Confusion about 'sysdba'; random user/password logs in as 'sysdba'

Hi everybody,
I just installed oracle 9.2 enterprise edition. My problem is that i created a database after completing the installation and it seems that any random username/password is accepted if entered with 'as sysdba' option in sqlplus editor as well as the Enterprise Manager Console. Even if I type
conn dseane/fdgdsg as sysdba
it logs in successfully as sysdba.
I want to take disable that feature. Can anybody please help me out here??
Also, can anybody please tell me the difference between 'sysdba' and 'sysoper'?
Thanks in advance,
Andy x

There is in fact a little more to it than that.
The default authentication mechanism for SYSDBA is by OS Group, which in this case is provided by the NTS mechanism [ i.e standard WIndows Call ]
If you created a bog-standard Win2K user with no group memberships then you would not be able to do this.
It is worth reading up on why this is the case. Have a look at the Windows Platform Guides.

Similar Messages

How to get real time information about how many user are logged in and thei

I use tomcat as my server platform in Ubuntu for a war file.
I know in order to get real time information about how many user are logged in, we can count how many active sessions exist by a SessionCounter code. However, I have to permit HttpSessionListener in web.xml of tomcat. From other users' experiences, the configuration is complexed and has some errors.
Here's the link:http://www.stardeveloper.com/article...1112001&page=1
In order to get users' ip, in jsp, use request.getremotehost() or
request.getremoteaddress() by editing the jsp file.
I wonder if there's some open source software to use for these two purposes.
Thank you!

That url is missing a few bits. The ... in the middle doesn't help.
we can count how many active sessions exist by a SessionCounter code.
However, I have to permit HttpSessionListener in web.xml of tomcat.
From other users' experiences, the configuration is complexed and has some errors.And have you tried it? The configuration isn't that complex.
What errors do you mean? Errors in tracking people, variance in the count? Probably related to internet issues and nothing you can do will alleviate them.

Hi, I forgot my user password mac 10.9.4 I don't need it to log in but i need it to make changes, etc. It says a password hasn't been set for this account but it still asks for one when i click on the lock icon. can anyone help me? thx!

Hi, I forgot my user password mac 10.9.4 I don't need it to log in but i need it to make changes, etc. It says a password hasn't been set for this account but it still asks for one when i click on the lock icon. can anyone help me? thx!

This is a little confusing since you say you have forgotten your password and then the system says you have not entered a password. Even with an Admin account you must have a password to install software.
If you are using Mac OS X 10.7 or above, you can change the admin password by restarting holding the Command and R keys, from the menu bar select Utilities, then Terminal. When the Terminal window opens, at the cursor type exactly:
resetpassword
and press Enter. When the Reset Password window opens, select the internal hard drive, and then the user account. Type a new password twice, leave the Hint blank, and then Save. Accept the next dialog that opens, and at the bottom of the Reset Password window agree to resetting the home directory permissions.
Quit the Reset Password window, go to the apple left side of the menu bar, Restart.
And you have a new password for your account.

IPod not recognized by iTunes-message about other users being logged in

Recently, whenever I connect my Ipod to the USB device to update my library, I often get an error message stating there are other users using itunes on my computer already, so itunes cannot recognize the ipod. Then it says to ask other users to log out, and then try again.
No other people but me ever use itunes on my computer and no one else is logged in but me (and I'm the only person who has an iPod account in my family). I try all different things, like logging everyone else's accounst on the computer off, restarting itunes, reconnecting the USB, etc- but nothing works. The message won't appear after this again (unless I've restarted itunes), but a window pops up about my ipod with all different files, like "calendar."
Can anyone tell me why this happens, and how to connect my ipod when it does?
Video Windows XP

Try this.
Fast user switching in Windows XP is not supported.
Incidentally, this a forum for connecting to a Mac.

How to create a new user in IDM 8.1 with random generated password?

