Disable oracle direct login

Hi ,
I know how to disable direct root login. but i have to disable direct root login for oracle.i am using Red Hat Enterprise Linux Server release 5.5 (Tikanga).
Can some one help me ...
Regards,
Ani

You might want to keep in mind though that "su" will break X11 xauth authentication (ssh -X). Having to login as another user is another password layer, but does not necessarily give you more control who gets access. It depends on your password policies and the users maintaining them. It might be a good idea to be careful who receives the Oracle password. Not every access to Oracle requires the Oracle account password or SYSDBA access.

Similar Messages

Disable SSH root login in RAC system

Hi Alll,
We have a oracle 11.2.7 RAC in Linux. As statement, SA will disable ssh root log and Nagios will monitor each nodes in RAC system.
As I know, Nagios only apply DH key for SSH. But Oracle RAC apply two type of SSH key for ssh_equivelancy in Oracle CRS.
Dees any experts have experience for oracle RAC and database when disable root SSH log in Linux system?
Thanks very much!
JIn

Security is not based on the number of keys one needs - but on the quality of the locks.Partially agree. But just like in real world one lock is not enough even superb. Why cars have imobilisers, defendlocks etc.? Why there is fence in front of some shop's door? It's very common to have two locks on front door. It's much harder (at least it takes much time) to break two locks than break just one. And the time matters. Back to IT security. Disabled root account is one of best practices and is reasonable because you can't 100% assure that your administrator is using strong password everytime. He might just forgot to change password after installation. He might set weak password just for "temporary" reason. You can of course force the password complexity but of course one you have the system installed.
So can passwords. Deep packet inspection can occur unknowingly. Perhaps we still talking about SSH, don't we?
The user may be targeted using social engineering, instead of targeting the actual computer system.It's much harder to get two passwords than just one even by using social engineering.
The question is whether such a server is exposed to an unsecured or public network. And one would manage the risks differently on such a server than one for example in a private network, protected by a reverse proxy in the DMZ, that in turn provides access from a public network.OK, so we've got another locks here ;-)
So if that user is compromised, so can root as that user can gain root access. I do not see this as better security. It is merely obfuscating security.Which user acccount? Do you know name of that account? Because I know the name of your's. ;-) So you need to find correct account name, get password for that account and also get the password for root account whilst I need to get password for root account only.
Yes, partially agree with "obfuscation security" term. But in fact this is not for first time when obfuscation is used in security and neither for last time.
But you can't consider "PermitRootLogin no" and "wheel" group as an obfuscation.
Using encryption keys (public & private) is one answer to having to share and keep secrets. No, this is also not 100% safe, but I prefer it over having to know, remember and on occasion, share secrets (passwords).How well is your local machine secured? Are you using strong password? Do have all accounts strong password on your local machine? Is your local machine up to date for known sec. bugs (I don't mean zero days)? Is your local machine in separated VLAN or anybody from LAN can access your machine? Because if there are at least two "No" answers then how much time it will take for some skilled part-time worker (in your company) to break into your computer, steal the keys or even worse use your local machine to access the server?
Don't get me wrong. I am not against encryption keys. Of course I am using it but in combination with other security restrictions which come from "best practices". And to disable direct root access is one of those practices. Even NSA (and other security institutions) suggest to do that (see page #37): www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf Also security auditors check for disabled direct access to privileged accounts.
I understand this as good enough proof that disabling of direct access to privileged accounts rises security.
Another good reason is right here:
Install
In other words, if any user has possibility to login as root, he uses "root" as default account which is another well known bad practice.

ADF Application and Oracle Portal Login Page

We have developed ADF application and deployed it in Oracle AS 10.1.2 along with the custom JAAS module, which is working fine with the application custom login page. As a next page, I want to use Oracle Portal login page for the authentication and authorization.
How can I accomplished it? Any idea?
Thanks,
AP

Shay,
1. I created blank ADF project
2. I copied myreport.jsp file (this one was generated by Oracle Report Builder) under ..ViewController/public_html directory
3. Created directory 'lib' under ViewController/public_html/WEB-INF/lib
4. Copied reports_tld.jar file under the directory created in 3.
5. Created simple jspx page with the af:link (btw af:goLink does not exists in JDev 12c), set 'destination' to myreport.jsp
After the steps above I could not even compile the application, many problems too many to list here, Basically JDev is trying to build the project with .jsp file generated in Report Builder and is unable to.
So to be sure we are on the same page: I am trying to embed JSP report files generated by Report Builder into ADF project, then create EAR file and deploy on standalone WLS. Finally execute JSP web only report.

