disabling 'conn / as sysdba' access 1

[haste]

I've justed installed oracle on a unix production server and have noticed its possible to login from a remote terminal using 'conn / as sysdba'
How can I disable this?

 

[haste]

Forgot to add I have tried changing the sys password. Could it the problem be that the sys password in the password file hasn't been reset.
Also, I'm running oracle 9i.

 

[SantaMufasa]

To disable remote logins as sysdba, change your init<SID>.ora/spfile parameter to "REMOTE_LOGIN_PASSWORDFILE = NONE".

Let us know your findings.

Mufasa
(aka Dave of Sandy, Utah, USA)
[

http://www.dasages.com:

Providing low-cost remote Database Admin services]
Click here to join Utah Oracle Users Group on Tek-Tips if you use Oracle in Utah USA.

 

[haste]

It dint work. I tried it on a windows box thats running oracle 9i. Don't have access to the unix box. This is what I got.

SQL> show user
USER is "SYS"
SQL> SELECT NAME, VALUE FROM V$PARAMETER
  2  WHERE NAME LIKE 'remote_login%';

NAME
---------------------------------------------------------------
VALUE
---------------------------------------------------------------

remote_login_passwordfile
NONE


SQL> conn /@test as sysdba
Connected.
SQL>

 

[SantaMufasa]

Haste,

Once you successfully use the remote connection to your "test" machine as "SYS", could you please try (and post here the results of) the following commands (just for my satisfaction):

SELECT NAME, VALUE FROM V$PARAMETER
    WHERE NAME LIKE 'remote_login%';

SELECT * from v$instance;

Thanks,

Mufasa
(aka Dave of Sandy, Utah, USA)
[

http://www.dasages.com:

Providing low-cost remote Database Admin services]
Click here to join Utah Oracle Users Group on Tek-Tips if you use Oracle in Utah USA.

 

[haste]

In my previous message I ran the connect 'conn /@test as sysdba' from the machine on which the oracle database resides on, that is locally. I don't use ' / as sysdba' coz I get 'ORA-12560: TNSrotocol adapter error'.
Back to the issue, I tried connecting to the server from another machine and I got

Enter user-name: /@pan as sysdba
ERROR:
ORA-12170: TNS:Connect timeout occurred


Enter user-name: /@pan as sysdba
ERROR:
ORA-12170: TNS:Connect timeout occurred


Enter user-name:

Its seems to be a listener config prob. I'll work on it n send u the results u wanted.

 

[haste]

Resolved the network problem. Setting REMOTE_LOGIN_PASSWORDFILE to NONE, prevented me from logging in remotely using / as sysdba.
Thanx.

 

[haste]

Here's the output I got from the remote machine.

Personal Oracle9i Release 9.2.0.1.0 - Production
With the Partitioning, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production

SQL> conn /@test as sysdba
ERROR:
ORA-01031: insufficient privileges


Warning: You are no longer connected to ORACLE.
SQL> conn scott@test
Enter password:
Connected.
SQL> conn scott@test as sysdba
ERROR:
ORA-01031: insufficient privileges