From: Vijay Soni on
Hi,
I have a query about the parameter ADMIN_RESTRICTIONS, what is the
value of the parameter if not set explicitly.
And apart from listener.ora where can we see that value??
From: ddf on
Comments embedded.

On Dec 17, 10:50 am, Vijay Soni <vijay.k.s...(a)gmail.com> wrote:
> Hi,
> I have a query about the parameter ADMIN_RESTRICTIONS, what is the
> value of the parameter if not set explicitly

OFF
..
> And apart from listener.ora where can we see that value??

Nowhere to my knowledge.


David Fitzjarrell

From: joel garry on
On Dec 17, 7:50 am, Vijay Soni <vijay.k.s...(a)gmail.com> wrote:
> Hi,
> I have a query about the parameter ADMIN_RESTRICTIONS, what is the
> value of the parameter if not set explicitly.
> And apart from listener.ora where can we see that value??

This does seem to be a bit sparse in the documentation department, not
helped by gateway timeouts in tahiti. But anyways, searching metalink
for the term brings up Note: 403537.1, Best Practices for Securing
Oracle E-Business Suite, which claims that "when ADMIN_RESTRICTIONS is
ON, all the set commands in lsnrctl are disabled and the only way
to change the configuration is to edit the listener.ora file." So I
would guess the default is off, since normally I can use set commands.

The listener is a separate process, so I would guess there is no other
place to see it. Maybe some OS utilities could dig into the
process... Even Pete asks:
http://www.petefinnigan.com/forum/yabb/YaBB.cgi?board=ora_sec;action=display;num=1135270939

jg
--
@home.com is bogus.
http://www.signonsandiego.com/news/2009/dec/14/the-north-face-files-lawsuit-against-parody/
From: Vijay Soni on
On Dec 17, 10:12 pm, joel garry <joel-ga...(a)home.com> wrote:
> On Dec 17, 7:50 am, Vijay Soni <vijay.k.s...(a)gmail.com> wrote:
>
> > Hi,
> > I have a query about the parameter ADMIN_RESTRICTIONS, what is the
> > value of the parameter if not set explicitly.
> > And apart from listener.ora where can we see that value??
>
> This does seem to be a bit sparse in the documentation department, not
> helped by gateway timeouts in tahiti.  But anyways, searching metalink
> for the term brings up Note: 403537.1, Best Practices for Securing
> Oracle E-Business Suite, which claims that "when ADMIN_RESTRICTIONS is
> ON, all the set commands in lsnrctl are disabled and the only way
> to change the configuration is to edit the listener.ora file."  So I
> would guess the default is off, since normally I can use set commands.
>
> The listener is a separate process, so I would guess there is no other
> place to see it.  Maybe some OS utilities could dig into the
> process... Even Pete asks:http://www.petefinnigan.com/forum/yabb/YaBB.cgi?board=ora_sec;action=...
>
> jg
> --
> @home.com is bogus.http://www.signonsandiego.com/news/2009/dec/14/the-north-face-files-l...

Thanks a lot.
that really helps.