How to disable the guest login in OBIEE 11g?

Hi,
Whenever i click on analytics link, Guest automatically logs in , then i have to logout in order for the user to log in.
How do we disable this Guest login?
Thanks
Ashish

Hi,
Whenever i click on analytics link, Guest automatically logs in , then i have to logout in order for the user to log in.
How do we disable this Guest login?
Thanks
Ashish

SP Online Auth Error: Direct login to WLID is not allowed for this federated namespace

I receive the error "Direct login to WLID is not allowed for this federated namespace" when authenticating for Sharepoint online over https using code from: code.msdn.microsoft.com/windowsapps/Office-365-Create-Windows-5a88ccfc/view/SourceCode#content
Is there any setting on Sharepoint Online that is preventing successful authentication. The credentials passed are valid.
Thanks.

No. SharePoint uses claims authentication for login by default. Since SharePoint doesn't recognize the source of connection you are trying to connect. Try using secure store from SharePoint online to add credentials of your windows app and then try
working it. Even if that doesn't work then try modifying the C sharp connection to SharePoint code.
If you find this information useful then please propose this as answer and vote.
Thanks.
Ujjwal Patel
|
SharePoint Online Support Engineer, MCPD, MCTS, MCAD.

How do I disable the GUEST login option at start up screen

how do I disable the GUEST login option at start up screen.
I have already gone to
System Pref'>Users and Groups>Unlocked it with password>Guest User is OFF>Allow guests to log into this computer is NOT CHECKED,
however I still have that GUEST USER selection on the login screen.

Hello Leopardus,
having read other post concerning this issue
Re: Removing Guest User icon from login page
dated all the way back to 2012, I have decide to leave well enough along and not let the GUEST button bother me.
I rarely if ever take my Mac out of the house so I have not given much thought to theft or loss, but, in the event of it leaving my house by another way, the slim possibility of recovering it is worth the annoyance, I'll get over it.
Thank you all.

How can we disable user to login Hyperion Workspace

We understand we can set to admin mode for Hyperion Planning so that only administrator can login the system. Any other ways to disable users to login Hyperion Workspace? We are using Hyperion version 11.1.1.1
Thanks a lot!

JohnGoodwin wrote:
Hi,
Just to confirm you want to stop users creating Financial reports using the Reporting Studio? If so then you would remove the role of "Report Designer" in there provisioning.
Cheers
John
http://john-goodwin.blogspot.com/
Thanks John. We just want to disable user using FR report prepared in Reporting Studio and put under "Explore" of Workspace. We found that we can't do that once the user is login into Workspace. The only way we can do is to setup the security setting of each FR report based on the group setting.

Oracle Apps Login

Hi,
Is there any public oracle applications login URL (different versions) using CSI Number? if it have, please update the URL.
Thanks for your help

Hi,
http://www.solutionbeacon.com/tool_vision.htm
Regards,
Sujoy

OAM11g - How to perform direct login without accessing protected resource?

Hi,
I think this should be a common requirement as website needs to provide a direct login page.
The OAM Documentation seems focus on the flow of starting from accessing protected resource then redirect to login page.
How can we perform direct login?
I tried from my custom login page directly, but it always gives me *"PolicyEvaluationException: OAMSSA-06191: The runtime request contains no resource"* once the login form submitted.
Anyone can advise? Thanks in advance.

Thanks for the reply.
We need to cater for both the scenarios:
Scenario 1: User tries to access a protected page. He/she will be redirected to the login page. Once it is authenticated, he/she will be redirected back to the previously requested protected page
Scenario 2: User clicks the "Login" link on the homepage where the homepage is definitely unprotected. He/she will be redirected to the login page. Once it is authenticated, he/she will be redirected back to homepage.
I have tried to the "Success URL" parameter of the Authentication Policy. However, once "Success URL" is defined, Scenario 1 will NOT work...
Yes. There are some work around solution I can think about.
Example: use a intermediate page 'rediret.jsp' which is defined as the protected resource.
The flow is: clicks the "Login" link on the homepage -> a intermediate page 'rediret.jsp' -> login page -> redirect back to 'rediret.jsp' -> 'rediret.jsp' will redirect user to the Homepage...
But I think Scenario 2 should be very common and it should be a right solution for it. Please advise. Thanks

