久久福利_99r_国产日韩在线视频_直接看av的网站_中文欧美日韩_久久一

您的位置:首頁技術文章
文章詳情頁

初學者必讀:Oracle監聽口令及監聽器安全

瀏覽:27日期:2023-11-22 17:32:34

很多人都知道,Oracle的監聽器一直存在著一個安全隱患,假如不設置安全措施,那么能夠訪問的用戶就可以遠程關閉監聽器。

相關示例:

D:>lsnrctl stop eygle

LSNRCTL for 32-bit Windows: Version 10.2.0.3.0 - Production on 28-11月-2007 10:02:40

Copyright (c) 1991, 2006, Oracle. All rights reserved.

正在連接到 (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=172.16.33.11)(PORT=1521))

(CONNECT_DATA=(SERVICE_NAME=eygle)))

命令執行成功

大家可以發現,此時缺省的監聽器的日志還無法記錄操作地址:

No longer listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=172.16.33.11)(PORT=1521)))

28-NOV-2007 09:59:20 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=)(USER=Administrator))(COMMAND=stop)

(ARGUMENTS=64)(SERVICE=eygle)(VERSION=169870080)) * stop * 0

為了更好的保證監聽器的安全,大家最好為監聽設置密碼:

[oracle@jumper log]$ lsnrctl

LSNRCTL for Linux: Version 9.2.0.4.0 - Production on 28-NOV-2007 10:18:17

Copyright (c) 1991, 2002, Oracle Corporation. All rights reserved.

Welcome to LSNRCTL, type 'help' for information.

LSNRCTL> set current_listener listener

Current Listener is listener

LSNRCTL> change_password

Old password:

New password:

Reenter new password:

Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=172.16.33.11)(PORT=1521)))

Password changed for listener

The command completed successfully

LSNRCTL> set password

Password:

The command completed successfully

LSNRCTL> save_config

Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=172.16.33.11)(PORT=1521)))

Saved LISTENER configuration parameters.

Listener Parameter File /opt/oracle/product/9.2.0/network/admin/listener.ora

Old Parameter File /opt/oracle/product/9.2.0/network/admin/listener.bak

The command completed successfully

在我們設置密碼后,遠程操作將會因缺失密碼而出現失敗:

D:>lsnrctl stop eygle

LSNRCTL for 32-bit Windows: Version 10.2.0.3.0 - Production on 28-11月-2007 10:22:57

Copyright (c) 1991, 2006, Oracle. All rights reserved.

正在連接到 (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=172.16.33.11)

(PORT=1521))(CONNECT_DATA=(SERVICE_NAME=eygle)))

TNS-01169: 監聽程序尚未識別口令

注意:此時在服務器端或客戶端,都需要我們通過密碼來起停監聽器:

LSNRCTL> set password

Password:

The command completed successfully

LSNRCTL> stop

Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=172.16.33.11)(PORT=1521)))

The command completed successfully

LSNRCTL> start

Starting /opt/oracle/product/9.2.0/bin/tnslsnr: please wait...

TNSLSNR for Linux: Version 9.2.0.4.0 - Production

System parameter file is /opt/oracle/product/9.2.0/network/admin/listener.ora

Log messages written to /opt/oracle/product/9.2.0/network/log/listener.log

Trace information written to /opt/oracle/product/9.2.0/network/trace/listener.trc

Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=172.16.33.11)(PORT=1521)))

Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=172.16.33.11)(PORT=1521)))

STATUS of the LISTENER

------------------------

Alias LISTENER

Version TNSLSNR for Linux: Version 9.2.0.4.0 - Production

Start Date 28-NOV-2007 10:22:23

Uptime 0 days 0 hr. 0 min. 0 sec

Trace Level support

Security ON

SNMP OFF

Listener Parameter File /opt/oracle/product/9.2.0/network/admin/listener.ora

Listener Log File /opt/oracle/product/9.2.0/network/log/listener.log

Listener Trace File /opt/oracle/product/9.2.0/network/trace/listener.trc

Listening Endpoints Summary...

(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=172.16.33.11)(PORT=1521)))

Services Summary...

Service 'eygle' has 1 instance(s).

Instance 'eygle', status UNKNOWN, has 1 handler(s) for this service...

Service 'julia' has 1 instance(s).

Instance 'eygle', status UNKNOWN, has 1 handler(s) for this service...

The command completed successfully

另外,ADMIN_RESTRICTIONS參數也是一個重要的安全選項,大家可以在 listener.ora 文件中設置 ADMIN_RESTRICTIONS_ 為 ON,此后所有在運行時對監聽器的修改都將會被阻止,所有對監聽器的修改都必須通過手工修改listener.ora文件才能順利完成。

標簽: Oracle 數據庫
主站蜘蛛池模板: 亚洲精品美女久久久 | 亚州中文字幕蜜桃视频 | 久久精品久久久久电影 | 亚洲国产精品久久久久秋霞不卡 | 成人网av| 国产激情在线 | 中国特级毛片 | 精品国产一区一区二区三亚瑟 | 日韩精品一区二区三区 | av手机在线电影 | 91精品久久久久久久久 | 欧美成在线观看 | 五月激情站| 亚洲精品电影在线观看 | 久久久久久久国产精品 | 在线观看视频一区二区 | 九九热在线观看 | 99久久电影 | 狠狠躁天天躁夜夜添人人 | 欧美一级视频在线观看 | 不卡久久 | 精品一区在线 | 色九九 | 精品视频在线观看 | 午夜家庭影院 | 在线观看亚洲视频 | 夜夜草视频 | 99精品视频在线观看 | 春色导航| 日韩久久网| 一区二区在线视频 | 日韩在线中文 | 成人欧美| 性色国产 | 久久亚洲91 | 一区二区精品 | 天堂va在线高清一区 | 国产黄色av | 亚洲自拍在线观看 | 六月色婷婷 | www久久久 |