Regarding password file
While creating database i put remote_login_passwordfile = exclusive in init.ora.
i created the password file with user name and password.
Afer i could connect internal with out givng username and password which have been given in password file.
I don't have proper idea on this please give me idea about this.
Ganesh.G.
null
Omit the OS-User from ORA_SID_DBA group( in the User Manager) and try again to connect. it will solve your problem.
Similar Messages
-
Regarding password file authentication
I am working with 10g database .
I have set the remote_login_passwordfile parameter to exclusive
SQL> select * from v$pwfile_users;
USERNAME SYSDB SYSOP
SYS TRUE TRUE
SQL> show parameter pass
NAME TYPE VALUE
remote_login_passwordfile string EXCLUSIVEI tried connecting as sysdba and I was able to connect .
sqlplus '/as sysdba'
When i was trying to connect as sys with different random passwords specified i was able to connect too.
Though I didn't give sysdba permissions to other users they were also able to connect as sysdba .
Let me know what went wrong ?Nothing.
The parameter is called remoteloginpasswordfile.
This means you need a 'remote' connection through sqlnet.
If you are not connecting remotely, but local (ie you have ORACLE_SID set),
you are authenticated by the O/S, not by the password file.
This means you will get in if you are in the dba group.
This also means
connect mickey/mouse as sysdba
will work,
To disable OS authentication make sure
sqlnet.authentication_services=(none)
is in sqlnet.ora
Please note when you connect
sqlplus '<user>/<pass> as sysdba
pass will be visible using ps.
Sybrand Bakker
Senior Oracle DBA -
Configuring password file in oracle 10g
Hi
Can anyone here guide me to the steps to be followed in configuring password file.
I am learning cloning using RMAN. For that purpose I need to configure password file at first.
I created the password file using orapwd utility.
and then made the required changes in tnsnames.ora and listener.ora files. Reloaded listener.
Set SQLNET.AUTHENTICATION_SERVICES = (NONE) in the sqlnet.ora file
Made the changes required in the initialization parameter file for the duplicate database instance.
Next, export ORACLE_SID= <DUPLICATE DATABASE NAME>
CREATE SPFILE FROM PFILE
STARTUP FORCE NOMOUNT;
rman TARGET sys/password@target-tnsname AUXILIARY sys/password@duplicate-tnsname
At this stage, I get the below error.
RMAN-00554 initialization of internal recovery manager package failed
RMAN- 04006 error from auxiliary database: ORA- 01031 : Insufficient privilegesuserark160 wrote:
rman TARGET sys/password@target-tnsname AUXILIARY sys/password@duplicate-tnsname
At this stage, I get the below error.
RMAN-00554 initialization of internal recovery manager package failed
RMAN- 04006 error from auxiliary database: ORA- 01031 : Insufficient privileges
Are the Auxiliary and Target databases on the same machine?
Can you also check the parameter Local_Listener for Auxiliary Database?
Regards,
Z.K. -
Hello,
1) I realized that when MBAM bitlocker encryption start both Recovery key and TPM owner password file are send to MBAM server. If we change the computername of the notebook, we can find out Recovery key from MBAM server with the KeyID as we can read it from
computer screen, but we can not find out TPM owner password file with the existing new computername information from MBAM server, so we have to know old names of all computers but it is impossible. So we have to do decryption and clearing TPM than we
can again encrypted it with its new name. is it right?
2) We will going to deploy mbam encryption to our notebooks. But sometimes when a person quit the job his notebook can given to another person or new employee and based to our procedure when a notebook will given to another user it should installed
OS again with PXE boot. I would to know will it be enough to installing with this method again with a diffrent computer name or should I firstly clear its TPM than install OS with PXE to keep TPM owner password file missing as item 1?
I hope i can explain what i mean :)
Regards,
SibelMI would suggest you to first decrypt the laptop and then follow the process:-
- Clear the TPM
- Encrypt the type.
- Check for the encryption behavior.
