9I 10g LISTENER 加密 的不同

本文涉及的产品
密钥管理服务KMS,1000个密钥,100个凭据,1个月
简介: 默认的9I数据库监听是可以远程关闭的,只要能TNSPING通,如下:-bash-3.2$ lsnrctl stop ora9iLSNRCTL for Solaris: Version 11.

默认的9I数据库监听是可以远程关闭的,只要能TNSPING通,如下:
-bash-3.2$ lsnrctl stop ora9i
LSNRCTL for Solaris: Version 11.2.0.3.0 - Production on 27-JUN-2013 04:53:08
Copyright (c) 1991, 2011, Oracle.  All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=192.168.1.151)(PORT=1521))(CONNECT_DATA=(SERVICE_NAME=ora9i)))
The command completed successfully
所以我们需要为9I的LISTENER 设置好安全策略为PASSWORD认证,防止这样的情况


LSNRCTL> change_password
Old password:
New password:
Reenter new password:
Connecting to (ADDRESS=(PROTOCOL=tcp)(PORT=1521))
Password changed for LISTENER
The command completed successfully
LSNRCTL> save_config
Connecting to (ADDRESS=(PROTOCOL=tcp)(PORT=1521))
TNS-01169: The listener has not recognized the password
LSNRCTL> set password
Password:
The command completed successfully
LSNRCTL> save_config
Connecting to (ADDRESS=(PROTOCOL=tcp)(PORT=1521))
Saved LISTENER configuration parameters.
Listener Parameter File   /home/oracle/product/9.2.0.4/network/admin/listener.ora
Old Parameter File   /home/oracle/product/9.2.0.4/network/admin/listener.bak
The command completed successfully
再次远程关闭
-bash-3.2$ lsnrctl stop ora9i
LSNRCTL for Solaris: Version 11.2.0.3.0 - Production on 27-JUN-2013 04:57:17
Copyright (c) 1991, 2011, Oracle.  All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=192.168.1.151)(PORT=1521))(CONNECT_DATA=(SERVICE_NAME=ora9i)))
TNS-01169: The listener has not recognized the password

但是10G过后不存在这个问题因为使用本地认证的模式如下:
LSNRCTL> status
Connecting to (ADDRESS=(PROTOCOL=tcp)(HOST=)(PORT=1521))
STATUS of the LISTENER
------------------------
Alias                     LISTENER
Version                   TNSLSNR for Solaris: Version 11.2.0.3.0 - Production
Start Date                27-JUN-2013 04:44:09
Uptime                    0 days 0 hr. 14 min. 26 sec
Trace Level               off
Security                  ON: Local OS Authentication
SNMP                      OFF
Listener Log File         /u01/app/oracle/diag/tnslsnr/dg1/listener/alert/log.xml
Listening Endpoints Summary...
  (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=dg1)(PORT=1521)))
Services Summary...
Service "dg1" has 1 instance(s).
  Instance "ora11g", status READY, has 1 handler(s) for this service...
Service "ora11gXDB" has 1 instance(s).
  Instance "ora11g", status READY, has 1 handler(s) for this service...
The command completed successfully
LSNRCTL>
如果远程关闭如下:
-bash-3.2$ lsnrctl stop test
LSNRCTL for Solaris: Version 11.2.0.3.0 - Production on 27-JUN-2013 05:00:16
Copyright (c) 1991, 2011, Oracle.  All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=192.168.1.157)(PORT=1521))(CONNECT_DATA=(SERVICE_NAME=test)))
TNS-01189: The listener could not authenticate the user
但是可以在LISTENER文件中设置
LOCAL_OS_AUTHENTICATION_LISTENER = OFF
来关闭本地认证方式,这样就可以设置密码了,但是有什么意义呢?设置密码本来就是防止远程关闭,如果能登录本机设置密码有什么意义

呢?杀掉进程不就可以了
如果你忘记了密码,只要能够登录本机,可以在配置文件中删除关于PASSWORD的记录,然后KILL掉LISTENER进程,最后重启就可以了。

 

目录
打赏
0
0
0
0
91
分享
相关文章
|
10月前
|
oss服务器端加密(Server-Side Encryption Configuration)
阿里云OSS提供服务器端加密(SSE),确保静态数据安全。支持SSE-KMS,使用KMS托管CMK加密。数据上传时自动加密,下载时自动解密。用户可设置Bucket默认加密或在上传时指定加密选项。适用于高度保护数据场景,如敏感个人信息和企业关键信息。兼容多种部署形态,特定特性地域可用。此功能简化了加密处理,增强了云端数据安全性。
345 1
如何让服务端同时支持WebSocket和SSL加密的WebSocket(即同时支持ws和wss)?
要服务端同时支持ws与wss并不容易,其难点主要在于:wss通道必须在TCP连接刚建立时(收发消息前)就要先进行SSL加密,否则,后续的通信将无法正常进行。如此一来,当TCP连接刚建立时,服务器就无法具体分辨哪个是ws客户端哪个是wss客户端。那怎么办了?
5637 0
Chapter 1 Securing Your Server and Network(5):使用SSL加密会话
原文: Chapter 1 Securing Your Server and Network(5):使用SSL加密会话 原文出处:http://blog.csdn.net/dba_huangzj/article/details/38063823,专题目录:http://blog.csdn.net/dba_huangzj/article/details/37906349 未经作者同意,任何人不得以“原创”形式发布,也不得已用于商业用途,本人不负责任何法律责任。
1346 0
Mina 在 Spring 中配置同时支持 SSL 加密连接和非 SSL 连接
iOS 的 socket ,那是在很久以前用过,当时编写确实费了一番周折,要忍受 SDK 的不完善。 之后,一直是 Web 服务器支撑着 http 与 https 实现 RestFul 或。。。 那么好吧,有需要,就行动,重新写一遍,也好过找那三块笔记本硬盘里成堆的工程代码, 目前 SSL 的证...
1160 0