Logging as '/ as sysdba'

I installed Oracle 11gR2 on linux OS..
I login to an instance as a db owner with a 'sqlplus / as sysdba'.
but, I do not use that user for admin purposes (dba's have personalized accounts), so I created separate account within a oinstall user group.
But, when I try to log in into a instance with a '/ as sysdba' it passes.
OS_ROLES=FALSE
all REMOTE_OS params are also set to FALSE.
OS_AUTHENT_PREFIX=FALSE.
what I've been missing?
regards

When you installed Oracle the Oracle owner belonged to an OS group, usually DBA. By default all members of that OS group can connect as sysdba. This is the we lost the sys password protection. You should limit access to the Oracle owner, normally Oracle, account and you should limit who is added to the same OS group as Oracle (or whoever the owner is).
HTH -- Mark D Powell --

Similar Messages

Start dbconsole failure and incapacity to log on as sysdba

Hi everyone
I have successfully installed the oracle software. But I am not able to start dbconsole. After successfully defining oraclesid, dbconsole could not still be started and the following error message is displayed: A service specific error occured
The second problem I am having is connecting as SYSDBA. I am not sure if I was supposed to do smtgh while installing the software(and creating the dtbse). But I am able to connect to the database as SYSTEM. I though I would have the same privileges as SYSDBA but apparently no. I have tried to start up the database after loging on as system. But it failed.
Could you please let me know how I could start dbconsole and log on as Sysdba.
Tx

Hi user;
I have successfully installed the oracle software. But I am not able to start dbconsole. After successfully defining oraclesid, dbconsole could not still be started and the following error message is displayed: A service specific error occuredGood to hear you done successfully installed the oracle software, please tell me:
1. What is your db version
2. What is your Oracle version
3. you mean wiht "dbconsole" is EM console?
4. What is compliate error, how you have this error (type command please and post all error) by the way check log file
>
The second problem I am having is connecting as SYSDBA. I am not sure if I was supposed to do smtgh while installing the software(and creating the dtbse). But I am able to connect to the database as SYSTEM. I though I would have the same privileges as SYSDBA but apparently no. I have tried to start up the database after loging on as system. But it failed.1. How you try to connect as sysdba? Type your comment
Regard
Helios

Confusion about 'sysdba'; random user/password logs in as 'sysdba'

Hi everybody,
I just installed oracle 9.2 enterprise edition. My problem is that i created a database after completing the installation and it seems that any random username/password is accepted if entered with 'as sysdba' option in sqlplus editor as well as the Enterprise Manager Console. Even if I type
conn dseane/fdgdsg as sysdba
it logs in successfully as sysdba.
I want to take disable that feature. Can anybody please help me out here??
Also, can anybody please tell me the difference between 'sysdba' and 'sysoper'?
Thanks in advance,
Andy x

There is in fact a little more to it than that.
The default authentication mechanism for SYSDBA is by OS Group, which in this case is provided by the NTS mechanism [ i.e standard WIndows Call ]
If you created a bog-standard Win2K user with no group memberships then you would not be able to do this.
It is worth reading up on why this is the case. Have a look at the Windows Platform Guides.

Logging in as SYSDBA via isql*plus

Hi all
Just installed Oracle 10g on my computer and I am able to connect to enterprise manager, create an account and also log in via isql*plus with the new account.
I was wondering how do i connect to isql*plus web based using a sysdba account?
I would enter:
Username: SYS
PW: ????
Connect Identifier: [Blank]
Is that correct?
Usually when logging in to isql i would use the following command
conn sys/[password] as sysdba

If it was me, I'd follow the 'configure iSQLPlus to allow logon as SYSDBA' steps in Chapter 2 of the "SQL*Plus User's Guide and Reference" manual found at http://tahiti.oracle.com

Unable to log in with sysdba privileges

Hi All,
I am not able to connect with sysdba privileges through the sql*plus on the remote machine running on Windows. It gives me the following error :
Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - 64bit Production
With the Partitioning, OLAP and Data Mining options
SQL> conn sys@inftmark as sysdba
Enter password: ******
ERROR:
ORA-01031: insufficient privileges
Warning: You are no longer connected to ORACLE.
SQL> while my initialization file has following entries:
remote_os_authent = true
remote_login_passwordfile = exclusiveMoreover, i am able to login with user "system" through sql*plus on windows.
My OS : Solaris 64 bit (database running on Solaris machin)
Database : 10.2.0.2
Any idea, what's missing ?

