Oracle passwords on OS

We are no longer allowed to use ops$ accounts for our unix jobs to log into Oracle. We need to use passwords. Does anyone know a good way to put the passwords on the unix operating system or somewhere that only the jobs can see them and someone who logs in cannot. The jobs currently run as the oracle user, but we can always run the jobs from another user if necessary.
yes I know you can just run a strings command to see the data from oracle or rm the data files. I also know how to connect to sqlplus without the username/password showing up in a ps. I was told to see if I can find a way to do what was requested.

One way is to use a different than oracle user, in the command file echo the username/password into sqlplus (or have a connect string in the script) and chmod the command files with protection 500. Of course this won't protect against people who can get root privs.
There are also ways to encrypt scripts, but it's been too long since I've had to do that to know what is current, beyond what google says.

Similar Messages

Using alter user to change oracle password for logged in web user on XE

Hi All
I'm building an app using the pl/sql web toolkit on XE (installed on Win XP Pro SP2). (I'm not using the APEX front-end).
I'm using basic authentication and oracle database user accounts, and when a user registers for the first time I create them an oracle user account with dynamic sql, followed by some initial setup stuff, and they then log in with it.
All fine so far.
However I want to allow the user to change their oracle password as part of maintaining their user details. I've done this in the past using the web toolkit and Oracle 9i and it has worked fine using dynamic sql.
Unfortunately I can't get the same thing to work in XE.
For example, if I create the following procedure in the schema aligned to the DAD which holds my application and then run it from a browser (IE or Firefox) then the
Browser and the db just hangs - not even an error message:
CREATE OR REPLACE PROCEDURE ut
AS
v_stmt varchar2(300);
BEGIN
HTP.htmlOpen;
HTP.headOpen;
HTP.title ('User Test');
HTP.headClose;
HTP.bodyOpen;
v_stmt := 'alter user "'||user||'" identified by "BERT"';
htp.print(v_stmt);
EXECUTE IMMEDIATE v_stmt;
htp.print('Done');
HTP.bodyClose;
HTP.htmlClose;
END;
If I run the same statement in SQL*plus it's fine, and if I run the same proc for a different user then it's fine too.
I'm sure it's something to do with trying to change the credentials of the currently logged in user, but I would at least have expected an error message.
I'd be grateful for any ideas.
Thanks
Steve

Hi g.myers
Thanks for your response.
Sorry, yes, bad turn of phrase there. It's not the entire db that hangs. The web browser (either IE or FF) hangs, and if I look at v$session at this point, I can see that the user STATUS=ACTIVE and the STATE=WAITING.
I should also point out that I am using standard Oracle users as users of the application, (e.g. create a new user account called TESTER1). These users are then granted the appropriate privileges on the owning schema in order to run the app, access the tables etc.
Therefore it is the user account (e.g. TESTER1) that is running the password change procedure that is owned by the SYS schema. (However again, this is the exact code and method that I've used in the past and it has worked fine).
If I leave the browser hanging long enough, it will eventually return with the following error:
Proxy Error
The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request POST /h/hopapp.pwdmaint_do.
Reason: Error reading from remote server
cheers
Steve

Need Help in sending Private Email when user clicks Oracle Password Reset

How to send an email to user marked as PRIVATE and Confidential when they hit the Oracle Password Reset Link.

user11986391 wrote:
How to send an email to user marked as PRIVATE and Confidential when they hit the Oracle Password Reset Link.What do you mean by private and confidential?
Reset Password Functionality FAQ [ID 399766.1]
How to Modify The Password Reset Statement for the UMXUPWD.wft Workflow [ID 420236.1]
How to Change the Text of Instructions in the "Reset Password" Screen? [ID 762798.1]
How to open customized page when click on "Forgot Password" URL ? [ID 556454.1]
https://forums.oracle.com/forums/search.jspa?threadID=&q=Password+AND+Forgot&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
Thanks,
Hussein

Weblogic setting the Oracle password

Hi,
I have a problem with an Oracle 8.1.7 database and Weblogic Server 6.0 sp2 both
running on an HPUX 11 Unix box in that everytime I start Weblogic it sets the
Oracle password to be the value of the Orarcle sid. I have configured Weblogic
to have a Connection Pool to the database.
Anyone have any clues?
Regards,
Dave.

can you post your connection pool settings?
sree
"David Fletcher" <[email protected]> wrote in message
news:3bc5f5cf$[email protected]..
>
Hi,
I have a problem with an Oracle 8.1.7 database and Weblogic Server 6.0 sp2both
running on an HPUX 11 Unix box in that everytime I start Weblogic it setsthe
Oracle password to be the value of the Orarcle sid. I have configuredWeblogic
to have a Connection Pool to the database.
Anyone have any clues?
Regards,
Dave.