Hi, i want create a new user using a modified tabbed user fom that cannot ask for password and confirm password to the administrator but randomly generate a new password (only when the form is opened in user creation) according to password policy and display it on the form.
I think it is possible because Reset User Password Form does it, but i don't know how put this kind og logic in an other form.
thanks
Marco

If you want to generate a users password randomly then you could take a look at the com.waveset.provision.PasswordGenerator class inside the Identity Mgr REF kit. Here's an example:
<Rule name='generateRandomPassword'>
       <Comments>generate a random password</Comments>
       <RuleArgument name='accountId' value='Configurator'>
         <Comments>accountId of the user</Comments>
         <String>Configurator</String>
       </RuleArgument>
       <RunAsUser>
         <ObjectRef type='User' id='#ID#Configurator' name='Configurator'/>
       </RunAsUser>
       <block trace='true'>
         <defvar name='session'>
           <or>
             <ref>context</ref>
             <ref>display.session</ref>
           </or>
         </defvar>
         <defvar name='wsuser'>
           <invoke name='getObject' class='com.waveset.ui.FormUtil'>
             <ref>session</ref>
             <s>User</s>
             <ref>accountId</ref>
           </invoke>
         </defvar>
          <defvar name='pwgenerator'>
           <new class='com.waveset.provision.PasswordGenerator'>
             <ref>session</ref>
           </new>
         </defvar>
         <invoke name='generatePassword'>
           <ref>pwgenerator</ref>
           <ref>wsuser</ref>
         </invoke>
       </block>
    </Rule> You'll want to take the password.password field and inside the Default event handler check to see if waveset.id is null, if it is then call the Rule above.
HTH,
Paul

HT4798 I have forgotten my password for mountain os. I have followed the instructions about going to "User group" and enetering my apple ID. It doesn't work. Can anyone help me? Thank you.

I have forgotten my password for mountain os. I have followed the instructions about going to "User group" and enetering my apple ID. It doesn't work. Can anyone help me? Thank you.

Welcome to the Apple Support Communities
https://discussions.apple.com/docs/DOC-4101

Confused about standby redo log groups

hi masters,
i am little bit confuse about creating redo log group for standby database,as per document number of standby redo group depends on following equation.
(maximum number of logfiles for each thread + 1) * maximum number of threads
but i dont know where to fing threads? actually i would like to know about thread in deep.
how to find current thread?
thanks and regards
VD

is it really possible that we can install standby and primary on same host??
yes its possible and i have done it many times within the same machine.
For yours confusion about spfile ,i agree document recommend you to use spfile which is for DG broker handling if you go with DG borker in future only.
There is no concern spfile using is an integral step for primary and standby database implementation you can go with pfile but good is use spfile.Anyhow you always keep pfile on that basis you created spfile,i said you make an entry within pfile then mount yours standby database with this pfile or you can create spfile from this pfile after adding these parameter within pfile,i said cause you might be adding this parmeter from SQL prompt.
1. logs are not getting transfered(even i configure listener using net manager)
2.logs are not getting archived at standby diectory.
3.'ALTER DATABASE RECOVER MANAGED STANDBY DATABASE DISCONNECT FROM SESSION' NEVER COMPLETE ITS RECOVERY
4. when tried to open database it always note it 'always' said system datafile is not from sufficiently old backup.
5.i tried 'alter database recover managed standby database camncel' also.Read yours alert log file and paste the latest log here..
Khurram

