SQLPLUS login as SYSDBA

Hi Guys,
When I try to login as SYS, oracle complains that I should connect as SYSDBA or SYSOPER. Fine. Now I enter the login user as SYSDBA and enter the password..it fails. However, if I login as user scott and password tiger, I can login. Then from the SQL prompt I do:
connect SYS/<password> as SYSDBA;
and it works. So my question is, when I use the same <password> as login prompt and user as SYSDBA or SYSOPER, why does that fail and how can I change to make that work directly without loggin in as some other user and then manually change to SYS.
Thanks

you must use a special screen
http://machine_name.domain:port/isqlplus/dba
check your sqlplus manualAre you sure?
I always do:
http://machine_name.domain:port/isqlplusdba
Note that in that case you must use htpasswd before ...

Similar Messages

Login as sysdba problem...

Hi,
I've created my own database to make tests on Oracle and directly after that I've changed the passwords for all the users (sys and system users included).
When I try to login without the sysdba role, Oracle applies the password verification fine.
The problem is when I try to login as sysdba:
$> sqlplus 'sys as sysdba'
I can enter whatever password I want and I'm connected !!!
And it's the same if first I type:
$> sqlplus /NOLOG
SQL*Plus: Release 9.2.0.1.0 - Production on Wed May 7 13:21:44 2003
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
SQL> connect sys as sysdba
Could someone help me to find where It comes from and how I do solve this security hole...
Thanks in advance
Paul

What's the OS? Are you signed on to the OS as a user in > the DBA group?I'm using a Debian 3.0 (Woody) operating system with a Linux 2.4.18 kernel
I've got only one user which is a member of the DBA group and what I experienced, It's true, was only when I was logged as this user...
Does it means that when a user is a member of the DBA group on the operating system, even if the remote_os_authent parameter is set to false, he can login with sys as sysdba as he wants trough sqlplus ?
+++++++++++++++++++++++++++++++
Original message:
Hi,
I've created my own database to make tests on Oracle and directly after that I've changed the passwords for all the users (sys and system users included).
When I try to login without the sysdba role, Oracle applies the password verification fine.
The problem is when I try to login as sysdba:
$> sqlplus 'sys as sysdba'
I can enter whatever password I want and I'm connected !!!
And it's the same if first I type:
$> sqlplus /NOLOG
SQL*Plus: Release 9.2.0.1.0 - Production on Wed May 7 13:21:44 2003
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
SQL> connect sys as sysdba
Could someone help me to find where It comes from and how I do solve this security hole...
Thanks in advance
Paul
+++++++++++++++++++++++++++++++

ORA-01031: when login as sysdba

We have Oracle 11.2 on Redhat 5.6. on the server box, I can login as sysdba by doing sqlplus / as sysdbaBut failed when I do sqlplus sys/****@cchdev as sysdba
ERROR:
ORA-01031: insufficient privileges or In sqlplus conn sys/****@cchdev as sysdba
ERROR:
ORA-01031: insufficient privilegesI suspect the password is wrong, then I changed password. But I got the same error when using new password.
I could login all three way above last time. WHat is wrong?