Cause I have found on some model that if the OS drive is encrypted, PXE boot fail on that machine even though I also did a direct PXE on an encrypted machine with clearing the TPM.
TPM ownership password is a hash file that gets generated with a set of algorithm. SO each time when you PXE boot, by clearing the TPM, the TPM hash password for the TPM will change. This has been done for security measures.
Gaurav Ranjan -
Dear All,
I have changed the PWD file on oracle 9.2.04 under linux redhat advance server 2.1. but when i start to open database by issuing dbstart, i get
ORA-01990: Error opening password file '/home/oracle/OraHome1/dbs/orapw'
ORA-27037: unable to obtain file status
Linux Error: 2 : no such file or directory
additional information: 3
How to solve the problems?
thanks and regard
ERHai all...
I did it all..
but still I got
ORA-01990: Error opening password file '/home/oracle/OraHome1/dbs/orapw'
ORA-27037: unable to obtain file status
Linux Error: 2 : no such file or directory
additional information: 3
Help me...
Thanks
regard
ER -
Password file and sysdba grant in 10g on AIX ...
Hi,
I am very familiar with password file, orapwd ...
I installed oracle 10gR2 database on AIX, created a password file using orapwd (file name orapwdSID.ora under $ORACLE_HOME/dbs), set remote_login_passwordfile='EXCLUSIVE' in init.ora file.
1 - When I select * from v$pwfile_users; I get 0 rows !!!
2 - When I try to grant sysdba to an_user; I get ORA-01994: GRANT failed: password file missing or disabled
Cause: The operation failed either because the INIT.ORA parameter REMOTE_LOGIN_PASSWORDFILE was set to NONE or else because the password file was missing.
Action: Create the password file using the orapwd tool and set the INIT.ORA parameter REMOTE_LOGIN_PASSWORDFILE to EXCLUSIVE.
any idea.
thanks.Hi,
I do not think so that this is a solution. because setting "Shared" means that all databases uses the same password file and only one user "SYS" is in this file (sysdba privilege) ...
Not what I am looking for !
regards. -
Cannot scp a password file between virtual machines
Hi all!
I am trying to test a Data Guard configuration on two appropriately configured Oracle Open Days images on Virtual Box. Unfortunately when trying to copy the password file from the primary to the standby using the following command.....
scp orapworcl oracle@dg2:/home/oracle/app/oracle/product/11.2.0/dbhome_2/dbs
......I get the following error/message (because it isn't an error as such...)
All passwords are oracle or noted if otherwise.
Could it be that this is a functionality that is turned off for these images? It would be really helpful to get this going!
NOTE:
Both machines have statically assigned IPAddresses
TNSPING and PING show the other machine to be alive and databases "accessible"
No passwords have been changed
The Oracle version is 11.2.0.3
Many thank for your help in advance!
Regards,
KevExcerpt "man scp",
"scp copies files between hosts on a network. It uses ssh(1) for data
transfer, and uses the same authentication and provides the same security
as ssh(1). Unlike rcp(1), scp will ask for passwords or passphrases if
they are needed for authentication."
Other useful information for "ssh",
[OL6u3 ~]$ which ssh
/usr/bin/ssh
[OL6u3 ~]$ rpm -qf /usr/bin/ssh
openssh-clients-5.3p1-81.el6.x86_64
[OL6u3 ~]$ rpm -ql openssh-clients
/etc/ssh/ssh_config
/usr/bin/.ssh.hmac
/usr/bin/scp
/usr/bin/sftp
/usr/bin/slogin
/usr/bin/ssh
/usr/bin/ssh-add
/usr/bin/ssh-agent
/usr/bin/ssh-copy-id
/usr/bin/ssh-keyscan
/usr/share/man/man1/scp.1.gz
/usr/share/man/man1/sftp.1.gz
/usr/share/man/man1/slogin.1.gz
/usr/share/man/man1/ssh-add.1.gz
/usr/share/man/man1/ssh-agent.1.gz
/usr/share/man/man1/ssh-copy-id.1.gz
/usr/share/man/man1/ssh-keyscan.1.gz
/usr/share/man/man1/ssh.1.gz
/usr/share/man/man5/ssh_config.5.gz -
What are good suggestions regarding Password Protection programs for Apple?
