REMOTE_LOGIN_PASSWORDFILE

Check

SELECT UPPER(VALUE)

 FROM V$SYSTEM_PARAMETER

 WHERE UPPER(NAME)='REMOTE_LOGIN_PASSWORDFILE'; 

Change

ALTER SYSTEM SET REMOTE_LOGIN_PASSWORDFILE = 'NONE' SCOPE = SPFILE; 

REMOTE_OS_AUTHENT

• Deprecated in 12.1 amd higher.

• Default: FALSE

• Recommended: FALSE

Check

SELECT UPPER(VALUE)

  FROM V$SYSTEM_PARAMETER

 WHERE UPPER(NAME)='REMOTE_OS_AUTHENT'; 

Change

ALTER SYSTEM SET REMOTE_OS_AUTHENT = FALSE SCOPE = SPFILE; 

SEC_CASE_SENSITIVE_LOGON

• Default: TRUE

• If TRUE then passwords are case sensitive.

• Recommended: TRUE

Check

SELECT UPPER(VALUE)

  FROM V$SYSTEM_PARAMETER

 WHERE UPPER(NAME)='SEC_CASE_SENSITIVE_LOGON'; 

Change

ALTER SYSTEM SET SEC_CASE_SENSITIVE_LOGON = TRUE SCOPE = SPFILE; 

SEC_MAX_FAILED_LOGIN_ATTEMPTS

• Governs number of failed authentication attempts that can be made by a client before connection is dropped.

• Default: 3

• Recommended: 3 (or less)

Check

SELECT UPPER(VALUE)

  FROM V$SYSTEM_PARAMETER

 WHERE UPPER(NAME)='SEC_MAX_FAILED_LOGIN_ATTEMPTS'; 

Change

ALTER SYSTEM SET SEC_MAX_FAILED_LOGIN_ATTEMPTS = 3 SCOPE = SPFILE;

SEC_PROTOCOL_ERROR_FURTHER_ACTION

• Governs what happens when receiving bad packets from a client;

• Default: (DROP,3)

• Recommended: (DROP,3)

Check

SELECT UPPER(VALUE)

  FROM V$SYSTEM_PARAMETER

 WHERE UPPER(NAME)='SEC_PROTOCOL_ERROR_FURTHER_ACTION'; 

Change

SEC_PROTOCOL_ERROR_TRACE_ACTION

• Default: TRACE

• Recommended: LOG

Check

SELECT UPPER(VALUE)

  FROM V$SYSTEM_PARAMETER

 WHERE UPPER(NAME)='SEC_PROTOCOL_ERROR_TRACE_ACTION';

Bibliography