Here is the result od env|sort[oracle@cchORdev1 ~]$ env|sort
BI_CONFIG_DIR=/u01/app/obiee/server/Config
_=/bin/env
BI_OC4J_DIR=/u01/app/obiee/oc4j_bi
BI_RPD_DIR=/u01/app/obiee/server/Repository
CLASSPATH=/u01/app/oracle/product/11.2.0/dbhome_1/JRE:/u01/app/oracle/product/11.2.0/dbhome_1/jlib:/u01/app/oracle/product/11.2.0/dbhome_1/rdbms/jlib
CVS_RSH=ssh
G_BROKEN_FILENAMES=1
HISTSIZE=1000
HOME=/home/oracle
HOSTNAME=cchORdev1
INPUTRC=/etc/inputrc
KDEDIR=/usr
KDE_IS_PRELINKED=1
KDE_NO_IPV6=1
LANG=en_US.UTF-8
LD_LIBRARY_PATH=/u01/app/oracle/product/11.2.0/dbhome_1/lib:/lib:/usr/lib
LESSOPEN=|/usr/bin/lesspipe.sh %s
LOGNAME=oracle
LS_COLORS=no=00:fi=00:di=00;34:ln=00;36:pi=40;33:so=00;35:bd=40;33;01:cd=40;33;01:or=01;05;37;41:mi=01;05;37;41:ex=00;32:*.cmd=00;32:*.exe=00;32:*.com=00;32:*.btm=00;32:*.bat=00;32:*.sh=00;32:*.csh=00;32:*.tar=00;31:*.tgz=00;31:*.arj=00;31:*.taz=00;31:*.lzh=00;31:*.zip=00;31:*.z=00;31:*.Z=00;31:*.gz=00;31:*.bz2=00;31:*.bz=00;31:*.tz=00;31:*.rpm=00;31:*.cpio=00;31:*.jpg=00;35:*.gif=00;35:*.bmp=00;35:*.xbm=00;35:*.xpm=00;35:*.png=00;35:*.tif=00;35:
MAIL=/var/spool/mail/oracle
OBI_BASE=/u01/app/obiee/
OBI_PRESENTATION_CONFIG=/u01/app/obiee//web/config
ORA_ALERT_DIR=/var/oracle/diag/rdbms/cchdev/CCHDEV/trace
ORA_BI_HOME=/u01/app/obiee
ORACLE_BASE=/u01/app/oracle
ORACLE_HOME=/u01/app/oracle/product/11.2.0/dbhome_1
ORACLE_SID=cchdev
ORACLE_TERM=xterm
ORA_DUMP_DIR=/u05/oracle/dpdump
PATH=/u01/app/oracle/product/11.2.0/dbhome_1/bin:/sbin:/usr/sbin:/usr/kerberos/bin:/usr/local/bin:/bin:/usr/bin:/home/oracle/bin:/u01/app/oracle/product/11.2.0/dbhome_1/jdk/bin
PWD=/home/oracle
SHELL=/bin/bash
SHLVL=1
SSH_ASKPASS=/usr/libexec/openssh/gnome-ssh-askpass
SSH_CLIENT=10.2.0.54 6032 22
SSH_CONNECTION=10.2.0.54 6032 10.2.0.200 22
SSH_TTY=/dev/pts/1
TERM=xterm
TMPDIR=/tmp
TMP=/tmp
TNS_ADMIN=/u01/app/oracle/product/11.2.0/dbhome_1/network/admin
USER=oracle
[oracle@cchORdev1 ~]$Edited by: user623617 on Apr 16, 2010 12:11 PM

Unable to login as sysdba after installing ODAC and Oracle developer tools

Hi..I was able to login with
sqlplus / as sysdba and unlock scott account.
I then installed ODAC and now when i try to login as sysdba i get Insufficient privileges error.
also tried sys/password , sys/change_on_install, system/manager but no luck.
Please help.I am using a desktop and logged in as an administrator.

989994 wrote:
Hi..I was able to login with
sqlplus / as sysdba and unlock scott account.
I then installed ODAC and now when i try to login as sysdba i get Insufficient privileges error.
also tried sys/password , sys/change_on_install, system/manager but no luck.
Please help.I am using a desktop and logged in as an administrator.I think we are missing some information here. Are you trying to connect via Server Explorer?
If so, you need to choose the drop down box and set it to "SYSDBA".

SQLPlus login hangs because of "Thread 1 cannot allocate new log"

Hi to everybody!
Could you please give an advice how to overcome the following situation.
In my 10GR2 database I have destination for archive logs placed in ASM disk group. When suddenly this disk group becomes overfilled I can not login into the database even "/as sysdba" locally. The best solution is to switch log_archive_dest_1 to some other place, but as I mentioned I even can not login into the database to do this change. Another solution is to free some space in ASM disk group by deletion of some archive logs. But if I have a Standby DB and if I delete some archive logs I'll lose my Standby DB.
I will be glad to hear your real life's experience :)
Thank's in advance!