I'm looking to implement a Password Protection file/system throughout my Apple world (iMac, iPhone, iPad) and was wondering what is the strongest/user friendly programs available for Apple stuff.
GRI've been very happy with 1Password, which has apps for Mac, Windows, iOS and Android. You can share a single password file via Dropbox, making it easy to manage all your passwords as well as secure notes, credit card information, and other such private info. There are other similar utilities that others may recommend, but I've found no reason to switch.
Regards.
Disclaimer: any product suggestion and link given is strictly for reference and represents my opinion only. No warranties express or implied. I get no personal benefit from the sale of any product I may recommend in any of my posts in the Discussions. Your mileage may vary. Void where prohibited. You must be this tall to ride. Objects in mirror may be closer than they appear. Preservatives added to improve freshness. Contestants have been briefed on some questions before the show. No animals were harmed in the making of this post. -
Error When Attempting to Create a Password File
hi all,
i recevied the following error when attempting to create a password file via the ORAPWD utility. can anyone offer any insight into what is causing this problem?
$ ./orapwd file=/appl/oracle/product/9.2.0-64bit/dbs/orapwLEAF password=XXXXXX
Unable to find error file.
Error code 5
thanksTry to set env variable ORACLE_HOME
Best Regards
Krystian Zieja / mob -
can you?please to give me information about password file
or documentations ?Hi, please review the next links for more information about the password files.
http://download.oracle.com/docs/cd/B19306_01/server.102/b14196/storage001.htm#sthref333
http://download.oracle.com/docs/cd/B19306_01/server.102/b14231/dba.htm#sthref157
http://download.oracle.com/docs/cd/B19306_01/server.102/b14231/dba.htm#sthref189
Regards. -
hi all,
when we create password file. then internal user is also created along with sys in oracle 9i. as we know that internal has been depricated since 9i.
SQL> select * from v$pwfile_users;
USERNAME SYSDB SYSOP
INTERNAL TRUE TRUE
SYS TRUE TRUE
regards
wire.Please see
REP-0004 Warning - Unable to Open User Preference File. (Doc ID 26014.1)
ApPsMaStI
sharing is Caring -
Create password file Oracle10g RAC
Hi all,
we have Oracle10g R1 (64 bit) running on RAC Unix. these servers (2 servers and 2 instance) are using RMAN and the logs are transfered to DR server ( only 1 server). i dun have any idea on how to create password file with this structure, originally we want to change SYS password. and how to create password file at both RAC server and DR server, make sure the logs be transmitted without problem to DR server.
would like to the exact procedure ...any idea?
many thanks in advance.
Regards,
Nonieto change SYS password. and how to create password
file at both RAC server and DR server, make sure the
logs be transmitted without problem to DR server.
Have not you created password file on Database and DG ? use orapwd command to create password file. Well changing password on Database side, is same simple procedure, but on DR you can change password in password file , but problem is how to change password on DR database. So only option remain is refresh DR Database !!!! -
Connecting to remote database (idle) with Password File Authentication
Hi all,
I was wondering if it's possible to connect to a remote database that is shut down (idle instance) as sys user with sysdba privileges? In the book Oracle - All in One on page 210 in the section - Operating System and Password File Authentication it says:
Connection with operating system or password file authentication is always possible, no matter what state the instance and database are in, and is necessary to issue STARTUP or SHUTDOWN commands.
Above indicates that it's possible but I'm unable to do so.
I managed to connect to remote database that was in nomount mode (see below for details).
When I first tried to connect to a remote database (idle instance) using password file authentication it was giving following error:
sqlplus sys@ORCL as sysdbaSQL*Plus: Release 11.2.0.3.0 Production on Fri Dec 21 13:59:28 2012
Copyright (c) 1982, 2011, Oracle. All rights reserved.
