Re: auditing is my friend

2003-10-08 Thread Pete Finnigan
Hi Paul, Have a look at the paper i wrote for security focus a few months ago, called An Introduction to simple Oracle auditing - there is a link to it on my site - http://www.petefinnigan.com/orasec.htm - its the second paper on there. It is not in-depth but concentrates on the benefits of just

Re: auditing is my friend

2003-10-08 Thread Paul Drake
Pete, I readyour paper before I turned auditing on (in the first place). I've spent many an evening reading papers posted on your site and on the sans.org site. I haven't picked up your book in awhile, but I'm due to do so in updating our install docs for Oracle 9i on w2k3 svr. Has content been

Re: auditing is my friend

2003-10-08 Thread Pete Finnigan
Hi Paul, Thanks for your reply. The Oracle security step-by-step is available on- line from SANS but only as departmental licenses and unlimited licenses at present. The code from the book is available on my website http://www.petefinnigan.com - look under the page about the book. Also I have

auditing is my friend

2003-10-07 Thread Paul Drake
Hi. I just wanted to plug the use of auditing. By simply enabling audit session, I detemined that users that were accessing a database via a vpn connection were being timed out (LOGOFF BY CLEANUP). It wasn't the application that was causing the apparent hangs, it was the network. How bout

RE: auditing is my friend

2003-10-07 Thread Melanie Caffrey
Hear, hear, Paul! I too, am a big fan of auditing. It can make your life so much easier. Cheers, Melanie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Drake Sent: Tuesday, October 07, 2003 8:14 PM To: Multiple recipients

Oracle Auditing

2003-06-18 Thread Kevin Toepke
Greetings and Salutations! At the direction of the external auditors I have been instructed to install/configure oracle auditing in our Oracle Applications databases. (sweet!) The next step is to estimate how much space all of the auditing information will take. (I plan on moving the data from

RE: Oracle Auditing

2003-06-18 Thread Thater, William
Kevin Toepke scribbled on the wall in glitter crayon: Can anyone out there in oracle-l land help me give a reasonable estimate? billions and billions.;-) -- Bill Shrek ThaterOracle DBA BAARF Party member #25 [EMAIL PROTECTED]

RE: Oracle Auditing

2003-06-18 Thread Robson, Peter
- From: Kevin Toepke [mailto:[EMAIL PROTECTED] Sent: 18 June 2003 14:50 To: Multiple recipients of list ORACLE-L Subject: Oracle Auditing Greetings and Salutations! At the direction of the external auditors I have been instructed to install/configure oracle auditing in our Oracle

RE: Oracle Auditing

2003-06-18 Thread Stephane Faroult
Kevin, It widely depends on what you are auditing, and how (eg per access / per session). If it's per access (certainly an overkill) a sum(executions) from v$sql group by command_type can put you on the right tracks for the number of records you may expect (check also the oldest loading

RE: Oracle Auditing

2003-06-18 Thread Jesse, Rich
[EMAIL PROTECTED] Quad/Tech Inc, Sussex, WI USA -Original Message- From: Kevin Toepke [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 8:50 AM To: Multiple recipients of list ORACLE-L Subject: Oracle Auditing Greetings and Salutations! At the direction

RE: Oracle Auditing

2003-06-18 Thread Jeffrey Beckstrom
bepretty small (grin!)peter -Original Message- From: Kevin Toepke [mailto:[EMAIL PROTECTED] Sent: 18 June 2003 14:50 To: Multiple recipients of list ORACLE-L Subject: Oracle Auditing Greetings and Salutations! At the direction of the external auditors I have been instructed to install

RE: Oracle Auditing

2003-06-18 Thread Jesse, Rich
, Rich Sent: Wednesday, June 18, 2003 10:19 AM To: '[EMAIL PROTECTED]' Subject: RE: Oracle Auditing From our production ERP DB: SELECT MIN(timestamp), MAX(timestamp), AVG(rowsperday), SUM(rowsperday) FROM ( SELECT TRUNC(timestamp) TIMESTAMP, COUNT(*) ROWSPERDAY FROM dba_audit_trail

