Idea for Automatically Changing Sys Password

What is the best approach for automating the changing of sys password every x amount of days?
I need to do this for security reasons

Best practice is to never use SYS for anything other than patching. So my recommendation is to change it after patches are applied and make sure that no one uses it except for patching.

Similar Messages

How to recreate dbconsole (Oracle10g ) after change SYS password?

Hi all,
would like to know how to recreate dbconsole after change SYS password? is there any links i can refer?
Thanks
Rgds,
Nonie

You don't need to recreate the console after changing the SYS password, it is not required. Once you have changed the sys password, the only two tasks you'll may have to do are:
1. Connect to the DB Control Console with the new password (mandatory, obviously).
2. Change the preferred credentials, in case you have stored the sys password as preferred credentials for your database.
Console repository and EM configuration have to be rebuilt only when there are connectivity conditions that have changed, such as host name change, or IP address change, which happens when you get your IP address by means of a DHCP server.
Are you currently facing some issue, besides the log in with new credentials, when attempting to start services?
One more thing I could guess you are working on a 10gR?? (1 or 2) on an unknown platform (unix, windows???) please specify.
~ Madrid

Changing Sys password in RAC

We are into the process of changing sys password of our RAC database.
If i change password on one node, will that password be get reflected on another node ??
(Since sys password is also stored in password file, i doubt, if change password on one node, the password file on another node will also get updated).
we have separate password files for each instance e.g inst1, inst2
so do i have to give command
alter user sys identified by new password .....on inst1
and
use orapwd ustility on inst2 to change sys password.
or else
alter user sys identified by new password......on inst1
alter user sys identified by new password(same as that of inst1) .....on inst2
***********

oracle@xxx-xxx-d@testdb: /orabase/oracle/product/10.2.0/db_1/dbs
-bash-3.00 $ orapwd file=orapwtestdb password=tatamata
SQL*Plus: Release 10.2.0.2.0 - Production on Tue Aug 7 13:22:42 2007
Copyright (c) 1982, 2005, Oracle. All Rights Reserved.
Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - 64bit Production
With the Partitioning, OLAP and Data Mining options
SYS@testdb > alter user sys identified by goran;
User altered.
SYS@testdb >
SYS@testdb > connect sys/goran as sysdba
Connected.
SYS@testdb > connect sys/tatamata as sysdba
Connected.
SYS@testdb >

What to do for automatically change over of PHASE from 1 to 2 in case of multilevel method of depreciation.

Hi all
As per the statutory requirement we want to maintain Multilevel method of depreciation in which we have maintained two phases given as below-
Dep/int.
phase
base method
decl. bal method
prd cont
mutilev. Method
change. Me
change over % rate
ordinary dep
1
ZMR1
0
001
Z02
2
0.3
ordinary dep
2
0011
0
001
001
0
0
Because asset need to depreciate upto 70% of its net book value on the basis of SLM percentage base as per phase 1.
After that it must shift to phase 2 ,where depend upon remaining useful of that asset , balance value of asset need to be spread over.
But while testing in, it is not automatically shifted to phase 2 directly once asset reaches its 70% (ie.once condition given phase one get exhausted)
Then pls guide me what to do for automatically change over of PHASE from 1 to 2 ??
Thanks and regards
Manjusha G.

Hi Manjusha,
To meet your requirement, you have to mention changeover in T code AFAMA-changeover method "2" and the changeover % 70 and in second line you can give phase 2 changeover within planned life and give your depreciation methods after changeover.
Refer the sample screenshot.
Hope it solves..
Regards,
G.Sethuraman

Automatically change the password and block user

Hi experts,
I have a strange problem, I have start the part java, but, when takes some time, AUTOMATICALLY change the password J2EE_ADMIN and SAPJSF and block the user SAPJSF, so, it doesn´t work the portal and i have to change the password and unlock the SAPJSF, why?
Thanks in advance,
Regards,

Hi Victor,
you may create another communication user as a copy of SAPJSF but having a different name. Use only the newly created user and block SAPJSF. The application that changes his password will lock an exception somewhere - either on ABAP side or on J2EE side.
Cheers,
Anja

HT1689 i just changed my Apple ID. Does this automatically change my password for ITunes? THat is my overall goal. I want to change me ITunes Password.

I just changed my Apple ID. Does this automatically change all previous passwords associated with Apple products?

Changing your account id doesn't change your password. If you want to change your password then you can log into your account on your computer's iTunes via the Store > View Account menu option, or you can change it by logging into http://appleid.apple.com

Changing 'SYS' password in 'Shared' mode ?

