Securing the Listener

Setting Listener Password :

step 1 :

  1.  Stop the listener.
  2.  Add the following parameter in the listener.ora: LOCAL_OS_AUTHENTICATION_listener_name = OFF
  3.  Restart the listener



Step 2 :

 set the password using lsnrctl :

   [oracle@pbltest ~]$ lsnrctl

LSNRCTL for Linux: Version 11.2.0.3.0 - Production on 02-SEP-2014 16:29:32

Copyright (c) 1991, 2011, Oracle.  All rights reserved.

Welcome to LSNRCTL, type "help" for information.

LSNRCTL> change_password
Old password:
New password:
Reenter new password:
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=192.168.1.41)(PORT=1521)))
Password changed for LISTENER
The command completed successfully
LSNRCTL> save_config
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=192.168.1.41)(PORT=1521)))
Saved LISTENER configuration parameters.
Listener Parameter File   /u01/app/oracle/product/11.2.0/db_1/network/admin/listener.ora
Old Parameter File   /u01/app/oracle/product/11.2.0/db_1/network/admin/listener.bak
The command completed successfully
LSNRCTL>
LSNRCTL> set password
Password:
The command completed successfully
LSNRCTL> save_config
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=192.168.1.41)(PORT=1521)))
No changes to save for LISTENER.
The command completed successfully
LSNRCTL> exit


Step 3 :

 Check the below entry on the listener.ora file :

  LOCAL_OS_AUTHENTICATION_listener = OFF

#----ADDED BY TNSLSNR 02-SEP-2014 16:30:00---
PASSWORDS_LISTENER = ADD733DA61CD19A5


step 4 : Bounce the Listener .

[oracle@pbltest admin]$ lsnrctl

LSNRCTL for Linux: Version 11.2.0.3.0 - Production on 02-SEP-2014 16:32:30

Copyright (c) 1991, 2011, Oracle.  All rights reserved.

Welcome to LSNRCTL, type "help" for information.

LSNRCTL> stop
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=192.168.1.41)(PORT=1521)))
TNS-01169: The listener has not recognized the password


Step 5 : How to access to LISTENER


 using 'set password' command .


Metalink Note : Password Not Required When Administering 10g or Newer Listeners Using Lsnrctl Utility (Doc ID 372717.1)