oracle 10g listener password

今天看到同事研究listener的password的问题,以前没怎么测试过,今天顺手来测试下.
测试的过程中,发现这么个问题,Oracle 10g,listener,本地oracle用户关闭的话,是不需要口令的了(以前版本是需要的)

Oracle 9i 关闭listener是需要口令的,但start不需要.

先说说建立口令的过程[10g]:

QUOTE:

LSNRCTL> change_password
Old password:
New password:
Reenter new password:
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=orcl)(PORT=1521)))
Password changed for LISTENER
The command completed successfully
LSNRCTL> save_config
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=orcl)(PORT=1521)))
Saved LISTENER configuration parameters.
Listener Parameter File   /home/oracle/product/10.2.0/network/admin/listener.ora
Old Parameter File   /home/oracle/product/10.2.0/network/admin/listener.bak
The command completed successfully

配置完毕,主要为了以下2个方面:

1. 防止本机的其他user,关闭listener
2.防止别人远程关闭

接下来,下面我们分别演示一下:
1.本机其他用户:

QUOTE:

[test@naonao ~]$ id
uid=502(test) gid=500(dba) groups=500(dba) context=user_u:system_r:unconfined_t
[test@naonao ~]$ lsnrctl
LSNRCTL for Linux: Version 10.2.0.1.0 - Production on 03-NOV-2006 20:52:25
Copyright (c) 1991, 2005, Oracle.  All rights reserved.
Welcome to LSNRCTL, type "help" for information.
LSNRCTL> stop
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=orcl)(PORT=1521)))
TNS-01190: The user is not authorized to execute the requested listener command
LSNRCTL> set password abc
The command completed successfully
LSNRCTL> stop
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=orcl)(PORT=1521)))
The command completed successfully
LSNRCTL>

2.远程关闭

QUOTE:

[oracle@boypoo2 ~]$ lsnrctl
LSNRCTL for Linux: Version 10.2.0.1.0 - Production on 09-OCT-2006 22:00:21
Copyright (c) 1991, 2005, Oracle.  All rights reserved.
Welcome to LSNRCTL, type "help" for information.
LSNRCTL> set current listener1
Current Listener is listener1
LSNRCTL> set password
Password:
The command completed successfully
LSNRCTL> stop
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=10.1.232.10)(PORT=1521)))
The command completed successfully
LSNRCTL>

如若不然:

QUOTE:

[oracle@boypoo2 ~]$ lsnrctl
LSNRCTL for Linux: Version 10.2.0.1.0 - Production on 09-OCT-2006 22:02:22
Copyright (c) 1991, 2005, Oracle.  All rights reserved.
Welcome to LSNRCTL, type "help" for information.
LSNRCTL> set current_listener listener1
Current Listener is listener1
LSNRCTL> stop
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=10.1.232.10)(PORT=1521)))
TNS-01169: The listener has not recognized the password
TNS-01189: The listener could not authenticate the user
LSNRCTL>

还有一种情况,使用Oracle8i/9i的DBA用的到，10g的就用不到了
就是你忘记了listener密码怎么办?

解决办法:

QUOTE:

[oracle@naonao ~]$ ps -ef|grep tns
oracle    2117     1  0 10:16 ?        00:00:00 /home/oracle/product/10.2.0/bin/tnslsnr LISTENER -inherit
[oracle@naonao ~]$ kill 2117
[oracle@naonao ~]$ ps -ef|grep tns
oracle    2913  2802  0 10:19 pts/0    00:00:00 grep tns
接下来要把listener.ora中
#----ADDED BY TNSLSNR 03-MAY-2008 10:31:10---
PASSWORDS_LISTENER = CB8CC687979AB25A
#-----------------------------------------
删除或者注释,然后
[oracle@naonao ~]$ lsnrctl start
LSNRCTL for Linux: Version 10.2.0.1.0 - Production on 03-NOV-2006 20:59:42
Copyright (c) 1991, 2005, Oracle.  All rights reserved.
Starting /home/oracle/product/10.2.0/bin/tnslsnr: please wait...
TNSLSNR for Linux: Version 10.2.0.1.0 - Production
System parameter file is /home/oracle/product/10.2.0/network/admin/listener.ora
Log messages written to /home/oracle/product/10.2.0/network/log/listener.log
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=10.1.232.10)(PORT=1521)))
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=RH4SRV1)(PORT=1521)))
STATUS of the LISTENER
------------------------
Alias                     LISTENER
Version                   TNSLSNR for Linux: Version 10.2.0.1.0 - Production
Start Date                03-NOV-2006 20:59:42
Uptime                    0 days 0 hr. 0 min. 0 sec
Trace Level               off
Security                  ON: Password or Local OS Authentication
SNMP                      OFF
Listener Parameter File   /home/oracle/product/10.2.0/network/admin/listener.ora
Listener Log File         /home/oracle/product/10.2.0/network/log/listener.log
Listening Endpoints Summary...
  (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=10.1.232.10)(PORT=1521)))
Services Summary...
Service "ORCL" has 1 instance(s).
  Instance "ORCL", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
[oracle@naonao ~]$

 

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/22997/viewspace-209652/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/22997/viewspace-209652/