Operating System - HP-UX
1836764 Members
2525 Online
110109 Solutions
New Discussion

Re: Restrict Root and Ora920 connection to one computer

 
KOGOE
Advisor

Restrict Root and Ora920 connection to one computer

My system run on HP-UX 11i and my rdbms is Oracle 9i R2; sysdba and sysoper priviliges are authenticated by operating system;My problem is that I would like to restrict Root and Ora920 connection to the database from only the cumputer with IP address (10.10.30.3);This to insure that none could connect to the database as Root or Ora920 apart from using my computer to telnet the server.
thank u.
3 REPLIES 3
Arunvijai_4
Honored Contributor

Re: Restrict Root and Ora920 connection to one computer

Hello,

You can use make use of "TCPWRAPPER",

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=TCPWRAP

More information,

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=970058

-Arun
"A ship in the harbor is safe, but that is not what ships are built for"
James A. Donovan
Honored Contributor

Re: Restrict Root and Ora920 connection to one computer

Since you're using telnet (you really should look into using SSH), you can make use of the /var/adm/inetd.sec file. Just add lines that looks like this:

shell allow 127.0.0.1 10.10.30.3
login allow 127.0.0.1 10.10.30.3

This will prevent any telnet sessions from connecting to the box unless they come from the box itself or your computer.

See the inetd.sec man page for complete details
Remember, wherever you go, there you are...
James A. Donovan
Honored Contributor

Re: Restrict Root and Ora920 connection to one computer

Since you're using telnet (you really should look into using SSH), you can make use of the /var/adm/inetd.sec file. Just add lines that looks like this:

shell allow 127.0.0.1 10.10.30.3
login allow 127.0.0.1 10.10.30.3
telnet allow 127.0.0.1 10.10.30.3

This will prevent any telnet sessions from connecting to the box unless they come from the box itself or your computer.

See the inetd.sec man page for complete details
Remember, wherever you go, there you are...