RE: non-oracle user sourcing oracle environment

From: SHEEHAN, JEREMY <JEREMY.SHEEHAN_at_nexteraenergy.com>
Date: Thu, 4 Mar 2010 10:15:44 -0500
Message-ID: <C3F905167E081B418BFC63B8668D52FF14F724089A_at_GOXEXVS03.fplu.fpl.com>

I convinced the server admins to install an oracle client. I did find this after some searching, though.

$ORACLE_HOME/install/changePerm.sh

It does have a disclaimer in the script.

$ECHO "-------------------------------------------------------------------------------"
$ECHO "Disclaimer: The purpose of this script is to relax permissions on some of the"
$ECHO "files in the database Oracle Home so that all clients can access them."
$ECHO "Please note that Oracle Corporation recommends using the most restrictive file"
$ECHO "permissions as possible for your given implementation. Running this script"
$ECHO "should be done only after considering all security ramifications."
$ECHO "-------------------------------------------------------------------------------"
Thanks to all for reminding me of the client.

Jeremy

From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org] On Behalf Of SHEEHAN, JEREMY Sent: Wednesday, March 03, 2010 2:00 PM
To: Andrew Kerber
Cc: ORACLE-L
Subject: RE: non-oracle user sourcing oracle environment

At this point, the server admins don't want us to install any additional software on the server. They didn't give a reason why. Perhaps just laziness? I do like the idea of using the client, tho. It keeps people out of the oracle db home. I'll see if I can lean on that idea more with the server admins.

Jeremy

From: Andrew Kerber [mailto:andrew.kerber_at_gmail.com] Sent: Wednesday, March 03, 2010 1:54 PM
To: SHEEHAN, JEREMY
Cc: ORACLE-L
Subject: Re: non-oracle user sourcing oracle environment

Some reason why you cant just install the oracle client and let the user use the sqlplus there? On Wed, Mar 3, 2010 at 12:50 PM, SHEEHAN, JEREMY <JEREMY.SHEEHAN_at_nexteraenergy.com<mailto:JEREMY.SHEEHAN_at_nexteraenergy.com>> wrote: Hey all,

I've got an issue trying to get a user to source (and use) sqlplus from an oracle database environment. We're not allowed to use sticky bits. We're not allowed to add the user to the dba group. We're not allowed to use any sudo commands.

I'm running 10.2.0.4 in AIX 5.3.7. Any suggestions?

Thanks in advance!

Jeremy

--
Andrew W. Kerber

'If at first you dont succeed, dont take up skydiving.'

--
http://www.freelists.org/webpage/oracle-l

Received on Thu Mar 04 2010 - 09:15:44 CST