:my_password
[code]....
Last week we have realized that a user who connects through SQL Developer(as nothing wrong found in application server logs) has made a serious change in the database which created a real mess. The user has done some mischief in some calculations by making some inserts and updates in some important tables in our production database.
How can I find which user or from which IP the change is made.
how to mask data in oracle 11g database release 1
my environment is
Database: 11g release 1
os: AIX 6 (64 bit)
GC:10g release 1
I have a doubt in locking user account in oracle database.I was told to drop some unusable users in database which my clients dont require them.I verified the dependent objects of those users but not sure if these users can be dropped.
Instead can i make those user accounts locked so that they cannot connect to database? Would there be any impact on database performance if i lock those user accounts?
Is locking an account and dropping users is similar in anyway?
I was wondering if the Express Edition of Oracle Database inherited the same vulnerabilities as the whole edition? Namely I have a few hosts that have Oracle Database 11g Express Edition installed and I was wondering if they would then be vulnerable to CVE-2012-3132 and specifically the easily exploitable flaw associated with it, detailed below:
Can't use links until I've posted 5 messages, ugh..link obfu with x's and [] URL....
we are planning to implement Oracle Audit Vault and Database Firewall on 2 node 11g RAC/solaris10
View 4 Replies View RelatedI have oracle 10g up and running on Solaris 10, from windows I would like to connect to sql plus through windows authentication, for that I have already made sure that remote_auth = true and have created user in oracle with OPS$. But still I cannot connect.
I have the same setup but with oracle on windows server, the os authentication from windows clients works just fine.
does oracle 10g on solaris 10 supports windows os authentication?
Any documentation supporting Oracle 11G and Advanced Security stating encryption at rest is FIPS 140-2 compliant?
View 3 Replies View RelatedI have an assignment, i am suppose to disconnect all the users that are blocking sessions for over three hours. Below is my code which is not working
Create or replace procedure b_user IS
Declare
ssid number;
serial number;
Begin
[code]......
In Sybase, my application was using system tables to perform application login security. Those tables obviously don't exist in Oracle. I am looking for ways to provide the following functionality in an Oracle world:
1. How to determine 'x' days of inactivity based on "last login date"?
2. How to determine when a new user logs in for the first time and force them to change their password?
3. If we need to reset a users password, how can we require the user to change their password?
4. Is there any other option other than storing a user-id/password in the application code for locking a user's account if their account needs to be locked due to inactivity?
5. In the USER_USERS view there is a status column. What the different status's can be?
I am running a pro*c its working fine but my connection gets disconnect to my db server so i want to continue my proc if connection between my machine & server reestablish again weather it starts from start or from where it was stooped because of connection break
View 9 Replies View RelatedI want to disconnect and connect sql prompt in loop using script file.But whenever I try to do this it is giving error,check the below code.I save below code into some file and call that file using @"filename.sql", it won't work.
Basically I want to run one procedure in loop, and in each loop counter I want to disconnect the session and connect again. Becaue CONN and DISC not working while calling through @"..."
DECLARE
BEGIN
FOR N IN 1..5 LOOP
DISC
CONN SCOTT/TIGER@TEST;
EXEC MY_PROC;
END LOOP;
END;
regarding Database Hardening, i am new to this concept
View 2 Replies View Relatedi have created a database on my pc and i have given a password at the time of installation , after the installation it is accessed successfully by the given password , but i observed that when i gave anything in password then it is also accessed by it and i don't have any other database of this same name.
And when i access it through another system then it is accessed only by its original password not by any other password.
how can i secure my database from hacking by any one of these:
1-sql injections
2- DON(Danial Of service)
3- buffer overflow
4- listner hack
We have Employee table, there is a field name Employee_no. field size is 6.can we restrict some one not to increase or decrease the field size of Employee_no. even User has admin role.
is there any way to restrict admin user that he should not allow to enter the value of field more or less than 6 characters through Toad or SQL Plus 8.0.
------------------------------------------------------
for example
field: employee_no
feild_size: 6
field_type: Varchar2
When we enter Employee no A000001(7 digit) then database not allowed to update because its field size is 6 characters we want to restrict admin user in Toad or SQL Plus 8.0 because he is Toad and SQL Plus user.
We currently hardcode the password inside our Java application to make the connection with the Database,this makes the password to be visible to all users who can read the application code. How can we encrypt the database password so we don't have to hardcode it into the application?
View 1 Replies View Relatedwhat sort of queries IT auditors run against the database? assist me wit these so that I can run them before hand in order to sort out any security vulnerabilities which we might potentially have prior to this being picked up by external auditors?
View 2 Replies View RelatedI am having one table Where,different country names are stored. while viewing data, I have to make sure that if country name having "USA" can only view its data. How can i do at DB level without passing where clause. Is Virtual Database in this case?
View 25 Replies View RelatedHow to configure Oracle EM with newly created Oracle Instance on Oracle 10g DB,which is Single Instance DB but not RAC ,when I start the Oracle EM it is starting the default DB which created during Oracle Server Installation.
View 0 Replies View Relatedhow to encrypt 9i database-link passwords? In 10g when we browse the link it show **** but in 9i it shows the actual password.
View 5 Replies View Relatedquery to find the current user accessing the database
View 5 Replies View RelatedHow can I export FGA / row level security policies from one database to another? I have created a new version of my schools ERP database, with upgraded application software, and now need to get the policies from our current production system to the new one.
View 5 Replies View RelatedWhile installing datavault on 11g database, getting error in between the process. Error is as below -
ORA-01031: insufficient privileges
ORA-06512: at "DVSYS.DBMS_MACADM" line 1740
ORA-06512: at line 1
how to rectify the problem.
I used the below link for configuring database vault on existing database.{URL]////
While conducting security audits of our databases, I noticed that the DBA role has three privileges I've never heard of, let alone used:
UNDER ANY TABLE
UNDER ANY TYPE
UNDER ANY VIEW
I can't find anything in the Oracle documentation or on Metalink about them.
I'd like to have my 11g database authenticate users against an OpenLDAP service. We'd still create accounts in the database, and do authorization within the database, but I'd just want to the user's passwords authenticated externally, against the OpenLDAP service. Is this possible? My searching through these forums and Google seems to indicate that you can do it if you run an Oracle Internet Directory (OID) service. I do not want to have to install and maintain an Oracle Internet Directory service. I'd like to do it without it.
I have a working PL/SQL function (below) that can authenticate a passed in username & password against our OpenLDAP directory. Is there any way for me to have Oracle call this function for the database user authentication? Or is there any other way for me to get the Oracle database to directly authenticate against OpenLDAP without having to run OID?
create or replace function ldap_authenticate(username varchar2, password varchar2)
return boolean is
begin
begin
if dbms_ldap.success = dbms_ldap.simple_bind_s(
[code]........