RE: Database Auditing

2003-06-11 Thread Jesse, Rich
AM To: Multiple recipients of list ORACLE-L Subject: Re: Database Auditing Ravindra, I'm not sure I understand the question correctly. Statement level auditing? Are you referring to recording that a particular statement was executed on a specific table? If so, the plain vanilla AUDIT

Re: Database Auditing

2003-06-11 Thread Arup Nanda
Subject: Re: Database Auditing Ravindra, I'm not sure I understand the question correctly. Statement level auditing? Are you referring to recording that a particular statement was executed on a specific table? If so, the plain vanilla AUDIT statement is for you. There is no need

Database Auditing

2003-06-10 Thread Basavaraja, Ravindra
Hi All, How do we turn on statement level auditing (DB and OS Level) to audit the DML/DDL's on the database.Is this possible with out triggers? Thanks -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Basavaraja, Ravindra INET: [EMAIL PROTECTED] Fat City Network

Re: Database Auditing

2003-06-10 Thread Mogens Nørgaard
on statement level auditing (DB and OS Level) to audit the DML/DDL's on the database.Is this possible with out triggers? Thanks -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: =?ISO-8859-1?Q?Mogens_N=F8rgaard?= INET: [EMAIL PROTECTED] Fat City Network Services-- 858

Re: Database Auditing

2003-06-10 Thread Arup Nanda
Ravindra, I'm not sure I understand the question correctly. Statement level auditing? Are you referring to recording that a particular statement was executed on a specific table? If so, the plain vanilla AUDIT statement is for you. There is no need for any triggers to be set up. If you want more

Script to Turn Off All Oracle Auditing Options?

2003-03-04 Thread Sam Bootsma
not use the database. My plan is this: Turn on session auditing (See below for potential problem) After a couple of months, determine which users have never logged into the database Lock or drop the accounts of these users I was about to turn on auditing when I realized

RE: Script to Turn Off All Oracle Auditing Options?

2003-03-04 Thread Jacques Kilchoer
Title: RE: Script to Turn Off All Oracle Auditing Options? To create the audit trail views, run cataudit.sql. To delete the audit trail views, run catnoaud.sql. To find out which are the active options, use this statement: SELECT * FROM sys.dba_priv_audit_opts; or for audit options

RE: Script to Turn Off All Oracle Auditing Options?

2003-03-04 Thread Jacques Kilchoer
In my previous message, I forgot to say: You could always use the scorched earth approach and change everyone's password. Then see who complains that they can't log in. :) -Original Message- We are running Oracle 7.3.4.5.0 on an IBM/AIX RISC System/6000: Version 2.3.4.0.0. I have a

Re: Script to Turn Off All Oracle Auditing Options?

2003-03-04 Thread Charlie_Mengler
I see yet another poor soul still supporting V7.3.4.5 as I am doing on V2.6 Solaris. You should be warned that on a couple of different occasions (I'm a slow learner) when I launched a SQL script which changed AUDITing on hundreds of objects, Oracle went bonkers. It appearded as though

Re: sys.aud$ - auditing user activities? - follow up

2002-11-19 Thread Tim Gorman
...um, if you say so. That really didn't answer my question, though... I hope that your solution did not include assigning users SYSDBA privileges in order to merely track/audit them? - Original Message - To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Sent: Monday, November

sys.aud$ - auditing user activities?

2002-11-18 Thread Dana . Mueller
Hello All, Do any of you have suggestions for a good way to monitor sysdba user activities on the sys.aud$ table? Or, in terms of logging everything, what would be the keypoints to log scrub on? Any suggestions would be wonderful. -- Please see the official ORACLE-L FAQ: http://www.orafaq.com

FW: sys.aud$ - auditing user activities?

2002-11-18 Thread Dana . Mueller
-Original Message- From: Dana Mueller Sent: Monday, November 18, 2002 11:45 AM To: '[EMAIL PROTECTED]' Subject: sys.aud$ - auditing user activities? Hello All, Do any of you have suggestions for a good way to monitor sysdba user activities on the sys.aud

Re: sys.aud$ - auditing user activities?