Can I using Oracle Password filter without using DIP?

Hi expert,
Can I using Oracle Password filter without using DIP?
I installed OID 1.1.1.5.0 and AD MS 2008 + Password Filter without other configuration about DIP.
While Install password filter, I use 'sAMAccountName' as Source Attribute (Microsoft Active Directory) and 'orclSAMAccountName' as Target Attribute (Oracle Internet Directory) instead of using objectGUID.
My Scenario test
1. setup password filter follow by 20 Deploying the Oracle Password Filter for Microsoft Active Directory
2. create user in AD
3. create user in OID
4. reset password in AD
I found that it can't send password from AD to OID.
See log below
OID Base DN is ---->
dc=ksso,dc=com
About to retrive connection
Got the Connection
Inside Add Parent
About to add node
Node Added
retval is NOT success
Out of Add Parent
Domain String -->
KSSO.LOCAL
User Domain String -->
[email protected]
Inside OID Search User sgslodac
About to fire the search request
TEST BASE -->
dc=ksso,dc=com
Password Update Failed. No record to update
Search did not reterive any data
Writing data into persistence store
INSIDE IF PERSISTENT STORE
Inside sgsladds::sgslperwriteData YOOOO
Inside sgsladac c-tor
AD Host
10.20.5.60
AD Port
389
AD Base DN
DC=KSSO,DC=LOCAL
Only dataattribute
Got Registry enteries
contact
description
Got Entiredn
OU=orclpwfKSSO.LOCAL,DC=KSSO,DC=LOCAL
Encrypted record already exists in Datastore
Already Exists
Encrypted record already exists in Datastore
Already Exists
Inside sgsladdsSearchUser
Firing Search Request
AD search for a user objectGUID is successfull
Count success
Search result fetched
0:437 7 monsoft314 420 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAlfdA8eazxkaNLy8BEBQHKgAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAAQZgAAAAEAACAAAAALknXvaho0gPrrP34AQqdBSMLHHcVupTrFuuN0lQdV0QAAAAAOgAAAAAIAACAAAAAKxX3FGNQ/lJBjETm3pRiveLFRiiCwxbrf3UNlQtk5C0AAAAC66Ip1jAzC6U1gTVP9LHETW1MwEfzxSXHcCny9wy7pFyDlLtmpnP1nGYUegAMxvJTu5yGmciBMmfZAgS1Oan3PQAAAAETSu3JcNAkdSqm2E1zxSWxClWrBid/eLHpbasjHo5cLgkGjzI6+UWNHzhfOf86wJ0uuex+++0ttFRzzMEf9atE=
Inside sgsladds::sgsladdsgetData NEW Look
0:437 7 monsoft314 420 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAlfdA8eazxkaNLy8BEBQHKgAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAAQZgAAAAEAACAAAAALknXvaho0gPrrP34AQqdBSMLHHcVupTrFuuN0lQdV0QAAAAAOgAAAAAIAACAAAAAKxX3FGNQ/lJBjETm3pRiveLFRiiCwxbrf3UNlQtk5C0AAAAC66Ip1jAzC6U1gTVP9LHETW1MwEfzxSXHcCny9wy7pFyDlLtmpnP1nGYUegAMxvJTu5yGmciBMmfZAgS1Oan3PQAAAAETSu3JcNAkdSqm2E1zxSWxClWrBid/eLHpbasjHo5cLgkGjzI6+UWNHzhfOf86wJ0uuex+++0ttFRzzMEf9atE=
Encoded Data Extracted in sgsladdsgetData
437 7 monsoft314 420 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAlfdA8eazxkaNLy8BEBQHKgAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAAQZgAAAAEAACAAAAALknXvaho0gPrrP34AQqdBSMLHHcVupTrFuuN0lQdV0QAAAAAOgAAAAAIAACAAAAAKxX3FGNQ/lJBjETm3pRiveLFRiiCwxbrf3UNlQtk5C0AAAAC66Ip1jAzC6U1gTVP9LHETW1MwEfzxSXHcCny9wy7pFyDlLtmpnP1nGYUegAMxvJTu5yGmciBMmfZAgS1Oan3PQAAAAETSu3JcNAkdSqm2E1zxSWxClWrBid/eLHpbasjHo5cLgkGjzI6+UWNHzhfOf86wJ0uuex+++0ttFRzzMEf9atE=
Moving out sgsladdsgetData
Encoded Data Extracted
437 7 monsoft314 420 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAlfdA8eazxkaNLy8BEBQHKgAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAAQZgAAAAEAACAAAAALknXvaho0gPrrP34AQqdBSMLHHcVupTrFuuN0lQdV0QAAAAAOgAAAAAIAACAAAAAKxX3FGNQ/lJBjETm3pRiveLFRiiCwxbrf3UNlQtk5C0AAAAC66Ip1jAzC6U1gTVP9LHETW1MwEfzxSXHcCny9wy7pFyDlLtmpnP1nGYUegAMxvJTu5yGmciBMmfZAgS1Oan3PQAAAAETSu3JcNAkdSqm2E1zxSWxClWrBid/eLHpbasjHo5cLgkGjzI6+UWNHzhfOf86wJ0uuex+++0ttFRzzMEf9atE=
Incrementing the MAX_RETRY LIMIT:
1
numretries ======
1
Inside sgslcodsupdateChild
1:437 7 monsoft314 420 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAlfdA8eazxkaNLy8BEBQHKgAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAAQZgAAAAEAACAAAAALknXvaho0gPrrP34AQqdBSMLHHcVupTrFuuN0lQdV0QAAAAAOgAAAAAIAACAAAAAKxX3FGNQ/lJBjETm3pRiveLFRiiCwxbrf3UNlQtk5C0AAAAC66Ip1jAzC6U1gTVP9LHETW1MwEfzxSXHcCny9wy7pFyDlLtmpnP1nGYUegAMxvJTu5yGmciBMmfZAgS1Oan3PQAAAAETSu3JcNAkdSqm2E1zxSWxClWrBid/eLHpbasjHo5cLgkGjzI6+UWNHzhfOf86wJ0uuex+++0ttFRzzMEf9atE=
Encrypted record data updated successfully
Inside sgsladac destructor
Inside sgslodac destructor
Inside sgsladac destructor
Password updation failed in child process
Moving out sgslpascsynchDataStoreWithOID
About to UNBIND datastore after processing the Records
Deleting datastore object pointer
***********Inside sgslldpcopenLDAPConnection****************
REG BASE Key ===
SYSTEM\CurrentControlSet\Control\Lsa\orclidmpwf\OIDConfig
OID Host Key
OIDHost
OID Host Value ====
Oracle.OID
am I missing something?
or this scenario can't work without DIP?
Thank you
Noraset,

