Connect to System account

I have somehow locked the system account. I tried to run from the command
prompt: C:/sqlplus connect as sysdba. Then enter the sysdba password. I get an error "ORA-01301: insufficient privileges." How can I reset the system account if the sysdba has insufficient privileges?

Read the documentation ... SYSDBA is disabled by default.
You can use orapw to create a new password file that enables SYSDBA.
But you can never use / as sysdba.
You must use the full sys@<service_name> as sysdba so that you are challenged for the password.

Similar Messages

Workflow configuration error - System Account connection test failed

Hi,
Has anybody faced a problem with Workflow configuration? The version we are using is 2.6.2 on Oracle database 9.2.0.5 on AIX5L. The workflow installation from 9.2.0.1 installation CDs goes through without any problem. But when the workflow configuration tool comes up it fails with the following error.
"SYSTEM account connection test failed".
The system and sys accounts are fine as verified by sqlplus. Any help is greatly appreciated.
The log file is shown below.
Workflow Configuration Assistant-AIX
WorkflowCA:
WorkflowCA: Workflow Configuration in progress...
WorkflowCA:
WorkflowCA: Screen width -2304-, screen height -1024-
WorkflowCA: Graphics User Interface mode
WorkflowCA:
WorkflowCA: Language - US
WorkflowCA:
WorkflowCA: Start testing connection, which takes less than 3 minutes.
WorkflowCA:
WorkflowCA: Account connection test for SYSTEM
WorkflowCA: SQL Thread: Thread[TstSQL,5,main]
WorkflowCA: chkSQL: true
WorkflowCA: cmdLine: /app/oracle/product/9.2.0/bin/sqlplus system/<Masked Password> @/app/oracle/product/9.2.0/wf/sql/wftstcon.sql
WorkflowCA: envVar[0]: -ORACLE_SID=rsdb-
WorkflowCA: envVar[1]: -ORACLE_HOME=/app/oracle/product/9.2.0-
WorkflowCA: envVar[2]: -WF_RESOURCES=/app/oracle/product/9.2.0/wf/res/wfus.res-
WorkflowCA: envVar[3]: -TZ=EST5EDT-
WorkflowCA: envVar[4]: -WF_NLS_LANG=AMERICAN_AMERICA.WE8ISO8859P1-
WorkflowCA: envVar[5]: -PATH=/app/oracle/product/9.2.0/bin:/app/oracle/product/9.2.0/lib:$PATH-
WorkflowCA: envVar[6]: -LD_LIBRARY_PATH=/app/oracle/product/9.2.0/lib-
WorkflowCA: envVar[7]: -WF_TNS_ADMIN=/app/oracle/product/9.2.0/network/admin-
WorkflowCA: envVar[8]: -WF_SHLIB_PATH=/app/oracle/product/9.2.0/lib-
WorkflowCA: Exit Val : 126
WorkflowCA: chkSQL is alive after 1 seconds: false
WorkflowCA: SYSTEM account connection test failed.
WorkflowCA: Terminating...
Thanks,
Chethan

We had this problem on 2 machines.
On the 1st machine, we tried the local install option after a few days (Local option with no connect string) and it worked with no problems!
On the 2nd machine, we could never get it to work even after opening a tar with Oracle. Finally we did a remote install from the 1st machine into the database on the 2nd machine. During the remote install while running wfinstall on the 1st machine, we just had to choose the remote option and the database service name for the connect string.
Thanks,
Chethan

An error occurred when connecting to the accounting system ID3DEV310

Hi Friends,
We are Implementing collaboration project 4.5 and want to link with project system in ECC 6.0. Both these are in the different servers.
I have done the configuration on both the servers and also maintain the RFC (ID3DEV310) in Object Links.
When I create or open the existing project I get the following error: "An error occurred when connecting to the accounting system ID3DEV310"
Costing Variant taken is PS01 (Project Planning).
Your reply would be highly appreciated.
Aryan