2002-11-18 Thread Tim Gorman
SYSDBA activities are not logged to the SYS.AUD$ table, even in Oracle9i with the AUDIT_SYS_OPERATIONS parameter set to TRUE. SYSDBA operations are always logged to the OS audit trail, including access/modifications to the SYS.AUD$ table... The reason that these records are only logged to the

RE: sys.aud$ - auditing user activities? - follow up

2002-11-18 Thread Dana . Mueller
Tim - Thanks for the well worded response. Very, very helpful. So my next question: Are there any 3rd party applications available to do what Oracle won't? -Original Message- Sent: Monday, November 18, 2002 4:29 PM To: Multiple recipients of list ORACLE-L SYSDBA activities are not

Re: sys.aud$ - auditing user activities? - follow up

2002-11-18 Thread Tim Gorman
please be a little more specific? what exactly is it that oracle won't do? - Original Message - To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Sent: Monday, November 18, 2002 7:58 PM Tim - Thanks for the well worded response. Very, very helpful. So my next question:

RE: sys.aud$ - auditing user activities? - follow up

2002-11-18 Thread Dana . Mueller
Tim / All. I figured it out. Basically assign users SYSDBA privies and track accordingly. -Original Message- Sent: Monday, November 18, 2002 7:44 PM To: Multiple recipients of list ORACLE-L please be a little more specific? what exactly is it that oracle won't do? - Original

Re: auditing CREATE DATABASE

2002-10-20 Thread Hemant K Chitale
, 2002 10:41 AM Is there a way of capturing info on people who issue CREATE DATABASE statements? My Oracle Support technician says auditing won't catch this, only catches successful attempts. Regards, Patrice Boivin Systems Analyst (Oracle Certified DBA) Systems Admin Operations | Admin. et

auditing CREATE DATABASE

2002-10-17 Thread Boivin, Patrice J
Is there a way of capturing info on people who issue CREATE DATABASE statements? My Oracle Support technician says auditing won't catch this, only catches successful attempts. Regards, Patrice Boivin Systems Analyst (Oracle Certified DBA) Systems Admin Operations | Admin. et Exploit. des

Re: auditing CREATE DATABASE

2002-10-17 Thread Tim Gorman
] Sent: Thursday, October 17, 2002 10:41 AM Is there a way of capturing info on people who issue CREATE DATABASE statements? My Oracle Support technician says auditing won't catch this, only catches successful attempts. Regards, Patrice Boivin Systems Analyst (Oracle Certified DBA) Systems Admin

RE: auditing CREATE DATABASE

2002-10-17 Thread Gogala, Mladen
: Thursday, October 17, 2002 12:42 PM To: Multiple recipients of list ORACLE-L Subject: auditing CREATE DATABASE Is there a way of capturing info on people who issue CREATE DATABASE statements? My Oracle Support technician says auditing won't catch this, only catches successful attempts

RE: auditing CREATE DATABASE

2002-10-17 Thread Vergara, Michael (TEM)
Um... wasn't this... Then you go and publicly execute that person by beating him to the pulp with a baseball bat (so called Soprano method) ...the Al Capone method in The Untouchables? -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Vergara,

RE: auditing CREATE DATABASE

2002-10-17 Thread Gogala, Mladen
- From: Tim Gorman [mailto:Tim;SageLogix.com] Sent: Thursday, October 17, 2002 1:51 PM To: Multiple recipients of list ORACLE-L Subject: Re: auditing CREATE DATABASE What a tongue-in-cheek answer: only catches successful attempts! I like his/her sense of humor... Issuing a CREATE

Auditing logons

2002-08-09 Thread dgoulet
is that there have been some unexplained changes to data that have occurred over the last month that is causing a pile of concern. It is believed that someone who has the schema password is using SQL*Plus or Toad to update the data when they should not be doing so. Now auditing connects for the schema

RE: Auditing logons

2002-08-09 Thread Jamadagni, Rajendra
. Now auditing connects for the schema account is not a problem, but determining which are suspicious and which are due to the damned PeopleSoft panel processor I can't see a way around easily from sys.aud$. Anyone else been there, done that?? Dick Goulet -- Please see the official ORACLE-L FAQ

