Igor zeigt in seinem Blog-Eintrag ein gutes Beispiel für Proxy-Authentication.
Vielleicht noch eine Ergänzung dazu
Igor zeigt in seinem Blog-Eintrag ein gutes Beispiel für Proxy-Authentication.
Vielleicht noch eine Ergänzung dazu
Ich hatte schon öfters die Anforderung, auf Statement-Ebene Auditing einzuschalten. Also z.B. in einem Logon-Trigger die Umgebung des Users abzuchecken und anhand dessen zu entscheiden, ob Auditing notwendig ist oder nicht.
Oracle sieht dies aber nicht so vor. Es ist nur auf Schema-Ebene definierbar. Viele denken zwar, die Option “BY SESSION” macht dies, aber diese Option [...]
In the current Oracle Critical Patch Update (April 2009) all our Security Bugs are solved, as well in Oracle Database version 11.1.0.7.
Starting from now, I can recommend Database Vault.
But please read the documentation carefully. Database Vault does not help for all security requirements (e.g. encryption).
Learn more about Database Vault – and which options you need [...]
Nächste Woche (21.+22.10.) finden die ersten Schweizer Datenbanktage statt – die TrivadisOPEN.
Ich denke, dies ist eine Veranstaltung, die jeden Datenbankprofi interessieren sollte – egal ob Oracle oder Microsoft, egal ob DBA, Entwickler oder Security-Experte.
Ein paar Highlights (für mich natürlich aus dem Oracle-Bereich ):
Carry Millsap: “Millsap’s Grand Unified Theory of ‘Tuning’”
Christian Antognini: “Query Optimizer [...]
First chapter in the Patch Set Notes:
…
Patch sets provide bug fixes only; they do not include new functionality and they do not require certification on the target system.
…
This is so not true
There is at least one new feature: a new package called DBMS_AUDIT_MGMT.
This should be mainly used with Oracle Audit Vault. But [...]
The first patchset for Oracle Database 11g is available.
File size (Linux 32 bit): 1.5 GB!!! Happy download
For quite some time I have been trying to persuade my colleagues to write a MySQL plug-in for Oracle Grid Control. Without success…
But now an official plug-in is available, created by Alex Gorbachev (Pythian Group). It can be downloaded from the “Oracle Enterprise Manager 10g Grid Control
Extensions Exchange” page too – and it is [...]
A new Audit Vault version is ready for download (for Linux, Solaris, AIX and HP Itanium) . Maybe some bugs are fixed…
I will test it
During the last days we have tested the CPU very intensively.
Some information about it:
I recommend applying it, if you use Oracle Application Express (APEX) 3.0. Because on iDefense it is described, how easy a security hole can vulnerable.
You can upgrade to APEX 3.1 too.
This is the first CPU without need for a newer version of [...]
After the x86-Linux and the 32-bit Windows version now the x84-64bit Linux version is ready for download.
For more information see here.