Disable "Oracle Essbase" option in Smartview

Hi,
We are in Planning 11.1.2 application. When users logs-in Smartview, they see two options - "Oracle Hyperion Planning, Fusion Edition" and "Oracle Essbase".... Is there a way to disable "Oracle Essbase" in Smartview?
Thanks,
Siva

As the question is about 11.1.2.x and Smart View then there is a way to disable essbase from the Shared Connection.
Log into workspace > Navigate > Administer > Workspace Server settings
Select enabled products, untick provider services.
Log into a Shared Connection in Smart View and essbase should no longer be there.
This is all or nothing so cannot be applied at user level.
Cheers
John
http://john-goodwin.blogspot.com/

Blocking of Direct Login to Satellite System

Dear All,
A person who has login authorisation in Solman also has login authorisation in Satellite systems. So a person can directly login to the satellite system, bypassing the Solman. whether is there any possibility to block the person directly loging in to satellite system.
Thanks and Regards
Saravanan

Hi,
When we create RFC destinations for remote system we have to provide the user credentials and saved it or making it a trusted rfc connection without providing any login credentials.
Depending upon the RFC you create you get all the access in the satellite systems.
ALso go thru this tutor
https://websmp204.sap-ag.de/~sapidb/011000358700002912202006E.sim
This shows how to create rfc and whether you want trusted or with user logon screen.in user logon it always asks for the credentials whereas in other case it get automatically filled up.
Please reward points if it helps.
Message was edited by:
Prakhar Saxena

Is there a way to decrypt the SQL login-only encryption in the netmon trace or disable the SQL login-only encryption?

We know by default the SQL Server use the self-signed certificate to encrypt the SQL login information when building the connection, my question is if
there is a way to decrypt the SQL login-only encryption in the netmon trace or disable the SQL login-only encryption?
Please click the Mark as Answer button if a post solves your problem!

Not without login as admin. To avoid using credentials to login to SQL, use Windows Credentials instead.
jdweng

Disable the database login

Hi All,
I'm working on soa 11.1.1.5 version.I don't want to store my each and every payload in the related database in the dev environment to overcome the heavy burden.I have to disable the database login in my composite application.By using which bpel property i can disable the database login.Where can i check the payload details in the database.
Anybody Please give me your valuable suggestions.
Thanks in advance!
Edited by: 851924 on Jul 2, 2012 2:17 AM

Thank you so much for your reply Arik,i have configured the below properties in my composite.xml file
<component name="BPELProcess" version="2.0">
<implementation.bpel src="BPELProcess.bpel"/>
<property name="bpel.config.auditLevel">Production</property>
</component>
can u please let me know the difference with below configuration....
<component name="BPELProcess" version="2.0">
<implementation.bpel src="BPELProcess.bpel"/>
<property name="bpel.config.completionPersistPolicy">on</property>
<property name="bpel.config.inMemoryOptimization">true</property>
</component>
If both are same please suggest ,performance wise which one is the best one?In which table i have to check the stored payloads in the database?
Thanks in Advance!
Edited by: 851924 on Jul 2, 2012 4:50 AM

Customizing the Biller Direct login page.

Hi,
How can I customize the Biller Direct login page?
I know the files available in com.sap.security.core.admin, but..how can we deploy from one machine to another..what file we have to deploy.
Thanks
Rohini Kumar J.

Hi,
I think it is par file. Once you done with your change in the JSP file, rebuid it and then the builed par file can be deployed
in System admin ->support
click portal runtime.
In the tools
click on Administration console and upload your par file
Note that the par file should with the same name.
Hope it helps you
Raghu

Progress Reporter. I can't access,not granted access for direct login

I am trying to Access to Progress Reporter.
Web Access is running correctly and I got access with "admin" user. But when I am trying to use the admin user for Progress Reporter I got this message:
Logon denied for[admin]. You are not granted access for direct login,please contact your administrator. Please choose 'OK' to make corrections or 'Cancel' to exit tha application.
I don't know how to create user for Progress Report if that is the problem. Please help me......I will appreciate your help a lot.
Thanks

I have the same problem (p6v7), but the diference with the case mentioned, I have all checkbox marked correctly and all permision to users.
When I tried to loggin appear the same error
Have someone any tip???
Thanks

Disable oracle direct login

Similar Messages

Maybe you are looking for