{"id":231,"date":"2011-12-17T13:24:15","date_gmt":"2011-12-17T12:24:15","guid":{"rendered":"https:\/\/oracle-in-zen.de\/?p=231"},"modified":"2018-06-01T16:47:45","modified_gmt":"2018-06-01T15:47:45","slug":"oracle-ip-adressen-blockieren","status":"publish","type":"post","link":"https:\/\/oracle-in-zen.de\/?p=231","title":{"rendered":"Client Zugangspr\u00fcfung \/\/ Valid Node Checking"},"content":{"rendered":"<p><span class=\"dropcap2\">U<\/span>m im gro\u00dfen Feld der Oracle Listener Sicherheit mal einen kleinen Schritt zu tun, hier ein Hinweis zu einer Basis Einstellung. Mit einigen wenigen Eintr\u00e4gen in der sqlnet.ora k\u00f6nnen die Rechner festgelegt werden, die sich zur DB verbinden d\u00fcrfen.<\/p>\n<p><!--more--><\/p>\n<p>Diese Zeilen sind zus\u00e4tzlich in die sqlnet.ora einzutragen:<\/p>\n<pre>tcp.validnode_checking = yes\r\ntcp.invited_nodes = (localhost, app01)<\/pre>\n<p>Anschlie\u00dfend, reload des Listeners:<\/p>\n<pre>cmd&gt; lsnrctl reload<\/pre>\n<p>tcp.validnode_checking = yes aktiviert die IP\/ Host- Pr\u00fcfung. tcp.invited_nodes = () legt die zugelassen Rechner fest. &#8218;localhost&#8216; sollte immer eingetragen werden. Mit der Option tcp.excluded_nodes = () werden die genannten Clients ausgesperrt, aber alle anderen zugelassen. tcp.invited_nodes hat dennoch Vorrang vor tcp.excluded_nodes.<\/p>\n<p>Leider k\u00f6nnen keine Wildcards, Subnetze oder IP-Ranges angegeben werden.<\/p>\n<p>Nach aktivieren der Funktion kommt es auf nicht autorisierten Clients zu folgendem Fehler:<\/p>\n<pre>cmd&gt; sqlplus scott\/tiger@db01\r\nSQL*Plus: Release 11.2.0.2.0 Production on Sat Dec 17 13:58:55 2011\r\nCopyright (c) 1982, 2010, Oracle.  All rights reserved.\r\nERROR:\r\nORA-12537: TNS: Verbindung beendet<\/pre>\n<p>und diese Eintr\u00e4ge sind im listener.log zu finden:<\/p>\n<pre>Sat Dec 17 14:05:36 2011\r\n17-DEC-2011 14:05:36 * 12546\r\nTNS-12546: TNS: Berechtigung verweigert\r\n TNS-12560: TNS: Fehler bei Protokolladapter\r\n  TNS-00516: Genehmigung verweigert<\/pre>\n<p>Weitere Infos:<br \/>\n<a title=\"Listener Security\" href=\"http:\/\/docs.oracle.com\/cd\/B19306_01\/network.102\/b14213\/lsnrctl.htm#i553605\" target=\"_blank\">http:\/\/docs.oracle.com\/cd\/B19306_01\/network.102\/b14213\/lsnrctl.htm#i553605<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Um im gro\u00dfen Feld der Oracle Listener Sicherheit mal einen kleinen Schritt zu tun, hier ein Hinweis zu einer Basis Einstellung. Mit einigen wenigen Eintr\u00e4gen in der sqlnet.ora k\u00f6nnen die Rechner festgelegt werden, die sich zur DB verbinden d\u00fcrfen.<\/p>\n","protected":false},"author":1,"featured_media":1081,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"zakra_page_container_layout":"customizer","zakra_page_sidebar_layout":"customizer","zakra_remove_content_margin":false,"zakra_sidebar":"customizer","zakra_transparent_header":"customizer","zakra_logo":0,"zakra_main_header_style":"default","zakra_menu_item_color":"","zakra_menu_item_hover_color":"","zakra_menu_item_active_color":"","zakra_menu_active_style":"","zakra_page_header":true,"footnotes":""},"categories":[11],"tags":[19,12,14,34,45,27,16,28],"class_list":["post-231","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-database-2","tag-10g","tag-11g","tag-audit","tag-client","tag-firewall","tag-listener","tag-sicherheit","tag-sqlnet"],"_links":{"self":[{"href":"https:\/\/oracle-in-zen.de\/index.php?rest_route=\/wp\/v2\/posts\/231","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oracle-in-zen.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/oracle-in-zen.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/oracle-in-zen.de\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/oracle-in-zen.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=231"}],"version-history":[{"count":47,"href":"https:\/\/oracle-in-zen.de\/index.php?rest_route=\/wp\/v2\/posts\/231\/revisions"}],"predecessor-version":[{"id":785,"href":"https:\/\/oracle-in-zen.de\/index.php?rest_route=\/wp\/v2\/posts\/231\/revisions\/785"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oracle-in-zen.de\/index.php?rest_route=\/wp\/v2\/media\/1081"}],"wp:attachment":[{"href":"https:\/\/oracle-in-zen.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=231"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/oracle-in-zen.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=231"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/oracle-in-zen.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=231"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}