Restricted session privilege in 9i and 10g

We recently upgraded from 9.2.0.7 to 10.2.0.3. Oracle 9i allowed a user with RESTRICTED SESSION priv to connect (sqlplus user /@db) when the database was in restricted mode as it should. However, our Oracle 10g database will not allow a user with RESTRICTED SESSION privilege to log in after 'alter system enable restricted session' is executed. The DBA role does not work nor does granting the system privs CREATE SESSION and RESTRICTED SESSION directly to the user. The error I get when trying to log on is ORA-12526. Any advice on how to remedy this would be much appreciated.
what is the alternative to achieve the same in 10g other than locally?
Thanks,
Vishal

From 10g doc (Oracle® Database Administrator's Guide):
Typically, all users with the CREATE SESSION system privilege can connect to an open database. Opening a database in restricted mode allows database access only to users with both the CREATE SESSION and RESTRICTED SESSION system privilege. Only database administrators should have the RESTRICTED SESSION system privilege. Further, when the instance is in restricted mode, a database administrator cannot access the instance remotely through an Oracle Net listener, but can only access the instance locally from the machine that the instance is running on.

Similar Messages

Running Job Scheduler in Restricted Session

I want the database to be in Restricted Session while my ETL load is running via the Job Scheduler so that users will not be able to access tables during the load. When I put it in restricted session however all scheduled jobs cease to run. What user needs Restricted Session privilege? Is it DBSNMP? Is this an acceptable practice?
Thanks,
Susan

Hi Susan,
Sorry for the delay in replying, I was testing this out and talking with another developer. It turns out that you are right.
The Scheduler will not begin running any new jobs or new job chain steps while the database is in restricted mode.
This is intended behaviour and there is no workaround for this. The job coordinator will simply not start any new jobs if it sees that the database is in restricted mode.
This design choice was made a long time ago and isn't currently planned to be changed (although there have been some questions about it so it may in future).
Unfortunately you will need to find another way around this.
-Ravi

Restricted Sessions

I set the database to be in restricted session by issuing alter system enable restricted session and then tried to login with a userid that has restricted session privileges and I get ora-12526. We just upgrade from 9.2.0.6 to 10.2.0.3 and I know in 9.2.0.6 I was able to do this without any issues. Does anyone know if I need to do anything different in 10.2.0.3 to make this work?

It is an expected behavior:
lsnrctl status
Service "orcl.us.oracle.com" has 1 instance(s).
Instance "orcl", status RESTRICTED, has 1 handler(s) for this service...
Service "orclXDB.us.oracle.com" has 1 instance(s).
Instance "orcl", status RESTRICTED, has 1 handler(s) for this service...
The command completed successfully
f:\Oracle\Consulting>sqlplus system/manager@localhost:1521/orcl.us.oracle.com
SQL*Plus: Release 11.1.0.4.0 - Beta on Fri Jan 25 11:06:53 2008
Copyright (c) 1982, 2007, Oracle. All rights reserved.
ERROR:
ORA-12526: TNS:listener: all appropriate instances are in restricted modeYou should perform the connect operation directly at the host.
ORA-12526: TNS:listener: all appropriate instances are in restricted mode
Cause: Database instances supporting the service requested by the client were in restricted mode. The Listener does not allow connections to instances in restricted mode. This condition may be temporary, such as during periods when database administration is performed.
Action: Attempt the connection again. If error persists, then contact the database administrator to change the mode of the instance, if appropriate.
~ Madrid

Issues during restricted session

I have placed my database in restricted mode.
I am trying to run a few DML's with one user which has dba role assigned.
When i executed that procedure through shell scripts I got the following error.
ERROR:
ORA-12526: TNS:listener: all appropriate instances are in restricted mode
But Manually i connected to server & connected to that oracle user, i was able to execute those statements perfectly.
How to enable the user to do the same dml's through procedures?
I granted restricted session privilege to that user.

