Regarding password file

While creating database i put remote_login_passwordfile = exclusive in init.ora.
i created the password file with user name and password.
Afer i could connect internal with out givng username and password which have been given in password file.
I don't have proper idea on this please give me idea about this.
Ganesh.G.
null

Omit the OS-User from ORA_SID_DBA group( in the User Manager) and try again to connect. it will solve your problem.

Similar Messages

  • Regarding password file authentication

    I am working with 10g database .
    I have set the remote_login_passwordfile parameter to exclusive
    SQL> select * from v$pwfile_users;
    USERNAME                       SYSDB SYSOP
    SYS                            TRUE  TRUE
    SQL> show parameter pass
    NAME                                 TYPE        VALUE
    remote_login_passwordfile            string      EXCLUSIVEI tried connecting as sysdba and I was able to connect .
    sqlplus '/as sysdba'
    When i was trying to connect as sys with different random passwords specified i was able to connect too.
    Though I didn't give sysdba permissions to other users they were also able to connect as sysdba .
    Let me know what went wrong ?

    Nothing.
    The parameter is called remoteloginpasswordfile.
    This means you need a 'remote' connection through sqlnet.
    If you are not connecting remotely, but local (ie you have ORACLE_SID set),
    you are authenticated by the O/S, not by the password file.
    This means you will get in if you are in the dba group.
    This also means
    connect mickey/mouse as sysdba
    will work,
    To disable OS authentication make sure
    sqlnet.authentication_services=(none)
    is in sqlnet.ora
    Please note when you connect
    sqlplus '<user>/<pass> as sysdba
    pass will be visible using ps.
    Sybrand Bakker
    Senior Oracle DBA

  • Configuring password file in oracle 10g

    Hi
    Can anyone here guide me to the steps to be followed in configuring password file.
    I am learning cloning using RMAN. For that purpose I need to configure password file at first.
    I created the password file using orapwd utility.
    and then made the required changes in tnsnames.ora and listener.ora files. Reloaded listener.
    Set SQLNET.AUTHENTICATION_SERVICES = (NONE) in the sqlnet.ora file
    Made the changes required in the initialization parameter file for the duplicate database instance.
    Next, export ORACLE_SID= <DUPLICATE DATABASE NAME>
    CREATE SPFILE FROM PFILE
    STARTUP FORCE NOMOUNT;
    rman TARGET sys/password@target-tnsname AUXILIARY sys/password@duplicate-tnsname
    At this stage, I get the below error.
    RMAN-00554  initialization of  internal recovery manager package  failed
    RMAN- 04006  error from auxiliary  database:  ORA- 01031 :  Insufficient privileges

    userark160 wrote:
    rman TARGET sys/password@target-tnsname AUXILIARY sys/password@duplicate-tnsname
    At this stage, I get the below error.
    RMAN-00554  initialization of  internal recovery manager package  failed
    RMAN- 04006  error from auxiliary  database:  ORA- 01031 :  Insufficient privileges
    Are the Auxiliary and Target databases on the same machine?
    Can you also check the parameter Local_Listener for Auxiliary Database?
    Regards,
    Z.K.

  • Formatting the encrypted hard drive or intalling OS again with PXE boot can change TPM owner password file?

    Hello,
    1) I realized that when MBAM bitlocker encryption start both Recovery key and TPM owner password file are send to MBAM server. If we change the computername of the notebook, we can find out Recovery key from MBAM server with the KeyID as we can read it from
    computer screen, but we can not find out TPM owner password file with the existing new computername information from MBAM server, so we have to know old names of all computers but it is impossible. So we have to do decryption and clearing TPM than we
    can again encrypted it with its new name. is it right?
    2) We will going to deploy mbam encryption to our notebooks. But sometimes when a person quit the job his notebook can given to another person or new employee and based to our procedure when a notebook will given to another user it should installed
    OS again with PXE boot. I would to know will it be enough to installing with this method again with a diffrent computer name or should I firstly clear its TPM than install OS with PXE to keep TPM owner password file missing as item 1?
    I hope i can explain what i mean :)
    Regards,
    SibelM