I'm a bit confused about standby log files

Hi all,
I'm a bit confused about something and wondering if someone can explain.
I have a Primary database that ships logs to a Logical Standby database.
Everything appears to be working properly. If I check the v$archived_log table in the Primary and compare it to the dba_logstdby_log view in the Logical Standby, I'm seeing that logs are being applied.
On the logical standby, I have the following configured for log_archive_dest_n parameters:
*.log_archive_dest_1='LOCATION=/u01/oracle/archivedlogs/ORADB1
VALID_FOR=(ALL_LOGFILES,ALL_ROLES) DB_UNIQUE_NAME=PNX8A_GMD'
*.log_archive_dest_2='LOCATION=/u02/oracle/archivedlogs/ORADB1
VALID_FOR=(ALL_LOGFILES,ALL_ROLES) DB_UNIQUE_NAME=PNX8A_GMD'
*.log_archive_dest_3='LOCATION=/u03/oracle/archivedlogs/ORADB1
VALID_FOR=(ALL_LOGFILES,ALL_ROLES) DB_UNIQUE_NAME=PNX8A_GMD'
*.log_archive_dest_4='SERVICE=PNX8A_WDC ASYNC VALID_FOR=(ONLINE_LOGFILES,PRIMARY_ROLE) DB_UNIQUE_NAME=PNX8A_WDC'
*.log_archive_dest_5='LOCATION=/u01/oracle/standbylogs/ORADB1
VALID_FOR=(STANDBY_LOGFILES,STANDBY_ROLE) DB_UNIQUE_NAME=PNX8A_GMD'
*.log_archive_dest_6='LOCATION=/u02/oracle/standbylogs/ORADB1
VALID_FOR=(STANDBY_LOGFILES,STANDBY_ROLE) DB_UNIQUE_NAME=PNX8A_GMD'
*.log_archive_dest_7='LOCATION=/u03/oracle/standbylogs/ORADB1
VALID_FOR=(STANDBY_LOGFILES,STANDBY_ROLE) DB_UNIQUE_NAME=PNX8A_GMD'
Here is my confusion now. Before converting from a Physical standby database to a Logical Standby database, I was under the impression that I needed the standby logs (i.e. log_archive_dest_5, 6 and 7 above) because a Physical Standby database would receive the redo from the primary and write it into the standby logs before applying the redo in the standby logs to the Physical standby database.
I've now converted to a Logical Standby database. What's happening is that the standby logs are accumulating in the directory pointed to by log_archive_dest_6 above (/u02/oracle/standbylogs/ORADB1). They do not appear to be getting cleaned up by the database.
In the Logical Standby database I do have STANDBY_FILE_MANAGEMENT parameter set to AUTO. Can anyone explain to me why standby log files would continue to accumulate and how I can get the Logical Standby database to remove them after they are no longer needed on the LSB db?
Thanks in advance.
John S

JSebastian wrote:
I assume you mean in your question, why on the standby database I am using three standby log locations (i.e. log_archive_dest_5, 6, and 7)?
If that is your question, my answer is that I just figured more than one location would be safer but I could be wrong about this. Can you tell me if only one location should be sufficient for the standby logs? The more I think of this, that is probably correct because I assume that Log Transport services will re-request the log from the Primary database if there is some kind of error at the standby location with the standby log. Is this correct?As simple configure as below. Why more multiple destinations for standby?
check notes Step by Step Guide on How to Create Logical Standby [ID 738643.1]
>
LOG_ARCHIVE_DEST_1='LOCATION=/arch1/boston VALID_FOR=(ONLINE_LOGFILES,ALL_ROLES) DB_UNIQUE_NAME=boston'
LOG_ARCHIVE_DEST_2='SERVICE=chicago LGWR ASYNC VALID_FOR=(ONLINE_LOGFILES,PRIMARY_ROLE) DB_UNIQUE_NAME=chicago'
LOG_ARCHIVE_DEST_3='LOCATION=/arch2/boston/ VALID_FOR=(STANDBY_LOGFILES,STANDBY_ROLE) DB_UNIQUE_NAME=boston'
The following table describes the archival processing defined by the initialization parameters shown in Example 4-2.
     When the Boston Database Is Running in the Primary Role      When the Boston Database Is Running in the Logical Standby Role
LOG_ARCHIVE_DEST_1      Directs archival of redo data generated by the primary database from the local online redo log files to the local archived redo log files in /arch1/boston/.      Directs archival of redo data generated by the logical standby database from the local online redo log files to the local archived redo log files in /arch1/boston/.
LOG_ARCHIVE_DEST_2      Directs transmission of redo data to the remote logical standby database chicago.      Is ignored; LOG_ARCHIVE_DEST_2 is valid only when boston is running in the primary role.
LOG_ARCHIVE_DEST_3      Is ignored; LOG_ARCHIVE_DEST_3 is valid only when boston is running in the standby role.      Directs archival of redo data received from the primary database to the local archived redo log files in /arch2/boston/.
>
Source:-
http://docs.oracle.com/cd/B19306_01/server.102/b14239/create_ls.htm