Yogesh,
Did you try adding a new password file? In your pfile location, try this --
1) Remove the existing password (orapw<SID>) file
2) Generate a new password file - orapwd file=orapw<SID> password=<SYS_passwd>
Try reconnecting thru the SQL*Plus client.
- Ravi

Error logging in as sysdba - "insufficient privileges"

Hi,
I have AS10.1.2.0.2 installed on my linux box.
i have infrastructure as well as midtier both installed in the same machine on different oracle homes.
after installing everything worked fine and brought down the system just to test it.
and upon restarting the system, i started the listener first, and then i tried to enter sqlplus using
"connect sys/pwd@asdb as sysdba"
but when i used this login i got message saying "insufficient privileges"
i wanted to login as sysdba and give a "startup" command.
Can someone explain why this error.
Thanks,
Philip.

Hi Philip,
Just set your environement variable well.
example:
export ORACLE_HOME= your oracle home where you have installed your infra.
export ORACLE_SID= (the name of your Metadata)
cd $ORACLE_HOME/bin
sqlplus /nolog
conn sys/ as sysdba
You 'll be connected to you DB.
then
SQL>startup
Cheers,
Hamdy

Insufficient privileges when logging in as sysdba

Oracle: 10.2.0.4
Solaris
I try to login as sysdba across the network
sqlplus sys@MYDB as sysdba
Password: blah
ERROR:
ORA-01031: insufficient privileges
I have a password file. I ran the orawpd under $ORACLE_HOME/dbs
Parameter
remote_login_passwordfile string EXCLUSIVE
I do NOT have a slqnet.ora file. I saw when I googled that some settings in here can be a problem.
Not really sure. in the past this just works. All the common problems I see on message boards don't seem to apply to me.

Guess2 wrote:
Oracle: 10.2.0.4
Solaris
I try to login as sysdba across the network
sqlplus sys@MYDB as sysdba
Password: blah
ERROR:
ORA-01031: insufficient privileges
I have a password file. I ran the orawpd under $ORACLE_HOME/dbs
Parameter
remote_login_passwordfile string EXCLUSIVE
I do NOT have a slqnet.ora file. I saw when I googled that some settings in here can be a problem.
Not really sure. in the past this just works. All the common problems I see on message boards don't seem to apply to me.Is your OS account a member of the os group "dba"?

Can't log in as sysdba

Please help.
I'm trying to login as sysdba through vnc to a database (windows server 2003) but it gives me insuffiecent privs. error
Syntax: sqlplus " / as sysdba"
I did set the oracle sid
Syntax: set ORACLE_SID=SID
PLEASE HELP

Hi,
In addtion when you're on the server you should be able to connect with "connect / as sysdba", doing the following:
a) unset TWO_TASK parameter
b) set ORACLE_HOME and PATH variable to the correct ORACLE_HOME (use . oraenv)
c) set ORACLE_SID
d) sqlplus /nolog
e) connect / as sysdba --> you should be connected.
Regards,
Marcello M.

System log in as sysdba

installed oracle 10g, and I configured oracle enterprise manager, I can access it using browser from another machine.
I found I can't login using system/password as sysdba, while sys can do so.
same thing for access using TOAD.
Can someone help me on this? I am new on this, your help is highly appreciated.
Thanks

Hello,
connect to the database as sys and grant the sysdba role to system. After that you can connect system as sysdba.
grant sysdba to system; will insert system as sysdbauser into the passwordfile.
ulli

Getting SP-0750 while logging in as sysdba

Hi
I have just installed 9.2.0.1 database and it was successful. But when i try to login i am getting SP-0750..
Thanks in advance
RP

rpyk wrote:
Message file sp1<Lang>.msb not found
SP2-0750: You may need to set ORACLE_HOME to your Oracle software directory
Regards
RP"Message file sp1<Lang>.msb not found" almost invariably means ORACLE_HOME is not set correctly. I know you've already been asked about it's value, but please bear in mind that what is of importance is the value of the environment in which the failing process is running.
So, if you are getting the error out of some job/process/client connection/etc, but you are checking the value of ORACLE_HOME from a separate session (telnet/ssh/etc) that you fire up for the purpose of checking, you could still be comparing apples to oranges.