RE: Auditing logons

2002-08-09 Thread DENNIS WILLIAMS
. The reason is that there have been some unexplained changes to data that have occurred over the last month that is causing a pile of concern. It is believed that someone who has the schema password is using SQL*Plus or Toad to update the data when they should not be doing so. Now auditing connects

Re: Auditing logons

2002-08-09 Thread Rachel Carmichael
not be doing so. Now auditing connects for the schema account is not a problem, but determining which are suspicious and which are due to the damned PeopleSoft panel processor I can't see a way around easily from sys.aud$. Anyone else been there, done that?? Dick Goulet -- Please see

RE: Auditing logons

2002-08-09 Thread Post, Ethan
the last month that is causing a pile of concern. It is believed that someone who has the schema password is using SQL*Plus or Toad to update the data when they should not be doing so. Now auditing connects for the schema account is not a problem, but determining which are suspicious and which are due

Re: Auditing logons

2002-08-09 Thread Jared . Still
To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] cc: Subject:Auditing logons Folks, Before I go off re-inventing the wheel once again I'll ask the group is anyone has tried this before. What I have is a request from damanagement to tell them

RE: Auditing logons

2002-08-09 Thread Naveen Nahata
or Toad to update the data when they should not be doing so. Now auditing connects for the schema account is not a problem, but determining which are suspicious and which are due to the damned PeopleSoft panel processor I can't see a way around easily from sys.aud$. Anyone else been there, done

RE: Auditing logons

2002-08-09 Thread Mercadante, Thomas F
they should not be doing so. Now auditing connects for the schema account is not a problem, but determining which are suspicious and which are due to the damned PeopleSoft panel processor I can't see a way around easily from sys.aud$. Anyone else been there, done that?? Dick Goulet -- Please see

Re:RE: Auditing logons

2002-08-09 Thread dgoulet
SQL*Plus or Toad to update the data when they should not be doing so. Now auditing connects for the schema account is not a problem, but determining which are suspicious and which are due to the damned PeopleSoft panel processor I can't see a way around easily from sys.aud$. Anyone else been

RE: Auditing logons

2002-08-09 Thread Gene Sais
unexplained changes to data that have occurred over the last month that is causing a pile of concern. It is believed that someone who has the schema password is using SQL*Plus or Toad to update the data when they should not be doing so. Now auditing connects for the schema account is not a problem

auditing sys

2002-06-10 Thread JOE TESTA
according to the docs its in there. Sys Accountability: Heightened user accountability and database security are now possible with the capability to audit all operations done by user SYS(including all as SYSDBA and SUSOPER connections). This is from the 9ir2 new features guide. Haven't

User Logon Auditing

2002-04-05 Thread dmeng
Greetings, I have a request from my boss to come up with a list of users for a particular database. Since this is 805 database logon trigger is not an option. Turning on audit trail will be an overkill and not sure if performance will be acceptable if we do that. Other than querying v$session

Re: User Logon Auditing

2002-04-05 Thread Ron Rogers
Dennis, How about using the listner.log file and gathering information on the USER and HOST columns. That will tell you the login id and the name/ip of the machine they logged in from. ROR mª¿ªm [EMAIL PROTECTED] 04/05/02 02:25PM Greetings, I have a request from my boss to come up with a list

Re: User Logon Auditing

2002-04-05 Thread Stephane Faroult
that auditing will be an overkill? You do not have to record everything. You can have as little as storing a row into SYS.AUD$ each time somebody connects. Bearable. -- Regards, Stephane Faroult Oriole Software -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Stephane Faroult

Re: User Logon Auditing

2002-04-05 Thread Ron Rogers
Dennis, You said that DBA_USERS has obsolete and duplicate entries. If you gracefully warn the users and age the passwords then you can disable all of the users that do not change the password and also get an accurate list of users for a short period of time. It will also help clean up the

