Re: Listener Passwords, who uses them and why?

Hi Terry,

Definitely set both. The listener passwords can be attacked, either brute force or dictionary attacks. There are no failed login attempts parameters for it either.

I would advise setting both the listener password and ADMIN_RESTRICTIONS _listenername - having the admin restrictions set means changes have to be done locally

I am always sceptical about documentation that advises you to not set security features.

cheers

Pete

-- 
Pete Finnigan (email:pete_at_petefinnigan.com)
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Oracle Security Forum: http://www.petefinnigan.com/forum/yabb/YaBB.cgi
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.