Hi,
As yingkuan had provided nice link for understanding...
Why you od this doubt... Since, When you are holding two different Database, then you can carry out stream replicaiton, the bottom line is on the on two different DB's.. .still if they are on same host.. !!
- Pavan Kumar N

Change the SYS & SYSTEM Oracle passwords with BRTOOLS, any concerns ?

Hello, I would like to change both the SYS and SYSTEM Oracle passwords with BRTOOLS :
(1) Can I use BRTOOLS to change them, or, I have to change them through SQLPlus ?
(2) Any concerns, will this password change affect my SAP normal operations ?
(3) Do I need to re-start the whole SAP UNIX system when I complete the password changing ?
(4) Or changing these 2 passwords is totally an Oracle RDBMS issue, it will not have any effect on SAP ?

But I failed. I was going to change the password of SYSTEM, but why SAP asked me to enter the password of SAPDEV ?
Why ? OK, then I entered the SAPDEV password (it is the same as SYSTEM's old password).
Then, I called SQLPlus and entered login name : SYSTEM, but why its correct password was still the old one, the new one failed. Why ?
I just wanted to change the password of SYSTEM, why it was related to SAPDEV ?
Here is the screen message :
BR*Tools main menu
1 = Instance management
2 - Space management
3 - Segment management
4 - Backup and database copy
5 - Restore and recovery
6 - Check and verification
7 - Database statistics
8 - Additional functions
9 - Exit program
Standard keys: c - cont, b - back, s - stop, r - refr, h - help
BR0662I Enter your choice:
8
BR0280I BRTOOLS time stamp: 2010-01-15 10.22.46
BR0663I Your choice: '8'
BR0280I BRTOOLS time stamp: 2010-01-15 10.22.46
BR0656I Choice menu 2 - please make a selection
Additional BR*Tools functions
1 = Show profiles and logs
2 - Clean up DBA logs and tables
3 - Adapt NEXT extents
4 - Change password of database user
5 - Create/change synonyms for DBA tables
6 - Reset program status
Standard keys: c - cont, b - back, s - stop, r - refr, h - help
BR0662I Enter your choice:
4
BR0280I BRTOOLS time stamp: 2010-01-15 10.23.14
BR0663I Your choice: '4'
BR0280I BRTOOLS time stamp: 2010-01-15 10.23.14
BR0657I Input menu 59 - please check/enter input values
BRCONNECT options for changing password of database user
1 - BRCONNECT profile (profile) ............... [initDEV.sap]
2 - Database user/password (user) ............. [/]
3 ~ Database owner to change password (owner) . []
4 - Message language (language) ............... [E]
5 - BRCONNECT command line (command) .......... [-p initDEV.sap -l E -f chpass]
Standard keys: c - cont, b - back, s - stop, r - refr, h - help
BR0662I Enter your choice:
2
BR0280I BRTOOLS time stamp: 2010-01-15 10.28.56
BR0663I Your choice: '2'
BR0280I BRTOOLS time stamp: 2010-01-15 10.28.56
BR0681I Enter string value for "user" [/]:
SYSTEM
BR0280I BRTOOLS time stamp: 2010-01-15 10.29.08
BR0683I New value for "user": 'SYSTEM'
BR0263I Enter password for database user 'SYSTEM' (maximum 8 characters):
BR0280I BRTOOLS time stamp: 2010-01-15 10.29.32
BR0657I Input menu 59 - please check/enter input values
BRCONNECT options for changing password of database user
1 - BRCONNECT profile (profile) ............... [initDEV.sap]
2 - Database user/password (user) ............. [SYSTEM/*******]
3 ~ Database owner to change password (owner) . []