Enter password:
ERROR:
ORA-12514: TNS:listener does not currently know of service requested in connect
descriptor
Enter user-name:
After starting the database to nomount mode I was getting following error:
sqlplus sys@ORCL as sysdbaSQL*Plus: Release 11.2.0.3.0 Production on Fri Dec 21 13:48:36 2012
Copyright (c) 1982, 2011, Oracle. All rights reserved.
Enter password:
ERROR:
ORA-12528: TNS:listener: all appropriate instances are blocking new connections
Enter user-name:
So I added the clause (UR=A) to my listener.ora file and after that it work and I was able to connect:
sqlplus sys@ORCL as sysdbaSQL*Plus: Release 11.2.0.3.0 Production on Fri Dec 21 14:04:49 2012
Copyright (c) 1982, 2011, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL>
I have all necessairly entries in tnsnames.ora on my local host.
Also I have no problems when connecting as sys user with sysdba when the DB is open but can't get it work on an idle instance.
I know that I can use operating system authentication but want to know if there is a mistake in the book or I'm doing something wrong.
Regards,
Dawid
Edited by: 978239 on 2012-12-21 06:24978239 wrote:
Hi all,
I was wondering if it's possible to connect to a remote database that is shut down (idle instance) as sys user with sysdba privileges? In the book Oracle - All in One on page 210 in the section - Operating System and Password File Authentication it says:
Connection with operating system or password file authentication is always possible, no matter what state the instance and database are in, and is necessary to issue STARTUP or SHUTDOWN commands.
Above indicates that it's possible but I'm unable to do so.
I managed to connect to remote database that was in nomount mode (see below for details).
When I first tried to connect to a remote database (idle instance) using password file authentication it was giving following error:
sqlplus sys@ORCL as sysdbaSQL*Plus: Release 11.2.0.3.0 Production on Fri Dec 21 13:59:28 2012
Copyright (c) 1982, 2011, Oracle. All rights reserved.
Enter password:
ERROR:
ORA-12514: TNS:listener does not currently know of service requested in connect
descriptorSince the database is down, the only way the listener is going to know of it is if you create a static registration by adding an entry for the db in the SID_LIST section of listener.ora
>
Enter user-name:
After starting the database to nomount mode I was getting following error:
sqlplus sys@ORCL as sysdbaSQL*Plus: Release 11.2.0.3.0 Production on Fri Dec 21 13:48:36 2012
Copyright (c) 1982, 2011, Oracle. All rights reserved.
Enter password:
ERROR:
ORA-12528: TNS:listener: all appropriate instances are blocking new connections
Enter user-name:
So I added the clause (UR=A) to my listener.ora file and after that it work and I was able to connect:
sqlplus sys@ORCL as sysdbaSQL*Plus: Release 11.2.0.3.0 Production on Fri Dec 21 14:04:49 2012
Copyright (c) 1982, 2011, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL>
I have all necessairly entries in tnsnames.ora on my local host.
Also I have no problems when connecting as sys user with sysdba when the DB is open but can't get it work on an idle instance.
I know that I can use operating system authentication but want to know if there is a mistake in the book or I'm doing something wrong.
Regards,
Dawid
Edited by: 978239 on 2012-12-21 06:24 -
Password file authentication confusion
Dear experts,
I am a beginner (I'll keep stating this till I gain some knowledge about Oracle). I have database on Linux server. Currently the sysdba is OS Authenticated, so I can just do
SQL> conn /as sysdba
connectedI wanted to try the password file authentication also, so I did the following:
a) changed parameter remote_login_passwordfile to EXCLUSIVE
b) created password file using: orapwd file=orapwPROD password=testDBA entries=5
c) created one user pwFileDBA
d) grant sysdba to pwFileDBA
e) checked v$pwfile_users and found entry for pwfileDBA user
USERNAME SYSDB SYSOP
SYS TRUE TRUE
PWFILEDBA TRUE TRUENow When I tried to login as:
SQL> conn pwfileDBA/testDBA as sysdba
connectedI am happy it worked :). Now I tried
SQL> conn pwfileDBA/<some junk password> as sysdba
connectedThis also worked :(
I have no clue now, if password file authentication is enabled or not. Can anyone share if I am doing something wrong? How to test this?
