Changing 'SYS' password in 'Shared' mode ?

Oracle 9.2/AIx5.3
I have two Db DB1/DB2, both of these Db's are in 'Shared' remote login password mode. Now, I was under the impression that whilst in this mode, it was not possible to simply issue a command
alter user SYS Identified by <NEW PASSWORD>;
to change the password, if you did, it would result in an error message. Today I have tried, and it allowed me to change the 'SYS' password ? How is this the case. I’ve tried it on a 10g Db that’s also running in 'Shared' mode and got the following error message.
ERROR at line 1:
ORA-28046: Password change for SYS disallowed

Metalink 452959.1 states you cannot change or add users to the passwordfile when remote_login_passwordfile='SHARED' and you need to set this to 'EXCLUSIVE'. I had to look this up and I found it simply by searching for the error number.
Assuming you are not running 10.2.0.1 you could have easily looked up yourself.
Also as Oracle is always changing, differences between 9.2 and 10gR1 or R2 are best verified by looking in the release notes for that version, providing the quickest answer easily.
Sybrand Bakker
Senior Oracle DBA

Similar Messages

How to recreate dbconsole (Oracle10g ) after change SYS password?

Hi all,
would like to know how to recreate dbconsole after change SYS password? is there any links i can refer?
Thanks
Rgds,
Nonie

You don't need to recreate the console after changing the SYS password, it is not required. Once you have changed the sys password, the only two tasks you'll may have to do are:
1. Connect to the DB Control Console with the new password (mandatory, obviously).
2. Change the preferred credentials, in case you have stored the sys password as preferred credentials for your database.
Console repository and EM configuration have to be rebuilt only when there are connectivity conditions that have changed, such as host name change, or IP address change, which happens when you get your IP address by means of a DHCP server.
Are you currently facing some issue, besides the log in with new credentials, when attempting to start services?
One more thing I could guess you are working on a 10gR?? (1 or 2) on an unknown platform (unix, windows???) please specify.
~ Madrid

Changing Sys password in RAC

We are into the process of changing sys password of our RAC database.
If i change password on one node, will that password be get reflected on another node ??
(Since sys password is also stored in password file, i doubt, if change password on one node, the password file on another node will also get updated).
we have separate password files for each instance e.g inst1, inst2
so do i have to give command
alter user sys identified by new password .....on inst1
and
use orapwd ustility on inst2 to change sys password.
or else
alter user sys identified by new password......on inst1
alter user sys identified by new password(same as that of inst1) .....on inst2
***********

oracle@xxx-xxx-d@testdb: /orabase/oracle/product/10.2.0/db_1/dbs
-bash-3.00 $ orapwd file=orapwtestdb password=tatamata
SQL*Plus: Release 10.2.0.2.0 - Production on Tue Aug 7 13:22:42 2007
Copyright (c) 1982, 2005, Oracle. All Rights Reserved.
Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - 64bit Production
With the Partitioning, OLAP and Data Mining options
SYS@testdb > alter user sys identified by goran;
User altered.
SYS@testdb >
SYS@testdb > connect sys/goran as sysdba
Connected.
SYS@testdb > connect sys/tatamata as sysdba
Connected.
SYS@testdb >

Standby Gaps after changing sys password

Hi all,
11.2.0.1
aix6.1
I changed our sys password at primary db and copy the "orapwdprod" from source dbs to "orapwdproddr" at standby dbs.
But I noticed that the log is not sync.
1 SELECT ARCH.THREAD# "Thread", ARCH.SEQUENCE# "Last Sequence Received", APPL.SEQUENCE# "Last Sequence Applied", (ARCH.SEQUENCE# - APPL.SEQUENCE#) "Difference"
2 FROM
3 (SELECT THREAD# ,SEQUENCE# FROM V$ARCHIVED_LOG WHERE (THREAD#,FIRST_TIME ) IN (SELECT THREAD#,MAX(FIRST_TIME) FROM V$ARCHIVED_LOG GROUP BY THREAD#)) ARCH,
4 (SELECT THREAD# ,SEQUENCE# FROM V$LOG_HISTORY WHERE (THREAD#,FIRST_TIME ) IN (SELECT THREAD#,MAX(FIRST_TIME) FROM V$LOG_HISTORY GROUP BY THREAD#)) APPL
5* WHERE ARCH.THREAD# = APPL.THREAD# ORDER BY 1
SQL> /
    Thread Last Sequence Received Last Sequence Applied Difference
         1                   2635                  2594         41
Where can I check the error why is it not applying acrhive logs
Thanks,
zxy

For example:
In primary run again transfer orapwd (command scp)
bash-3.2$ scp /u01/app/oracle/product/11.2.0/db_1/dbs/orapwXXXXX1 Standby_ip:/u01/app/oracle/product/11.2.0/db_1/dbs/orapwXXXXX
Password:
orapwKBAZER1         100% |**************************************************************************************************************************************************| 2048       00:00
And please run sql query again:
SELECT status, error
FROM V$ARCHIVE_DEST_STATUS
WHERE STATUS <> 'DEFERRED' AND STATUS <> 'INACTIVE';
I have done this carefully and Im sure I did it correctly.
How can I test connectivity to standby database?
Can I run at primary server > sqlplus sys/passwd@standby as sysdba ? to test if I can connect using the password file?