Hi Deepak,
I have assigned the RFC destination and web server to the object type: "0WBSELEMENT" only
Also the same has been done for define Object links for accounting integration "0FIN_INT_ERP_PS"
I have entered these specific to PS objects only.
Aryan

How do I have an exe in a logon script run as a different user (either a domain admin or even the local system account)

So, I'm having some problems getting a logon script to work. I need a way to deploy the agent that we use via login/startup scripts and what I have works fine if the user has admin rights, or if UAC is disabled. I've tried to convert the .exe
to an .msi to make it easier, but the .msi never works and it's only distributed as an .exe. We deploy this to different clients, I can't disable UAC in their environment unless they specifically tell us to. Can anyone think of a way around this?
I've been searching for days and I'm just lost. If we could execute the file as the system account, or connect to shares using a startup script instead of logon, that would be perfect. Basically what it does is check to see if the process for the
agent is running (agentmon.exe) so we don't attempt to install it if it is already installed, if it's not, then it calls on a different agent installer depending on the IP address of the system (for clients that have more than one location). Here's what
I've got written that works for me in my test environment:
Const strAgent1 = "\\home.wiginton.local\SysVol\home.wiginton.local\Policies\{CD4ED3BD-0709-4E3D-A303-C9E3B0F5198D}\User\Scripts\Logon\Test-KcsSetup1.exe"
Const strAgent2 = "\\home.wiginton.local\SysVol\home.wiginton.local\Policies\{CD4ED3BD-0709-4E3D-A303-C9E3B0F5198D}\User\Scripts\Logon\Test-KcsSetup2.exe"
Const strAgent3 = "\\home.wiginton.local\SysVol\home.wiginton.local\Policies\{CD4ED3BD-0709-4E3D-A303-C9E3B0F5198D}\User\Scripts\Logon\Test-KcsSetup3.exe"
Const strFolder = "C:\Temp\"
Const Overwrite = True
dim objFSO, objNIC1, arrNIC, strIP, strMask, objShell, objWMIService
dim
'Checks for Kaseya agent process, AgentMon.exe, exits if running
Set objWMIService = GetObject ("winmgmts:")
Set proc = objWMIService.ExecQuery("select * from Win32_Process Where Name='agentmon.exe'")
If proc.count > 0 Then
    WScript.Quit
End If
'Instantiate a NIC configuration object
Set objNIC1 = GetObject("winmgmts:").InstancesOf("Win32_NetworkAdapterConfiguration")
'Instantiate a shell object
Set objShell = CreateObject("wscript.shell")
Set objFSO = CreateObject("Scripting.FileSystemObject")
'Create Temp Dir if it doesn't exist
If Not objFSO.FolderExists(strFolder) Then
    objFSO.CreateFolder strFolder
End If
For Each arrNIC in objNIC1
    if arrNIC.IPEnabled then
        StrIP = arrNIC.IPAddress(i)
        strMask = arrNIC.IPSubnet(i)
        Set WshNetwork = WScript.CreateObject("WScript.Network")
    end if
next
Function NetworkID(Address, Mask)
    Dim AddressOctets, MaskOctets, Result, N
    AddressOctets = Split(Address, ".")
    MaskOctets = Split(Mask, ".")
    ReDim Result(UBound(AddressOctets))
    For N = 0 To UBound(AddressOctets)
        Result(N) = AddressOctets(N) And MaskOctets(N)
    Next
    NetworkID = Join(Result, ".")
End Function
Select Case NetworkID(strIP,strMask)
    Case "192.168.0.0"
    ' Kaseya install commands for 192.168.0.0 subnet
    objFSO.CopyFile strAgent1, strFolder, Overwrite
    Wscript.Sleep 1*60*1000
    objShell.run "C:\Temp\Test-KcsSetup1.exe"
    Case "192.168.1.0"
    ' Kaseya install commands for 192.168.1.0 subnet
    objFSO.CopyFile strAgent2, strFolder, Overwrite
    Wscript.Sleep 1*60*1000
    objShell.run "C:\Temp\Test-KcsSetup2.exe"
    Case "192.168.2.0"
    ' Kaseya install commands for 192.168.2.0 subnet
    objFSO.CopyFile strAgent3, strFolder, Overwrite
    Wscript.Sleep 1*60*1000
    objShell.run "C:\Temp\Test-KcsSetup3.exe"
    Case Else
    ' Some sort of error checking. Maybe a BLAT SMTP command to send an email
End Select
Set objWMIService = Nothing
Set objNIC1 = Nothing
Set objShell = Nothing
Set WshNetwork = Nothing
Wscript.quit