How can i know about any users who log on sap last one month..all data and

Dear all,
how can i know about any users who log on sap last one month..all data and transaction code they used in a month.
Regards,
ASHUTOSH
9891595497

Dear Ashutosh,
I think your question is in the wrong forum. This is for SAP MDM related questions and answers. SAP MDM does not use Transaction codes. So you may not get much help here.
Please try posting your question in the ABAP forums and you may get the right resources to help you.
Thanks.
Siva K.

HT201320 I am having trouble with password. Forgetting password,as I have many mail IDs like yahoo,gmail,hotmail,apple, I cloud etc.,thus confusing about password and restating through procedures. The altered password is not accepted I Safari

I am having trouble with password. Forgetting password,as I have many mail IDs like yahoo,gmail,hotmail,apple, I cloud etc.,thus confusing about password and restating through procedures. The altered password is not accepted I Safari. When I want to open my mail but window appears as incorrect password though the mail appears on the left. however whe I go to my mail separately opening my mail, without mail icon in my pad.

I'm having the same problem, what did you do?

User cannot log in using Opendirectory password but can log in using Crypt

Hi,
We have an Xsan environment with Opendirectory authentication. Most of the users are created in Workgroup manager and home folders are stored on an Xsan volume.
We have noticed (this has happened to two users recently) that sometimes user cannot log in using his password stored in Opendirectory Password server. This is permanent to some specific User/Workstation combination. Other users can log in to the same workstation and this user can log in to other workstations.
Also, if I change password type to Crypt in Workgroup manager, user can log in to this workstation. In past this happened to another user/workstation combination.
I tried to create a new Opendirectory password (password ID has changed in WM), with no success.
Any ideas?
Thanks,
Darius

You say you can log in the web browser right? You can find your username in the following url: https://play.spotify.com/user

SYSDBA and USER password

I developed an app. with VB.NET and Oracle 9i. The database has a user name with which a user can work. I have to deploy my app. and submit entire documentation of database. There I need to mention the user name and password in case other person takes care of service later and need to re-install database, he may be able to create the schema.
In that case, how can I secure the database so that the data is not tampered. The documentation contains the user name and password needed for the app.

If you release the administrative or schema user password, the only warranty you have is to trust people who receive your application won't try to corrupt information.
You could try, if possible to add checksum to the columns, it's a mean to at least detect unauthorized data modifications.
~ Madrid.

To know about sysdba

hi friends,
i have one question, if any user connect as sysdba, how can we restrict as connect as sysdba
eg. connect scott/tiger as sysdba
now scott can change any table or view of sysdba and drop any table
how it can consider it bcoz any user can connect as sysdba then it be problem,
pls tell me is there is any solution or how we can prevent any user to connect as sysdba
thanks in advance

