How to end user session correctly as sys or system user

Hi,
Database version Oracle 10.2.0.3
We have to end user sessions to update database content. We cant stop/shutdown the instance but we have to assure that some users are not logged on.
So we are looking for a solution to end some arbitrary user sessions as sys or system user without using the KILL USER SESSION option. We want to assure that the user sessions end correctly.
Is there a possibility or a command in Oracle 10g to end a user session correctly ?
Thanks for your assistance.

http://download.oracle.com/docs/cd/B19306_01/server.102/b14200/statements_2013.htm#i2053602
I think DISCONNECT SESSION Clause is what you are looking for.
Let us know if this is not the case.

Similar Messages

Unable to create new user when logged as SYS or SYSTEM user. Oracle 11g

Hello I installed oracle 11g databse. The installation went OK.
But when I tried to create a new user or alter an existing I always got "ORA-01031: insufficient privileges".
However I was able to alter SYS user when I was loged in as SYS or SYSTEM user when I was loged in as SYSTEM.
I am also able to create new tables, drop tables, query tables, create and drop synonyms and all other things except manipulate with users;
Can anybody tell me where could be the problem?
Thanks a lot in advance.
Message was edited by:
user609545

I have checked the roles DBA, RESOURCE..(I am sorry byt I dont know what is role CREATE). SYS user has all these roles with admin option and default checked.
I am using oracle Enterprise manager, but I dont know where should I click on the red mark? Where can I find it?

How to end RDP sessions remotely from different network?

Hi
How to end RDP sessions remotely for windows 2008r2 server from different network?
not from local LAN
Thanks

Hi
what ports need to be open to successfully connect to server behind firewall?
from WAN to LAN using :
net use \\servername_or_IP /USER:username “password“
or
qwinsta /server:ServerIP
Thanks

Lock sys and system user

Dear all,
We have 10.2.0.4 on solaris 10.
Currently we had I.T audit on our environment and auditor commented to lock sys and system user and use one user with any name (not oracle generic name) and grant him sys and system privilege and to use this user for admin purposes. is this right ?.. is this recommended ?
Please advise

Hello,
I think it's not a right way to lock SYS.
More over, if you connect as OS Administrator (root for Unix/linux) on the server and use
OS Authentification then, you can connect on SYS AS SYSDBA anyway.
So, in fact, it's not possible to lock out SYS even if you execute the following:
ALTER USER SYS ACCOUNT LOCK;If you want to prevent access on SYS you should set a complex and long password and
apply the same rule for the Administrator / root OS user.
These passwords must be known by very few and well - identified people and written nowhere
(in any files or scripts).
More over, you should limit DBA roles to SYS and SYSTEM and remove this powerful Role
from other Oracle Users.
Then, you may enable session AUDIT so as to control the connexion on the database and,
create a LOGON TRIGGER so as to check the login, workstation, program of the end users
who connect to the database.
On 10g, EM DBConsole shows an alert everytime a User is connected with SYS.
Please, find enclosed, an interesting document written by Pete Finigan on this topic:
http://www.insight.co.uk/files/presentations/Hacking%20and%20securing%20Oracle.pdf
Hope this help.
Best regards,
Jean-Valentin

Locked SYS and SYSTEM user

DB version: 11.2.0.2
OS : Solaris 10
In our production DBs , I've noticed that both SYS and SYSTEM users are locked
$ sqlplus / as sysdba
SQL*Plus: Release 11.2.0.2.0 Production on Thu Jan 19 14:21:34 2012
Copyright (c) 1982, 2010, Oracle. All rights reserved.
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - 64bit Production
With the Partitioning option
SQL> select username, account_status from dba_users where username like 'SYS%';
USERNAME                       ACCOUNT_STATUS
SYSTEM                         LOCKED
SYS                            LOCKED1. How can I log in to SYS account despite being locked. Is it because i logged in through external authentication?
2. Is locking the SYS user a standard practise ? If so, why ?

Hi;
1. How can I log in to SYS account despite being locked. Is it because i logged in through external authentication?set ORACLE_HOME, ORACLE_SID than
sqlplus "/as sysdba"
alter user xx account unlock;
2. Is locking the SYS user a standard practise ? If so, why ?
SYS and SYSTEM are default users, created with the creation of the database. Although they have much power - as they are granted the DBA role - they're still ordinary users. Because SYS owns the data dictionary, (s)he is considered a bit more special than SYSTEM. But SYS has the SYSDBA privilege which SYSTEM doesn't. This makes it possible for SYS to become a very very powerful user. This is the case when (s)he connects as sys/password as SYSDBA or / as sysdba. The as sysdba phrase is a request to aqcuire the privileges associated wht the single SYSDBA system privileges (see here).
Source:
http://www.adp-gmbh.ch/ora/misc/sys_system_internal.html
Regard
Helios

Difference between SYS and SYSTEM user

Hi,
Well, one of my colleagues have asked me the difference between SYS and SYSTEM user .. Normally these are the users which will be under the monitoring of the DBA .. So, how could I know the difference between these two users ..
Please assist me
Regards

SYS is the owner of the database and the owner of the data dictionary.
The objects belonging to SYS cannot be exported. But SYS has the SYSDBA privilege which SYSTEM doesn't.
SYSTEM is a privileged administration user, and typically owns Oracle provided tables other than the dictionary.
SYSDBA is not a role, it is a privilege. You'll find it in system_privilege_map, not in dba_roles.