You need to read the documentation carefully:
The Deploy Agents install package is created using a Configure Automatic Account Creation wizard. The wizard copies agent settings from an existing machine ID or machine ID template and generates an install package called
KcsSetup.All settings and pending agent procedures from the machine ID you copy from—except the machine ID, group ID, and organization ID—are applied to every new machine ID created with the package.
Including Credentials in Agent Install Packages
If necessary, an agent install package can be created that includes an administrator
credentialto access a customer network. Credentials are only necessary if users are installing
packages on machines and do not have administrator access to their network. The administrator credential is encrypted, never available in clear text form, and bound to the install package.
¯\_(ツ)_/¯

Printing from JBOSS (on a windows server as system account) on a mapped (shared) printer (installed as administrator)

Hi,
I have JBOSS running on a Windows Server. Our applications on JBOSS use network printers which are installed on the server for printing purposes. This works fine so far, except for one case for which I ask you for support:
If I map a printer, which is (only) conneted via USB with a PC and shared in the network, the printer is available on the server with JBOSS and can be mapped, BUT JBOSS is not able to see this particular printer and print on it, while the other installed
network printers are available and functional via JBOSS.
My researchs have led to the conclusion, that JBOSS doesn't see this printer, as JBOSS is running unter the SYSTEM account, while the printer was installed with an administrator account. Strangely network printers don't cause this issue.
If I start JBOSS with an administrator account, it can see and use the shared printer. But unfortunately this is not an option, as it causes other issues with our applications.
So the question is: Is there a way to make the printer visible for the SYSTEM account? Or any other suggestions?
Many thanks in advance and best regards,
Amir

simple solution is to install your printers locally rather than connecting to a network resource, locally installed printers have the advantage of being
visible to every user on your system including system accounts. To install a printer locally rather than connecting to a network printer start the "Add Printer Wizard" and select "Local printer attached to this computer"
Best,
Howtodo

TIP : In case of your SYSTEM account is lost

Hi ,
In case if your SYSTEM account is lost use this way :
If anybody has forgotten their SYSTEM account , do this way
Start SQL*Plus (Start -> Programs -> Oracle – Instance Name -> Application Development -> SQL Plus).
At the login prompt, in the user-name field, type ”/as sysdba” (including the forward slash, but without the quotes). Click OK.
You are now connected as system with full DBA rights.
To reset the password of the SYSTEM password (or any other user password), run the following query:
alter user system identified by NewPasswordHere;

This is probably most applicable to desktop installations for personal use, such as XE. It's unlikely to get you into your employer's payroll system.

Running 10G as a non local system account on Windows Server 2003

Hi,
I have an Oracle 10G database running on Windows Server 2003, SP2. I have created the database and it all works fine while the service is running as the default local system account. However, when I change the user that the service runs as to a different account the database starts and opens, and I can log on as SYS using a bequeath connection but I am unable to log on as any other user going through the listener. The listener responds to TNSpings, and all seems to be OK. When I switch it back to the local system user again it all works fine.
Can anyone offer any advice or help?
Thanks,
Rob

That's probably because the listener is still running as the local system account. Have you tried to change the listener service to run as the same account as the Oracle service?