Subject: ORA-01005: Connect Username AS SYSDBA Behaves Differently in 7.3.4, 8.1 and 9.2
Doc ID: Note:243083.1 Type: PROBLEM
Last Revision Date: 25-AUG-2003 Status: PUBLISHED
Symptom(s)
~~~~~~~~~~
When logged in the OS as the oracle binary owner and CONNECT AS SYSDBA with an
ordinary database username, is the password required ?
--> in 9.2 : NULL value or any value is allowed
--> in 8.X.X : NULL value results in an ORA-01005 error
--> in 7.3.4 : NULL value results in an ORA-01017 error
Different Possibilities
9.2.X
$ id
uid=127(ora92) gid=101(dba)
$ sqlplus /nolog
SQL*Plus: Release 9.2.0.3.0 - Production on Thu Jul 3 12:23:09 2003
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
SQL> connect scott as sysdba
Enter password: (enter NULL or any value)
Connected.
SQL> connect / as sysdba
Connected.
8.X.X
$ id
uid=118(ora817) gid=101(dba)
$ sqlplus /nolog
SQL*Plus: Release 8.1.7.0.0 - Production on Thu Jul 3 12:13:50 2003
(c) Copyright 2000 Oracle Corporation. All rights reserved.
SQL> connect scott as sysdba
Enter password: (NULL value)
Enter password:
ERROR:
ORA-01005: null password given; logon denied
SQL> connect / as sysdba
Connected.
7.3.4
$ id
uid=164(ora734) gid=101(dba)
$ svrmgrl
SVRMGR> connect scott as sysdba
Password: (NULL value)
ORA-01017: invalid username/password; logon denied
SVRMGR> connect / as sysdba
Connected.
Change(s)
~~~~~~~~~~
7.3.4
SVRMGR> connect scott/tiger as sysdba
Connected.
SVRMGR> connect scott/t as sysdba
Connected.
SVRMGR> connect scott as sysdba
Password: (Entered tiger)
Connected.
SVRMGR> connect scott as sysdba
Password: (Entered t)
Connected.
SVRMGR> connect as sysdba
Username: (NULL value)
Connected.
SVRMGR> connect as sysdba
Username: /
Connected.
SVRMGR> connect as sysdba
Username: (NULL value)
Connected.
SVRMGR> connect as sysdba
Username: scott
Password: (NULL value)
ORA-01017: invalid username/password; logon denied
8.X.X
Any database user when the OS user belongs to the dba group can connect as
sysdba as long as the user provides his user password :
SQL> connect scott/tiger as sysdba
Connected.
SQL> connect scott/t as sysdba
Connected.
SQL> connect scott as sysdba
Enter password: (Entered tiger)
Connected.
SQL> connect scott as sysdba
Enter password: (Entered t)
ERROR:
ORA-01017: invalid username/password; logon denied
SQL> connect as sysdba
Enter user-name: /
ERROR:
ORA-01017: invalid username/password; logon denied
SQL> connect as sysdba
Enter user-name: (NULL value)
SP2-0306: Invalid option.
Usage: CONN[ECT] [logon] [AS {SYSDBA|SYSOPER}] | [INTERNAL]
where <logon> ::= <username>[<password>][@<connect_string>] | /
SQL> connect as sysdba
Enter user-name: scott
Enter password:
Enter password:
ERROR:
ORA-01005: null password given; logon denied
Only the username's password is allowed in 8.X.X when not passing it in the
connect string.
9.2
You can enter any value for the password or null value: it connects.
All cases work , except when you do not provide any username:
SQL> connect as sysdba
Enter user-name: (NULL value)
SP2-0306: Invalid option.
Usage: CONN[ECT] [logon] [AS {SYSDBA|SYSOPER}]
where <logon> ::= <username>[<password>][@<connect_string>] | /
Cause
~~~~~
When your OS login is the oracle binary owner, Oracle checks the O/S
authentication and not the database user name.
So whatever you put as username, it ignores and allows you to login as SYSDBA.
Fix
~~~~
An ordinary user should not be able to log in the server as the oracle binary
owner account.
Be careful which OS users are members of the Unix 'OSDBA' or 'OSOPER' groups
or which NT users are members of the 'ORA_<sid>DBA' or 'ORADBA' groups when
using O/S authentication.
References
~~~~~~~~~~~
Bug 2869802 DATABASE ALLOWS NULL PASSWORD WHEN CONNECTING AS SYSDBA
Note 242258.1 Misconceptions About the AS SYSDBA login With any Username
Note 50507.1 SYSDBA and SYSOPER Privileges in Oracle (UniX and NT)

Confused about the default schema

Hi,
I am a little bit confused about the schema concept.
I want to create a new schema called APP and then create several users and roles based on the schema APP. The default schema for the users should be APP achema.
How can I make the schema APP the default schema for the new users that I am creating?
I feel that there are some schema design concepts that I have to learn. Is there any resource on the internet that I can read and learn more about oracle schema design best practices?
