Grant privileges to a range of IP hosts? 1

[lhatwwp]

Hello,

I'm not an Oracle DBA, I have attended one introductory class, that's it... so my knowlege is limited. With that in mind would someone help me with the correct syntax to to grant the required privileges to hosts within a specific subnet?

As I realize there could be a large number privileges to grant lets assume that the hosts who have access will have administrative or near administrative rights.

Thanks,
Lou

 

[SantaMufasa]

I am not aware that Oracle has any means for dealing with privileges at an IP level. Within Oracle code itself, you could write routines that redirect or allow access based upon IP ranges, but that is about the extent that I can imagine with current product functionality.

Mufasa
(aka Dave of Sandy, Utah, USA)
[I provide low-cost, remote Database Administration services: www.dasages.com]

 

[Thargy]

This appears to me to be almost nothing to do with Oracle. Granting privileges on servers is a job for a system administrator, not a DBA.

Are you trying to connect to an oracle database on a server, or are you having some other difficulty?

Regards

T

 

[lhatwwp]

Hello,

Here's the picture. This is a new install for a machine condition monitoring software package. The person who installed the software really doesn't know Oracle but I guess shouldn't have to if the installation program works properly. Anyway, with the Oracle engine installed on a Win2K3 box and the Oracle Client installed on a desktop in the same domain everything seems to work. However when attempting to connect from an Oracle client that is not a member of the same Windows Domain as the sever the client connection appears to be rejected.

Knowing a little about MS SQL in the past I have had to grant specific hosts access to the SQL server based on IP address. So I guessed that something similiar was happening on Oracle.

Neither I nor the person who installed all this is proficient with Oracle but I do need to do something to get the cleints access to the Oracle sever.

So with that in mond... can someone suggest a possible solution?

Thanks,
Lou

 

[Thargy]

Ah, now I have a vague idea what you're struggling with.

This sounds like the authentication fouling up. In windoze, if you have a server on a different domain, then there is a setting in the sqlnet.ora file you need to alter.

Look on the serverin the foreign domain, and under the oracle folder search for a folder called "NETWORK", which will have a subfolder called ADMIN. In there should be LISTENER.ORA, TNSNAMES.ORA AND SQLNET.ORA. In the SQLNET.ORA file, you should find an authentication setting of NTS or something similar. Take a copy of your SQLNET.ORA file, and then alter this to be NONE.

Try to connect again from the client on the different domain, and see what happens. Bear in mind that this is a work around for your problem (if it is inded the trouble) and you should read up on this for a long-term solution.

Regards

T

 

[LKBrwnDBA]

Maybe if you post the connection error(s) we could give more accurate solution.


----------------------------------------------------------------------------
The person who says it can't be done should not interrupt the person doing it. -- Chinese proverb

 

[lhatwwp]

thargtheslayer

That was the solution I needed. Long term I will migrate the clients on to the same domain and return the authentication to NTS, but for now NONE is keeping everyone happy.

Thanks,
Lou

 

[Thargy]

Thank you for the courtesy of a purple point thingy - many don't bother.

I have never soldiered on with this, as we keep all our servers on the same domain. Keeping it simple is always to be recommended

Regards

T