Also, there's a workaround, add "(UR=A)" to the CONNECT_DATA portion of your connect string definition. This is documented in MetaLink Doc ID 444120.1.
For Example:
DFM2 =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = 10.10.20.3)(PORT = 1521))
(CONNECT_DATA =
(UR = A)
(SERVICE_NAME = DFM.uservices.umn.edu)
Sources :http://dbaforums.org/oracle/index.php?showtopic=9500
ORA-12526: TNS:listener: all appropriate instances are in restricted mode
HTH
Girish Sharma

Privileged user cannot access restricted session

There is a bug (Doc ID 444120.1) that stops a 10g listener from accepting connections for an instance in "restricted session" mode, even though the user has the required privilege.
The solution is to put (UR=A) in the CONNECT_DATA part of the tnsnames.ora file. However, v1.5.1 of SQL Developer ignores this parameter and still won't allow connections. Can this be fixed in the next version please?
Thanks, Paul

Tablespace doesn't matter, but the owner does. You have to prefix the table with its scheme/owner (OWNER.EXPENSEREPORT), or assign a (public) synonym to it.
Have fun,
K.

Maximim Number of process and session can set in oracle 10g

my os is 32 bit windows and ram size is 10gb and i am using AWE_WINDOW_MEMORY setting and now my sga is 6 gb.what would be Maximim Number of process and session can set in oracle 10g database

mithun wrote:
my os is 32 bit windows and ram size is 10gb and i am using AWE_WINDOW_MEMORY setting and now my sga is 6 gb.what would be Maximim Number of process and session can set in oracle 10g databaseThe maximum number of sessions is controlled by your database's SESSIONS parameter. This value is most derived from the PROCESSES parameter. You cannot exceed this number of sessions unless you raise the parameter value.
If your database is configured to handle enough sessions, then Oracle can literally handle thousands of simultaneous connections, provided your database server also has enough resources to handle this number of connections. You will want to implement Oracle's Shared Server connections so that multiple connections share a pool of processes on the database server. This minimizes the resource consumption used by the connections.
Read the following document as well.
http://download.oracle.com/docs/cd/B19306_01/server.102/b14231/manproc.htm
Thanks

Create user and session privilege

Hi everyone. I connected to database as SYSTEM and created new user (Tom):
CREATE USER Tom IDENTIFIED BY Tom
Then using SQL Developer tried to connect to the database as Tom and got error, that Tom lacks CREATE SESSION privilege. How to give him it?

You need to give a certain quota to that user, or that role. For example,
ALTER USER <username> QUOTA UNLIMITED ON <tablespace_name>;
You can also specifiy a set amount in place of the unlimited keyword.
ALTER USER <username> QUOTA 500M ON <tablespace_name>;
If you create a role, then assign the privileges to that role you can group your privileges together. When you create a new user just assign the role to the user. You can then just add privileges or remove them from the role and this will take affect for all the users that have that role.

DBLINK not working in restricted session.

Hi
All,
I have just upgraded database from 9.2.0.6 to 10.2.0.3. everything was working before upgradation but after upgradation DBLINK not working in restricted sesion.
it has all the restricted session privilage. and also like after upgradation it is working without restricted session. when I put in restricted session it's not working .it was working under restricted session in 9.2.0.6.
Thanks,
Vishal

From 9.2.0.6 to 10.2.0.3 there is some difference in the privileges granted to the roles. So you need to be aware of the new features before you upgrade.
For instance, in 10g, the CONNECT role only has the CREATE SESSION privilege and has been striped off the following privileges:
CREATE CLUSTER
CREATE DATABASE LINK
CREATE SEQUENCE
ALTER SESSION
CREATE SYNONYM
CREATE TABLE
CREATE VIEW
So, if your DBLINK user had these privileges via the CONNECT role, you need to grant them the privileges again to be able to carry out any related tasks. it may not just be because of the restricted session.

Restricted session & Kill Session

Hello everybody,
1) In which case do I need enabled restricted sessions?
2)Where “ALTER SYSTEM KILL SESSION” command will be useful?
Thanks in advance

