Make Oracle db&apps server as trusted system

[Madanagopalan S]

We are using oracle db(8.0.5) and apps(11.0) on
hpux 11 (N Class). I have suggested to make
the production server as trusted system to make
it more secured. but Our DBA says that this
create problem in oracle db and apps.

I hope that lot of people implemented this
scenario. Can you please share with me? Is there
any impact on db/apps if we convert the system to trusted. What are all the areas to be considered before convert?

[Printaporn_1]

I use Oracle on trusted system without problem.
please check in detail with DBA for what's problem he mean.

[Alan Casey]

I alos use Oracle on a trusted system with no impact on Oracle at all.

I also changed our development servers to trusted and this had no effect on Oracle whatsoever.

You should check back with the dba.

[Steven Sim Kok Leong]

Hi,

We never had any problems with trusted systems ever since we were on Oracle 7.3 and HP-UX 10.20 till now on Oracle 8.1.7 and HP-UX 11.00.

Hope this help. Regards.

Steven Sim Kok Leong
Brainbench MVP for Unix Admin
http://www.brainbench.com

[Ravi_8]

Hi,
All my orcale servers are all trusted systems, working without any problem.

[David Lodge]

Through the past 3 years I have seen a variety of systems, running a variety of oracle instances and strange; dodgy bespoke software running fine on Trusted Systems.

Oracle will work fine.

As for your applications - if they're coded properly they should be okay. I'd advise making a development server trusted first though and testing (dev and prod should always be similar!)

dave

[Madanagopalan S]

I will check back with our DBA

Thanks for your reply.

[A. Clay Stephenson]

Hi:

The only possible problem I can think of is a user identfied externally (i.e. by the OS rather than Oracle itself). Have your DBA do a 'create user xxx identified externally' and make sure that this guy can connect. Since both NIS and NIS+ work okay in this environemnt I expect it to work in a trusted environment.


Regards, Clay

[Madanagopalan S]

We are using Oracle application (browser based) and all the users are authenticated by oracle. No one will connect to Unix directly.
In this scenario, I prefer to make as trusted
system because of /etc/shadow concept and login attempts which I could not found on normal system. So if some one try to hack the
system it won't lock the account and /etc/passwd is world readable in normal
behaviour. If anyone provide the procedure to
make the system trusted and what are all the
things are to be note down before make it trusted. I remember that we can not untrust
the system, right?

[Michael Tully]

Hi,

It is really easy to trust a system.

# /usr/lbin/tsconvert

to un-trust

# /usr/lbin/tsconvert -r

or use 'sam'

Be aware that after trusting your system all
user accounts will have their passwords
expired.


-Michael