Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Oracle Security >> Oracle Security >> detect ADMIN_RESTRICTIONS without SET
        
(Message started by: Pete Finnigan on Dec 22^nd, 2005, 5:02pm)

Title: detect ADMIN_RESTRICTIONS without SET
Post by Pete Finnigan on Dec 22^nd, 2005, 5:02pm

Hi,

Does anyone know a way to test if the ADMIN_RESTRICTIONS parameter has been set in the listener.ora without looking at the listener.ora and also without issuing a set command to test the error code. i.e. is there an undocumented listener command to check the value of this command?

cheers

Pete

Title: Re: detect ADMIN_RESTRICTIONS without SET
Post by Pete Finnigan on Dec 22^nd, 2005, 10:13pm

Pete,

Maybe it's possible using snmp. Sometime ago I did a test to read the Oracle listener MIB's with ucd-snmp. The information can be found at : http://groups.google.com/group/comp.databases.oracle.server/msg/4a0b68aa5ea50896?q=snmp+ivan+group:*oracle*&hl=en&lr=&ie=UTF-8&as_drrb=b&as_mind=12&as_minm=5&as_miny=2002&as_maxd=13&as_maxm=6&as_maxy=2003&rnum=1
Snmp worked with 8i and 9i. I work now with 10G and it seems it doesn't know snmp anymore. I can't find the listener.v1 mib-file. If you have that file (in $ORACLE_HOME/network/doc) take a look if it has a MIB to get the admin_restrictions value.

Ivan

Title: Re: detect ADMIN_RESTRICTIONS without SET
Post by Pete Finnigan on Dec 24^th, 2005, 9:08pm

Hi Ivan,

Thanks bery much for your answer. The MIB file is very interesting, at least on my machine that has 9iR2 installed. It does not include the admin_restrictions variable/parameter though. Also the problem is I want to check this value remotely so checking via SNMP is not a good option as its off by default and it is not viable to ask to have it turned on for this.

Thanks anyway, it was as good idea.

cheers

Pete