    I would suggest you to first decrypt the laptop and then follow the process:-
    - Clear the TPM
    - Encrypt the type.
    - Check for the encryption behavior.
    Cause I have found on some model that if the OS drive is encrypted, PXE boot fail on that machine even though I also did a direct PXE on an encrypted machine with clearing the TPM.
    TPM ownership password is a hash file that gets generated with a set of algorithm. SO each time when you PXE boot, by clearing the TPM, the TPM hash password for the TPM will change. This has been done for security measures.  
    Gaurav Ranjan

  • [HELP] ORA-01990 Error opening password file '/home/oracle/OraHome1/dbs/ora

    Dear All,
    I have changed the PWD file on oracle 9.2.04 under linux redhat advance server 2.1. but when i start to open database by issuing dbstart, i get
    ORA-01990: Error opening password file '/home/oracle/OraHome1/dbs/orapw'
    ORA-27037: unable to obtain file status
    Linux Error: 2 : no such file or directory
    additional information: 3
    How to solve the problems?
    thanks and regard
    ER

    Hai all...
    I did it all..
    but still I got
    ORA-01990: Error opening password file '/home/oracle/OraHome1/dbs/orapw'
    ORA-27037: unable to obtain file status
    Linux Error: 2 : no such file or directory
    additional information: 3
    Help me...
    Thanks
    regard
    ER

  • Password file and sysdba grant in 10g on AIX ...

    Hi,
    I am very familiar with password file, orapwd ...
    I installed oracle 10gR2 database on AIX, created a password file using orapwd (file name orapwdSID.ora under $ORACLE_HOME/dbs), set remote_login_passwordfile='EXCLUSIVE' in init.ora file.
    1 - When I select * from v$pwfile_users; I get 0 rows !!!
    2 - When I try to grant sysdba to an_user; I get ORA-01994: GRANT failed: password file missing or disabled
    Cause: The operation failed either because the INIT.ORA parameter REMOTE_LOGIN_PASSWORDFILE was set to NONE or else because the password file was missing.
    Action: Create the password file using the orapwd tool and set the INIT.ORA parameter REMOTE_LOGIN_PASSWORDFILE to EXCLUSIVE.
    any idea.
    thanks.

    Hi,
    I do not think so that this is a solution. because setting "Shared" means that all databases uses the same password file and only one user "SYS" is in this file (sysdba privilege) ...
    Not what I am looking for !
    regards.

  • Cannot scp a password file between virtual machines

    Hi all!
    I am trying to test a Data Guard configuration on two appropriately configured Oracle Open Days images on Virtual Box. Unfortunately when trying to copy the password file from the primary to the standby using the following command.....
    scp orapworcl oracle@dg2:/home/oracle/app/oracle/product/11.2.0/dbhome_2/dbs
    ......I get the following error/message (because it isn't an error as such...)
    All passwords are oracle or noted if otherwise.
    Could it be that this is a functionality that is turned off for these images? It would be really helpful to get this going!
    NOTE:
    Both machines have statically assigned IPAddresses
    TNSPING and PING show the other machine to be alive and databases "accessible"
    No passwords have been changed
    The Oracle version is 11.2.0.3
    Many thank for your help in advance!
    Regards,
    Kev