Salman Qureshi wrote:
Hi,
1) In which case do I need enabled restricted sessions?Whenever you want to perform some maintenance operations in your database and you don't want anyone to access the database except user SYS, you can enable restricted session.
2)Where “ALTER SYSTEM KILL SESSION” command will be useful?When you want to kill a session which is no longer responding or hung or doing some long running operation which is disturbing your performance or you want to stop that processing etc.
SalmanHi Salman,
I think you'll find that "restricted session mode" does not limit login ability to only the SYS user as you mention.
As an example, consider the following.
Session 1:
SQL*Plus: Release 11.2.0.3.0 Production on Tue Jan 1 22:07:03 2013
Copyright (c) 1982, 2011, Oracle. All rights reserved.
SQL> connect / as sysdba
Connected.
SQL> shutdown immediate;
Database closed.
Database dismounted.
ORACLE instance shut down.
SQL> startup restrict;
ORACLE instance started.
Total System Global Area 2137886720 bytes
Fixed Size                  2256912 bytes
Variable Size            1258295280 bytes
Database Buffers          872415232 bytes
Redo Buffers                4919296 bytes
Database mounted.
Database opened.
SQL>Session 2:
SQL*Plus: Release 11.2.0.3.0 Production on Tue Jan 1 22:07:51 2013
Copyright (c) 1982, 2011, Oracle. All rights reserved.
SQL> connect markwill
Enter password:
Connected.
SQL> select logins from v$instance;
LOGINS
RESTRICTED
1 row selected.
SQL>As you can see in Session 2 I am clearly not connecting as SYS user, yet I am capable of connecting to an instance started in restricted mode.
Rather than limiting to only user SYS it limits login ability to users with the RESTRICTED SESSION System Privilege (granted directly or via role).
Regards,
Mark

Controversy regarding "restricted session" mode

Hi,
I am preparing for OCP (DBA F1) exams and have read couple of books for that. But found the following quite controversial.
One book states that, The OSOPER and SYSOPER privilege enables you to change database access to "restricted session" mode.
While another book states that only SYSDBA privilege enables you to change database access to "restricted session" mode.
Same is the case with "alter database backup controlfile" and "alter database [begin | end] backup".
I am quite confused because of this controversy and was wondering what should I do if I encounter a question regarding this in my exams.
Please guide.
latin.

With sysoper privileges (enabled by way of OSOPER os group, or some other way) on a 9.2 system I could do 'startup restrict' but were not allowed to use alter system enable/disable restricted session commands. In fact no alter system ... command, since this would require the system privilege 'alter system'.
Sysoper authorization allows alter database backup controlfile to...
What can we learn from this? When learning the database, you should practice on it! Not only when you're feeling confused. Try a lot. If you think it is easy enough not to try it, you are probably missing something. Practice also let's you pick up goodies along the way.
Good luck with the exam! :)

Dense Rank and Object types (oracle 9i and 10g difference).

Hi all,
One of my queries in my procedure uses scalar subqueries and object types.
The code works fine in 10g but not in 9i. Both Object types and Dense_rank used below are present in both 9i and 10g.
The following is a part of a bigger query.. but this is what it comes down to when I zero in on the error.
-- In both 9i and 10g...
CREATE OR REPLACE TYPE t_audit_type as object(
   add_tms date,
   add_user_id varchar2(20),
   order member function match (t t_audit_type) return integer
Type created.
CREATE OR REPLACE TYPE BODY t_audit_type as
order member function match   (t t_audit_type) return integer is
begin
if add_tms < t.add_tms then
     return -1;
elsif add_tms > t.add_tms then
    return 1;
else
    return 0;
end if;
end;
end;
Type body created.
create table t ( x int, y date);
insert into t values(1, sysdate);
insert into t values(1, sysdate+1);
commit;In Oracle 10g..
select min(t_audit_type(x,y))
keep (dense_rank first order by x) result
from t;
RESULT(ADD_TMS, ADD_USER_ID)
T_AUDIT_TYPE('19-JAN-10', 'User2')In Oracle 9i....
9i> select min(t_audit_type(x,y))
2   keep (dense_rank first order by x) result
3   from t;
select min(t_audit_type(x,y))
ERROR at line 1:
ORA-03113: end-of-file on communication channelHave any of you seen this before..? The connection is always being terminated when I run this command.?!

Thanks Dom for your reply.
Here is the message I found in the trace file for the error.
ksedmp: internal or fatal error
ORA-07445: exception encountered: core dump [0000000100D72F84] [SIGSEGV] [Address not mapped to object] [0x000000018] [] []
Current SQL statement for this session:
select min(t_audit_type(x,y))
       keep(dense_rank first order by x)x
from tI will look in metalink and see if this has been addressed before.
Thanks...!

Materialized View - 9i and 10g

Hello,
I have some questions:
1. What are the differences in Materialized View between Oracle 9i and 10g?
2. It is said that in 9i, Materialized View does not support self join, is it true? Does 10g has this restriction?
3. It is said that in 10g, the select list cannot have subquery, is it true? Does 9i has this restriction?
Thanks,

1. Is a docs question: http://tahiti.oracle.com
2. Is a docs question: http://tahiti.oracle.com
3. Is a docs question: http://tahiti.oracle.com
Why do you find it easier to ask someone else to read the docs for you than to read them yourself?