ORA-01012 NOT LOGGED ON

Hi All,
Today I faced a new kind of problem. Today morning I had load testing of our application(JDE APPLICATION) when I reached office and monitor ORACLE PROCESS for that database it shown me 604 where as I defined the processes=600... I am using 10.2.0.4 and OS -> HP-UX...
$ ps -ef|grep -i "<DBNAME>|wc -l is the command I used to check the number of OS Oracle process.
So I immediately tried to log in via listener and as expected it was giving error regarding TNS could not resolved service name bla bla bla...
Then I saw the listener process was in a blocked state :-(
I thought of killing some inactive sessions by connected as sysdba..
SO I wrote export ORACLE_SID=<DBNAME>
sqlplus / as sysdba
shown me connected...
but when I issued
show parameter db_name
then it gave me
SQL> ORA-01012 not connected...
previously I have seen such overflowing of Oracle processes But then for sysdba login never thrown me this error...
I asked my application team to stop the services so that I can kill some oracle processes from OS level...
But I am not sure what to do with this kind of situation if that too happened in my PRODUCTION DB.. :-(
Please suggest.....
Please let me know if you need any other information regarding this...
Thank you..

1 lsnrctl stop
2 kill a few sessions
3 logon as / AS SYSDBA
4 SELECT USERNAME, MACHINE , COUNT(*) FROM V$SESSION GROUP BY USERNAME, MACHINE;
thank you for your reply...
after stopping I tried to log in same error I got.... after stopping how can I kill few sessions when I don't get a chance to log in as sysdba ? :-(
are talking kill few session from OS??
thank you..

Set password when login as oracle from db server / as sysdba

10.2.0.3.0
Hi, we have a linux db server and oracle user (group dba and oinstall) can login / as sysdba without giving any passwords.
i have created orapwd file and changed REMOTE_LOGIN_PASSWORDFILE=exclusive in init.ora file but still, if someone is in the dba group he can connect without providing a password.
Can you please tell me how can i succeed for all OS users to be asked for password even if they belong to dba group?
thank you

The behavior you describe is normal and experted. By default members of the Oracle Home directory structure owner group can log on as sysdba and can avoid the need to use a valid password since sysdba users actually log in as user sys.
If you do not want to allow this then you should have installed Oracle with a group other than DBA such as oinstall and then not assigned any OS users to this group.
HTH -- Mark D Powell --

Oracle 10g XE Event Logs - Please help

I'm running 10g XE on a Virtual 2003 Server. My Applicatin Event Logs the following events. I will get up to 20 events per minutes. I have posted the event description. Please advise. Thank you,
The description for Event ID ( 5 ) in Source ( Oracle.xe ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: QMNC, xe.
The description for Event ID ( 16 ) in Source ( Oracle.xe ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: xe.
The description for Event ID ( 34 ) in Source ( Oracle.xe ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: ACTION : 'CONNECT' DATABASE USER: '/' PRIVILEGE : SYSDBA CLIENT USER: NT AUTHORITY\SYSTEM CLIENT TERMINAL: [Server FQDN stated in this area]: 0 .

Hi Jab
The last event is something Oracle logs per default. Every time someone logs in with sysdba privileges, it is logged to the event log. Read more in the manual
Security guide, chapter 8
Try to check the parameter
AUDIT_TRAIL
in the database
show parameter AUDIT_TRAIL
If it is set to OS and you have enabled auditing, then more events are written to the event log.
Best wishes,
Kennie
The description for Event ID ( 34 ) in Source ( Oracle.xe ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: ACTION : 'CONNECT' DATABASE USER: '/' PRIVILEGE : SYSDBA CLIENT USER: NT AUTHORITY\SYSTEM CLIENT TERMINAL: Server FQDN stated in this area: 0 .