    Excerpt "man scp",
    "scp copies files between hosts on a network. It uses ssh(1) for data
    transfer, and uses the same authentication and provides the same security
    as ssh(1). Unlike rcp(1), scp will ask for passwords or passphrases if
    they are needed for authentication."
    Other useful information for "ssh",
    [OL6u3 ~]$ which ssh
    /usr/bin/ssh
    [OL6u3 ~]$ rpm -qf /usr/bin/ssh
    openssh-clients-5.3p1-81.el6.x86_64
    [OL6u3 ~]$ rpm -ql openssh-clients
    /etc/ssh/ssh_config
    /usr/bin/.ssh.hmac
    /usr/bin/scp
    /usr/bin/sftp
    /usr/bin/slogin
    /usr/bin/ssh
    /usr/bin/ssh-add
    /usr/bin/ssh-agent
    /usr/bin/ssh-copy-id
    /usr/bin/ssh-keyscan
    /usr/share/man/man1/scp.1.gz
    /usr/share/man/man1/sftp.1.gz
    /usr/share/man/man1/slogin.1.gz
    /usr/share/man/man1/ssh-add.1.gz
    /usr/share/man/man1/ssh-agent.1.gz
    /usr/share/man/man1/ssh-copy-id.1.gz
    /usr/share/man/man1/ssh-keyscan.1.gz
    /usr/share/man/man1/ssh.1.gz
    /usr/share/man/man5/ssh_config.5.gz

  • What are good suggestions regarding Password Protection programs for Apple?

    I'm looking to implement a Password Protection file/system throughout my Apple world (iMac, iPhone, iPad) and was wondering what is the strongest/user friendly programs available for Apple stuff.
    GR

    I've been very happy with 1Password, which has apps for Mac, Windows, iOS and Android. You can share a single password file via Dropbox, making it easy to manage all your passwords as well as secure notes, credit card information, and other such private info. There are other similar utilities that others may recommend, but I've found no reason to switch.
    Regards.
    Disclaimer: any product suggestion and link given is strictly for reference and represents my opinion only. No warranties express or implied. I get no personal benefit from the sale of any product I may recommend in any of my posts in the Discussions. Your mileage may vary. Void where prohibited. You must be this tall to ride. Objects in mirror may be closer than they appear. Preservatives added to improve freshness. Contestants have been briefed on some questions before the show. No animals were harmed in the making of this post.

  • Error When Attempting to Create a Password File

    hi all,
    i recevied the following error when attempting to create a password file via the ORAPWD utility. can anyone offer any insight into what is causing this problem?
    $ ./orapwd file=/appl/oracle/product/9.2.0-64bit/dbs/orapwLEAF password=XXXXXX
    Unable to find error file.
    Error code 5
    thanks

    Try to set env variable ORACLE_HOME
    Best Regards
    Krystian Zieja / mob

  • Password file

    can you?please to give me information about password file
    or documentations ?

    Hi, please review the next links for more information about the password files.
    http://download.oracle.com/docs/cd/B19306_01/server.102/b14196/storage001.htm#sthref333
    http://download.oracle.com/docs/cd/B19306_01/server.102/b14231/dba.htm#sthref157
    http://download.oracle.com/docs/cd/B19306_01/server.102/b14231/dba.htm#sthref189
    Regards.

  • Password file - internal user

    hi all,
    when we create password file. then internal user is also created along with sys in oracle 9i. as we know that internal has been depricated since 9i.
    SQL> select * from v$pwfile_users;
    USERNAME SYSDB SYSOP
    INTERNAL TRUE TRUE
    SYS TRUE TRUE
    regards
    wire.

    Please see
    REP-0004 Warning - Unable to Open User Preference File. (Doc ID 26014.1)
    ApPsMaStI
    sharing is Caring

  • Create password file Oracle10g RAC

    Hi all,
    we have Oracle10g R1 (64 bit) running on RAC Unix. these servers (2 servers and 2 instance) are using RMAN and the logs are transfered to DR server ( only 1 server). i dun have any idea on how to create password file with this structure, originally we want to change SYS password. and how to create password file at both RAC server and DR server, make sure the logs be transmitted without problem to DR server.
    would like to the exact procedure ...any idea?
    many thanks in advance.
    Regards,
    Nonie

    to change SYS password. and how to create password
    file at both RAC server and DR server, make sure the
    logs be transmitted without problem to DR server.
    Have not you created password file on Database and DG ? use orapwd command to create password file. Well changing password on Database side, is same simple procedure, but on DR you can change password in password file , but problem is how to change password on DR database. So only option remain is refresh DR Database !!!!

