I wouldn't even bother using an encrypted password, unless of course
this is being done to satisfy some (clueless) auditor's checklist.
The way Oracle handles encrypted listener passwords, they're
absolutely no more secure than the cleartext counterpart... in fact,
one could easily argue that they're slightly *less* secure.
On 2/16/06, J. Dex <cemail_219_at_hotmail.com> wrote:
> I am trying to save an encrypted password for the listener and although it
> responds that the command was completed successsfully, it isn't turning on
> security and doesn't seem to be working. Any ideas?
> This is Oracle 9207 on a Windows 2003 server. This is what I am doing:
>
> LSNRCTL>set save_config_on_stop on
> LSNRCTL>set password password_name
>
> My understanding is that security in "status" should be set to on and I
> should see some comments at the bottom of the listener file, but I am not
> seeing those.
--
"I'm too sexy for my code." - Awk Sed Fred.
--
http://www.freelists.org/webpage/oracle-l
Received on Thu Feb 16 2006 - 13:03:27 CST
