正在看的ORACLE教程是:怎么才能限制SQL Server只能讓指定的機(jī)器連接。Q. How can I restrict access to my SQL Server so that it only allows certain machines to connect?
(v1.0 19.10.1998)


怎樣才能限制我的SQL Server只能讓指定的機(jī)器連接


A. SQL Server has no built-in tools/facilities to do this. It also does not have the facility to run a stored-procedure on connection that could be written/used to do this. Therefore you have the following choices :-

   SQL Server沒(méi)有這樣的功能，也沒(méi)有提供在連接時(shí)執(zhí)行某一特定過(guò)程的功能。這里介紹幾種實(shí)現(xiàn)的方法

1. Put the SQL Server behind a firewall and use that to restrict access. This is the most secure and functional way to do what you want.

    使用防火墻，它提供了安全和你想用的工具。

2. Write your own ODS Gateway and point the clients at that instead of the SQL Server - the ODS Gateway will then do the checking. However, there is nothing stopping clients figuring out the correct SQL client-config entries to point straight at the SQL Server. There are examples of ODS code in the SQL Programmers Toolkit - available for free download from the MS website.

    寫(xiě)自己的ODS網(wǎng)關(guān)代替SQL Server的客戶(hù)端 - 在ODS網(wǎng)關(guān)中檢查。不過(guò)，這并不能停止正常的客戶(hù)端連接SQL Server。在SQL Programmers Toolkit中有一個(gè)這樣的例， 可以從微軟站點(diǎn)免費(fèi)下載。

3. Write a constantly running/scheduled stored-procedure that checks the relevant column in sysprocesses (net_address), and then issues a KILL command for any processes that should not be running. Note that this only works for MAC addresses. This way allows people to connect and possibly make changes before they are spotted and killed.

    寫(xiě)一個(gè)存儲(chǔ)過(guò)程檢查sysprocesses中的相應(yīng)列（net_address）
<

最新評(píng)論