Applying logs in a semi-standby instance

Oracle Version: 10.2.0.3 Standard Edition
OS: Windows 2003 Server
I setup oracle standby (followed the steps in metalink doc 432514.1)..
I am running 10.2.0.3 standard edition.. so teh standby have to be done manually (which is fine)..
I shutdown production last night with shutdown immediate.. copy all the logs, datafiles, pfile..etc to the standby server.. I recreated the controlfile on the standby (NORESETLOGS and NOARCHIVELOGS).. the database is mounted and it's ok:
SQL> select status from v$instance;
STATUS
MOUNTED
SQL>
SQL> select * from v$log;
GROUP# THREAD# SEQUENCE# BYTES MEMBERS ARC STATUS FIRST_CHANGE# FIRST_TIM
1 1 6764 52428800 2 NO INACTIVE 2437870303 07-MAY-09
3 1 6765 52428800 2 NO INACTIVE 2437871111 07-MAY-09
2 1 6766 52428800 2 NO CURRENT 2437886254 07-MAY-09
SQL>
then after that I restarted production, after a while, I did a couple of switch logs and generated 2 archive logs of which I transferred to the standby to apply them.. now at this stage prod redo logs are:
SQL> select * from v$log
GROUP# THREAD# SEQUENCE# BYTES MEMBERS ARC STATUS FIRST_CHANGE# FIRST_TIM
1 1 6767 52428800 2 YES INACTIVE 2438366118 08-MAY-09
2 1 6766 52428800 2 YES INACTIVE 2437886254 07-MAY-09
3 1 6768 52428800 2 NO CURRENT 2438369450 08-MAY-09
SQL>
On the standby, I logged in as sysdba and tried to just apply the logs as you do normally:
C:\scheduled_scripts>sqlplus "/as sysdba"
SQL*Plus: Release 10.2.0.3.0 - Production on Fri May 8 08:58:03 2009
Copyright (c) 1982, 2006, Oracle. All Rights Reserved.
Connected to:
Oracle Database 10g Release 10.2.0.3.0 - Production
SQL> select status from v$instance;
STATUS
MOUNTED
SQL>
SQL>
SQL> recover database using backup controlfile until cancel;
ORA-00279: change 2438369450 generated at 05/08/2009 07:45:07 needed for thread
1
ORA-00289: suggestion :
D:\ORACLE\PRODUCT\FLASH_RECOVERY_AREA\EBCP01\ARCHIVELOG\2009_05_08\O1_MF_1_6768_%U_.ARC
ORA-00280: change 2438369450 for thread 1 is in sequence #6768
Specify log: {<RET>=suggested | filename | AUTO | CANCEL}
D:\ORACLE\PRODUCT\FLASH_RECOVERY_AREA\EBCP01\ARCHIVELOG\2009_05_08\O1_MF_1_6767_508KCMM0_.ARC
ORA-00310: archived log contains sequence 6767; sequence 6768 required
ORA-00334: archived log:
'D:\ORACLE\PRODUCT\FLASH_RECOVERY_AREA\EBCP01\ARCHIVELOG\2009_05_08\O1_MF_1_6767_508KCMM0_.ARC'
SQL>
So my question is why isn't it applying the 6767 change? (keep in mind that at this stage production has not yet generated archive log 6768).. shouldn't it be applying 6767? or is it bcoz it's Inactive, it doesn't need to do that?
More over, I did the following:
I did a switch log on production to create the 6768 archive log:
SQL> select * from v$log
GROUP# THREAD# SEQUENCE# BYTES MEMBERS ARC STATUS FIRST_CHANGE# FIRST_TIM
1 1 6767 52428800 2 YES INACTIVE 2438366118 08-MAY-09
2 1 6766 52428800 2 YES INACTIVE 2437886254 07-MAY-09
3 1 6768 52428800 2 NO CURRENT 2438369450 08-MAY-09
SQL>
SQL>
SQL> alter system switch logfile;
System altered.
SQL> select * from v$log;
GROUP# THREAD# SEQUENCE# BYTES MEMBERS ARC STATUS FIRST_CHANGE# FIRST_TIM
1 1 6767 52428800 2 YES INACTIVE 2438366118 08-MAY-09
2 1 6769 52428800 2 NO CURRENT 2438387289 08-MAY-09
3 1 6768 52428800 2 YES ACTIVE 2438369450 08-MAY-09
this generated teh archive log: O1_MF_1_6768_508VGSS5_.ARC
I copied the archive log to the standby serve.. checked teh current sequence (database only mounted on standby):
SQL> select * from v$log
GROUP# THREAD# SEQUENCE# BYTES MEMBERS ARC STATUS FIRST_CHANGE# FIRST_TIM
1 1 6764 52428800 2 NO INACTIVE 2437870303 07-MAY-09
3 1 6765 52428800 2 NO INACTIVE 2437871111 07-MAY-09
2 1 6766 52428800 2 NO CURRENT 2437886254 07-MAY-09
C:\scheduled_scripts>sqlplus "/as sysdba"
SQL*Plus: Release 10.2.0.3.0 - Production on Fri May 8 10:46:38 2009
Copyright (c) 1982, 2006, Oracle. All Rights Reserved.
Connected to:
Oracle Database 10g Release 10.2.0.3.0 - Production
SQL> recover database using backup controlfile until cancel;
ORA-00279: change 2438369450 generated at 05/08/2009 07:45:07 needed for thread1