Oracle 9.2/AIx5.3
I have two Db DB1/DB2, both of these Db's are in 'Shared' remote login password mode. Now, I was under the impression that whilst in this mode, it was not possible to simply issue a command
alter user SYS Identified by <NEW PASSWORD>;
to change the password, if you did, it would result in an error message. Today I have tried, and it allowed me to change the 'SYS' password ? How is this the case. I’ve tried it on a 10g Db that’s also running in 'Shared' mode and got the following error message.
ERROR at line 1:
ORA-28046: Password change for SYS disallowed

Metalink 452959.1 states you cannot change or add users to the passwordfile when remote_login_passwordfile='SHARED' and you need to set this to 'EXCLUSIVE'. I had to look this up and I found it simply by searching for the error number.
Assuming you are not running 10.2.0.1 you could have easily looked up yourself.
Also as Oracle is always changing, differences between 9.2 and 10gR1 or R2 are best verified by looking in the release notes for that version, providing the quickest answer easily.
Sybrand Bakker
Senior Oracle DBA

Can changing SYS password be complicated

Hi,
I have two node RAC with ASm and I am able to login to both the nodes without password and every is fine, If i change the password fo the SYS will there be any complications as the same password is used by the ASM instance.
Your suggestion will be highly appreciated!

Thanks for your response.
My scenario is like,
I want to use the database authentication, hence if I comment out "SQLNET.AUTHENTICATION_SERVICES" oracle forces me to enter the password for SYS, but some of the services go down due to comenting "SQLNET.AUTHENTICATION_SERVICES" in in sqlnet.ora, as we need this for BEQ protocol which is used to connect from database to ASM instance failing which we cannot startup the instances and CRS resource status will show UNKNOWN.
My question is if I change the sysdba password and force the oracle to ask for the password before login as sysdba(commenting the SQLNET.AUTHENTICATION_SERVICES in sqlnet.ora) will it create any type of complecation.
Pls suggest!

Changing 'SYS' password / AIX concern

To comply with an Audit requirement, we need to change the oracle 'sys' password periodically, Now I have a concern that if I change the password for 'SYS' that there is a hardcoded password file on the AIX server.. would this be the case ?

Florian W. wrote:
If you won't use that passwordfile you have to configure secure connections with the Oracle Security Option.... Or use OS Authentication ("oradba" group). (doc link: [DBA Authentication|http://download.oracle.com/docs/cd/B19306_01/server.102/b14231/dba.htm#i1006534])
Edited by: orafad on Feb 3, 2009 2:38 PM

I changed SYS password and only a few people can login through it

A few weeks ago i decided to change the default password of SYS from the webbased OEM of Oracle 10g. Me and my collegues connected successfully using this new password (from different computers). However today i discovered that two developers which also use the SYS account, cannot access the database using SYS with this new password (nor the old one). The error message they are getting is Invalid username/password... (no they didn't forget the capslock on!)
The strange things are that:
1) They can connect through other usernames but not through SYS
2) the database is on the 192.168.4.x network, me and my collegues are on the 192.168.2.x network and the two developers and their team-mates are on the 192.168.14.x network.
Could this be a network related problem? I don't know ... When it was the default change_on_install password, everyone used to connect normally. I changed the password again, to a simple one to make really sure they are not typing it wrong, and yet, they got the same Invalid username/password error..
I have exhausted all my ideas. what am i missing? thanks...

In your case , I am almost sure that they pointing to another database. Check its network files in the Oracle Home.
From what tool thwy are try to log in ?
Why developers need the sys account?
Joel Pérez
http://otn.oracle.com/experts

How do you change sys password?

I know this is basic but I just can't get it.
How do you change the sys password from
change_on_install ?
It seemed to expire or something, maybe my installation is messed up from shutting down linux without first shutting down oracle.
Please help me learn how to change my sys password.
Armand

You can change the sys password as any user that has DBA Privs from sqlplus.. eg log in as system/manager.
If you do not know the system password you can log into server manager and connect internal.
Either way the statement you are looking for is
alter user sys identified by password;
Rod

CC&B LoginModule for Weblogic Change of Password

Hi All,
I realise this is more of a Weblogic question, though I'm specifically after a working example of LoginModule that can be used within CC&B on Weblogic to:
a) Force users to change their password if their password is reset;
b) Force users to change their password if their password is expired (for example after 30 days);
b) Plus preferably also allow users to change their password on demand.
Can anyone point me at some examples of this (preferably also highlighting what needs to be set-up within Weblogic from an admin perspective to allow password expiry)?
Note - Kerberos Authentication is not currently an option, hence I need just basic JSP login modules.
Cheers,
Matt

