Restrict oracle user login using osuser account?

[CassidyHunt]

I have a need that when a user tries to log into an Oracle account, in my case an account named SYSADM, that it validates the OSUSER is one of the approved users to use that account.

Is this possible with a logon trigger?

Thanks

Cassidy

 

[Turkbear]

Hi,
Isn't that account protected by a password known only to authorized users?






To Paraphrase:"The Help you get is proportional to the Help you give.."

 

[CassidyHunt]

It is protected by a password but problem is that we can't change the password due the impact of the application. One of the authorized users has changed jobs so that has made a need to restrict access by a different means.

Does that make sense?

 

[Turkbear]

Not sure how a password change would affect an application.
Does that mean that some proc or script in the app 'knows' the password and uses it to access something?





To Paraphrase:"The Help you get is proportional to the Help you give.."

 

[CassidyHunt]

Correct. there are actually 8 or 9 apps that use the users account to authenticate then it switches to this account to actually process the information. Not the best practice but it is what it is and I have to work with it.

 

[Turkbear]

Hi,
Then the Logon Trigger may be the only way to go..

This Ask Tom posting may give an idea of how to use OSUSER ( but SYS_CONTEXT is the new way select SYS_CONTEXT ('USERENV','OS_USER') FROM DUAL
) to check the user and take some action - even though this post is about auditing not preventing.

http://asktom.oracle.com/pls/asktom/f?p=100:11:0::::P11_QUESTION_ID:1830073957439

To Paraphrase:"The Help you get is proportional to the Help you give.."