Home » RDBMS Server » Security » Batch only Log on to oracle DB
Batch only Log on to oracle DB [message #124539] Mon, 20 June 2005 00:11 Go to next message
vikramjogi
Messages: 71
Registered: June 2005
Location: Scranton
Member
Hello All,

Is there any way that we can write a trigger or any other way of getting a batch only log on(user) for a user onto a oracle DB. Any suggestions would be greatly appreciated. Thanx in advance.

Vikram
Re: Batch only Log on to oracle DB [message #124611 is a reply to message #124539] Mon, 20 June 2005 08:37 Go to previous messageGo to next message
Frank Naude
Messages: 4579
Registered: April 1998
Senior Member
I don't understand what you are asking and I doubt if anyone else will. Can you please explain the problem in detail?

Best regards.

Frank
Re: Batch only Log on to oracle DB [message #124619 is a reply to message #124611] Mon, 20 June 2005 09:03 Go to previous messageGo to next message
vikramjogi
Messages: 71
Registered: June 2005
Location: Scranton
Member
Hey Frank,

I have a userid on oracle DB. That user id is used to run a batch job using an universal command in datastage. I dont want anyone to use that particular userid to log on to oracle db but that userid should be able to run a batch job. Would greatly appreciate if you can give me any ideas.

Thanks,
Vikram
Re: Batch only Log on to oracle DB [message #124620 is a reply to message #124619] Mon, 20 June 2005 09:11 Go to previous messageGo to next message
Frank Naude
Messages: 4579
Registered: April 1998
Senior Member
Your best bet would be to write an AFTER LOGON ON DATABASE trigger to validate the user and reject all other sessions.

Look at this example:
http://www.orafaq.com/scripts/security/notoad.txt

Best regards.

Frank
Re: Batch only Log on to oracle DB [message #124621 is a reply to message #124620] Mon, 20 June 2005 09:17 Go to previous messageGo to next message
vikramjogi
Messages: 71
Registered: June 2005
Location: Scranton
Member
Frank,

I Have a similar trigger where in it blocks the sessions from all the applications, just used '%EXE'. I am sure that a user can rename the name for TOAD as some xyz.exe and run the program.I dont want them to give a chance to do this. Was wondering if anyone can get an idea for my question.

Thanks,
Vikram
Re: Batch only Log on to oracle DB [message #124736 is a reply to message #124621] Tue, 21 June 2005 03:18 Go to previous messageGo to next message
Frank Naude
Messages: 4579
Registered: April 1998
Senior Member
That was just an example. There are many properties in v$session to validate against.

Other examples:

- Run the batch from a dedicated OS user and validate against v$session.osuser.

- Use DBMS_APPLICATION_INFO.SET_MODULE() in your batch to set a unique string and check for it in v$session.module.

- Etc.

Best regards.

Frank
Re: Batch only Log on to oracle DB [message #124777 is a reply to message #124736] Tue, 21 June 2005 08:07 Go to previous message
vikramjogi
Messages: 71
Registered: June 2005
Location: Scranton
Member
Thanks a lot frank.
Previous Topic: Dont want user to connect to connet through SQL plus?
Next Topic: sys passwd
Goto Forum:
  


Current Time: Thu Apr 18 21:35:45 CDT 2024