4 - Message language (language) ............... [E]
5 - BRCONNECT command line (command) .......... [-p initDEV.sap -l E -f chpass]
Standard keys: c - cont, b - back, s - stop, r - refr, h - help
BR0662I Enter your choice:
c
BR0280I BRTOOLS time stamp: 2010-01-15 10.29.41
BR0663I Your choice: 'c'
BR0259I Program execution will be continued...
BR0291I BRCONNECT will be started with options '-p initDEV.sap -l E -f chpass'
BR0280I BRTOOLS time stamp: 2010-01-15 10.29.41
BR0670I Enter 'c[ont]' to continue, 'b[ack]' to go back, 's[top]' to abort:
c
BR0280I BRTOOLS time stamp: 2010-01-15 10.29.49
BR0257I Your reply: 'c'
BR0259I Program execution will be continued...
BR0801I BRCONNECT 6.40 (39)
BR0280I BRCONNECT time stamp: 2010-01-15 10.29.52
BR0263I Enter password for database user 'SAPDEV' (maximum 8 characters):
BR0280I BRCONNECT time stamp: 2010-01-15 10.34.58
BR0263I Reenter password for database user 'SAPDEV' (maximum 8 characters):
BR0280I BRCONNECT time stamp: 2010-01-15 10.35.57
BR0482W The passwords entered must be identical
BR0280I BRCONNECT time stamp: 2010-01-15 10.35.57
BR0256I Enter 'c[ont]' to continue, 's[top]' to cancel BRCONNECT:
c
BR0280I BRCONNECT time stamp: 2010-01-15 10.36.31
BR0257I Your reply: 'c'
BR0259I Program execution will be continued...
BR0280I BRCONNECT time stamp: 2010-01-15 10.36.31
BR0263I Enter password for database user 'SAPDEV' (maximum 8 characters):
BR0280I BRCONNECT time stamp: 2010-01-15 10.37.03
BR0263I Reenter password for database user 'SAPDEV' (maximum 8 characters):
BR0280I BRCONNECT time stamp: 2010-01-15 10.38.08
BR0482W The passwords entered must be identical
BR0280I BRCONNECT time stamp: 2010-01-15 10.38.08
BR0256I Enter 'c[ont]' to continue, 's[top]' to cancel BRCONNECT:
BR0280I BRCONNECT time stamp: 2010-01-15 10.38.11
BR0256I Enter 'c[ont]' to continue, 's[top]' to cancel BRCONNECT:
c
BR0280I BRCONNECT time stamp: 2010-01-15 10.38.14
BR0257I Your reply: 'c'
BR0259I Program execution will be continued...
BR0280I BRCONNECT time stamp: 2010-01-15 10.38.14
BR0263I Enter password for database user 'SAPDEV' (maximum 8 characters):
BR0280I BRCONNECT time stamp: 2010-01-15 10.38.16
BR0263I Reenter password for database user 'SAPDEV' (maximum 8 characters):
BR0280I BRCONNECT time stamp: 2010-01-15 10.38.18
BR0829I Password changed successfully in database for user SAPDEV
BR0830I Password changed successfully in table OPS$DEVADM.SAPUSER for user SAPDEV
BR0280I BRCONNECT time stamp: 2010-01-15 10.38.18
BR0803I BRCONNECT completed successfully with warnings
BR0292I Execution of BRCONNECT finished with return code 1
BR0668I Warnings or errors occurred - you can continue to ignore them or go back to repeat the last action
BR0280I BRTOOLS time stamp: 2010-01-15 10.38.18
BR0670I Enter 'c[ont]' to continue, 'b[ack]' to go back, 's[top]' to abort:
c
BR0280I BRTOOLS time stamp: 2010-01-15 10.38.44
BR0257I Your reply: 'c'
BR0259I Program execution will be continued...
BR0280I BRTOOLS time stamp: 2010-01-15 10.38.44
BR0656I Choice menu 2 - please make a selection
Additional BR*Tools functions
1 = Show profiles and logs
2 - Clean up DBA logs and tables
3 - Adapt NEXT extents
4 + Change password of database user
5 - Create/change synonyms for DBA tables
6 - Reset program status
Standard keys: c - cont, b - back, s - stop, r - refr, h - help
BR0662I Enter your choice:

Deploying Oracle Password filter for Microsoft Active Directory.

We created the Oracle Wallet w/ Self-Signed Certificate. When we setup the Oracle Password filter for Microsoft Active Directory from LDAP server. We are getting the error. Certificate is not valid.
Is this OK or Can we get the success message.

You can't ignore it. A valid certificate is important to make it work.
--olaf

After changing the Oracle password - Shared services is not running

Hi All,
I am getting the below error after changed my oracle password.
SharedServices Log:
com.hyperion.hit.registry.exceptions.RegistryException: java.sql.SQLException: [Hyperion][Oracle JDBC Driver][Oracle]ORA-28001: the password has expired
     at com.hyperion.hit.registry.RegistryUtils.createNewConnection(RegistryUtils.java:213)
     at com.hyperion.hit.registry.RegistryConnection.getInstance(RegistryConnection.java:155)
     at com.hyperion.hit.registry.Registry.getInstance(Registry.java:309)
     at com.hyperion.eie.config.util.xml.XMLUtils.getDBConfigProperties(Unknown Source)
     at com.hyperion.eie.config.util.database.DBProperties.isDBConfigured(Unknown Source)
     at com.hyperion.eie.common.cms.CMSFacade.isCMSInitialized(Unknown Source)
     at com.hyperion.cas.server.CASAppCacheLoader.run(CASAppCacheLoader.java:22)
Caused by: java.sql.SQLException: [Hyperion][Oracle JDBC Driver][Oracle]ORA-28001: the password has expired
     at hyperion.jdbc.base.BaseExceptions.createException(Unknown Source)
     at hyperion.jdbc.base.BaseExceptions.getException(Unknown Source)
     at hyperion.jdbc.oracle.OracleImplConnection.connectAndAuthenticate(Unknown Source)
     at hyperion.jdbc.oracle.OracleImplConnection.open(Unknown Source)
     at hyperion.jdbc.base.BaseConnection.connect(Unknown Source)
     at hyperion.jdbc.base.BaseConnection.setupImplConnection(Unknown Source)
     at hyperion.jdbc.base.BaseConnection.open(Unknown Source)
     at hyperion.jdbc.base.BaseDriver.connect(Unknown Source)
     at java.sql.DriverManager.getConnection(DriverManager.java:525)
     at java.sql.DriverManager.getConnection(DriverManager.java:171)
     at com.hyperion.hit.registry.RegistryUtils.createNewConnection(RegistryUtils.java:203)
     ... 6 more
Attempting to connect to database: Retry Count: 10
Shared Services couldn't be Initialized. The database is either not configured or not running.
Thanks,
PC

