Does anyone know of an Oracle SQLNet proxy that will allow or deny
a connection based on the Oracle userid?
I have a client with a web server on a DMZ. They want to allow
connections from it to an internal Oracle database, but they want
to ensure that only a read-only userid is used. If a connection
tries to use any other userid, I want to disallow (and log, obviously)
the attempt.
I've checked Gauntlet (the only one for which I could find information)
and they allow/deny based on src IP, dest IP and port, and Oracle SID.
I'd like to add the Oracle userid. I don't care how graceful it is,
I'd just like to shutdown the connection if I detect anything other
than an allowed userid being used.
Alternatively, does anyone know a _public_ source that contains
enough information to write such a SQLNet proxy myself?
TIA.
Eric.
--
Eric V. Smith | For opinion in good men is but knowledge
EricSmith @
windsor .
com | in the making.
Windsor Software Corp +----------------------------------+ John Milton
http://www.windsor.com/ Windows NT, Unix, SQL Server | 1608-74
|
|
