hm, interesting, veddy interesting.. thanks!

--- Gene Sais <[EMAIL PROTECTED]> wrote:
> A user can be both, requiring a passwd and os authenticated.  You can
> create a user identified externally then change its passwd.  With
> this method, you have sqlplus client access requiring username/passwd
> and server access with no passwd required for cron jobs, etc.
> 
> timp>create user ops$junk identified externally;
> User created.
> timp>alter user ops$junk identified by junk;
> User altered.
> timp>grant create session to ops$junk;
> Grant succeeded.
> timp>connect ops$junk/junk
> Connected.
> 
> From the server, log into user junk, set db environment, sqlplus /
> and you are in :)  Not sure if Oracle intended for externally to work
> in both cases.
> 
> Gene
> 
> >>> [EMAIL PROTECTED] 01/30/02 09:05PM >>>
> okay if the prefix string is set to an empty string, then the "OS
> username" is the same name as that used to sign in to the client.  So
> if you have an empty prefix, and someone logs onto their PC as
> "SYSTEM"
> then if they do sqlplus, they should be able to get into the system
> account.
> 
> Except... system isn't set as "identified externally" they'd have to
> enter the password right? Jared??????
> 
> but any Oracle account you create as "identified externally" (meaning
> the OS does the password validation, Oracle presumes the security is
> there) can log onto the database by setting the client login to that
> name
> 
> 
> --- "Smith, Ron L." <[EMAIL PROTECTED]> wrote:
> > Can you explain that?  You have me scared now.
> > 
> > -----Original Message-----
> > Sent: Wednesday, January 30, 2002 4:00 PM
> > To: Multiple recipients of list ORACLE-L
> > 
> > 
> > They can also set their username to 'SYSTEM'.
> > 
> > Jared
> > 
> > 
> > 
> > 
> > 
> > Rachel Carmichael <[EMAIL PROTECTED]>
> > Sent by: [EMAIL PROTECTED] 
> > 01/30/02 11:25 AM
> > Please respond to ORACLE-L
> > 
> >  
> >         To:     Multiple recipients of list ORACLE-L
> > <[EMAIL PROTECTED]>
> >         cc: 
> >         Subject:        Re: OPS$
> > 
> > 
> > anyone can name their pc "oracle" and then connect in if you set
> > "remote_os_authent"
> > 
> > 
> > --- "Smith, Ron L." <[EMAIL PROTECTED]> wrote:
> > > Does anyone have any information on security problems using the
> > OPS$
> > > account? 
> > > 
> > > Ron
> > > -- 
> > > Please see the official ORACLE-L FAQ: http://www.orafaq.com 
> > > -- 
> > > Author: Smith, Ron L.
> > >   INET: [EMAIL PROTECTED] 
> > > 
> > > Fat City Network Services    -- (858) 538-5051  FAX: (858)
> 538-5051
> > > San Diego, California        -- Public Internet access / Mailing
> > > Lists
> > >
> >
> --------------------------------------------------------------------
> > > To REMOVE yourself from this mailing list, send an E-Mail message
> > > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and
> in
> > > the message BODY, include a line containing: UNSUB ORACLE-L
> > > (or the name of mailing list you want to be removed from).  You
> may
> > > also send the HELP command for other information (like
> > subscribing).
> > 
> > 
> > __________________________________________________
> > Do You Yahoo!?
> > Great stuff seeking new owners in Yahoo! Auctions! 
> > http://auctions.yahoo.com 
> > -- 
> > Please see the official ORACLE-L FAQ: http://www.orafaq.com 
> > -- 
> > Author: Rachel Carmichael
> >   INET: [EMAIL PROTECTED] 
> > 
> > Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
> > San Diego, California        -- Public Internet access / Mailing
> > Lists
> >
> --------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an E-Mail message
> > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB ORACLE-L
> > (or the name of mailing list you want to be removed from).  You may
> > also send the HELP command for other information (like
> subscribing).
> > 
> > 
> > 
> > -- 
> > Please see the official ORACLE-L FAQ: http://www.orafaq.com 
> > -- 
> > Author: 
> >   INET: [EMAIL PROTECTED] 
> > 
> > Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
> > San Diego, California        -- Public Internet access / Mailing
> > Lists
> >
> --------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an E-Mail message
> > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB ORACLE-L
> > (or the name of mailing list you want to be removed from).  You may
> > also send the HELP command for other information (like
> subscribing).
> > -- 
> > Please see the official ORACLE-L FAQ: http://www.orafaq.com 
> > -- 
> > Author: Smith, Ron L.
> >   INET: [EMAIL PROTECTED] 
> > 
> > Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
> > San Diego, California        -- Public Internet access / Mailing
> > Lists
> >
> --------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an E-Mail message
> > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB ORACLE-L
> > (or the name of mailing list you want to be removed from).  You may
> > also send the HELP command for other information (like
> subscribing).
> 
> 
> __________________________________________________
> Do You Yahoo!?
> Great stuff seeking new owners in Yahoo! Auctions! 
> http://auctions.yahoo.com 
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.com 
> -- 
> Author: Rachel Carmichael
>   INET: [EMAIL PROTECTED] 
> 
> Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
> San Diego, California        -- Public Internet access / Mailing
> Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Gene Sais
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
> San Diego, California        -- Public Internet access / Mailing
> Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).


__________________________________________________
Do You Yahoo!?
Great stuff seeking new owners in Yahoo! Auctions! 
http://auctions.yahoo.com
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Rachel Carmichael
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to