Oracle11g监听的密码设置

监听也可以设置密码，目的是为了增强安全性。

[oracle@db1 ~]$ more /u01/app/oracle/network/admin/listener.ora
# listener.ora Network Configuration File: /u01/app/oracle/network/admin/listener.ora
# Generated by Oracle configuration tools.


LISTENER =
  (DESCRIPTION_LIST =
    (DESCRIPTION =
      (ADDRESS = (PROTOCOL = TCP)(HOST = db1)(PORT = 1521))
    )
  )


ADR_BASE_LISTENER = /u01


LOCAL_OS_AUTHENTICATION_LISTENER = OFF


#----ADDED BY TNSLSNR 29-SEP-2015 14:44:17---
PASSWORDS_LISTENER = 6D7AA003392C436A
#--------------------------------------------
[oracle@db1 ~]$ 

蓝色部分是由如下方式生成的：

LSNRCTL> help
The following operations are available
An asterisk (*) denotes a modifier or extended command:


start               stop                status              
services            version             reload              
save_config         trace               spawn               
change_password     quit                exit                
set*                show*               


LSNRCTL> change_password
Old password: <没有密码的话，就直接回车>
New password: <我设置的123456>
Reenter new password: <123456>
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=db1)(PORT=1521)))
Password changed for LISTENER
The command completed successfully
LSNRCTL> save_config
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=db1)(PORT=1521)))
Saved LISTENER configuration parameters.
Listener Parameter File   /u01/app/oracle/network/admin/listener.ora
Old Parameter File   /u01/app/oracle/network/admin/listener.bak
The command completed successfully
LSNRCTL>

如此之后，监听的停止和更改配置，都要验证了密码之后才能继续：

[oracle@db1 ~]$ ps -ef | grep tns
root        25     2  0 14:36 ?        00:00:00 [netns]
oracle    1486     1  0 14:58 ?        00:00:00 /u01/app/oracle/bin/tnslsnr LISTENER -inherit
oracle    1511  1456  1 15:07 pts/1    00:00:00 grep tns
[oracle@db1 ~]$ lsnrctl 


LSNRCTL for Linux: Version 11.2.0.1.0 - Production on 29-SEP-2015 15:07:54


Copyright (c) 1991, 2009, Oracle.  All rights reserved.


Welcome to LSNRCTL, type "help" for information.


LSNRCTL> stop LISTENER
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=db1)(PORT=1521)))
TNS-01169: The listener has not recognized the password
LSNRCTL> set password 
Password: <123456>
The command completed successfully
LSNRCTL> stop LISTENER
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=db1)(PORT=1521)))
The command completed successfully
LSNRCTL> exit
[oracle@db1 ~]$ ps -ef | grep tns
root        25     2  0 14:36 ?        00:00:00 [netns]
oracle    1514  1456  0 15:09 pts/1    00:00:00 grep tns
[oracle@db1 ~]$ 

验证通过后，成功停止。

LOCAL_OS_AUTHENTICATION_LISTENER = OFF，意思是默认值为ON，表示如果当前OS用户为启动监听器的用户，那么不会认证监听器密码。

仅此记录一下，今天迁移测试库遇到的。