Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Oracle Security >> Oracle Security >> Forcing password for SYSDBA while using Ext Users
        
(Message started by: Pete Finnigan on Apr 5^th, 2006, 1:23pm)

Title: Forcing password for SYSDBA while using Ext Users
Post by Pete Finnigan on Apr 5^th, 2006, 1:23pm

Hi,

Oracle Version: 9.2.0.6
Platform: Windows 2000

I have gone through a process of removing usernames from batch scripts by using externally identified users. However I also want to ensure that all SYSDBA connections require a password. If you use external users on windows you have to set AUTHENTICATION_SERVICES=NTS which allows all users in the ORA_DBA group to connect as sysdba without a password. Also any users in the admin group can then add themselves to the ORA_DBA and then connect.

Is there a way of using external users but then force sysdba connections to use a password?

Are they any clever work arounds to avoid this situation?

Any clarification then please let me know.

Regards

Seb