How to get SYSDBA privileges???

Hi,
I can't change shared_pool parameters because I'm not connected as SYSDBA though my user account is a member of DBA role. I tried ro connect as NT admin - no much help either.
Manual says: 'To connect as SYSOPER or SYSDBA using OS authentication you do not need the SYSOPER or SYSDBA system privileges. Instead, the server verifies that you have been granted the appropriate OSDBA or OSOPER roles at the operating system level.'
Should I create OSDBA or OSOPER roles in NT and be a member of them?
I created to blank role like above and add myself as the user - didn't work out. Probably I miss something.
What privileges should NT admin grant to the roles?
I'm stuck please help ))
Thanks in advance
Marina

thanks George
Unfortunatelly it doesn't help may be because I use Oracle 8.1.7
I have no problem connecting as SYS. The problem is that I can't connect with SYSDBA priv. though my account is super admin. I'm able to connect as myself with SYSOPER and Normal privs , but even with SYSOPER privs I can't edit database parameters or start/shutdown DB.
Any ideas?
Thanks in advance
Marina

Similar Messages

HOW points get you privileges within the community

1. Create an account.
2. Receive welcome email: "Welcome to Apple Support Communities! ... "Participate: Check out the community by reading existing discussions and see what the latest buzz is about. Got answers? Post responses, enlighten the community, and earn points! See how points get you privileges within the community."
3. Go to link to see how points get you privileges.
4. Read what points are...
OK, so it explains how to get points and that they give you privileges, but no mention of how points get you privileges or link to that information. Not that I really care, but pointing it out. Is it just another "status" in our communities for people to feel good about [authoratative, look at me], or does it really provide something worthwhile relative to being helpful and providing Apple's support for them?

Refer to ... 'More like this', this page, right hand column, bottom entry ... 'What's the benefit of accruing points in Apple communities'
Carolyn Samit's excellent answer details all the levels and the justification for taking part in community discussions.
Personally, simply scouting around the different sections is an education in itself and I would heartily recommend you to take an interest.

How to get SYSDBA or SYSOPER credentials

Hi,
I am having SYS credentials. But I want to know SYSDBA or SYSOPER credentials.
How can I check in Database to get them?
DB:11g.
I am trying to connect using windows GUI it is asking for anyone of those SYSDBA or SYSOPER credentials

Hulk wrote:
I have newly set up my Oracle 11g Database under 'administrator' account in new Windows2008 Server.
From my oracle batch jobs I am trying to connect DB as shown: SQLPLUS /@%DBName%
as this line it is throwing logon denied - error message.
My Old DB is 8i and Server is WindowsNT ,user account ='zadministrator'.
Why was it throwing error?Unfortuntately you did not show us the actual error message. Instead you chose to give us your interpretation of it. "logon denied" could be a lot of things. An actual error message, including the ora-nnnn number will tell us what it is.
And you didn't tell us if you tried this connection from the database server or a client machine.
Copy and paste from a command session is a wonderful thing, but only if you use it.

New user with sysdba privilege gets connected as user sys

hi ,
I am using oracle 10g R2 . I have a user named test . I have provided sysdba privilege to this user . Now , when I login to this user as conn tkcsowner/password
it gets connected , I created a table in that , the table data is fine . But, when I login as conn tkcsowner/password as sysdba , it connects , if I execute show user it shows "user is sys" , and the table is not here .
My question is ............
1. if I login to tkcsowner as sysdba , where do I login actually , to sys account or to tkcsowner ?
2. I want to execute some stored procedures through tkcsowner , which requires sysdba privilege . But , how can I can execute those from tkcsowner , but not from sys ?
Any additional info on this would be appreciated . thank you.

My question is ............
1. if I login to tkcsowner as sysdba , where do I login actually , to sys account or to tkcsowner ?Yes, teh correct behavior. If you would use the o/s authentication, you would be connected as Sys user since Oralce would bypass the supplied username and password of yours over the prompt.
2. I want to execute some stored procedures through tkcsowner , which requires sysdba privilege . But , how can I can execute those from tkcsowner , but not from sys ?When you are going to connect with Sysdba role, you would be connected as Sys user. I am not sure what you exactly mean by saying that the procedure requires the Sysdba privilege? Procedure doesn't need any Sysdba privilege( there isn't such thing since its a role not a privilege) but the provilege of Execute on that procedure . So you do want to check it out what you are actually looking for and why?
HTH
Aman....

