Topic: Oracle Restrict User Access by IP (Page 1 of 1)

In mysql we create users and privileges through a grant statement.

An example would be:

grant all privileges on database.* to user@[b]192.168.1.102[/b] identified by 'password'

In the above statement we are only allowing user access to the database if they are coming from the specific IP address 192.168.1.102 any other requests with a valid username and password coming from different IP addresses will automatically be denied.

Does oracle have any feature that is similar to this? I have done some looking at this and it looks like the closes they have is setting something like a login trigger which seems very convoluted to me.

I am really glad that I am not an oracle DBA the more I see of this database the more I wonder why it is the leader.

Dan
Code Town | Zombie Head

always believed this to be part of the standard, so have you tried in oracle?

Our DBA tells me that this is not the way that Oracle works. He says that there are ways to accomplish the same type of thing but it is a bit more complex than setting the user's rights.

The reason he give is that Oracle is not really designed to be a database for web applications. It is a data warehousing application and different security constraints were created to better accommodate this.

The reason I am asking is that I was on a conference call with one of our clients DBA's talking about security, and when I mentioned setting up oracle to limit access for a given account by IP address she had no idea what I was talking about.

I have done looking on my own and the only ways I see this being done is with a trigger that is fire on login, or setting some values in an oracle setup file, neither of which seem like a standard way of limiting access by IP.

I believe oracle is just behind this featuer wise.

Dan
Code Town | Zombie Head

Having looked into this myself, I believe you're right. The trigger seems to be the best way to do it, once you get it right, but Oracle is sadly lagging behind in this area. Do you have to use Oracle for this project?


Justice 4 Pat Richard

Just not possible. Our application is tied to oracle pretty tightly as are our clients.

Dan
Code Town | Zombie Head