Re: User Logon Auditing

2002-04-05 Thread Suzy Vordos
I agree with Stephane, auditing shouldn't be a problem. Be certain to move SYS.AUD$ out of SYSTEM first: alter table sys.aud$ move tablespace tools storage (initial 128K next 128K); alter index sys.i_aud1 rebuild tablespace tools storage (initial 128K next 128K

RE: User Logon Auditing

2002-04-05 Thread Eric Harrington
everybody, is there a better way to do this? DBA_USERS view is not going to work because there are too many duplicate and obsolete entries. TIA Dennis Meng Database Administrator Focal Communications Corp. Why do you say that auditing will be an overkill? You do not have to record everything

logon failure auditing

2002-02-12 Thread Bob Robert
All, I would like to audit all the database users upon logon failure. I know that someone must have been implemented similar kind of auditing. Could you please share your information with me. At the same time I did create new profile and assign it to all the database users. This new profile

Re: logon failure auditing

2002-02-12 Thread orantdba
the dba_audit_trail view. John [EMAIL PROTECTED] wrote: All, I would like to audit all the database users upon logon failure. I know that someone must have been implemented similar kind of auditing. Could you please share your information with me. At the same time I did create new profile

Re: Temporal or Time-Oriented Databases (was auditing tables)

2002-02-04 Thread Jared Still
On Sunday 03 February 2002 15:30, Craig Munday wrote: The thread on auditing tables and the mention of temporal or time-oriented databases prompted me to ask about a design problem that has recurred on different projects for me. Seeing as this problem has occurred multiple times I figured that other

Temporal or Time-Oriented Databases (was auditing tables)

2002-02-03 Thread Craig Munday
Title: Temporal or Time-Oriented Databases (was auditing tables) The thread on auditing tables and the mention of temporal or time-oriented databases prompted me to ask about a design problem that has recurred on different projects for me. Seeing as this problem has occurred multiple times I

RE: AW: auditing tables

2002-01-30 Thread Bala, Prakash
+ 1 for that sequence number, and reinsert the row into the same table. So auditing was easy. Prakash -Original Message- Sent: Tuesday, January 29, 2002 3:11 PM To: Multiple recipients of list ORACLE-L Now you're getting into the realm of Temporal or Time- Oriented Databases. Suppose

Re: AW: auditing tables

2002-01-29 Thread Stephane Faroult
Foelz.Frank wrote: TNX for your answers. What I need is exactly what Oracle doesn't support. Logging who changed what in a special area of our database. I think triggering the events will be much more specific and more easy to change. In case all our applications use the same

Re: AW: auditing tables

2002-01-29 Thread Rachel Carmichael
triggers -- that do an insert into an auditing table. Been there, done that: Insert -- add a row to the auditing table of all the new values with one extra column type =I Delete add a row to the auditing table with all the old values and type=D Update -- add two rows to the auditing table

Re: AW: auditing tables

2002-01-29 Thread Jared Still
On Tuesday 29 January 2002 03:00, Rachel Carmichael wrote: Update -- add two rows to the auditing table -- first with old values and type = O second with all the new values and type =N Rachel, I don't think you need two rows for updates. The old values will be in the audit table, the new

RE: AW: auditing tables

2002-01-29 Thread Jamadagni, Rajendra
Jared, I just put the old values in the audit table with an additional column which tells exactly which columns are changed. Ah the wonders of dynamic sql ... Raj __ Rajendra Jamadagni MIS, ESPN Inc. Rajendra dot Jamadagni at ESPN

Re: AW: auditing tables

2002-01-29 Thread Igor Neyman
recipients of list ORACLE-L [EMAIL PROTECTED] Sent: Tuesday, January 29, 2002 10:05 AM On Tuesday 29 January 2002 03:00, Rachel Carmichael wrote: Update -- add two rows to the auditing table -- first with old values and type = O second with all the new values and type =N Rachel, I

Re: auditing tables

2002-01-29 Thread Paul Baumgartel
in a repository, too. PB --- Rachel Carmichael [EMAIL PROTECTED] wrote: triggers -- that do an insert into an auditing table. Been there, done that: Insert -- add a row to the auditing table of all the new values with one extra column type =I Delete add a row to the auditing table with all