How can I find exact username if I connected with sysdba privilege?

I granted sysdba privilge to a database user. I can connect that user as sysdba. From that users session, 'show user' command showing "SYS" and also username from v$session is also showing "SYS". How can I find actual username used for connecting the database as sysdba?
Steve Abraham

user10247588 wrote:
Thanks for the replay..
But my requirement is that in our production system auditors want to give separate username for each administrators (they are not recommending sys and system).
Normal dba privilege is not a problem. But for sysdba privilege every users are showing the user "SYS". How we can I identify which user is login to the database for a particular work if they connected as sysdba. How can I find which user did that (not just want the username "SYS", because all the administrators are identified by sys if they are connected as sysdba). If auditing is enabled how can I find the exact username. Because we are planning to give sysdba privilege to some of the administrators.
Also, is there any option to find the username, if one user is initiate shutdown of the database?First Please close the thread and keep questioning in only one thread.
then do not connect as sysdba

How do I get access privileges?

How do I get access privileges to sync my iphone4?

Hi, do a Get Info in Finder on the folder & file you're trying to use, what rights does it say you have?

How do get privilege rights to convert a cd to my library

how do get privilege rights to convert a cd to my library

You don't need privilege rights.
Would you explain what is happening?
Any messages pop up?

How to get privilege infomation

Dear all,
I want to get all privilege infomation in oracle,how can i get? there are some dic view?

user7244870 wrote:
Dear all,
I want to get all privilege infomation in oracle,how can i get? there are some dic view?It is unclear if you want to see all privileges that have actually been granted to someone/some role, or all privileges that are available to be granted.
If, by 'dic view' you mean 'dictionary view', the full data dictionary is documented in the Reference Manual. Just read down the table of contents for a view name that looks promising.

How to get ORA errors in alertlog file using shell script.

Hi,
Can anyone tell me how to get all ORA errors between two particular times in an alertlog file using shell script.
Thanks