Hi John,
After changing the password only, I am getting the Oracle error"[Hyperion][Oracle JDBC Driver][Oracle]ORA-28001: the password has expired" in shared services log.
I changed the password for the schema called "System". But i configured my hyperion system with different schema "Hypconfig".
Thanks,
PC

Securing oracle Passwords using OIM

Hello,
First , i would like to say that i have no experience at all with OIM .
I have tens of oracle production instances.
Each instance has its own unique SYS/SYSTEM/Other users passwords.
I would like to create a repository and save there all those hundreds of passwords - encrypted.
I will also need to have an access to this repository and allow to decrypt password using a secure shell script.
I would like to know if this can be done using OIM.
Thanks

This tool uses a simple file to stores the passwords encrypted. Well, I urge you to secure this file to make it non-accessible for others.
refer the link :Oracle Password Repository by Laurent Schneider
http://laurentschneider.com/wordpress/2006/07/oracle-password-repository.html
hope this will helps you.
Total questions: 60 (53 unresolved), if you stastified with the replies mark the thread as answered.
Posters, please mind these common-sense rules when participating here:
- When asking a question, provide all the details that someone would need to answer it. Consulting documentation first is highly recommended.
- When answering a question, please be courteous and respectful; there are different levels of experience represented here. A poorly worded question is better ignored than flamed - or better yet, help the poster ask a better question.
- It is considered good etiquette to reward answerers with points (as "helpful" - 5 pts - or "correct" - 10pts).
- See more tips in the FAQ
Thanks for doing your part to make this community as valuable as possible for everyone!
- OTN Edited by: rajeysh on Jul 9, 2010 4:14 PM

Oracle Password Filter 10g (10.1.2.3)

Hello
I'm trying to set up password synchronization between Microsoft Active Directory 2003 and Oracle Internet Directory 10.1.2.3. I was trying to find the password sync modules under /utils/adpwdsync but this directory does not exist in the 10.1.2.0.2 build. Any idea where i can find it? Does 10.1.2.3 support oracle password filter?
Thanks
Shiva

The appropriate way to monitor the client idle time is with a java bean. There is one included in the Forms 10 Demo set. However, the page where the Forms demos (older versions) used to reside is currently not available. You may need to contact Support if you really feel like you need the example code.
You might also get some ideas from here:
http://forms.pjc.bean.over-blog.com/

Oracle Password Security - suppress messages and use an application message

We are implementing Oracle Password Security and I was wondering if the Oracle message can be suppressed?
Reason being, I would like to give an application message based on the return code from Oracle.
Thanks.

Maybe I haven't explained it properly or I'm misunderstanding something but the exception init doesn't seem to be working.
We have set up a security profile and have set the Oracle password security profile parameters:
•     failed_login_attempts
•     password_grace_time
•     password_life_time
•     password_lock_time
•     password_reuse_max
•     password_reuse_time
•     password_verify_function
As we know on connect, Oracle checks the security profile and if a users P/W will be expiring, Oracle prompts an internal message to the user, error code ORA-28002. Is there a way to suppress the internal Oracle message and somehow capture the error code?
Thanks

How do i allow users to change their oracle password?

Please help.
I need a procedure/module in my forms6 to allow users change their oracle database passwords. I am using Oracle 8.0.6.
thanks for a reply

SEND YOUR EMAIL SO I CAN SEND YOU A COMPLETE
FORM HOW TO CHANGE THE USER PASSWORD
MARK

How do i find the location of Oracle password file in the HDD

we giv the location of the password file while we use the orapwd command to create one.
later if we forget the location of the password file (incase it is not at the default location) then is there a way to find it or do we just create a new password file?
secondly, for oracle to use the password file we giv the remote_login_passwordfile='EXCLUSIVE' in the parameter file. wat tells oracle the location of the exact password file??
Thanks
Arvind
Edited by: iinfi on Sep 29, 2008 12:15 AM

The default location are OS dependant.
On Unix/Linus it is under $ORACLE_HOME/dbs
On Windows, it is under %ORACLE_HOME%/database
To change the default location, nothing inside database, but :
On Unix/Linux, you have to create a symbolic link for that file to the target location
On Windows, you have to change env variable (regedit) ORA_PWFILE and ORA_SID_PWFILE
So, you have to check this setting for the real password file location.
Nicolas.