ORA-00289: suggestion :
D:\ORACLE\PRODUCT\FLASH_RECOVERY_AREA\EBCP01\ARCHIVELOG\2009_05_08\O1_MF_1_6768_%U_.ARC
ORA-00280: change 2438369450 for thread 1 is in sequence #6768
Specify log: {<RET>=suggested | filename | AUTO | CANCEL}
AUTO
ORA-00279: change 2438387289 generated at 05/08/2009 10:37:29 needed for thread1
ORA-00289: suggestion :
D:\ORACLE\PRODUCT\FLASH_RECOVERY_AREA\EBCP01\ARCHIVELOG\2009_05_08\O1_MF_1_6769_%U_.ARC
ORA-00280: change 2438387289 for thread 1 is in sequence #6769
ORA-00278: log file
'D:\ORACLE\PRODUCT\FLASH_RECOVERY_AREA\EBCP01\ARCHIVELOG\2009_05_08\O1_MF_1_6768_508VGSS5_.ARC' no longer needed for this recovery
ORA-00308: cannot open archived log
'D:\ORACLE\PRODUCT\FLASH_RECOVERY_AREA\EBCP01\ARCHIVELOG\2009_05_08\O1_MF_1_6769_%U_.ARC'
ORA-27041: unable to open file
OSD-04002: unable to open file
O/S-Error: (OS 2) The system cannot find the file specified.
and as you can see.. now that it has 6768, it's doing the same thing by not wanting it anymore and wanting the next one in teh sequence which is 6769 (which has not been generated on production yet).. I'm just not making any sense out of this!!
now afer few changes, the production sequence is:
SQL> select * from v$log;
GROUP# THREAD# SEQUENCE# BYTES MEMBERS ARC STATUS FIRST_CHANGE# FIRST_TIM
1 1 6773 52428800 2 YES ACTIVE *2438396976* 08-MAY-09
2 1 6772 52428800 2 YES INACTIVE 2438394852 08-MAY-09
3 1 6774 52428800 2 NO CURRENT 2438398862 08-MAY-09
standby sequence is:
SQL> SELECT * FROM V$LOG;
GROUP# THREAD# SEQUENCE# BYTES MEMBERS ARC STATUS FIRST_CHANGE# FIRST_TIM
1 1 6764 52428800 2 NO INACTIVE 2437870303 07-MAY-09
3 1 6765 52428800 2 NO INACTIVE 2437871111 07-MAY-09
2 1 6766 52428800 2 NO CURRENT 2437886254 07-MAY-09
If I try to do the following on standby (archived has been shipped to standby at this stage) and do the AUTO option, it doesnt like the file:
SQL> RECOVER DATABASE using backup controlfile UNTIL CHANGE 2438396976;
ORA-00279: change 2438396976 generated at 05/08/2009 11:45:02 needed for thread 1
ORA-00289: suggestion : D:\ORACLE\PRODUCT\FLASH_RECOVERY_AREA\EBCP01\ARCHIVELOG\2009_05_08\O1_MF_1_6773_%U_.ARC
ORA-00280: change 2438396976 for thread 1 is in sequence #6773
Specify log: {<RET>=suggested | filename | AUTO | CANCEL}
AUTO
ORA-00308: cannot open archived log 'D:\ORACLE\PRODUCT\FLASH_RECOVERY_AREA\EBCP01\ARCHIVELOG\2009_05_08\O1_MF_1_6773_%U_.ARC'
ORA-27041: unable to open file
OSD-04002: unable to open file
O/S-Error: (OS 2) The system cannot find the file specified.
ORA-00308: cannot open archived log 'D:\ORACLE\PRODUCT\FLASH_RECOVERY_AREA\EBCP01\ARCHIVELOG\2009_05_08\O1_MF_1_6773_%U_.ARC'
ORA-27041: unable to open file
OSD-04002: unable to open file
O/S-Error: (OS 2) The system cannot find the file specified.
but when i try to do the same and I actuially give it the proper file name (no _%U) then it's ok and does the recovery.. Is there a way of telling Oracle to grab the acual file name, not O1_MF_1_6773_50909L7L_.ARC instead of O1_MF_1_6773_%U_.ARC?
SQL> RECOVER DATABASE using backup controlfile UNTIL CHANGE *2438396976*;
ORA-00279: change 2438396976 generated at 05/08/2009 11:45:02 needed for thread 1
ORA-00289: suggestion : D:\ORACLE\PRODUCT\FLASH_RECOVERY_AREA\EBCP01\ARCHIVELOG\2009_05_08\O1_MF_1_6773_%U_.ARC
ORA-00280: change 2438396976 for thread 1 is in sequence #6773
Specify log: {<RET>=suggested | filename | AUTO | CANCEL}
D:\ORACLE\PRODUCT\FLASH_RECOVERY_AREA\EBCP01\ARCHIVELOG\2009_05_08\O1_MF_1_6773_50909L7L_.ARC
Log applied.
Media recovery complete.
hmm.. now when would it actually update the sequence numbers on the logs, I am asking this bcoz the sequence on teh standby still reads:
SQL> SELECT * FROM V$LOG;
GROUP# THREAD# SEQUENCE# BYTES MEMBERS ARC STATUS FIRST_CHANGE# FIRST_TIM
1 1 6764 52428800 2 NO INACTIVE 2437870303 07-MAY-09
3 1 6765 52428800 2 NO INACTIVE 2437871111 07-MAY-09
2 1 6766 52428800 2 NO CURRENT 2437886254 07-MAY-09
I am lost here!!! and I'm not sure what to do about this! Your help is really appreciated.
Thanks