Hi,
You can define the alert log as an external table, and extract messages with SQL, very cool:
http://www.dba-oracle.com/t_oracle_alert_log_sql_external_tables.htm
If you want to write a shell script to scan the alert log, see here:
http://www.rampant-books.com/book_2007_1_shell_scripting.htm
#!/bin/ksh
# log monitoring script
# report all errors (and specific warnings) in the alert log
# which have occurred since the date
# and time in last_alerttime_$ORACLE_SID.txt
# parameters:
# 1) ORACLE_SID
# 2) optional alert exclusion file [default = alert_logmon.excl]
# exclude file format:
# error_number error_number
# error_number ...
# i.e. a string of numbers with the ORA- and any leading zeroes that appear
# e.g. (NB the examples are NOT normally excluded)
# ORA-07552 ORA-08006 ORA-12819
# ORA-01555 ORA-07553
BASEDIR=$(dirname $0)
if [ $# -lt 1 ]; then
echo "usage: $(basename) ORACLE_SID [exclude file]"
exit -1
fi
export ORACLE_SID=$1
if [ ! -z "$2" ]; then
EXCLFILE=$2
else
EXCLFILE=$BASEDIR/alert_logmon.excl
fi
LASTALERT=$BASEDIR/last_alerttime_$ORACLE_SID.txt
if [ ! -f $EXCLFILE ]; then
echo "alert exclusion ($EXCLFILE) file not found!"
exit -1
fi
# establish alert file location
export ORAENV_ASK=NO
export PATH=$PATH:/usr/local/bin
. oraenv
DPATH=`sqlplus -s "/ as sysdba" <<!EOF
set pages 0
set lines 160
set verify off
set feedback off
select replace(value,'?','$ORACLE_HOME')
from v\\\$parameter
where name = 'background_dump_dest';
!EOF
`
if [ ! -d "$DPATH" ]; then
echo "Script Error - bdump path found as $DPATH"
exit -1
fi
ALOG=${DPATH}/alert_${ORACLE_SID}.log
# now create awk file
cat > $BASEDIR/awkfile.awk<<!EOF
BEGIN {
# first get excluded error list
excldata="";
while (getline < "$EXCLFILE" > 0)
{ excldata=excldata " " \$0; }
print excldata
# get time of last error
if (getline < "$LASTALERT" < 1)
{ olddate = "00000000 00:00:00" }
else
{ olddate=\$0; }
errct = 0; errfound = 0;
{ if ( \$0 ~ /Sun/ || /Mon/ || /Tue/ || /Wed/ || /Thu/ || /Fri/ || /Sat/ )
{ if (dtconv(\$3, \$2, \$5, \$4) <= olddate)
{ # get next record from file
next; # get next record from file
# here we are now processing errors
OLDLINE=\$0; # store date, possibly of error, or else to be discarded
while (getline > 0)
{ if (\$0 ~ /Sun/ || /Mon/ || /Tue/ || /Wed/ || /Thu/ || /Fri/ || /Sat/ )
{ if (errfound > 0)
{ printf ("%s ",OLDLINE); }
OLDLINE = \$0; # no error, clear and start again
errfound = 0;
# save the date for next run
olddate = dtconv(\$3, \$2, \$5, \$4);
continue;
OLDLINE = sprintf("%s %s",OLDLINE,\$0);
if ( \$0 ~ /ORA-/ || /[Ff]uzzy/ )
{ # extract the error
errloc=index(\$0,"ORA-")
if (errloc > 0)
{ oraerr=substr(\$0,errloc);
if (index(oraerr,":") < 1)
{ oraloc2=index(oraerr," ") }
else
{ oraloc2=index(oraerr,":") }
oraloc2=oraloc2-1;
oraerr=substr(oraerr,1,oraloc2);
if (index(excldata,oraerr) < 1)
{ errfound = errfound +1; }
else # treat fuzzy as errors
{ errfound = errfound +1; }
END {
if (errfound > 0)
{ printf ("%s ",OLDLINE); }
print olddate > "$LASTALERT";
function dtconv (dd, mon, yyyy, tim, sortdate) {
mth=index("JanFebMarAprMayJunJulAugSepOctNovDec",mon);
if (mth < 1)
{ return "00000000 00:00:00" };
# now get month number - make to complete multiple of three and divide
mth=(mth+2)/3;
sortdate=sprintf("%04d%02d%02d %s",yyyy,mth,dd,tim);
return sortdate;
!EOF
ERRMESS=$(nawk -f $BASEDIR/awkfile.awk $ALOG)
ERRCT=$(echo $ERRMESS|awk 'BEGIN {RS=" "} END {print NR}')
rm $LASTALERT
if [ $ERRCT -gt 1 ]; then
echo "$ERRCT Errors Found \n"
echo "$ERRMESS"|nawk 'BEGIN {FS=" "}{for (i=1;NF>=i;i++) {print $i}}'
exit 2
fi