Dear Sybrand, I've used search button a lot. I'd be happier if you had pointed where the documentation has something useful for my situation. May be you meant
an alternate destination for archive logs, but as you know there is no exact upper bound for the "REOPEN" parameter. So switching can take undetermined time.
Seems to me I've made a full description of my situation.
I was not able to login to the database - this is a fact. My database is quite up to date (PSU 4) and OS environment is set correctly. So i don't believe that my case is something very uncommon.
Let me make several clarification:
1)I can not extend LUN on wich ASM disk group has been created, because this operation requires restart of the host - not an online operation.
2) I can not move archive logs from my ASM disk group to ether another one or to the file systems, because a) I can not login into the database neither through SQLPLUS nor through RMAN 2) in 10GR2 "asmcmd" doesn't have an ability to copy files ("cp")
3) Let's imagine (it can be) that connectivity with standby had been broken before my incident took place and none of the archive logs was shipped to the Standby site. This exclude an option of deleting some of archive logs through the "asmcmd" and "rm" because none of them were applied to a standby.
The only solution I used is to find some idle opened consoles in a SCREEN (linux) and use them. But this method is not quite reliable.
P.S. When I said "SQLPlus login hangs" I meant "/as sysdba", not just simple login.. It is clear that simple login will fail.

SQLPLUS login

Hello,
I have the following question:
If I log into sqlplus with:
sqlplus system/manager
the username and password are validated correctly and I can only log in if 'manager' is the correct password.
However, if I log into sqlplus with:
sqlplus 'system/wrongPasswd as sysdba'
it does not not appear to verify the password, I am logged in anyway and can perform all administrative actions (i.e. drop users etc.)
Would anyone know which setting determines this security glitch?
Thanks, ChrisBe

You (the Opearating System logged in user) have DBA group assigned so that you can login AS SYSDBA without requiring a username and/or password.
Below, even though there is no user JUNK, I can still login AS SYSDBA using that non-existant user. See that the user I actually logged in as is SYS (not JUNK).
SQL*Plus: Release 9.2.0.3.0 - Production on Fri Aug 6 08:23:16 2004
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
Enter user-name: junk/junk
ERROR:
ORA-01017: invalid username/password; logon denied
Enter user-name: junk/junk AS SYSDBA
Connected to:
Oracle9i Enterprise Edition Release 9.2.0.3.0 - Production
With the Partitioning, OLAP and Oracle Data Mining options
JServer Release 9.2.0.3.0 - Production
SQL> show user
USER is "SYS"
SQL>Below, you can see that if I do not have DBA group assigned to me for a particular database, I get insufficient privledge error instead (even though the user JUNK does not exists):
SQL*Plus: Release 9.2.0.3.0 - Production on Fri Aug 6 08:27:43 2004
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
Enter user-name: junk/junk@XXXXX
ERROR:
ORA-01017: invalid username/password; logon denied
Enter user-name: junk/junk@XXXXX AS SYSDBA
ERROR:
ORA-01031: insufficient privileges
Enter user-name:

Only able to login as sysdba?

I just installed 11g2 on Redhat 5. I logged in using sqlplus as follows:
$sqlplus sys/abcabc as sysdba
I created a user as follows:
sqlplus> create user "xyz"
profile "DEFAULT"
identified by "abcabc"
default tablespace "MYTAB"
temporary tablespace "TEMP"
account unlock;
sqlplus> grant dba to "xyz"
sqlplus> commit;
sqlplus reported user created and dba granted. No errors were repored by sqlplus.
Now when I try to login as follows:
$sqlplus xyz/abcabc
I get a login prompt again and after 3 retries, I'm kicked out.
BUT, if I login as follows:
$sqlplus xyz/abcabc as sysdba
I get logged in.
What could be the problem? I've followed the exact same procedure for creating a user many times before and it always worked. What is different this time that I need to login as sysdba?
Thanks

sb92075 wrote:
Aman.... wrote:
Not sure how it worked for you in the past but its not a good way to create usernames and passwords.
Aman....different version behave differently regarding usernames & passwordsYep, just noticed that OP is using 11.2 which has case-sensitive passwords .
Aman....