Re: AW: auditing tables

2002-01-29 Thread Jared . Still
ORACLE-L [EMAIL PROTECTED] cc: Subject:Re: AW: auditing tables Is there some other reason for saving both in the audit table? Jared, You must be right. But, if for some 'crazy' reason primary key of the record gets modified, then you need both old and new in audit table

Re: AW: auditing tables

2002-01-29 Thread Thomas B. Cox
to the auditing table -- first with old values and type = O second with all the new values and type =N --- Foelz.Frank [EMAIL PROTECTED] wrote: What I need is exactly what Oracle doesn't support. Logging who changed what in a special area of our database. I think triggering

Re: AW: auditing tables

2002-01-29 Thread Jared Still
is always in the production table. If a row is deleted, the whole thing goes in the audit table. My purpose for these has been for occasional auditing. I use code ( Perl, or course ) to generate the proper DDL and triggers for all tables I wish to audit, placing them in their own tablespaces. Your

Re: AW: auditing tables

2002-01-29 Thread Rachel Carmichael
there -- time tracked if you want --- Jared Still [EMAIL PROTECTED] wrote: On Tuesday 29 January 2002 03:00, Rachel Carmichael wrote: Update -- add two rows to the auditing table -- first with old values and type = O second with all the new values and type =N Rachel, I don't think

Re: AW: auditing tables

2002-01-29 Thread Rachel Carmichael
process? --- Jared Still [EMAIL PROTECTED] wrote: On Tuesday 29 January 2002 03:00, Rachel Carmichael wrote: Update -- add two rows to the auditing table -- first with old values and type = O second with all the new values and type =N Rachel, I don't think you need two rows for updates

auditing tables

2002-01-28 Thread Foelz.Frank
Hi all, does anyone have experience in using Oracle's possibilities of auditing a database ?? I am interested in performance questions i.e. is it a hughe loss of performance when auditing tables Inserts/Updates/Deletes. Should I use triggers instead ? any hints (comments, websites, etc

RE: auditing tables

2002-01-28 Thread Hallas John
Title: RE: auditing tables Auditing is a definite overhead but the degree varies depending on what auditing is set up and how many transactions you have. Auditing can tell you who did what to a table (IUD etc). What it will not do is store before and after values. If that is what you want

Re: auditing tables

2002-01-28 Thread Rachel Carmichael
] wrote: Hi all, does anyone have experience in using Oracle's possibilities of auditing a database ?? I am interested in performance questions i.e. is it a hughe loss of performance when auditing tables Inserts/Updates/Deletes. Should I use triggers instead ? any hints (comments

AW: auditing tables

2002-01-28 Thread Foelz.Frank
are better off with triggers and possibly an audit table. Oracle doesn't record WHAT has been changed, just that the table was accessed. So you don't know the row etc... --- Foelz.Frank [EMAIL PROTECTED] wrote: Hi all, does anyone have experience in using Oracle's possibilities of auditing

Re: Data Auditing

2001-10-22 Thread bunyamin karadeniz
] Sent: Friday, October 19, 2001 8:38 PM Does anyone have any recommendations on auditing data changes on several tables? I want to keep before and after data along with username/timestamp. I'm thinking of a DML trigger on each table and each with its own audit table? Or what about

Data Auditing

2001-10-19 Thread Bill Buchan
Does anyone have any recommendations on auditing data changes on several tables? I want to keep before and after data along with username/timestamp. I'm thinking of a DML trigger on each table and each with its own audit table? Or what about a single audit table (using TO_CHAR to convert

Re: auditing ... getting offending SQL ??

2001-08-15 Thread Galen Boyer
On Mon, 13 Aug 2001, [EMAIL PROTECTED] wrote: Who is the vendor for EZSQL? Do you have a web site for them? www.google.com, type in ezsql and the first thing you get is http://www.ezsql.net/ -- Galen Boyer It seems to me, I remember every single thing I know. -- Please see the official

RE: auditing ... getting offending SQL ??