HT4623 How to stop third party apps download with out you permission from ATT partners that cant see any connections on your account due to you not being the prchaser?

How to stop third party apps download with out you permission from ATT partners that cant see any connections on your account due to you not being the purchaser or on account as long as someone else is paying they can not hold legal resposible there third privacy due to legal privacy laws.

Then you should read these.
http://forums.macrumors.com/showthread.php?t=1804704&highlight=sonnet+tempo+pro
http://forums.macrumors.com/showthread.php?t=1721573&highlight=sonnet+tempo+pro
This was strange but has to do with how startup disk and nvram interact
http://forums.macrumors.com/showthread.php?t=1795765
I think your problems were solvable and not that the Sonnet card and 5,1 is not bootable, in fact the 5,1 is easier, there are more supported cards.
I have the 1,1 where the Sonnet Pro is recommended but for data only and are not bootable because of the 32-bit EFI firmware. NOT the 4,1 and 5,1. The 2008's are problem child and have a mix of PCIe 1.1 slots, first implementation of EFI64 that also has problems. Also the 4,1 has two PCIe 2.x slots 3 and 4 that share a controller but that simply limits bandwidth.
I would have left the TRIM support and NVRAM changes in Yosemite to a separate thread if you wanted to focus on the Sonnet Tempo Pro support in Mac Pro 2010-12 5,1s.
Also the make of SSD can vary and they also have their own firmware as do bootable controllers along with the EFI of the Mac, all of which have to work together. Meaning it might be that Samsung 840 va 840 EVO vs 840 Pro will all be slightly different but my experience is Samsungs work well (as do others like Crucial with the proper firmware - and there was/is an issue with the firmware of the Samsung 840 but not with booting).
The PCIe card gets seen and treated as external and therefore 'eject' but of course you can't when it is the system boot drive.
One thing I found last week and meant to mention: After installing or changing PCIe cards, RESET SMC made all the difference in the world with the long boot delay. Some PCIe cards will add a few seconds, system has to search the device tree which now shows another controller with multiple devices - and sometimes NVRAM and SMC are what I will call "dirty" and need to be rebuilt and reset.

I'm unable to connect my Gmail accounts to Apple Mail.

All - I've been working on this for hours.
All I want to do is connect my gmail accounts to Apple Mail. I'm running a new Macbook Air w Mountain Lion, Apple Mail 6.5. I can access the accounts on my ipad and iphone. I've spent hours reading forums and help areas.
Mail repeatedly asks for my password. In the account settings it does not save my password.
I've gotten the message that Mail cannot connect to Google imap server, but I do not believe this is a "timing" issue
Here's what I've tried:
Apple Side:
- Tried adding and deleting accounts several times within mail application
- tried using System Preferences > Mail/Contacts etc.
- Changed imap.gmail.com to imap.google.com
- changed to custom dedicated port for outgoing mail (587)
- closed and relaunched Mail
- Rebooted and safe rebooted computer
- set up and deleted accounts
- turned off gmail on phone and ipad
Google Side:
- Enabled IMAP
- Not using 2 step verification
- Checked Captcha

If you've activated 2-step verification, you need to generate an application-specific password in your Google account and enter it in place of your old password.

System account locked

Hello there!
I tried more than 3 times to make a new connection (in sql developer) usign the system account,bt i forgot the password for this account.Now the account has been locked and i can't make any connection to the ORCL server.
If u have any ideas..I'd be happy to hear them

Hi user;
Please follow below steps and see its helpful
sqlplus "/as sysdba"
SQL> ALTER USER username ACCOUNT UNLOCK;
Regard
Helios

How to audit SYSTEM account

Apparently, the AUDIT_SYS_OPERATIONS=TRUE does not audit the SYSTEM account.
But how do we audit the SYSTEM account?
Have you ever use the AUDIT USER SYSTEM command to audit the SYSTEM account?
If there is no way to audit the SYSTEM account, can it be locked such that no one can use it connect to the database except be system tasks?
Thanks.