Hi All ..
Thanks for reply .
I m new in this company. but once the password was changed by ex-DBA before my arrival in this company and that too created problems in RAC. This is what my PM says.
I think some where this password is given at the time of RAC installation .
What were the problems ? have gone with ex-DBA.
I have to look into it.
Can you figure out the possible problems ?
plz help.
Regards,
Edited by: Cool_DBA on Nov 21, 2008 1:38 AM

Standby Gaps after changing sys password

Hi all,
11.2.0.1
aix6.1
I changed our sys password at primary db and copy the "orapwdprod" from source dbs to "orapwdproddr" at standby dbs.
But I noticed that the log is not sync.
1 SELECT ARCH.THREAD# "Thread", ARCH.SEQUENCE# "Last Sequence Received", APPL.SEQUENCE# "Last Sequence Applied", (ARCH.SEQUENCE# - APPL.SEQUENCE#) "Difference"
2 FROM
3 (SELECT THREAD# ,SEQUENCE# FROM V$ARCHIVED_LOG WHERE (THREAD#,FIRST_TIME ) IN (SELECT THREAD#,MAX(FIRST_TIME) FROM V$ARCHIVED_LOG GROUP BY THREAD#)) ARCH,
4 (SELECT THREAD# ,SEQUENCE# FROM V$LOG_HISTORY WHERE (THREAD#,FIRST_TIME ) IN (SELECT THREAD#,MAX(FIRST_TIME) FROM V$LOG_HISTORY GROUP BY THREAD#)) APPL
5* WHERE ARCH.THREAD# = APPL.THREAD# ORDER BY 1
SQL> /
    Thread Last Sequence Received Last Sequence Applied Difference
         1                   2635                  2594         41
Where can I check the error why is it not applying acrhive logs
Thanks,
zxy

For example:
In primary run again transfer orapwd (command scp)
bash-3.2$ scp /u01/app/oracle/product/11.2.0/db_1/dbs/orapwXXXXX1 Standby_ip:/u01/app/oracle/product/11.2.0/db_1/dbs/orapwXXXXX
Password:
orapwKBAZER1         100% |**************************************************************************************************************************************************| 2048       00:00
And please run sql query again:
SELECT status, error
FROM V$ARCHIVE_DEST_STATUS
WHERE STATUS <> 'DEFERRED' AND STATUS <> 'INACTIVE';
I have done this carefully and Im sure I did it correctly.
How can I test connectivity to standby database?
Can I run at primary server > sqlplus sys/passwd@standby as sysdba ? to test if I can connect using the password file?

Ipod touch automatically changed my password?!?!?!

I recently had a system malfunction. My ipod died one night and i plugged it in the day, i had it set to a four number password. When i unlocked it, the alphabet password to unlock popped up. I HAVE NOT changed my password or touched it since it died. I tried to reset it multiple times without luck, an error message kept coming up in itunes. I tried to call apple but all they wanna do is charge me 30 dollars to file a complaint which is not something i wanna do considering its not my fault apples product doesnt work. i have taken really good care of it. No drops or anything, why wont it work!!!!!!

Since restoring from backup did not work I know of no way except to cut and paste them from the MacBook.

Failed in changing sys password

Dear Experts,
Loged on as DBA I perform the following:
alter user sys identified by my_new_strong_pass
Trying then to log on as sys using this new pass, the pass is said not to be correct.
I'm running 9iR2. More (even if sys and system are not comparable) I can change the system password and log on corretly afterwards.
Any idea is appreciated.
Regards,
Guillaume

You are definitely right. I did so and it worked but the pb is I can't stay with SQLNET.AUTHENTICATION_SERVICES=(NTS) because using dba studio I get a "shared memory realm not available" if I try to restart the DB once stopped for any reason.
I need to set back to SQLNET.AUTHENTICATION_SERVICES=none. This behavior is new following the migration of the servers into AD. Buit keeping this "none" setting prevents me from connecting using Dba studio or Toad.
Did one of you already experience such a behavior of the DB ?
I don't have the same issue with the other instance hosted on the server, I mean connected as DBA I can change the pass of sys under Toad and connect with the new password keeping the setting to "none".
Best Regards,
Guillaume
Message was edited by:
[email protected]

Idea for Automatically Changing Sys Password

Similar Messages

Maybe you are looking for