Help! - ArcSDE is locking our Oracle schemas

Question

We changed a password on an Oracle schema, but apparently we have some rogue SDE clients - probably old ArcGIS map services on a dev machine somewhere - attempting to connect with the old password. SDE is causing Oracle to lock out the schema because of the rapidfire attempts to connect with the bad password.

Is there any way to detect where the bad login attempts are coming from? I have turned on the ArcSDE intercept log, but I don't see anything related to connect attempts there.

We're using SDE 9.3.1.

VinceAngelo · Answer

Remote application servers are not recommended, but that is unreleated to this
problem -- you just need to know which clients are attempting connect on the
application server port (to identify the rogue actors), so it doesn't really matter
 how connections map back out again.

All formal requests should go through formal processes (like the ideas.esri.com site).

- V

NathanielWingfield · Answer

How do you suggest I then correlate the inbound connections to SDE with the corresponding outbound connections to Oracle?

Consider this a formal request for better logging capabilities. I think your customer base would appreciate more visibility into SDE's behavior.

Mapping inbound spatial queries to outbound SQL (e.g., for performance tuning) is another deficiency that needs attention, perhaps even more so.

VinceAngelo · Answer

Try enabling a firewall on the ArcSDE server, set to permit but log connection requests
on the application server port.

After that you'll need to scan the AGS logs on all your development clients, looking for
a persistent-but-misguided SOC.

- V