Thanks Legatti.
The database in question is version 9.2. The AUDIT_SYS_OPERATIONS is set to true. In the AUD$ table, there are many audit records (login/loff) of the SYSTEM account.
Unlike SYS, there is nothing found for the SYSTEM account in the O/S audit files.
I think Oracle may treat SYSTEM as an user account in the audit aspect. I'll push our DBA to test whether AUDIT USER SYSTEM is allowed. And if allowed, whether there will be any performance issues. Thanks.

System account appears to be locked

I'm trying to access an Oracle 10g database (running on HP-UX) from my Windows XP laptop. I've installed the Instant Client, the ODBC driver, and set up the tnsnames.ora file. However, when I try to test my ODBC connection using the system account I get the following error:
ORA-28000: The account is locked.
I've tried this with both the Oracle and DataDirect ODBC drivers and I get the same result.
I thought the system account was unlocked by default, so I'm not sure if it's related to the account or to my local settings. I'm new to Oracle so I'd appreciate any suggestions from you seasoned users.
Thanks,
nkeliher

I was able to telnet to the db server, log in as sysdba, and unlock the system account. But it turns out the password I had been given for 'system' was wrong in the first place, so I created another account scott/tiger, granted connect and then tested the driver from my laptop and it worked fine.
Thanks for your quick response.

Mail unable to connect to Exchange account in Macbook

I have an Exchange Account for my work email and calendar. I recently had to change the password and as I updated the login information in my iPhone (IOS 7) and Macbook (OSX) I have found that the Mail app in the iPhone connects to the Account just fine... The Mail app in my macbook however is unable to connect (using the exact same login information).
The password has many special characters, could this be the issue?

Hey Oscar,
Thanks for the question. I understand that you are experiencing issues with your Mail account in OS X. The following resource provides some great troubleshooting information. You can also try deleting and re-adding the account from System Preferences or Mail Preferences:
OS X Mail: Troubleshooting sending and receiving email messages
http://support.apple.com/kb/TS3276
Thanks,
Matt M.

I didnet check the system account durin installation

Hi
I want to unlock the system account
after entering from command promot
I try the following
c:\> set oracle_sid= orcl
c:\> sqlplus / as sysdba
sql >alter user system account unlock;
user altered.
Sql> alter user scott account unlock;
user altered.
But I cannot to enter the database as system or sysdba so I didnet check the system account during installation
any suggestion please
windows xp os - oracle 10g
thanks in advance.

You can change system's password, example :
C:\>sqlplus / as sysdba
SQL*Plus: Release 10.2.0.1.0 - Production on Fri Jul 25 15:39:50 2008
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Connected to:
Oracle Database 10g Express Edition Release 10.2.0.1.0 - Production
SQL> alter user system identified by manager1;
User altered.
SQL>

SYSTEM account gets locked automatically

Hi,
Recently I started the oem agent on one of the box. Since then, the system account gets locked frequently.
Can you please guide how can I investigate on this ?
Also, I checked the failed accounts in recent times and I can see someone is connecting from terminal "pts/4".
Please help to resolve this asap.
Regards,
Harry

Please specify your OS and DB versions.
Can you please guide how can I investigate on this ?
Also, I checked the failed accounts in recent times
and I can see someone is connecting from terminal
"pts/4".It means someone is trying to hack the system account. I assume you have configure audit options so you can log where this attempts come from. Even though you have already realized attacks come from pts/4 it will only have sense if you are able to discover in the few minutes what's the actual terminal attached from pts/4. On the other hand, it sounds to me that someone opened a session in a unix like box, and is able to see the os where the database resides. If this is the case, look for the output from the os command 'last' to find out further information about pts/4. If this hacker has reached the OS, it is a serious matter, it could quite easily get signed to the database if it is OS authenticated.
~ Madrid

Connect to System account

Similar Messages

Maybe you are looking for