RE: Account administration guidelines

From: Jeffery Stevenson <jeff_at_mpv.com>
Date: Mon, 10 Jul 2000 09:24:56 -0500
Message-Id: <10554.111539@fatcity.com>

This is a multi-part message in MIME format.

------=_NextPart_000_0006_01BFEA50.B6467FA0 Content-Type: text/plain;

charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

Account administration guidelinesYou could take a look at the O'Reilly Oracle Security book and see if that has the information you need. Here is the table of contents:

http://www.oreilly.com/catalog/orasec/toc.html

and here is a sample chapter, "Developing a Database Security Plan":

http://www.oreilly.com/catalog/orasec/chapter/ch07.html

HTH
Jeffery Stevenson
Chief Database Geek
Medical Present Value, Inc.
Austin, TX

  -----Original Message-----
  From: root_at_fatcity.com [mailto:root_at_fatcity.com]On Behalf Of Turnbull, Karen (BSA)
  Sent: Monday, July 10, 2000 7:55 AM
  To: Multiple recipients of list ORACLE-L   Subject: Account administration guidelines

Does any have (or can you refer me to) documentation re account admin guidelines for an Oracle environment?
I am having no luck with Oracle support or Metalink. We have a fairly extended environment - 2 Financials databases and a datawarehouse (in development). I need some idea of "best of breed" - for example what format the username should be, must the password be set to expire after a certain time, do I use roles or not etc.

Any help would be much appreciated

  Karen Turnbull
  Billiton SA
  This message and any attachments may be confidential and may also be privileged or otherwise protected from disclosure. They are sent for the attention of the named addressee(s) only. If you are not the named addressee(s) please notify the sender immediately and destroy this message. In this case, you should not copy or distribute this message or attachments, use it for any purpose or disclose its contents to any other person. Opinions, conclusions and other information in this message that do not relate to the official business of my firm/company shall be understood as neither given nor endorsed by it.

------=_NextPart_000_0006_01BFEA50.B6467FA0 Content-Type: text/html;

charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Account administration guidelines</TITLE>
<META content=3D"text/html; charset=3Diso-8859-1" =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.2920.0" name=3DGENERATOR></HEAD>
<BODY>
<DIV><FONT face=3DArial size=3D2><SPAN class=3D327062214-10072000>You =
could take a=20
look at the O'Reilly Oracle Security book and see if that has the = information=20
you need.  Here is the table of contents:</SPAN></FONT></DIV>
<DIV><FONT face=3DArial size=3D2><SPAN=20
class=3D327062214-10072000></SPAN></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2><SPAN class=3D327062214-10072000><A=20
href=3D"http://www.oreilly.com/catalog/orasec/toc.html">http://www.oreill= y.com/catalog/orasec/toc.html</A></SPAN></FONT></DIV>
<DIV><FONT face=3DArial size=3D2><SPAN=20
class=3D327062214-10072000></SPAN></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2><SPAN class=3D327062214-10072000>and =
here is a sample=20
chapter, "Developing a Database Security Plan":</SPAN></FONT></DIV>
<DIV><FONT face=3DArial size=3D2><SPAN=20
class=3D327062214-10072000></SPAN></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2><SPAN class=3D327062214-10072000><A=20
href=3D"http://www.oreilly.com/catalog/orasec/chapter/ch07.html">http://w= ww.oreilly.com/catalog/orasec/chapter/ch07.html</A></SPAN></FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3DArial size=3D2><SPAN=20
class=3D327062214-10072000>HTH</SPAN></FONT></DIV>
<DIV><SPAN class=3D327062214-10072000>
<P><FONT face=3DArial size=3D2>Jeffery Stevenson<BR>Chief Database =
Geek<BR>Medical=20
Present Value, Inc.<BR><SPAN class=3D327062214-10072000>Austin, = TX</SPAN> =20
</FONT></P></SPAN></DIV>
<BLOCKQUOTE style=3D"MARGIN-RIGHT: 0px">
<DIV align=3Dleft class=3DOutlookMessageHeader dir=3Dltr><FONT = face=3DTahoma=20
size=3D2>-----Original Message-----<BR><B>From:</B> root_at_fatcity.com=20 [mailto:root_at_fatcity.com]<B>On Behalf Of </B>Turnbull, Karen=20 (BSA)<BR><B>Sent:</B> Monday, July 10, 2000 7:55 AM<BR><B>To:</B> = Multiple=20

  recipients of list ORACLE-L<BR><B>Subject:</B> Account administration=20
  guidelines<BR><BR></DIV></FONT>
  <P><FONT face=3DArial size=3D2>Hi</FONT> </P>
  <P><FONT face=3DArial size=3D2>Does any have (or can you refer me to)=20

  documentation re account admin guidelines for an Oracle = environment?</FONT>=20
  <BR><FONT face=3DArial size=3D2>I am having no luck with Oracle = support or=20
  Metalink.</FONT> <BR><FONT face=3DArial size=3D2>We have a fairly = extended=20
  environment - 2 Financials databases and a datawarehouse (in=20   development).  I need some idea of "best of breed" - for example = what=20
  format the username should be, must the password be set to expire = after a=20
  certain time, do I use roles or not etc.</FONT></P>   <P><FONT face=3DArial size=3D2>Any help would be much = appreciated</FONT> </P>
  <P><FONT face=3DArial size=3D2>Karen Turnbull</FONT> <BR><FONT = face=3DArial=20
  size=3D2>Billiton SA </FONT><BR><FONT face=3DArial size=3D2>This = message and any=20
  attachments may be confidential and may also be privileged or = otherwise=20
  protected from disclosure. They are sent for the attention of the = named=20
  addressee(s) only. If you are not the named addressee(s) please notify = the=20
  sender immediately and destroy this message. In this case, you should = not copy=20
  or distribute this message or attachments, use it for any purpose or = disclose=20
  its contents to any other person. Opinions, conclusions and other = information=20
  in this message that do not relate to the official business of my = firm/company=20
  shall be understood as neither given nor endorsed by=20 Received on Mon Jul 10 2000 - 09:24:56 CDT