Running Chain Job in Restricted Session

I have my normal jobs running is Restricted Session
DBMS_SCHEDULER.SET_ATTRIBUTE('job_name', 'ALLOW_RUNS_IN_RESTRICTED_MODE', TRUE);
I did the same for my chain job. The chain job starts but the first step doesn't start until out of restricted session.
I get this if I try to set_attribute on a program
ORA-27469: ALLOW_RUNS_IN_RESTRICTED_MODE is not a valid program attribute
ORA-06512: at "SYS.DBMS_ISCHED", line 4436
ORA-06512: at "SYS.DBMS_SCHEDULER", line 2925
Is there some way to run the steps of a chain in restricted session?
11gR2

Greg Here is an example I created for you. It is very close to what I am doing and I was able to duplicate the problem with it.
-- replace sch_util.send_mail()   with your own PL SQL code.
DECLARE
v_job_name VARCHAR2(32) := 'example_job';
v_chain_name VARCHAR2(32) := 'example_chain';
BEGIN
--drop chain and job
BEGIN
DBMS_SCHEDULER.DROP_CHAIN(v_chain_name,TRUE);
EXCEPTION WHEN OTHERS THEN
DBMS_OUTPUT.PUT_LINE('Error DROP_CHAIN ' || v_chain_name);
END;
BEGIN
DBMS_SCHEDULER.DROP_JOB(v_job_name, TRUE);
EXCEPTION WHEN OTHERS THEN
DBMS_OUTPUT.PUT_LINE('Error DROP_JOB ' || v_job_name);
END;
--create all the programs for chain
DECLARE
v_pl_sql VARCHAR2(4000) := 'BEGIN sch_util.send_email(''example chain step 1'', ''Hellow world 1''); END;';
v_prog_name VARCHAR2(32) := 'example_1_prog';
BEGIN
--drop program
BEGIN
   DBMS_SCHEDULER.DROP_PROGRAM(v_prog_name);
EXCEPTION WHEN OTHERS THEN
   DBMS_OUTPUT.PUT_LINE('Error DROP_PROGRAM ' || v_prog_name);
END;
--create program
DBMS_SCHEDULER.CREATE_PROGRAM (
     program_name           => v_prog_name,
     program_action         => v_pl_sql,
     program_type           => 'PLSQL_BLOCK',
     enabled                => TRUE,
     number_of_arguments    => 0,
     comments               => 'example chain step 1');
DBMS_SCHEDULER.SET_ATTRIBUTE (
     name                   => v_prog_name,
     attribute              => 'max_run_duration',
     value                  => interval '240' minute );
END;
DECLARE
v_pl_sql VARCHAR2(4000) := 'BEGIN sch_util.send_email(''example chain step 2'', ''Hello world 2''); END;';
v_prog_name VARCHAR2(32) := 'example_2_prog';
BEGIN
--drop program
BEGIN
   DBMS_SCHEDULER.DROP_PROGRAM(v_prog_name);
EXCEPTION WHEN OTHERS THEN
   DBMS_OUTPUT.PUT_LINE('Error DROP_PROGRAM ' || v_prog_name);
END;
--create program
DBMS_SCHEDULER.CREATE_PROGRAM (
     program_name           => v_prog_name,
     program_action         => v_pl_sql,
     program_type           => 'PLSQL_BLOCK',
     enabled                => TRUE,
     number_of_arguments    => 0,
     comments               => 'example chain step 1');
DBMS_SCHEDULER.SET_ATTRIBUTE (
     name                   => v_prog_name,
     attribute              => 'max_run_duration',
     value                  => interval '240' minute );
END;
-----------------------------Start Chain Definition -----------------------------------
DBMS_SCHEDULER.CREATE_CHAIN (
     chain_name            => v_chain_name,
     comments              => 'Example chain!');
--- define steps for this chain.
DBMS_SCHEDULER.DEFINE_CHAIN_STEP(v_chain_name, 'example_step1', 'example_1_prog');
DBMS_SCHEDULER.DEFINE_CHAIN_STEP(v_chain_name, 'example_step2', 'example_2_prog');
-- define corresponding rules for the chain.
DBMS_SCHEDULER.DEFINE_CHAIN_RULE(v_chain_name, 'TRUE', 'START example_step1');
DBMS_SCHEDULER.DEFINE_CHAIN_RULE(v_chain_name, 'example_step1 SUCCEEDED', 'START example_step2');
DBMS_SCHEDULER.DEFINE_CHAIN_RULE(v_chain_name, 'example_step2 COMPLETED', 'END');
-- enable the chain
DBMS_SCHEDULER.ENABLE(v_chain_name);
--- create a chain job to start the chain
DBMS_SCHEDULER.CREATE_JOB (
     job_name        => v_job_name,
     job_type        => 'CHAIN',
     job_action      => v_chain_name,
     start_date    => '6-AUG-2014 9.35.00 AM AMERICA/CHICAGO',
     enabled         => FALSE);
   DBMS_SCHEDULER.SET_ATTRIBUTE(v_job_name , 'max_run_duration' , interval '4' hour);
   DBMS_SCHEDULER.SET_ATTRIBUTE(v_job_name, 'raise_events',DBMS_SCHEDULER.JOB_FAILED);
   DBMS_SCHEDULER.SET_ATTRIBUTE(v_job_name, 'ALLOW_RUNS_IN_RESTRICTED_MODE', TRUE);
   DBMS_SCHEDULER.ENABLE(v_job_name);
END;

