RE: 65 Oracle security papers, articles and presentations

From: Pete Sharman <peter.sharman_at_oracle.com>
Date: Tue, 08 Apr 2003 12:48:51 -0800
Message-ID: <F001.0057D503.20030408124851@fatcity.com>

Won't help:  

SQL> create user test identified by test;  

User created.  

SQL> grant create session to test;  

Grant succeeded.  

SQL> connect test/test
Connected.
SQL> alter user test identified by fred;  

User altered.  

SQL> connect / as sysdba
Connected.
SQL> revoke alter session from test;
revoke alter session from test
*
ERROR at line 1:
ORA-01952: system privileges not granted to 'TEST'    

Pete

"Controlling developers is like herding cats."

Kevin Loney, Oracle DBA Handbook

"Oh no, it's not. It's much harder than that!"

Bruce Pihlamae, long-term Oracle DBA  

-----Original Message-----
Rajendra
Sent: Tuesday, April 08, 2003 12:44 PM
To: Multiple recipients of list ORACLE-L

revoke alter session from users ...

Raj

---

---

Rajendra dot Jamadagni at nospamespn dot com All Views expressed in this email are strictly personal. QOTD: Any clod can have facts, having an opinion is an art !

-----Original Message-----
Sent: Tuesday, April 08, 2003 3:09 PM
To: Multiple recipients of list ORACLE-L

Pete,

Thanks, the collection is very useful.

Does the trick of dumping the library cache, level 10 and hunting for open text passwords still work in 9i? I thought they fixed it, so it would look like the following:

..
BUCKET 114176:
  LIBRARY OBJECT HANDLE: handle=6f4bcf88   name=alter user dummy identified by ***********   hash=e7b3be00 timestamp=04-08-2003 13:48:11 ..

Any "cure" for this?

Thanks,
Boris Dali

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Pete Sharman
  INET: peter.sharman_at_oracle.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Received on Tue Apr 08 2003 - 15:48:51 CDT