Oracle在10G以后多了一个监听加密的保护措施,防止因为意外监听不正常关闭,对于重启监听时,要检查dataguard较大保护模式时主机有没有因为监听不通而关闭
1.没有加密时候的监听
[oracle@TESTDB01 ~]$ lsnrctl status
LSNRCTL for Linux: Version 11.2.0.1.0 - Production on 15-OCT-2013 06:02:25
Copyright (c) 1991, 2009, Oracle. All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1521)))
STATUS of the LISTENER
------------------------
Alias LISTENER
Version TNSLSNR for Linux: Version 11.2.0.1.0 - Production
Start Date 11-OCT-2013 04:12:34
Uptime 4 days 1 hr. 49 min. 50 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File /home/oracle/app/oracle/product/11.2.0/network/admin/listener.ora
Listener Log File /home/oracle/app/diag/tnslsnr/TESTDB01/listener/alert/log.xml
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=192.168.2.10)(PORT=1521)))
Services Summary...
Service "orcl" has 1 instance(s).
Instance "orcl", status UNKNOWN, has 1 handler(s) for this service...
Service "orclXDB" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Service "orcl_primary" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
The command completed successfully
2.加密码,初次加密码,OLD_PASSWORD为空
[oracle@TESTDB01 ~]$ lsnrctl
LSNRCTL for Linux: Version 11.2.0.1.0 - Production on 15-OCT-2013 06:05:07
Copyright (c) 1991, 2009, Oracle. All rights reserved.
Welcome to LSNRCTL, type "help" for information.
LSNRCTL> change_password
Old password:
New password:
Reenter new password:
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1521)))
Password changed for LISTENER
The command completed successfully
LSNRCTL> save_config
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1521)))
Saved LISTENER configuration parameters.
Listener Parameter File /home/oracle/app/oracle/product/11.2.0/network/admin/listener.ora
Old Parameter File /home/oracle/app/oracle/product/11.2.0/network/admin/listener.bak
The command completed successfully
3.查看修改listener文件,新增一行,使本地监听认证失效
LOCAL_OS_AUTHENTICATION_LISTENER = OFF
[oracle@TESTDB01 admin]$ more listener.ora
# listener.ora Network Configuration File: /home/oracle/app/oracle/product/11.2.0/network/admin/listener.ora
# Generated by Oracle configuration tools.
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1521))
(ADDRESS = (PROTOCOL = TCP)(HOST = OwnerHost)(PORT = 1521))
)
)
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(GLOBAL_DBNAME = orcl)
(SID_NAME = orcl)
)
)
ADR_BASE_LISTENER = /home/oracle/app
#----ADDED BY TNSLSNR 15-OCT-2013 06:05:26---
LOCAL_OS_AUTHENTICATION_LISTENER = OFF
PASSWORDS_LISTENER = 47B6AF325FB7E30D
#--------------------------------------------
4.重启监听
lsnrctl stop
lsnrctl start
[oracle@TESTDB02 admin]$ lsnrctl start
LSNRCTL for Linux: Version 11.2.0.1.0 - Production on 15-OCT-2013 06:09:31
Copyright (c) 1991, 2009, Oracle. All rights reserved.
Starting /home/oracle/app/oracle/product/11.2.0/bin/tnslsnr: please wait...
TNSLSNR for Linux: Version 11.2.0.1.0 - Production
System parameter file is /home/oracle/app/oracle/product/11.2.0/network/admin/listener.ora
Log messages written to /home/oracle/app/diag/tnslsnr/TESTDB02/listener/alert/log.xml
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC1521)))
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=TESTDB02)(PORT=1521)))
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1521)))
STATUS of the LISTENER
------------------------
Alias LISTENER
Version TNSLSNR for Linux: Version 11.2.0.1.0 - Production
Start Date 15-OCT-2013 06:09:31
Uptime 0 days 0 hr. 0 min. 0 sec
Trace Level off
Security ON: Password
SNMP OFF
Listener Parameter File /home/oracle/app/oracle/product/11.2.0/network/admin/listener.ora
Listener Log File /home/oracle/app/diag/tnslsnr/TESTDB02/listener/alert/log.xml
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=TESTDB02)(PORT=1521)))
Services Summary...
Service "orcl" has 1 instance(s).
Instance "orcl", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
5.此时去查看或者关闭监听时需要密码了
[oracle@TESTDB02 admin]$ lsnrctl status
LSNRCTL for Linux: Version 11.2.0.1.0 - Production on 15-OCT-2013 06:09:37
Copyright (c) 1991, 2009, Oracle. All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1521)))
TNS-01169: The listener has not recognized the password