Can changing SYS password be complicated

Hi,
I have two node RAC with ASm and I am able to login to both the nodes without password and every is fine, If i change the password fo the SYS will there be any complications as the same password is used by the ASM instance.
Your suggestion will be highly appreciated!

Thanks for your response.
My scenario is like,
I want to use the database authentication, hence if I comment out "SQLNET.AUTHENTICATION_SERVICES" oracle forces me to enter the password for SYS, but some of the services go down due to comenting "SQLNET.AUTHENTICATION_SERVICES" in in sqlnet.ora, as we need this for BEQ protocol which is used to connect from database to ASM instance failing which we cannot startup the instances and CRS resource status will show UNKNOWN.
My question is if I change the sysdba password and force the oracle to ask for the password before login as sysdba(commenting the SQLNET.AUTHENTICATION_SERVICES in sqlnet.ora) will it create any type of complecation.
Pls suggest!

Changing 'SYS' password / AIX concern

To comply with an Audit requirement, we need to change the oracle 'sys' password periodically, Now I have a concern that if I change the password for 'SYS' that there is a hardcoded password file on the AIX server.. would this be the case ?

Florian W. wrote:
If you won't use that passwordfile you have to configure secure connections with the Oracle Security Option.... Or use OS Authentication ("oradba" group). (doc link: [DBA Authentication|http://download.oracle.com/docs/cd/B19306_01/server.102/b14231/dba.htm#i1006534])
Edited by: orafad on Feb 3, 2009 2:38 PM

I changed SYS password and only a few people can login through it

A few weeks ago i decided to change the default password of SYS from the webbased OEM of Oracle 10g. Me and my collegues connected successfully using this new password (from different computers). However today i discovered that two developers which also use the SYS account, cannot access the database using SYS with this new password (nor the old one). The error message they are getting is Invalid username/password... (no they didn't forget the capslock on!)
The strange things are that:
1) They can connect through other usernames but not through SYS
2) the database is on the 192.168.4.x network, me and my collegues are on the 192.168.2.x network and the two developers and their team-mates are on the 192.168.14.x network.
Could this be a network related problem? I don't know ... When it was the default change_on_install password, everyone used to connect normally. I changed the password again, to a simple one to make really sure they are not typing it wrong, and yet, they got the same Invalid username/password error..
I have exhausted all my ideas. what am i missing? thanks...

In your case , I am almost sure that they pointing to another database. Check its network files in the Oracle Home.
From what tool thwy are try to log in ?
Why developers need the sys account?
Joel Pérez
http://otn.oracle.com/experts

Idea for Automatically Changing Sys Password

What is the best approach for automating the changing of sys password every x amount of days?
I need to do this for security reasons

Best practice is to never use SYS for anything other than patching. So my recommendation is to change it after patches are applied and make sure that no one uses it except for patching.

How do you change sys password?

I know this is basic but I just can't get it.
How do you change the sys password from
change_on_install ?
It seemed to expire or something, maybe my installation is messed up from shutting down linux without first shutting down oracle.
Please help me learn how to change my sys password.
Armand

You can change the sys password as any user that has DBA Privs from sqlplus.. eg log in as system/manager.
If you do not know the system password you can log into server manager and connect internal.
Either way the statement you are looking for is
alter user sys identified by password;
Rod

Failed in changing sys password

Dear Experts,
Loged on as DBA I perform the following:
alter user sys identified by my_new_strong_pass
Trying then to log on as sys using this new pass, the pass is said not to be correct.
I'm running 9iR2. More (even if sys and system are not comparable) I can change the system password and log on corretly afterwards.
Any idea is appreciated.
Regards,
Guillaume

You are definitely right. I did so and it worked but the pb is I can't stay with SQLNET.AUTHENTICATION_SERVICES=(NTS) because using dba studio I get a "shared memory realm not available" if I try to restart the DB once stopped for any reason.
I need to set back to SQLNET.AUTHENTICATION_SERVICES=none. This behavior is new following the migration of the servers into AD. Buit keeping this "none" setting prevents me from connecting using Dba studio or Toad.
Did one of you already experience such a behavior of the DB ?
I don't have the same issue with the other instance hosted on the server, I mean connected as DBA I can change the pass of sys under Toad and connect with the new password keeping the setting to "none".
Best Regards,
Guillaume
Message was edited by:
[email protected]