Problem setting up user ids to use the Oracle password file.

I want to set up my database users so that a password file is used for connecting to the database. I have completed these steps successfully.
BTW - DB is 11.2.0.3 on AIX power 64
1. Created the password file for the database using the orapwd command. Allowing 20 entries. Confirmed the file was created in the $ORACLE_HOME/dbs directory
2. Created a database user, sbrower
CREATE USER SBROWER IDENTIFIED BY <password> DEFAULT TABLESPACE USERS TEMPORARY TABLESPACE TEMP PROFILE DEFAULT ACCOUNT UNLOCK ;
GRANT DBA TO SBROWER;
ALTER USER SBROWER DEFAULT ROLE ALL;
GRANT UNLIMITED TABLESPACE TO SBROWER;
ALTER USER SBROWER QUOTA UNLIMITED ON USERS;
3. Connected to the database as SYS and granted sysoper to SBROWER
4. Using putty, ssh'ed into the server where the database resides.
5. Set the oracle variables (ORACLE_HOME, ORACLE_BASE, etc.) and PATH
6. Was able to connect to the database using sqlplus / as syoper
THE PROBLEM
For another user, EA_RDX_ORACLE1, I follow the same steps (2-6) bu when I execute step 6, it does not allow the connection
ERROR:
ORA-01031: insufficient privileges
   but, if I use sqlplus ea_rdx_oracle1/thepassword as sysoper it works
Looking at v$pwfile_users on the database:
USERNAME SYSDBA   SYSOPER      SYSASM
SYS      TRUE      TRUE      FALSE
SBROWER FALSE     TRUE      FALSE
EA_RDX_ORACLE1 FALSE TRUE FALSE
3 rows selected.
There is one thing that is different for the ea_rdx_oracle1 id's:
- The users who use this id, use a took called CyberVault to check out the id. The password for the id changes each time the id is checked out; however, the way the id is set up on the DB servers, us user does not have to enter the password when they log in (ssh).
I have sent an email to our unix admin asking his how the id was set up so that it can ssh into the server. It is not included in the list of users in any group in the /etc/ogroup file and it is not included in the /etc/opassword file.

The OS authentication ( sqlplus / as sysdba ) does not require the password file.
The problem may be related to the OS user you are connecting to that server - it is not a member of OSDBA group ( usually DBA ).

Oracle password won't work after fresh installation

I've just installed 10g and tried to connect to SQL*PLUS and EM. I have the default password as oracle and username oracle on the system. No idea why I can't log in since Oracle never gave me the option on the basic installation.
Any ideas?

There is no default password in 10g.
You should use the password you specified during installation, if you don't remember try the following from your command line.
C:\SQLPLUS /NOLOG
SQL*Plus: Release 10.1.0.4.2 - Production on Tue Mar 27 17:03:53 2007
Copyright (c) 1982, 2005, Oracle. All rights reserved.
SQL> CONN / AS SYSDBA
Connected.
SQL>
SQL>ALTER USER <username> IDENTIFIED BY <password>The same concept work on UNIX platform too
Regards,
Tony
Message was edited by:
Tony Garabedian

Hide oracle password on Unix command line call?

Does anyone know whether you can hide the password for a command line call to rwrun60 under Unix? For other Oracle products like sqlplus you can hide the password by supplying it using the redirection operator. i.e. sqlplus userid @script <<EOD and then put the password or password@sid on the next line and then EOD on the 3rd line to end the redirection. This virtually hides the password from anyone able to look at processes on the system. Can this also be done for rwrun60? If you just put the userid after userid= will reports prompt you for a password?

Take a look at http://java.sun.com/features/2002/09/pword_mask.html.
Hope this helps,

Oracle passwords on OS

Similar Messages

Maybe you are looking for