The "readme" for Patch 9369783 (which covers the AprilCPU for our 11.1.0.7 HPUX-IA64 environment) includes this short reference to DataGuard:
If you are using a Data Guard Physical Standby database, you must first install this patch on the primary database before installing the patch on the physical standby database. It is not supported to install this patch on the physical standby database before installing the patch on the primary database. For more information, see My Oracle Support Note 278641.1.
When checking that note 278641.1 we see that it also appears to only cover 10.2. Although this note has more detail, it is clearly the same procedure as discussed in 813445.1. Therefore, the conclusion that I make is: OPatch works exactly the same with DataGuard in 11g as it did in 10g.
We will be upgrading our DataGuard enviornment to 11g in one-month. At this point, I am completely expecting our OPatch procedures to remain unchanged from what we have done for years with 9i and 10g. I would also note that the upgrade procedures we have tested (involving DG from 10.2.0.4 to 11.1.0.7) are nearly identical to the above mentioned support notes.
Hope that helps,
Stan

Login as sysdba

I discovered that when i connect as a user (existing or non-existing) with sysdba privilege, Oracle connects me into sys´s schema as sysdba. i want to know if it has been discovered before now because it is indeed a big security issue that must be attended to as soon as possible.

what did u do to log in as SYSDBA ??

Logging as '/ as sysdba'

Similar Messages

Maybe you are looking for