oracle的监听器是什么,Oracle 监听器密码设置方法(LISTENER)

监听器也有安全？Sure！在缺省的情况下，任意用户不需要使用任何密码即通过lsnrctl 工具对Oracle Listener进行操作或关闭，从而造成任意新的会话都将无法建立连接。在Oracle 9i 中Oracle监听器允许任何一个人利用lsnrctl从远程发起对监听器的管理。也容易导致数据库受到损坏。

1. 未设定密码情形下停止监听

?

2. 重新启动监听并设置密码

?

3. 尝试未使用密码的情况下停止监听

?

4. 使用密码来停止监听

?

5. save_config失败的问题

?

6. 配置listener.ora中ADMIN_RESTRICTIONS参数

参数作用：

当在listener.ora文件中设置了ADMIN_RESTRICTIONS参数后，在监听器运行时，不允许执行任何管理命令，同时set命令将不可用

，不论是在服务器本地还是从远程执行都不行。此时对于监听的设置仅仅通过手工修改listener.ora文件，要使修改生效，只能

使用lsnrctl reload命令或lsnrctl stop/start命令重新载入一次监听器配置信息。

修改方法：

在listener.ora文件中手动加入下面这样一行

ADMIN_RESTRICTIONS_ = ON

下面是其它网友的补充：

LSNRCTL> change_password

Old password:

New password:

Reenter new password:

Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=ecp-uc-db1)(PORT=1521)))

Password changed for LISTENER

The command completed successfully

LSNRCTL> set password

Password:

The command completed successfully

LSNRCTL> save_config

Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=ecp-uc-db1)(PORT=1521)))

Saved LISTENER configuration parameters.

Listener Parameter File /opt/oracle/product/10.2.0/db_1/network/admin/listener.ora

Old Parameter File /opt/oracle/product/10.2.0/db_1/network/admin/listener.bak

The command completed successfully

[oracle@ecp-uc-db1 admin]$ cat listener.ora

#—-ADDED BY TNSLSNR 10-JUN-2011 18:13:24—

PASSWORDS_LISTENER = 6D7AA003392C436A

#——————————————–

note：10g数据库上需要上添加(重启监听)

LOCAL_OS_AUTHENTICATION_LISTENER = OFF

1、添加LOCAL_OS_AUTHENTICATION_LISTENER = OFF之前

Security ON: Password or Local OS Authentication

2、添加LOCAL_OS_AUTHENTICATION_LISTENER = OFF之后

Security ON: Password

LSNRCTL> status

Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=ecp-uc-db1)(PORT=1521)))

TNS-01169: The listener has not recognized the password

LSNRCTL> stop

Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=ecp-uc-db1)(PORT=1521)))

TNS-01169: The listener has not recognized the password

LSNRCTL> set password 123456

The command completed successfully

LSNRCTL> status

Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=ecp-uc-db1)(PORT=1521)))

STATUS of the LISTENER

————————

Alias LISTENER

Version TNSLSNR for Linux: Version 10.2.0.4.0 – Production

Start Date 10-JUN-2011 18:15:49

Uptime 0 days 0 hr. 1 min. 16 sec

Trace Level off

Security ON: Password

SNMP OFF

Listener Parameter File /opt/oracle/product/10.2.0/db_1/network/admin/listener.ora

Listener Log File /opt/oracle/product/10.2.0/db_1/network/log/listener.log

Listening Endpoints Summary…

(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=ECP-UC-DB1)(PORT=1521)))

(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC0)))

Services Summary…

Service “PLSExtProc” has 1 instance(s).

Instance “PLSExtProc”, status UNKNOWN, has 1 handler(s) for this service…

Service “ecp” has 1 instance(s).

Instance “ecp”, status READY, has 1 handler(s) for this service…

Service “ecpXDB” has 1 instance(s).

Instance “ecp”, status READY, has 1 handler(s) for this service…

Service “ecp_XPT” has 1 instance(s).

Instance “ecp”, status READY, has 1 handler(s) for this service…

The command completed successfully