WebGUI: How to get the users IP-address

Hello.
I have to develop a simple web-application, that will enable users to reset their forgotten passwords or to unlock themselves, if they are locked because of too many failed login-attempts.
As you can imagine, this application must not require a login. For security reasons any action has to be logged.
The username can not be used for logging-purposes, as the application is executed using a default-user defined in transaction SICF. That's why the IP-address of the user's pc has to be written into the log-table.
My problem is, that i do not know how to get it. I have read many articles on help.sap.com, searched in the sap notes, used Google and tried to find usefull functions in our SAP-system, but after two days it still does not work and i do'nt know, what else to try.
At the moment i am able to read the name of the client-pc with my test-coding.
  DATA:    lv_webgui TYPE xfeld.
  STATICS: lv_computer_name TYPE string,
           lv_username TYPE string.
  CLASS: cl_gui_frontend_services DEFINITION LOAD.
  lv_webgui = cl_gui_frontend_services=>www_active.
  IF lv_webgui EQ gc_true.
    " Begin of experimental coding #1
    CALL METHOD cl_gui_frontend_services=>get_computer_name
      CHANGING
        computer_name = lv_computer_name.
    " End of experimental coding #1
    " Begin of experimental coding #2
    CALL FUNCTION 'ITS_ENV_GET_VARIABLE'
      EXPORTING
        variable = 'COMPUTERNAME'
      CHANGING
        value = lv_computer_name.
    " End of experimental coding #2
    MESSAGE s000(38) WITH lv_computer_name.
  ENDIF.
The problem is, that the Internet Explorer 7 (version: 7.0.5730.13CO) shows a warning before the scripts, generated by the ITS, are executed on the client. If the user clicks "abort", the scripts are not executed and the name of the client-pc will not be returned to the server (experimental coding #1 returns the value 'localhost', experimental coding #2 returns an empty string).
That's why the experimental coding is quite useless, because the user is able to avoid it's execution.
In theory i could use experimental coding #2 and stop the execution of the program if an empty string is returned but some users in our company have administrator-privileges and so they can change environment-variables at will. So i am afraid, that this procedure is not an option.
I am quite sure, that there must be a way to read the IP-address directly from the ITS without using the functions in my experimental coding, but i have no clue how this could be done.
Any suggestions would be highly appreciated.
As i do'nt know how to determine the version of our ITS, i have to leave this information out for the moment. If anyone needs this information it would be very kind, if he or she could tell me how to get the required information.
EDIT: As we are using SAP ECC 6.0 and Services are maintained via transaction SICF, it should be ITS 6.40.
Regards
Jörg Neumann
Edited by: Jörg Neumann on Oct 16, 2009 1:27 PM

Hello Wolfgang.
Thanks for your reply.
I can imagine, that the application as described above seems to be very insecure, but the description is not complete - i left some parts out, as they were not relevant for my problem.
1.) The application can only be reached from our intranet.
2.) Unlocking / Resetting password can be done three times per day, which limits the number of attemps for cracking a password to a total of 20 per day.
3.) The owner of the account will receive an email if the acount was changed by the application. So if somebody tries to crack the password, the owner of the account will get a total
20 3 mails per day - which should make him/her at least a litte suspicious.
I know, that the logged data is quite worthless, as computername and username are read using clientside-scripting and there could be a proxy between the client and the server, but this is exaclty, what i have to develop.
I will keep the logging-problem in mind and talk about it in the next meeting, though i am quite sure, that it wo'nt change anything.
Regards Jörg Neumann
Edited by: Jörg Neumann on Oct 19, 2009 4:57 PM

ADDM Report is not produced by SQL DEV 4.0 if logged in user does not have SYSDBA privilege

Hello -
In SQLDEV 4.0 (Early Adapter), I logged in as user with no SYSDBA privilege granted. But ADVISOR granted and execute on DBMS_ADDM granted and "select any dictionary" granted, etc.
Then i go to the menu View --> DBA --> Performance --> Automatic Database Diagnostic Monitor
Select ADDM report from the available choices.
Out of 3 menu options: Summary, Findings and ADDM Report, I can see the first two, but I am getting a grey screen for ADDM Report.
^^^^^^^^^^^^^^^^^^^^^
If i do exactly the same but login as SYSDBA, then ADDM Report can be produced and can be seen. So the issue is in the missing grants and privileges.
^^^^^^^^^^^^^^^^^^^^^^
The goal that we are pursuing in our shop is to empower developers to work with ADDM reports by having them login as non-SYSDBA user.
^^^^^^^^^^^^^^^^^^^^^^^^
Please advise what privilege should be granted to get this working for non-SYSDBA login
The same user can successfully execute $ORACLE_HOME/rdbms/admin/addmrpt.sql and produce file with complete ADDM report. But not able to get the ADDM from SQL DEV 4.0
Thank you,
vr