How to restrict AUTHENTICATED_USERS privileges

It seems by default all Portal login user has privileges to create and manage application and content area.
How can I revoke these privileges from normal login user?

How the program will recognize the users which should not send.
System cannot recognize anything unless we code.
You must be knowing who are the users to be restricted, so better create a z table with those users
and eliminate them from your receiver internal table before triggering that FM.

DMU 2.0 Disable Restricted session

I've just run a conversion from win-1252 to al32utf8 and we noticed that restricted session was not disabled after the conversion had finished. Is this is known bug? I shut the GUI down before I noticed, but there is nothing in the dmu0.log to show that this was attempted.
On dmu1.1 and 1.2 This was never an issue - the conversion would finish disable restricted session: e.g.
18.14:22:28:764;V003;T;05000 SQL text is UPDATE SYSTEM.DUM$COLUMNS DC SET DC.DCCS_ID = 0 WHERE DC.DCCS_ID > 0;
18.14:22:28:764;V002;T;05000 SQL text is ALTER SYSTEM DISABLE RESTRICTED SESSION;
18.14:22:28:811;V003;T;05000 SQL text is UPDATE system.dum$sqltext SET time_end=SYS_EXTRACT_UTC(systimestamp), sqlcode=0 WHERE step# = 560 AND obj#= 0 AND order# = 563;
18.14:22:29:061;V002;T;05000 SQL text is UPDATE system.dum$sqltext SET time_end=SYS_EXTRACT_UTC(systimestamp), sqlcode=0 WHERE step# = 560 AND obj#= 0 AND order# = 564;
18.14:22:29:452;V001;T;05000 SQL text is UPDATE system.dum$sqltext SET time_end=SYS_EXTRACT_UTC(systimestamp), sqlcode=0 WHERE step# = 560 AND obj#= 284929 AND order# = 562;
18.14:22:29:483;V000;F;45010 Thread 2, connection 2 finished converting post-conversion POST_CONVERSION, and elapsed time is 00:00:00.406.
18.14:22:29:483;V000;C;05007 About to close connection to jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=x)(PORT=1521))(CONNECT_DATA=(UR=A)(SERVICE_NAME=xxx))).
18.14:22:29:483;V000;T;05000 SQL text is SELECT USERENV('SID') FROM DUAL;
18.14:22:29:499;V000;T;05000 SQL text is SELECT s.SERIAL# from v$session s where s.sid = (SELECT USERENV('SID') FROM DUAL);
18.14:22:29:499;V000;C;05006 Connection ID is 2, session ID is 2840, serial number is 439.
18.14:22:29:514;V000;C;00001 Disconnected successfully from jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=x)(PORT=1521))(CONNECT_DATA=(UR=A)(SERVICE_NAME=xxx))).
18.14:22:29:514;V000;F;45010 Thread 3, connection 3 finished converting post-conversion POST_CONVERSION, and elapsed time is 00:00:00.156.
18.14:22:29:514;V000;C;05007 About to close connection to jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=x)(PORT=1521))(CONNECT_DATA=(UR=A)(SERVICE_NAME=xxx))).
18.14:22:29:514;V000;T;05000 SQL text is SELECT USERENV('SID') FROM DUAL;
18.14:22:29:514;V000;T;05000 SQL text is SELECT s.SERIAL# from v$session s where s.sid = (SELECT USERENV('SID') FROM DUAL);
18.14:22:29:530;V000;C;05006 Connection ID is 3, session ID is 3, serial number is 13.
18.14:22:29:546;V000;C;00001 Disconnected successfully from jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=xxx)(PORT=1521))(CONNECT_DATA=(UR=A)(xxx))).
18.14:22:29:546;V000;F;45010 Thread 1, connection 1 finished converting post-conversion POST_CONVERSION, and elapsed time is 00:00:00.781.
