topic Re: Make Oracle db&apps server as trusted system in Operating System - HP-UX

Make Oracle db&apps server as trusted system

Madanagopalan S — Mon, 07 Jan 2002 09:58:38 GMT

We are using oracle db(8.0.5) and apps(11.0) on
hpux 11 (N Class). I have suggested to make
the production server as trusted system to make
it more secured. but Our DBA says that this
create problem in oracle db and apps.

I hope that lot of people implemented this
scenario. Can you please share with me? Is there
any impact on db/apps if we convert the system to trusted. What are all the areas to be considered before convert?

Re: Make Oracle db&apps server as trusted system

Printaporn_1 — Mon, 07 Jan 2002 10:22:58 GMT

I use Oracle on trusted system without problem.
please check in detail with DBA for what's problem he mean.

Re: Make Oracle db&apps server as trusted system

Alan Casey — Mon, 07 Jan 2002 11:20:21 GMT

I alos use Oracle on a trusted system with no impact on Oracle at all.

I also changed our development servers to trusted and this had no effect on Oracle whatsoever.

You should check back with the dba.

Re: Make Oracle db&apps server as trusted system

Steven Sim Kok Leong — Mon, 07 Jan 2002 12:16:56 GMT

Hi,

We never had any problems with trusted systems ever since we were on Oracle 7.3 and HP-UX 10.20 till now on Oracle 8.1.7 and HP-UX 11.00.

Hope this help. Regards.

Steven Sim Kok Leong
Brainbench MVP for Unix Admin
http://www.brainbench.com

Re: Make Oracle db&apps server as trusted system

Ravi_8 — Mon, 07 Jan 2002 12:27:30 GMT

Hi,
All my orcale servers are all trusted systems, working without any problem.

Re: Make Oracle db&apps server as trusted system

David Lodge — Mon, 07 Jan 2002 12:33:57 GMT

Through the past 3 years I have seen a variety of systems, running a variety of oracle instances and strange; dodgy bespoke software running fine on Trusted Systems.

Oracle will work fine.

As for your applications - if they're coded properly they should be okay. I'd advise making a development server trusted first though and testing (dev and prod should always be similar!)

dave

Re: Make Oracle db&apps server as trusted system

Madanagopalan S — Tue, 08 Jan 2002 01:20:21 GMT

I will check back with our DBA

Thanks for your reply.

Re: Make Oracle db&apps server as trusted system

A. Clay Stephenson — Tue, 08 Jan 2002 01:34:18 GMT

Hi:

The only possible problem I can think of is a user identfied externally (i.e. by the OS rather than Oracle itself). Have your DBA do a 'create user xxx identified externally' and make sure that this guy can connect. Since both NIS and NIS+ work okay in this environemnt I expect it to work in a trusted environment.

Regards, Clay

Re: Make Oracle db&apps server as trusted system

Madanagopalan S — Tue, 08 Jan 2002 01:44:09 GMT

We are using Oracle application (browser based) and all the users are authenticated by oracle. No one will connect to Unix directly.
In this scenario, I prefer to make as trusted
system because of /etc/shadow concept and login attempts which I could not found on normal system. So if some one try to hack the
system it won't lock the account and /etc/passwd is world readable in normal
behaviour. If anyone provide the procedure to
make the system trusted and what are all the
things are to be note down before make it trusted. I remember that we can not untrust
the system, right?

Re: Make Oracle db&apps server as trusted system

Michael Tully — Tue, 08 Jan 2002 02:00:31 GMT

Hi,

It is really easy to trust a system.

# /usr/lbin/tsconvert

to un-trust

# /usr/lbin/tsconvert -r

or use 'sam'

Be aware that after trusting your system all
user accounts will have their passwords
expired.

-Michael