  • Connecting to remote database (idle) with Password File Authentication

    Hi all,
    I was wondering if it's possible to connect to a remote database that is shut down (idle instance) as sys user with sysdba privileges? In the book Oracle - All in One on page 210 in the section - Operating System and Password File Authentication it says:
    Connection with operating system or password file authentication is always possible, no matter what state the instance and database are in, and is necessary to issue STARTUP or SHUTDOWN commands.
    Above indicates that it's possible but I'm unable to do so.
    I managed to connect to remote database that was in nomount mode (see below for details).
    When I first tried to connect to a remote database (idle instance) using password file authentication it was giving following error:
    sqlplus sys@ORCL as sysdbaSQL*Plus: Release 11.2.0.3.0 Production on Fri Dec 21 13:59:28 2012
    Copyright (c) 1982, 2011, Oracle. All rights reserved.
    Enter password:
    ERROR:
    ORA-12514: TNS:listener does not currently know of service requested in connect
    descriptor
    Enter user-name:
    After starting the database to nomount mode I was getting following error:
    sqlplus sys@ORCL as sysdbaSQL*Plus: Release 11.2.0.3.0 Production on Fri Dec 21 13:48:36 2012
    Copyright (c) 1982, 2011, Oracle. All rights reserved.
    Enter password:
    ERROR:
    ORA-12528: TNS:listener: all appropriate instances are blocking new connections
    Enter user-name:
    So I added the clause (UR=A) to my listener.ora file and after that it work and I was able to connect:
    sqlplus sys@ORCL as sysdbaSQL*Plus: Release 11.2.0.3.0 Production on Fri Dec 21 14:04:49 2012
    Copyright (c) 1982, 2011, Oracle. All rights reserved.
    Enter password:
    Connected to:
    Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    SQL>
    I have all necessairly entries in tnsnames.ora on my local host.
    Also I have no problems when connecting as sys user with sysdba when the DB is open but can't get it work on an idle instance.
    I know that I can use operating system authentication but want to know if there is a mistake in the book or I'm doing something wrong.
    Regards,
    Dawid
    Edited by: 978239 on 2012-12-21 06:24

    978239 wrote:
    Hi all,
    I was wondering if it's possible to connect to a remote database that is shut down (idle instance) as sys user with sysdba privileges? In the book Oracle - All in One on page 210 in the section - Operating System and Password File Authentication it says:
    Connection with operating system or password file authentication is always possible, no matter what state the instance and database are in, and is necessary to issue STARTUP or SHUTDOWN commands.
    Above indicates that it's possible but I'm unable to do so.
    I managed to connect to remote database that was in nomount mode (see below for details).
    When I first tried to connect to a remote database (idle instance) using password file authentication it was giving following error:
    sqlplus sys@ORCL as sysdbaSQL*Plus: Release 11.2.0.3.0 Production on Fri Dec 21 13:59:28 2012
    Copyright (c) 1982, 2011, Oracle. All rights reserved.
    Enter password:
    ERROR:
    ORA-12514: TNS:listener does not currently know of service requested in connect
    descriptorSince the database is down, the only way the listener is going to know of it is if you create a static registration by adding an entry for the db in the SID_LIST section of listener.ora
    >
    Enter user-name:
    After starting the database to nomount mode I was getting following error:
    sqlplus sys@ORCL as sysdbaSQL*Plus: Release 11.2.0.3.0 Production on Fri Dec 21 13:48:36 2012
    Copyright (c) 1982, 2011, Oracle. All rights reserved.
    Enter password:
    ERROR:
    ORA-12528: TNS:listener: all appropriate instances are blocking new connections
    Enter user-name:
    So I added the clause (UR=A) to my listener.ora file and after that it work and I was able to connect:
    sqlplus sys@ORCL as sysdbaSQL*Plus: Release 11.2.0.3.0 Production on Fri Dec 21 14:04:49 2012
    Copyright (c) 1982, 2011, Oracle. All rights reserved.
    Enter password:
    Connected to:
    Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    SQL>
    I have all necessairly entries in tnsnames.ora on my local host.
    Also I have no problems when connecting as sys user with sysdba when the DB is open but can't get it work on an idle instance.
    I know that I can use operating system authentication but want to know if there is a mistake in the book or I'm doing something wrong.
    Regards,
    Dawid
    Edited by: 978239 on 2012-12-21 06:24