HOW TO RESET SYS PASSWORD after rename of db

Thanks for taking my quesiton!
I renamed my database. Everything is working fine except I can not change sys password. If I try I get: ORA-28003 : password verified for the specified password failed.
I can change system's password. I can log on just fine as SYSI think my pwdsid.ora password file may be the problem.
Has anyone every had this happen?
Thanks, Kathie

Hello Kathie,
http://ora-28003.ora-code.com/
Have you set some specific password rules? Is the function VERIFY_FUNCTION available for all and is it valid?
Did you try to change the password for user sys with user sys?
Try it with some different user which have the rights for that... (for example sys) only for testing...
@Anantha:
You are right... but please have a look at here ( Fun with password verification):
http://radiofreetooting.blogspot.com/2006_04_01_archive.html
Regards
Stefan

Sys password issue

We have oracle 10.2.0.1 running on Unix
WE didnt set the password of SYS user in oracle but now we would like to set
I use the command alter user sys identified by password
i got message user altered
Now i tried connection to sys/password@abc as sysdba
but no luck
So i created password file by
orapwd file=orapwdhmo password=password entries=2 force=y
file created but again unable to login
and at OS level
if I set
ORACLE_SID=INSTANCE_NAME
export ORACLE_SID
sqlplus / as sysdba
connected
I am able to
Please let me know how to set password for sys

Is this attempt where the db resides, or from a remote client:
sqlplus "sys/password@abc as sysdba"
On the other hand,
ORA-01031: Message 1031 not found; No message file for product=RDBMS,
facility=ORA
unavoidably means you cannot open error message catalog. Reasons are either:
- Incorrect ORACLE_HOME setting
- Incorrect PATH setting
- files have been removed
And this error message issue must first be solved before you pretend to change sys password.
Changing sys password is as follows:
1. Create a password file
2. Make sure your remote_login_password_file says exclusive
3. rebounce your instance
4. change sys password
5. verify your username is listed at the V$PWFILE_USERS dynamic view
7. change user password.
I suggest you to double check.
~ Madrid.

Changinf sys password in dataguard env

Hi,
Version:10gr2
Changing sys password is not reflected in standby site.
Alter sys identified by asdf';
At primary site orapw<SID> file got updated but stanby db password file is still old one. Does this means:
every time we change sys password at primary do we need to copy the password file to standby?
We have 50 db's in that 20 are dataguard env's. We have a script to change sys password's automatically every month. Its really a painfull job to go to all env's and copy the password file to all the standby locations.
When we create password file with orapwd even then we need to shift the password file to all stanby sites.
Please suggest me is there any way i can change my sys password with 'ALTER USER SYS' command and that chage picks the standby database.
Thanks,
Anil

you can create a unix script which does SCP password files to standby after you reset password.
this can be done from any machine.
--Girish

How to find out system/sys password

unable to login for system user someone changed the password is there any other way to find out system's/sys password and which user has modified the password

Try to connect
conn / as sysdbaor use orapwd utility to change sys password
If you want to know all activity of user sys, you should AUDIT it
Refer to this article for more information
http://justoracle.blogspot.com/2007/02/auditing-sys-users.html
Kamran Agayev A. (10g OCP)
http://kamranagayev.wordpress.com
[Step by Step install Oracle on Linux and Automate the installation using Shell Script |http://kamranagayev.wordpress.com/2009/05/01/step-by-step-installing-oracle-database-10g-release-2-on-linux-centos-and-automate-the-installation-using-linux-shell-script/]

Cant chane sys password

hi experts,
i am trying to change sys password in oracle 10g XE, but it is accepting any password.i used ORAPWD utility to change password, bounce the database, but still it is accepting any password.
how come this happen?
plz guide.its urgent.
thanks and regards
VD

Example :
SQL> conn sys/aaaa as sysdba
Connected.
SQL> conn sys/bbbb as sysdba
Connected.
SQL> conn sys/cccc as sysdba
Connected.
SQL> conn sys/aaaa@xe as sysdba
ERROR:
ORA-01017: invalid username/password; logon denied
Warning: You are no longer connected to ORACLE.
SQL> conn sys/oracle@xe as sysdba
Connected.
SQL> Actually, when OS authenticated, you can use following syntax :
SQL> conn / as sysdba
Connected.
SQL> sho user
USER is "SYS"
SQL>

Changing 'SYS' password in 'Shared' mode ?

Similar Messages

Maybe you are looking for