Any help would be appreciated,
Ali

A schema holds object definitions, and in the case of table & index objects the schema also holds the data.
A user owns the schema.
Therefore the user 'owns the definitions (including any functions, procedures, sequences, tabels, etc.)
Other users may be granted access to some, or all, of the objects in a schema. This is done through the 'GRANT ...' command. For example, consider the following steps:
1) create user app_owner
2) create table object test owned by the app_owwner
3) create user app_user
4) grant select, update, insert and delete on app_owner's test table to app_user
5) add synonyms to avoid needing to qualify the table's schema name.
done as follows:
oracle@fuzzy:~> sqlplus system
SQL*Plus: Release 10.2.0.1.0 - Production on Mon Apr 3 20:07:32 2006
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 10g Express Edition Release 10.2.0.1.0 - Production
Create the app owner userid. Note there is no need to ever log in to that user, even to create tables.
SQL> create user app_owner
2 identified by xyz
3 account lock
4 quota unlimited on users
5 default tablespace users
6 temporary tablespace temp;
User created.
Creating objects in a schema can be done by providing the schema name, or by switching schema in newer versions of Oracle
SQL> create table app_owner.test ( t number );
Table created.
Create a userid that will access the table. Set that userid up to access the database and (for future) give it the capability to create it's own synonyms
SQL> create user app_user
2 identified by xyz
3 temporary tablespace temp;
User created.
SQL> grant create session to app_user;
Grant succeeded.
SQL> grant create synonym to app_user;
Grant succeeded.
Now give the user access to the objects
SQL> grant select, update, insert, delete on app_owner.test to app_user;
Grant succeeded.
Let's test it out. Insert by qualifying the schema name on the object, then create a synonym to avoid using schema, and try it all using the synonym
SQL> connect app_user/xyz
Connected.
SQL> insert into app_owner.test values (4);
1 row created.
SQL> create synonym test for app_owner.test;
Synonym created.
SQL> insert into test values (3);
1 row created.
SQL> select * from test;
         T
         4
         3
SQL> Note that some people want to use PUBLIC grants and PUBLIC synonyms. This is a real bad idea if you want to ensure long term security of the data and want to host several different applications in the same Oracle instance.
This, and a whole lot more, is in the 'Concepts' manual for your version of the database at http://docs.oracle.com

HT204053 How do I create an Apple ID for my kids which are linked to my Apple ID so that they can make purchases without me having to tell them my user/password?

How do I create an Apple ID for my kids which are linked to my Apple ID so that they can make purchases without me having to tell them my user/password?

Welcome to the community.
Unfortunately, you cannot do that. The first hurdle that you are going to face, is that mobile devices, by virtue of being prone to loss, will always require that a password is entered before a purchase of any kind is made.
If your concern about the password, is related to your privacy in regard to your mail, contacts and calendar information rather than their acces to make purchases, then the best solution would be for you to use another Apple ID for iCloud.
Apple have called the whole cloud thing iCloud, there are a number of features under the iCloud umbrella, some of which require their own login. iTunes is one of these, another is what Apple have unfortunately also called iCloud too.
You can use the same Apple ID (account) to login to both iCloud and iTunes, but you don't need to and often users will login to each service using a different ID.
The part that you need to remember is that the services available when you log into iCloud are completely different and unrelated to those when you log in to iTunes. Your iCloud login enables mail, contacts, calendars, find my phone, Back to My Mac, Documents & Data sharing and photostream, it does not affect any of your iTunes services.

Confusion about 'sysdba'; random user/password logs in as 'sysdba'

Similar Messages

Maybe you are looking for