Thanks
oraNeel.Hi Maxim,
1. conn sys/testDBA@your_tns_alias as sysdba - this also says "insufficient privileges"
2.
-bash-3.2$ ps -ef|grep pmon
oracledb 9410 1 0 Dec13 ? 00:00:00 ora_pmon_PROD
oracledb 11415 11320 0 07:13 pts/1 00:00:00 grep pmon3. ls -la $ORACLE_HOME/dbs
-bash-3.2$ ls -la
total 14928
drwxr-x--- 2 oracledb dba 4096 Dec 13 22:27 .
drwxr-xr-x 66 oracledb dba 4096 Oct 22 11:32 ..
-rw-rw-r-- 1 oracledb dba 0 Oct 22 11:33 PROD_oradb_ifile.ora
-rw-rw---- 1 oracledb dba 1544 Oct 20 11:34 hc_PROD.dat
-rw-rw-r-- 1 oracledb dba 19028 Oct 21 14:57 initPROD_bak.ora
-rw-r--r-- 1 oracledb dba 23584 Oct 22 11:33 initPROD_noaq.ora
-rw-r--r-- 1 oracledb dba 23576 Oct 27 13:29 initPROD.ora
-rw-rw-r-- 1 oracledb dba 19028 Oct 21 14:55 initPROD.ora.21Oct
-rw-r--r-- 1 oracledb dba 12920 May 3 2001 initdw.ora
-rw-r----- 1 oracledb dba 8385 Sep 11 1998 init.ora
-rw-rw---- 1 oracledb dba 24 Oct 20 11:34 lkPROD
-rw-rw---- 1 oracledb dba 24 Oct 21 15:22 lkPROD
-rw-r----- 1 oracledb dba 2048 Dec 13 22:31 orapwPROD
-rw------- 1 oracledb dba 15122432 Dec 1 18:39 snapcf_PROD.fBest Regards,
Neel -
How to deal with token Windows machines with regard to file sharing
We have an office of about 12 Macs, but we have couple of token Windows machines too.
Each Mac user has their own username and password for logging into there machine/server, administered by a Standard setup of Mac OS X Server (Server Preferences).
The question is what should I do with the Windows machines on the network with regard to file sharing and authentication? They don't need individual accounts; they could just have general accounts, but I don't know how to set them up with regard to the server.
Do I simply need to make sure that the username user to log into the Windows machine is a user on in Server Preferences?{quote}
Workgroup is not accessible. You might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permission. The network name cannot be found.
Except that I've got the other machine connected with no problems.
Message was edited by: Christiaan
Maybe you are looking for
-
On the left hand side of the page in the bottom corner, the web address pops up every time a new page is loading. What if I don't want that? How do I disable it?
-
PDF files not showing in Safari Windows
When clicking on a link to a pdf file (example: <a href = 'xxx.pdf'> I get a blank window. Have Acrobat Pro, latest version installed. Is there a special process to install it in Safari? (Windows) Note: there is a Plugins folder in the Safari app fol
-
[solved] urxvt and .Xdefaults
edit: I totally forgot about xrdb -load ~/.Xdefaults Last edited by dax965 (2008-01-19 23:34:58)
-
Adobe Acrobat DC Update Failed, Windows 7, 64-bit
xit Code: 7 Please see specific errors below for troubleshooting. For example, ERROR: -------------------------------------- Summary -------------------------------------- - 0 fatal error(s), 1 error(s) ----------- Payload: Adobe Acrobat DC 15.7.2003
-
HT2280 Apple Tv to connect?
I have pluged in my apple tv to the correct units, and have tried to change my tv input for apple to show up, and the apple tv light is white. But it's not showing up and can not figure it out.