Thank you, Phil.
This worked for me in my quick test case.
Great help, as DBA group wants to allow NON-privileged users (like Developers and QA) to execute ADDM on demand.
Here is my observation for RAC database with two instances.
I have followed your instructions:
"Performance / Automatic Database Diagnostic Monitor -> Run ADDM"
Then
- Uncheck box "By Creating New Snapshot" (this box was checked by default)
- Provide new "Task Name" (let's say "vr1")
- Select "Start Snapshot" (this is where my first confusion is: each screen shot # is shown twice, may be because i have two instances of RAC)
- Select "End Snapshot" (the same way: each SNAP_ID is shown twice)
- and finally APPLY button is pressed
This creates 3 reports:
vr1
vr1$1 (for instance_id=1)
vr1$2 (for instance_id=2_
So, my question is: this expected and normal behavior of the tool?
What if my RAC database has 8 instances? Then I would generate 9 separate ADDM reports?
Is this correct observation?
Thank you,
vr

How to allow write privileges by a process to files?

Hi there
In SPARC-Solaris8:
How to allow write privileges by a process to files?
Tks in advance,
C�sar

The access to files will be controlled by the owner of the files, the owner of the process trying to access the files and the permissions set on the files.
You can use either user, group or world permissions to limit access to files by processes owned by different users.
For example, a files with permissions of 777 (rwxrwxrwx) could be written to by every user on the system. A files with 760 (rwxrw----) could be written to by anyone who owned it, or anyone in the same group, but not have general write permissions.
read man pages on group, chmod, etc to get an understanding of how the permissions and the owner of a process interact.

Connect ORACLE database with sysdba privileges

Hi Guru,
I am connecting to my ORACLE database with my VB application.
I have problem with connecting to the database with SYSDBA privileges. i.e it is not connecting to the database with SYSDBA privileges.
If I connect my db from SQLPLUS. Its worked like this..
Connected to:
Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
With the Partitioning, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production
SQL> select Name from v$datafile;
select Name from v$datafile
ERROR at line 1:
ORA-00942: table or view does not exist
SQL> connect as sysdba;
Enter user-name: user_1
Enter password: ****
Connected.
SQL> select Name from v$datafile;
NAME
C:\NEW\ORADATA\ITPL\SYSTEM01.DBF
C:\NEW\ORADATA\ITPL\UNDOTBS01.DBF
C:\NEW\ORADATA\ITPL\CWMLITE01.DBF
C:\NEW\ORADATA\ITPL\DRSYS01.DBF
C:\NEW\ORADATA\ITPL\EXAMPLE01.DBF
C:\NEW\ORADATA\ITPL\INDX01.DBF
C:\NEW\ORADATA\ITPL\ODM01.DBF
C:\NEW\ORADATA\ITPL\TOOLS01.DBF
C:\NEW\ORADATA\ITPL\USERS01.DBF
C:\NEW\ORADATA\ITPL\XDB01.DBF
10 rows selected.
SQL>
Now in my VB application if I am using following string to connect the database.
m_adoCnn.ConnectionString = Provider=MSDAORA;Password=pass;User ID=user_1;DBA Privilege=SYSDBA;Data Source=ITPL
It will connect properly to the database but gives error while executing the query select Name from v$datafile;
as,
ORA-00942: table or view does not exist
Can any body help me in this or provide me proper connection string.

Hello,
I am getting below error when i kust Clic k on Test Connection in SSMS:
TITLE: Microsoft SQL Server Management Studio
The test connection to the linked server failed.
ADDITIONAL INFORMATION:
An exception occurred while executing a Transact-SQL statement or batch. (Microsoft.SqlServer.ConnectionInfo)
Cannot initialize the data source object of OLE DB provider "OraOLEDB.Oracle" for linked server "test".
OLE DB provider "OraOLEDB.Oracle" for linked server "test" returned message "ORA-12154: TNS:could not resolve the connect identifier specified". (Microsoft SQL Server, Error: 7303)
For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&ProdVer=10.50.4000&EvtSrc=MSSQLServer&EvtID=7303&LinkId=20476
BUTTONS:
OK
Can you please guide is there any other setting i need to do after install Oracle Client ?
Best Regards,
Tushar Malvi

