oracle安全与网络配置

用户认证方式
password
external:域名服务器认证，第三方认证
global: AD LDAP
SYSOPER ：comlete recovery only.
SYSOPER: can not perform 'CREATE DATABASE ' 'DROP DATABASE'
SYSMAN、DBSNMP ：OEM
profile(概要文件）
edit profile at $ORACLE_HOME/rdbms/admin/utlpwdmg.sql to modify default profile
create profile pro_u1 limit;
alter user u1 profile pro_u1;
dba_profiles
约束条件
enable/disable
validate/novalidate
解决FK问题：enable novalidate(do experiments) --可以OK.启用constraints但是不验证已存在的记录
FK_TAB中存在记录，而PK_TAB中不存在记录,可以使用enable novalidate.
例：alter table fk_table add constraint FK_CONS foreign key(FK_TAB.id) references PK_TAB(id) enable novalidate;
index
…… where key=22
键 值
22 rowid --rowid -> table_row
用户临时表、全局临时表 --temporary tablespace
create [global] temporary table ……
on commit perserve rows
as query_text;
可建 索引，视图,触发器

CREATE TABLE "SCOTT"."T1"
( "ID" NUMBER,
"NAME" VARCHAR2(50),
CONSTRAINT "PK_ID" PRIMARY KEY ("ID")
USING INDEX PCTFREE 10 INITRANS 2 MAXTRANS 255 COMPUTE STATISTICS
STORAGE(INITIAL 65536 NEXT 1048576 MINEXTENTS 1 MAXEXTENTS 2147483645
PCTINCREASE 0 FREELISTS 1 FREELIST GROUPS 1 BUFFER_POOL DEFAULT)
TABLESPACE "USERS" ENABLE,
CONSTRAINT "FK_T1" FOREIGN KEY ("ID")
REFERENCES "SCOTT"."T2" ("ID") ENABLE NOVALIDATE);

CREATE TABLE "SCOTT"."T2"
( "ID" NUMBER,
"NAME1" VARCHAR2(50),
CONSTRAINT "PK_T2" PRIMARY KEY ("ID")
USING INDEX PCTFREE 10 INITRANS 2 MAXTRANS 255 COMPUTE STATISTICS
STORAGE(INITIAL 65536 NEXT 1048576 MINEXTENTS 1 MAXEXTENTS 2147483645
PCTINCREASE 0 FREELISTS 1 FREELIST GROUPS 1 BUFFER_POOL DEFAULT)
TABLESPACE "USERS" ENABLE
);


alter table t2 add constraint pk_t2 primary key(id);
alter table t1 add constraint fk_t1 foreign key(id) references t2(id);

DML行锁不会自动解决，即使是死锁？（做实验）

select sid,serial#,username where sid in (select blocking_session from v$session); --查询锁定冲突的DML语句
alter system kill session 'sid,serial#'; --kill session
undo_retention=900;
grantee retention: alter tablespace undotbs1 retention guarantee;
应用最少权限
o7_dictionary_accessibility=flase; --保护数据字典
remote_os_authent=flase;
从public撤消不必要的权限
revoke execute on utl_smtp,utl_tcp,utl_http,utl_file from public;
audit
alter system set audit_trail='XML' scope=spfile;
noaudit table;
audit table;
audit create table by scott by session;
audit create table by access;
audit select on scott.emp by access;
audit select on scott.emp by session;(do experiments)
dba_audit_trail
dba_fga_audit_trail

开启audit,性能将下降5％－15％
基于值的审计、细粒度审计dbms_fga(insert,update,delete,select,merge)

external: audit_file_dest
Linux
ntsysv is a simple interface for configuring runlevel services which
are also configurable through chkconfig.
sysctl is used to modify kernel parameters at runtime.
route -n
network
netmgr
netga
一般oracle使用专用服务器连接，同时配置共享服务器。
lisenter 出错检查的额外地方：
/etc/hosts 文件中的主机名和实际主机名，IP地址与实际IP地址是否相同
以及oracle用户是否有读取/etc/hosts文件的权限
否则有可能本地连接不了lisenter，而远程可以连接.[@more@]

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/16298743/viewspace-1044701/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/16298743/viewspace-1044701/