  • Password file authentication confusion

    Dear experts,
    I am a beginner (I'll keep stating this till I gain some knowledge about Oracle). I have database on Linux server. Currently the sysdba is OS Authenticated, so I can just do
    SQL> conn /as sysdba
    connectedI wanted to try the password file authentication also, so I did the following:
    a) changed parameter remote_login_passwordfile to EXCLUSIVE
    b) created password file using: orapwd file=orapwPROD password=testDBA entries=5
    c) created one user pwFileDBA
    d) grant sysdba to pwFileDBA
    e) checked v$pwfile_users and found entry for pwfileDBA user
    USERNAME                       SYSDB SYSOP
    SYS                               TRUE  TRUE
    PWFILEDBA                         TRUE  TRUENow When I tried to login as:
    SQL> conn pwfileDBA/testDBA as sysdba
    connectedI am happy it worked :). Now I tried
    SQL> conn pwfileDBA/<some junk password> as sysdba
    connectedThis also worked :(
    I have no clue now, if password file authentication is enabled or not. Can anyone share if I am doing something wrong? How to test this?
    Thanks
    oraNeel.

    Hi Maxim,
    1. conn sys/testDBA@your_tns_alias as sysdba - this also says "insufficient privileges"
    2.
    -bash-3.2$ ps -ef|grep pmon
    oracledb  9410     1  0 Dec13 ?        00:00:00 ora_pmon_PROD
    oracledb 11415 11320  0 07:13 pts/1    00:00:00 grep pmon3. ls -la $ORACLE_HOME/dbs
    -bash-3.2$ ls -la
    total 14928
    drwxr-x---  2 oracledb dba     4096 Dec 13 22:27 .
    drwxr-xr-x 66 oracledb dba     4096 Oct 22 11:32 ..
    -rw-rw-r--  1 oracledb dba        0 Oct 22 11:33 PROD_oradb_ifile.ora
    -rw-rw----  1 oracledb dba     1544 Oct 20 11:34 hc_PROD.dat
    -rw-rw-r--  1 oracledb dba    19028 Oct 21 14:57 initPROD_bak.ora
    -rw-r--r--  1 oracledb dba    23584 Oct 22 11:33 initPROD_noaq.ora
    -rw-r--r--  1 oracledb dba    23576 Oct 27 13:29 initPROD.ora
    -rw-rw-r--  1 oracledb dba    19028 Oct 21 14:55 initPROD.ora.21Oct
    -rw-r--r--  1 oracledb dba    12920 May  3  2001 initdw.ora
    -rw-r-----  1 oracledb dba     8385 Sep 11  1998 init.ora
    -rw-rw----  1 oracledb dba       24 Oct 20 11:34 lkPROD
    -rw-rw----  1 oracledb dba       24 Oct 21 15:22 lkPROD
    -rw-r-----  1 oracledb dba     2048 Dec 13 22:31 orapwPROD
    -rw-------  1 oracledb dba 15122432 Dec  1 18:39 snapcf_PROD.fBest Regards,
    Neel

  • How to deal with token Windows machines with regard to file sharing

    We have an office of about 12 Macs, but we have couple of token Windows machines too.
    Each Mac user has their own username and password for logging into there machine/server, administered by a Standard setup of Mac OS X Server (Server Preferences).
    The question is what should I do with the Windows machines on the network with regard to file sharing and authentication? They don't need individual accounts; they could just have general accounts, but I don't know how to set them up with regard to the server.
    Do I simply need to make sure that the username user to log into the Windows machine is a user on in Server Preferences?

    {quote}
    Workgroup is not accessible. You might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permission. The network name cannot be found.
    Except that I've got the other machine connected with no problems.
    Message was edited by: Christiaan

Maybe you are looking for