18.14:22:29:546;V000;C;05007 About to close connection to jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=x)(PORT=1521))(CONNECT_DATA=(UR=A)(SERVICE_NAME=xxx))).
18.14:22:29:546;V000;T;05000 SQL text is SELECT USERENV('SID') FROM DUAL;
18.14:22:29:546;V000;T;05000 SQL text is SELECT s.SERIAL# from v$session s where s.sid = (SELECT USERENV('SID') FROM DUAL);
18.14:22:29:561;V000;C;05006 Connection ID is 1, session ID is 2363, serial number is 157.
18.14:22:29:561;V000;C;00001 Disconnected successfully from jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=x)(PORT=1521))(CONNECT_DATA=(UR=A)(SERVICE_NAME=xxx))).
18.14:22:29:561;V000;I;40005 Execute Post-Conversion Tasks elapsed 00:00:47.843.
But in my 2.0 migration I had this:
23.16:39:08:919;V001;T;05000 SQL text is UPDATE SYSTEM.DUM$COLUMNS DC SET DC.DCCS_ID = 0 WHERE DC.DCCS_ID > 0;
23.16:39:08:934;V001;T;05000 SQL text is UPDATE system.dum$sqltext SET time_end=SYS_EXTRACT_UTC(systimestamp), sqlcode=0 WHERE step# = 560 AND obj#= 0 AND order# = 1;
23.16:39:08:950;V000;F;45010 Thread 1, connection 1 finished converting post-conversion OBJECT_REBUILD, and elapsed time is 00:00:00.250.
23.16:39:08:950;V000;C;05007 About to close connection to jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=x)(PORT=1521))(CONNECT_DATA=(UR=A)(SERVICE_NAME=xxx))).
23.16:39:08:950;V000;T;05000 SQL text is SELECT USERENV('SID') FROM DUAL;
23.16:39:08:966;V000;T;05000 SQL text is SELECT s.SERIAL# from v$session s where s.sid = (SELECT USERENV('SID') FROM DUAL);
23.16:39:08:966;V000;C;05006 Connection ID is 1, session ID is 682, serial number is 31.
23.16:39:08:981;V000;C;00001 Disconnected successfully from jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=x)(PORT=1521))(CONNECT_DATA=(UR=A)(SERVICE_NAME=xxx))).
23.16:39:08:981;V000;I;40005 Execute Post-Conversion Tasks elapsed 00:13:01.292.
This migrations are on two different databases at different time, but both are on the same Oracle version
> select * from v$version;
BANNER
Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
PL/SQL Release 11.2.0.3.0 - Production
CORE 11.2.0.3.0 Production
TNS for 64-bit Windows: Version 11.2.0.3.0 - Production
NLSRTL Version 11.2.0.3.0 - Production
My Log File Message Level is FINEST
Please let me know it there is any more useful diagnostic information in the log files that I can post.
Thanks,
Ben

To add to Weiran's answer: We have removed disabling the restricted session so that nobody except SYSDBA can connect to the database before it is restarted. The instance restart automatically disables the restricted session (unless you explicitly open the database in restricted session mode).
We request the instance to be restarted as precaution because it is very difficult to guarantee in such a complex system as Oracle Database that the old (stale) database character set information is not cached somewhere in SGA by some existing or future component.
Note, the instance restart in Oracle Database 12c is required for non-CDB databases only. PDB databases need to be closed and reopened. The CDB instance itself does not have to be restarted.
The documentation may not talk about it yet. We will fix it.
Thanks,
Sergiusz
Message was edited by: Sergiusz Wolicki (Oracle)

Restricted session privilege in 9i and 10g

Similar Messages

Maybe you are looking for