2001-08-13 Thread Cherie_Machler
: Sent by: Subject: RE: auditing ... getting offending SQL ?? [EMAIL PROTECTED

Oracle Auditing

2001-07-11 Thread Robertson Lee - lerobe
Guys, One of our clients wants us to audit connections to the DB. Apart from the obvious things is there a way within auditing to view how they actually connected. ie. from v$session we can see whether it was via sqlplus, TOAD etc. etc. I can't find out in the docs whether this can

Re: Oracle Auditing

2001-07-11 Thread Rachel Carmichael
Lee, what version of the database? I'm thinking a logon trigger here, to capture and write the session info to a table Rachel From: Robertson Lee - lerobe [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Subject: Oracle Auditing Date

RE: Oracle Auditing

2001-07-11 Thread Rachel Carmichael
For the list, because we have already discussed it... nope, it's an 8i feature From: Robertson Lee - lerobe [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Subject: RE: Oracle Auditing Date: Wed, 11 Jul 2001 07:11:43 -0800 Rachel

RE: Oracle Auditing

2001-07-11 Thread Robertson Lee - lerobe
Auditing Date: Wed, 11 Jul 2001 04:45:54 -0800 Guys, One of our clients wants us to audit connections to the DB. Apart from the obvious things is there a way within auditing to view how they actually connected. ie. from v$session we can see whether it was via sqlplus, TOAD etc. etc. I can't find

RE: Griping about auditing (not the Oracle Kind)

2001-06-29 Thread Miller, Jay
As you might have gathered from my previous e-mail I'm not a big fan of functional division as opposed to project division. Since I was moved to a different building from the developers much of the time I don't spend dealing with the new paperwork and bureaucracy I spend on the phone. I can see

Re:RE: Griping about auditing (not the Oracle Kind)

2001-06-29 Thread dgoulet
Jay GC, I guess I must live in heaven. Over here things are staying relatively the same as they always have. Developers develop stuff (applications, data warehouses, etc...) and in the process do some logical database design which the DBA's (me included here) get to review all of it,

RE: Griping about auditing (not the Oracle Kind)

2001-06-28 Thread Miller, Jay
PROTECTED] com cc: Sent by: Subject: Re: Griping about auditing (not the Oracle Kind) root@fatcity. com 06/25/2001 06:40 PM

RE: Griping about auditing (not the Oracle Kind)

2001-06-28 Thread Miller, Jay
Okay, my situation doesn't seem so bad now. Thanks! The rules are mitigated by a number of sensible managers here and there who do their best to see that things hold together. And I won't comment in a public forum as to whether something necessary has occasionally been done while paperwork is

Re: Griping about auditing (not the Oracle Kind)

2001-06-28 Thread Gregory Conron
On June 28, 2001 11:51 am, Miller, Jay wrote: Yep, I've dealt with incredibly incompetent consultants (Because of our new division of responsibilties, all programming must come from the development team. I This brings up an interesting point - I've noticed that recently division of

RE: Griping about auditing (not the Oracle Kind)

2001-06-27 Thread Richard Ji
That's actually a good idea. We can control the world by taking over all the data. We will be so powerful. :) [EMAIL PROTECTED] 06/25/01 11:45AM A non-DBA? Is that because we stick together like the Mafia or something?! g -Original Message- Sent: Monday, June 25, 2001 3:32 PM To:

RE: Griping about auditing (not the Oracle Kind)

2001-06-26 Thread Robertson Lee - lerobe
Excuse me but you are a little presumptious and rude with that last mail. If a process is put in place that requires a form to be signed and authorisation to be given before action can be taken then I would be going totally against the grain and would get into trouble for not adhering to the

RE: Griping about auditing (not the Oracle Kind)

2001-06-26 Thread Robertson Lee - lerobe
Title: RE: Griping about auditing (not the Oracle Kind) My point precisely. I'm not putting my neck on the line because someone won't allow me to do my job. Let them be the one who takes the hit when the s**t hits the fan. Thanks Chris, good point well made (better than my knee jerk

Re:RE: Griping about auditing (not the Oracle Kind)

