Re: A danger in cloning databases

Yeah, you discovered one of the gaping holes in SQL Net.

Putting a password on the listener is of little help either.

As I recall, you can prevent someone from starting the listener, but not from remotely stopping it.

Someone please correct me if I have this wrong, but we tested it a few months ago, and we came to the conclusion that using a password on the listener was futile.

Jared

On Wednesday 11 July 2001 07:56, Miller, Jay wrote:
> Many of you probably know this already, but it took me by surprise (and
> caused no end of grief) so I thought I'd warn people.
>
> I cloned our 8.0.4 production database onto another machine for some
> testing we were doing (copy of entire Oracle filesystem, copied hot backup
> over) and started it up with no problems.
>
> What I didn't realize when I ran my shutdown script (which also stops the
> listener) was that I hadn't changed the hostname in listener.ora. It
> stopped the listener on the production box!
>
> Had you asked me before this happened I wouldn't have expected it to work
> that way, but a number of irate users and managers testify to the fact that
> it does. I restarted the listener as soon as anyone thought to notify me
> of the problem (it says something about the processes here that it was 45
> minutes after I restarted the listener that that our Help Desk contacted me
> me about the problem, I first heard about it from a developer).
>
> Sigh, learn something new every day.
> Hope someone out there benefits from my mistake.
>
> Jay Miller

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Jared Still
  INET: jkstill_at_cybcon.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).