Hi,
What are the negative effects or database impact if only OS authentication is used to grant database read only access to the developers?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
restrict access to
1, administrative scripts, where passwords can be located
2. database backups
3. os commands history
4. config files
Developers also can generate uncontrolled load the server which can impact to database performance. It good idea not to give any access to developers on production systems.
I have noticed high memory allocation on the server. Database (DBA) group is running production system in DEDICATED mode. Because of the OS authentication and in DEDICATED mode, PGA is allocated outside SGA. Any recommendation on to avoid memory overhead using OS authentication?
Thank you for quick responses.
I think that question is outside the scope of the original question but here goes:
Your developers are in the DBA group on the production system? That's scary.
It's been a long time since I messed with OS auth but I didn't know there was a dedicated server requirement. If you're running shared server os authenticated should use it. I'd have to check the docs to verify this.
Business Accounts
Answer for Membership
by: slightwvPosted on 2009-11-06 at 10:39:14ID: 25761764
The only negative I can think of is if someone compromises the os account, they can now see everything in your database. I'm sure other experts will come up with a reason.
Developers being what they are, they would probably hard code the password in scripts anyway so it really doesn't matter.