SYS and SYSTEM user password expired

My 11g2 database on Redhat 5 has sys and system user password expiredSQL> select username,account_status,EXPIRY_DATE
from dba_users where username like 'SYS%';
2
USERNAME                       ACCOUNT_STATUS                   EXPIRY_DA
SYSMAN                         OPEN
SYSTEM                         OPEN                             15-FEB-11
SYS                            OPEN                             15-FEB-11But I can still connect the databsae with t expired password.
Do I need worry about the expiration of these user's password? For a normal user, I connot login with expired password

Dear user13148231,
Here is an illustration;
SQL> alter user sys account lock;
User altered.
SQL> select username, account_status, lock_date, expiry_date from dba_users where USERNAME='SYS';
USERNAME                      ACCOUNT_STATUS                   LOCK_DATE EXPIRY_DA
SYS                                      LOCKED                           20-AUG-10      23-FEB-09
SQL> host sqlplus sys/password@opttest as sysdba
SQL*Plus: Release 10.2.0.4.0 - Production on Fri Aug 20 12:25:43 2010
Copyright (c) 1982, 2007, Oracle. All Rights Reserved.
Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL> exit
Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL> alter user sys identified by password password expire;
User altered.
SQL> select username, account_status, lock_date, expiry_date from dba_users where username='SYS';
USERNAME                      ACCOUNT_STATUS                   LOCK_DATE EXPIRY_DA
SYS                                EXPIRED & LOCKED                 20-AUG-10   20-AUG-10
SQL> host sqlplus sys/password@opttest as sysdba
SQL*Plus: Release 10.2.0.4.0 - Production on Fri Aug 20 12:27:02 2010
Copyright (c) 1982, 2007, Oracle. All Rights Reserved.
Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL> exit
Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL> alter user sys identified by password account unlock;
SQL> select username, account_status, lock_date, expiry_date from dba_users where username='SYS';
USERNAME                       ACCOUNT_STATUS                   LOCK_DATE EXPIRY_DA
SYS                            OPENEven if it shows expired and locked it is OK to connect to the database for the SYS user.
SQL> alter user ogan identified by password account lock password expire;
User altered.
SQL> select username, account_status, lock_date, expiry_date from dba_users where username='OGAN';
USERNAME                       ACCOUNT_STATUS                   LOCK_DATE EXPIRY_DA
OGAN                           EXPIRED & LOCKED                 20-AUG-10 20-AUG-10
SQL> conn ogan/password
ERROR:
ORA-28000: the account is locked
Warning: You are no longer connected to ORACLE.
SQL> conn / as sysdba
Connected.
SQL> alter user ogan account unlock;
User altered.
SQL> conn ogan/password@opttest
ERROR:
ORA-28001: the password has expired
Changing password for ogan
New password:
Retype new password:
Password changed
Connected.
SQL>Ogan

New user session from an existing logged in user browser window

Hi,
I have a requirement that says, a new browser window should be popped up with a new user session from the current "logged in user" browser window when he clicks a button event.
What I have with me is the "UserID" of that new user. Is it possible in portal?
Let me know.
Thanks,
Megha.

Megha,
I know that you can manually click CTL-N to open a new browser window and the user is still authenticated.
So I would think that you could code a similar function into the button event.
Hope it helps.
Regards,
Keith

HT4796 I did all of the above and the migration was successful, but I don't know where the files are. It says they're under a different user, 'owner' . I tried to access via sys pref/system/users&groups, but it asks for a password for owner which I don'

Migration Assit , PC to MAC - The migration was successful, but I don't know where the files are. It says they're under a different user, 'owner' . I tried to access via sys pref/system/users&groups, but it asks for a password for owner which I don't have. What must I do to access my files?
My experience is with MS PC's I'm new with the MAC Book Pro.

Then, see if this works:
Mac OS X 10.6 Help- If you forget your administrator password
If you are running Lion or Mountain Lion you may need to do the following to access the same utility:
Boot to the Recovery HD:
Restart the computer and after the chime press and hold down the COMMAND and R keys until the menu screen appears. Alternatively, restart the computer and after the chime press and hold down the OPTION key until the boot manager screen appears. Select the Recovery HD and click on the downward pointing arrow button.
When the menubar appears select Terminal from the Utilities menu. Enter resetpassword at the prompt and press RETURN. Follow instructions in the dialog window that will appear.
Or see Reset a Mac OS X 10.7 Lion Password and OS X Lion- Apple ID can be used to reset your user account password.

