RE: Restrict login for a particular user to be only from particul ar m achines

From: Baumgartel, Paul <paul.baumgartel_at_credit-suisse.com>
Date: Wed, 13 Sep 2006 21:18:52 +0100
Message-ID: <D97D1FAE0521BD44820B920EDAB3BBAC0F40E868@ENYC11P32005.corpny.csfb.com>

There isn't...Jack was joking and I was playing along.

Paul Baumgartel
CREDIT SUISSE
Information Technology
DBA & Admin - NY, KIGA 1
11 Madison Avenue
New York, NY 10010
USA
Phone 212.538.1143
paul.baumgartel_at_credit-suisse.com
www.credit-suisse.com

-----Original Message-----
From: rjamya [mailto:rjamya_at_gmail.com]
Sent: Wednesday, September 13, 2006 4:01 PM To: paul.baumgartel_at_credit-suisse.com
Cc: JApplewhite_at_austinisd.org; oracle-l_at_freelists.org Subject: Re: Restrict login for a particular user to be only from particul ar m achines

I don't think there is a before logon trigger ...

Raj

On 9/13/06, Baumgartel, Paul < paul.baumgartel_at_credit-suisse.com <mailto:paul.baumgartel_at_credit-suisse.com> > wrote:

Jack,

Yes, that would do the trick nicely, wouldn't it?

-----Original Message-----
From: oracle-l-bounce_at_freelists.org <mailto:oracle-l-bounce_at_freelists.org> [mailto: <mailto:oracle-l-bounce_at_freelists.org> oracle-l-bounce_at_freelists.org]On Behalf Of JApplewhite_at_austinisd.org <mailto:JApplewhite_at_austinisd.org> Sent: Wednesday, September 13, 2006 2:39 PM To: oracle-l_at_freelists.org <mailto:oracle-l_at_freelists.org> Subject: RE: Restrict login for a particular user to be only from particul ar m achines

Paul,

To prevent logon, shouldn't this be a Before Logon trigger?

Jack C. Applewhite - Database Administrator Austin (Texas) Independent School District 512.414.9715 (wk) / 512.935.5929 (pager)

I feel so unnecessary. -- Rufus Thomas

( "Do the Funky Chicken")

"Baumgartel, Paul" < paul.baumgartel_at_credit-suisse.com <mailto:paul.baumgartel_at_credit-suisse.com> > Sent by: oracle-l-bounce_at_freelists.org <mailto:oracle-l-bounce_at_freelists.org>

09/13/2006 01:24 PM

Please respond to
paul.baumgartel_at_credit-suisse.com <mailto:paul.baumgartel_at_credit-suisse.com>

To
"'Bobak, Mark'" < Mark.Bobak_at_il.proquest.com <mailto:Mark.Bobak_at_il.proquest.com> >, salem.ghassan_at_gmail.com <mailto:salem.ghassan_at_gmail.com>

cc
oracle-l_at_freelists.org <mailto:oracle-l_at_freelists.org>

Subject
RE: Restrict login for a particular user to be only from particul ar m achines

Thanks for all the replies. My initial attempts used an AFTER LOGON ON SCHEMA, not DATABASE, trigger.

However, I'm now stymied in a simple test case: the following SYS trigger is firing, but no error appears on login.

create or replace trigger verify_client
after logon on database when (user='PB') begin

   insert into pb.foo values('Test');
   commit;
   raise_application_error(-20999,'Not authorized'); end;
/
Here's what happens:

SQL> @conn pb/pb
Connected.
PB_at_CSAR.REGRESS.COM <mailto:PB_at_CSAR.REGRESS.COM> > select * from foo;

BAR

Test

PB_at_CSAR.REGRESS.COM <mailto:PB_at_CSAR.REGRESS.COM> > @conn pb/pb Connected.
PB_at_CSAR.REGRESS.COM <mailto:PB_at_CSAR.REGRESS.COM> > select * from foo;

BAR

Test
Test

As you can probably guess, I added the "insert into pb.foo" to the trigger to verify that it is firing. What's wrong here?

Thanks

Please access the attached hyperlink for an important electronic communications disclaimer:

<http://www.credit-suisse.com/legal/en/disclaimer_email_ib.html>

http://www.credit-suisse.com/legal/en/disclaimer_email_ib.html

-- 
----------------------------------------------
Got RAC?





==============================================================================

Please access the attached hyperlink for an important electronic communications disclaimer: 

http://www.credit-suisse.com/legal/en/disclaimer_email_ib.html


==============================================================================



--
http://www.freelists.org/webpage/oracle-l

Received on Wed Sep 13 2006 - 15:18:52 CDT