2001-06-26 Thread dgoulet
Lee, In my case (please see my previous post on the subject) I had proposed a change that was rejected. In short I wanted to move a datafile during a maintenance down day from one drive to another where there would be more room for expansion. OK, so management rejected the change for dumb

RE: Griping about auditing (not the Oracle Kind)

2001-06-26 Thread Michael Kline
Kline ThinkSpark Richmond, VA 804-744-1545 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Don Granaman Sent: Tuesday, June 26, 2001 1:20 AM To: Multiple recipients of list ORACLE-L Subject: Re: Griping about auditing (not the Oracle Kind) I

RE: Griping about auditing (not the Oracle Kind)

2001-06-26 Thread Kevin Lange
Different situations . different solutions. Its all subjective. What will work at one location is like using a feather to stop an elephant at another. rather useless. -Original Message- Sent: Monday, June 25, 2001 1:31 PM To: Multiple recipients of list ORACLE-L Sorry but

RE: Griping about auditing (not the Oracle Kind)

2001-06-26 Thread Hillman, Alex
Full authority and no responcibility - looks like very much an HMO. I don't think I would survive in this environment for so long. Maybe if I did not have where to go and had small children to feed. This is exactly what I posted. This is no win game and possible only if payd by the hour and payd

Re: Griping about auditing (not the Oracle Kind)

2001-06-26 Thread DBarbour
rama@toyota.To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] com cc: Sent by: Subject: Re: Griping about auditing

RE: Griping about auditing (not the Oracle Kind)

2001-06-26 Thread Kevin Lange
Kimberly; Absolutely. And I did not take ANY of your comments as Rude or Presumptuous. I am sorry my comments in my note drove someone to think that of you. -Original Message- Sent: Tuesday, June 26, 2001 11:22 AM To: Multiple recipients of list ORACLE-L This is the line I

RE: Griping about auditing (not the Oracle Kind)

2001-06-26 Thread Kevin Lange
rama@toyota.To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] com cc: Sent by: Subject: Re: Griping about auditing (not the Oracle Kind) root@fatcity

Re: Griping about auditing (not the Oracle Kind)

2001-06-25 Thread nlzanen1
recipients of list ORACLE-L [EMAIL PROTECTED] house.com cc: (bcc: Jack van Zanen/nlzanen1/External/MEY/NL) Sent by: Subject: Griping about auditing (not the Oracle Kind

RE: Griping about auditing (not the Oracle Kind)

2001-06-25 Thread Miller, Jay
Close, it's a brokerage. But regarding flooding the SVP, one of my favorite Dilbert moments came about a month after the new procedures were in place. They were getting forms from multiple sources (me, the developers on our OLTP database and the developers from our datawarehouse). All those

RE: Griping about auditing (not the Oracle Kind)

2001-06-25 Thread Guy Hammond
A non-DBA? Is that because we stick together like the Mafia or something?! g -Original Message- Sent: Monday, June 25, 2001 3:32 PM To: Multiple recipients of list ORACLE-L We've been through an internal audit and I was just wondering if anyone else has to deal with the rather

RE: Griping about auditing (not the Oracle Kind)

2001-06-25 Thread Kevin Lange
Jay; I have had to go thru the same thing a couple times on a previous job with Auditors. Every time those kind of restrictions were placed on us it brought things to a snails pace or, in some conditions, a complete halt. Sooner or later they realized that it was unreasonable and lifted them.

RE: Griping about auditing (not the Oracle Kind)

2001-06-25 Thread Mercadante, Thomas F
Alex, that was the result of an inexperienced DBA. an experienced DBA would know that there is a load placed on the server during datafile addition time. if you have a server with extra oomf, then the users should not see any difference. it sounds like you had a very sensitive database that

RE: Griping about auditing (not the Oracle Kind)

2001-06-25 Thread Robertson Lee - lerobe
Wahey !!! The answer I was going to provide. We started calling the manager up quite frequently at home to authorise changes - he eventually saw sense. Not quite as bad as 2am in the morning but inconvenient enough for him to put a stop to it. Best of Luck. -Original Message- Sent: 25

  1   2   >