Unused service in Solaris 10 and default user in Oracle 10

[Former Member]

Hi,

Our SAP system (ERP6 EHP4) were installed on Solaris 10 and Oracle 10

Questions are:

- Which ports of /etc/services on Solaris 10 can disable without affect with SAP?

- Which default users in Oracle 10 can lock or disable (or change password)?

Ps. For Auditing purpose and security hardening in SAP ERP6 EHP4.

Best regards,

Choosak B.

[Former Member]

HI,

For port information use this guide

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/4e515a43-0e01-0010-2da1-9bcc452c2...

Regarding change in password of oracle users you can change all passwords using BRTOOLS.

Any how SAP only use OS level authntication and SAP<SID> user .

But still you should not lock any user but change in password is supported for all users.(Use brtools to perform same)

Adding up: http://help.sap.com/saphelp_nw04/helpdata/en/4f/c3883989676778e10000000a11402f/content.htm

Regards,

Edited by: Gagan Deep Kaushal on May 11, 2010 9:49 PM

[Former Member]

Hi,

How do I know list of oracle users from BRTOOLS before changing their password?

Can I change password of <sid>adm and ora<sid> in OS level? Does it affect with SAP operation such as db13, stmsh?

Best regards,

Choosak B.

[martin_voros]

Hi,

I would suggest to download security guides for your applications from service.sap.com/securityguide. There is security guide for ECC as well as for Oracle under Unix.

Cheers