When creating application: SYS and SYSTEM users may not create applications

Dear all,
When i am performing the below mentioned operations
1) Importing Application
2) Create Application
3) Create from Spreadsheet
4) Demonstration Application
am getting this error message
"SYS and SYSTEM users may not create applications"
Please do the needfull

Create application using SYS or SYSTEM user is not good idea. Your objects will be created in SYSTEM tablespace, it's fatal option. Create new Workspace and create there your app.

Profiles apply to SYS and SYSTEM users

dear all.
is possible configure the security policies (profiles), i mean password length, history, failed login attempts for SYS and SYSTEM users in oracle 10g.
What will happen if both users blocked ?? the service would be affected ???
what would you recommend me ?
thanks for your answers and apologize my english, is not very well.

Check here:
SYS account cannot be locked out by setting the failed_login_attempts limit in the profile.
is it possible to lock out SYS using FAILED_LOGIN_ATTEMPTS in a profile
http://www.petefinnigan.com/ramblings/failed_login_attempts.htm
-Anantha

How Front End pool deals with fail over to keep user state?

   Hello to all, I searched a lot of articles to understand how Lync 2010 keeps user state if a fail happens in a Front Pool node, but didn't find anything clear.
     I found a MS info. about ths topic : " The Front End Servers maintain transient information—such as logged-on state and control information for an IM, Web, or audio/video (A/V) conference—only for the duration of a user’s session.
This configuration
is an advantage because in the event of a Front End Server failure, the clients connected to that server can quickly reconnect to another Front End Server that belongs to the same Front End pool. "
    As I read, the client uses DNS to reconnect to another Front End in the pool. When it reconnects to an available server, does he lose what he/she was doing at Lync client? Can the server that is now hosting his section recover all
"user's session data"? Is positive, how?
   Regards, EEOC.

The presence information and other dynamic user data is stored in the RTCDYN database on the backend SQL database in a 2010 pool:
http://blog.insidelync.com/2011/04/the-lync-server-databases/ If you fail over to another pool member, this pool member has access to the same data.
Ongoing conversations and the like are cached at the workstation.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications

How to know active sessions logged in by same database users

This is 10g. I need to query list of DB users who have logged in using the same database user accounts. How can I achieve this? This is on 10g and 9i

Hello,
You may enable audit. Then, with the following query you may get the list of User who logged on the same Oracle User account:
select username, os_username, userhost, terminal, timestamp, action_name
from dba_audit_trail
where action_name in ('LOGON','LOGOFF')
order by username;Please, find below a link about audit:
http://www.oracle-base.com/articles/10g/Auditing_10gR2.php
Hope this help.
Best regards,
Jean-Valentin

Problem with transfered user sessions from a 10.4 system

On my new MacBook pro with ML, I tranfered the user sessions of my previous mac (power book G4 working with OS 10.4).
With these "old" users accounts, part of the trackpad features (like scroling up and down with 2 fingers) does not work, whereas it is working with new users.
Any idea on how to solve this?
Thanks in advance

That was a good idea, I tried to delete the com.apple.finder.plist and the com.apple.systempreferences.plist but that did not work.
Eventually to solve the problem, I transferred all the files I needed to a session created with the new system. I'm waiting a week or two just to see if I have not forgotten something important and then I will delete the "old session".
Thanks anyway for your help.

Grants from SYS and SYSTEM user

Hi All,
Please help me to understand this problem.
I have some schema named maps_ref where I am creating a view.( table abc ,view abc01).
Here I have granted the create view,create any view privs to maps_ref by connecting SYS as SYSDBA.
It alllowed me to create the view.
Just as a try, I revoked the privs by connecting as SYSTEM and it revoked the privs granted by SYS as SYSDBA.
Later obviously I could not create the view.
Does it mean that grants given by SYS as SYSDBA can be taken back from SYSTEM though SYSDBA is more powerful then SYSTEM?
I am little bit confused how it worked? Please explain.
Rgds,
Aashish

Hi,
SYS isnt normal user and you are not able to connect without clause SYSDBA.
sqlplus sys@test
SQL*Plus: Release 11.1.0.7.0 - Production on Wed Apr 8 09:48:37 2009
Copyright (c) 1982, 2008, Oracle. All rights reserved.
Enter password:
ERROR:
ORA-28009: connection as SYS should be as SYSDBA or SYSOPER
Enter user-name:
sqlplus sys@test as sysdba
SQL*Plus: Release 11.1.0.7.0 - Production on Wed Apr 8 09:48:55 2009
Copyright (c) 1982, 2008, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 11g Enterprise Edition Release 11.1.0.7.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL>
Regards,
Tom
http://oracledba.cz

How to end user session correctly as sys or system user

Similar Messages

Maybe you are looking for