How to get rowid of extend

Dear all,
How to get the rowids of the first and last row in every extent by dba_extents?

http://docs.oracle.com/cd/E14072_01/appdev.112/e10577/d_parallel_ex.htm
Examples
The following examples run on the Human Resources (HR) schema of the Oracle Database Sample Schemas. It requires that the HR schema be created with the JOB SYSTEM privilege.
Chunk by ROWID
This example shows the most common usage of this package. After calling the RUN_TASK Procedure, it checks for errors and re-runs in the case of error.
DECLARE
l_sql_stmt VARCHAR2(1000);
l_try NUMBER;
l_status NUMBER;
BEGIN
-- Create the TASK
DBMS_PARALLEL_EXECUTE.CREATE_TASK ('mytask');
-- Chunk the table by ROWID
DBMS_PARALLEL_EXECUTE.CREATE_CHUNKS_BY_ROWID('mytask', 'HR', 'EMPLOYEES', true, 100);
-- Execute the DML in parallel
l_sql_stmt := 'update /*+ ROWID (dda) */ EMPLOYEES e
 SET e.salary = e.salary + 10
 WHERE rowid BETWEEN :start_id AND :end_id';
DBMS_PARALLEL_EXECUTE.RUN_TASK('mytask', l_sql_stmt, DBMS_SQL.NATIVE,
 parallel_level => 10);
-- If there is an error, RESUME it for at most 2 times.
L_try := 0;
L_status := DBMS_PARALLEL_EXECUTE.TASK_STATUS('mytask');
WHILE(l_try < 2 and L_status != DBMS_PARALLEL_EXECUTE.FINISHED)
LOOP
 L_try := l_try + 1;
 DBMS_PARALLEL_EXECUTE.RESUME_TASK('mytask');
 L_status := DBMS_PARALLEL_EXECUTE.TASK_STATUS('mytask');
END LOOP;
-- Done with processing; drop the task
DBMS_PARALLEL_EXECUTE.DROP_TASK('mytask');
END;
/

ADDM Report is not produced if logged in user does not have SYSDBA privilege

Hello -
In SQLDEV 4.0 (Early Adapter), I logged in as user with no SYSDBA privilege granted. But ADVISOR granted and execute on DBMS_ADDM granted and "select any dictionary" granted, etc.
Then i go to the menu View --> DBA --> Performance --> Automatic Database Diagnostic Monitor
Select ADDM report from the available choices.
Out of 3 menu options: Summary, Findings and ADDM Report, I can see the first two, but I am getting a grey screen for ADDM Report.
^^^^^^^^^^^^^^^^^^^^^
If i do exactly the same but login as SYSDBA, then ADDM Report can be produced and can be seen. So the issue is in the missing grants and privileges.
^^^^^^^^^^^^^^^^^^^^^^
The goal that we are pursuing in our shop is to empower developers to work with ADDM reports by having them login as non-SYSDBA user.
^^^^^^^^^^^^^^^^^^^^^^^^
Please advise what privilege should be granted to get this working for non-SYSDBA login
Thank you,
vr

Thank you, Phil.
This worked for me in my quick test case.
Great help, as DBA group wants to allow NON-privileged users (like Developers and QA) to execute ADDM on demand.
Here is my observation for RAC database with two instances.
I have followed your instructions:
"Performance / Automatic Database Diagnostic Monitor -> Run ADDM"
Then
- Uncheck box "By Creating New Snapshot" (this box was checked by default)
- Provide new "Task Name" (let's say "vr1")
- Select "Start Snapshot" (this is where my first confusion is: each screen shot # is shown twice, may be because i have two instances of RAC)
- Select "End Snapshot" (the same way: each SNAP_ID is shown twice)
- and finally APPLY button is pressed
This creates 3 reports:
vr1
vr1$1 (for instance_id=1)
vr1$2 (for instance_id=2_
So, my question is: this expected and normal behavior of the tool?
What if my RAC database has 8 instances? Then I would generate 9 separate ADDM reports?
Is this correct observation?
Thank you,
vr

How to get SYSDBA privileges???

Similar Messages

Maybe you are looking for