频道导航

[Oracle] 如何使用触发器实现IP限制用户登录

2019-01-03 Oracle 前端之家

前端之家收集整理的这篇文章主要介绍了[Oracle] 如何使用触发器实现IP限制用户登录，前端之家小编觉得挺不错的，现在分享给大家，也给大家做个参考。

下面是一个触发器的例子：
<div class="codetitle"><a style="CURSOR: pointer" data="1649" class="copybut" id="copybut1649" onclick="doCopy('code1649')"> 代码如下:

<div class="codebody" id="code1649">
create or replace trigger logon_ip_control
after logon on database
declare
ip STRING(30);
user STRING(30);
begin
SELECT SYS_CONTEXT('USERENV','SESSION_USER') into user from dual;
SELECT SYS_CONTEXT('USERENV','IP_ADDRESS') into ip from dual;
if user='EPAY_USER'
THEN
IF ip not in ('192.168.219.20','192.168.219.22')
THEN raise_application_error(-20001,'User '||user||' is not allowed to connect from '||ip);
END IF;
END IF;
end;
/

该触发器对用户EPAY_USER进行了IP限制（只允许'192.168.219.20','192.168.219.22'，如果需要设置IP段，用%或?代替即可，如'192.168.219.%‘）。

<FONT style="COLOR: #ff0000">下面看几个例子测试一下：
1）从非允许IP地址登陆（192.168.219.21），连接失败

<div class="codetitle"><a style="CURSOR: pointer" data="93363" class="copybut" id="copybut93363" onclick="doCopy('code93363')"> 代码如下:

<div class="codebody" id="code93363">
[oracle@lxdb2 ~]$ sqlplus epay_user@pri
sqlPlus: Release 11.2.0.3.0 Production on Wed Jul 3 19:23:48 2013
Copyright (c) 1982,2011,Oracle. All rights reserved.
Enter password:
ERROR:
ORA-00604: error occurred at recursive sql level 1
ORA-20001: User EPAY_USER is not allowed to connect from 192.168.219.21
ORA-06512: at line 10

2）从允许IP地址登陆（192.168.219.22），连接成功
<div class="codetitle"><a style="CURSOR: pointer" data="71336" class="copybut" id="copybut71336" onclick="doCopy('code71336')"> 代码如下:

<div class="codebody" id="code71336">
[oracle@lxdb1 ~]$ sqlplus epay_user
sqlPlus: Release 11.2.0.3.0 Production on Wed Jul 3 11:24:25 2013
Copyright (c) 1982,Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
With the Partitioning,OLAP,Data Mining and Real Application Testing options

3）从本地登陆(192.168.219.23）不受IP限制影响，连接成功

<div class="codetitle"><a style="CURSOR: pointer" data="71336" class="copybut" id="copybut71336" onclick="doCopy('code71336')"> 代码如下:

<div class="codebody" id="code71336">
[oracle@lxdb1 ~]$ sqlplus epay_user
sql*Plus: Release 11.2.0.3.0 Production on Wed Jul 3 11:24:25 2013
Copyright (c) 1982,Data Mining and Real Application Testing options

原文链接：https://www.f2er.com/oracle/65489.html

触发器触发器触发器限制用户登录