Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Secure Oracle Database link method

Posted on 2008-06-17
1
Medium Priority
?
579 Views
Last Modified: 2013-12-19
I need the syntax for a Oracle Database link that offers the best security if a user needs to link to our database. We would like to be able to control the passwords and the user of the link shouldn't know the passwords of the link or  be able to get into our remote system if they ever got into our building and had access to our PC's
0
Comment
Question by:7Souls
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 74

Accepted Solution

by:
sdstuber earned 1500 total points
ID: 21807395
it's not so much the link itself then as the user that will log into the database to use the link.
If they user can read sys.link$ then he/she can read the passwords.


Similarly, if the account on the remote system has extra privileges then don't let the user use that link at all.


the best way I know of is to create an unauthenticated link.


CREATE DATABASE LINK my_link  USING 'mydatabase';

this creates a private link, so it's only usable to the owner if the user you're interested in isn't the owner, then he/she can't use it.

if you want them to use it, then create it public, or create it under that user's schema.


With a database link like that,  you see it has no user or password.  In that case.  when you use the link  the current users' username and password are sent to the remote system.  So  the user logs in as themself and only as themself.   So they have only the permissions they have if they were to log in to the remote system directly.  If that's no permissions at all, then the link won't work for them.






0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Working with Network Access Control Lists in Oracle 11g (part 1) Part 2: http://www.e-e.com/A_9074.html So, you upgraded to a shiny new 11g database and all of a sudden every program that used UTL_MAIL, UTL_SMTP, UTL_TCP, UTL_HTTP or any oth…
Background In several of the companies I have worked for, I noticed that corporate reporting is off loaded from the production database and done mainly on a clone database which needs to be kept up to date daily by various means, be it a logical…
This video shows information on the Oracle Data Dictionary, starting with the Oracle documentation, explaining the different types of Data Dictionary views available by group and permissions as well as giving examples on how to retrieve data from th…
This video shows how to configure and send email from and Oracle database using both UTL_SMTP and UTL_MAIL, as well as comparing UTL_SMTP to a manual SMTP conversation with a mail server.

604 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question