Error while login as sysdba for creating a new db

Hi DBAs,
i need to create a new database base, so trying to login as sysdba after exporting <ORACLE_SID> and <ORACLE_HOME> and getting the following error, need your help urgently.
SQL> conn / as sysdba
exec(): 0509-036 Cannot load program oracleDBDOC because of the following errors:0509-150 Dependent module /data/oracle/product/10.2.0.3/lib/libjox10.a(shr.o) could not be loaded.
0509-022 Cannot load module /data/oracle/product/10.2.0.3/lib/libjox10.a(shr.o)0509-026 System error: The file access permissions do not allow the specified action.
Regards
Asif

I am not very sure about the error but it seems to some permission related error on oracle binaries. Can you check those permissions.
Have you created pwd file for db ?
Cheers

Could not login as sysdba after changing oracle sid

I am using Oracle 10g on Windows. I am getting errors while performing cloning of database from cold backup ( just for leaning purpose).
The problem is that when i set the ORACLE_SID=ORCL, then i can get login as sysdba but when i change the ORACLE_SID=clone, i get following error:
ERROR:
ORA-12560: TNS:protocol adapter error
Also, I have created the password file using the following command:
orapwd file=D:\ORACLE\product\10.2.0\db_1\database\PWDclone.ora password=xxxx

Moazzam wrote:
I am using Oracle 10g on Windows. I am getting errors while performing cloning of database from cold backup ( just for leaning purpose).
The problem is that when i set the ORACLE_SID=ORCL, then i can get login as sysdba but when i change the ORACLE_SID=clone, i get following error:
ERROR:
ORA-12560: TNS:protocol adapter error
Also, I have created the password file using the following command:
orapwd file=D:\ORACLE\product\10.2.0\db_1\database\PWDclone.ora password=xxxxtry this,
oradim -new -sid clone -intpwd oracle
and login

Cannot sqlplus sys as sysdba from remote server :ORA-12154

Hi,
I am trying to connect from linux VM app server to the database as sys as sysdba but it returns TNS error. I verified that listener is up, the REMOTE_LOGIN_PASSWORDFILE is exclusive and there is password file.
[ORACLE@SERVER admin]$ sqlplus sys as sysdba
SQL*Plus: Release 11.2.0.1.0 Production on Fri Apr 12 21:45:08 2013
Copyright (c) 1982, 2009, Oracle. All rights reserved.
Enter password:
ERROR:
ORA-12154: TNS:could not resolve the connect identifier specified
==============================================
It works when I give the DB name
[ORACLE@SERVER admin]$ sqlplus sys@ODB2 as sysdba
SQL*Plus: Release 11.2.0.1.0 Production on Fri Apr 12 21:49:50 2013
Copyright (c) 1982, 2009, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL>
==================================================
Could anyone please help me with the issue ?
Edited by: Cherrish on Apr 12, 2013 10:53 PM

Cherrish wrote:
Hi,
I am trying to connect from linux VM app server to the database as sys as sysdba but it returns TNS error. I verified that listener is up, the REMOTE_LOGIN_PASSWORDFILE is exclusive and there is password file.
[ORACLE@SERVER admin]$ sqlplus sys as sysdba
SQL*Plus: Release 11.2.0.1.0 Production on Fri Apr 12 21:45:08 2013
Copyright (c) 1982, 2009, Oracle. All rights reserved.
Enter password:
ERROR:
ORA-12154: TNS:could not resolve the connect identifier specifiedRealize that sqlplus line above shows no @TNS_ALIAS so no SQL*Net should be used to connect.
please type EXACTLY (line for line) as shown below
env | sort
sqlplus
/ as sysdba
COPY the results from above then PASTE all back here

Login as sysdba for patch R12 problem

Hi,
I am trying to apply the patch 12.0.3 for R12.
On of the items is to run a script under a SYSDBA user, however I am not able to login as Sysdba, also not the sys user.
The scripts :
SQL> select * from v$pwfile_users;
no rows selected
Seems that my passwordfile is missing ?
Running orapwd gives me the following result :
[root@linux12 bin]# ./orapwd file=$ORACLE_HOME/dbs/orapw password=manager entries=30
Unable to find error file.
Anybody can help me ?

Yes it is ,see :
[root@linux12 ~]# echo $PATH
/oracle/VIS/apps/tech_st/10.1.3/perl/bin:/oracle/VIS/apps/tech_st/10.1.2/bin:
/oracle/VIS/apps/apps_st/appl/fnd/12.0.0/bin:/oracle/VIS/apps/apps_st/appl/ad/12.0.0/bin:
/oracle/VIS/apps/tech_st/10.1.3/appsutil/jdk/jre/bin:/oracle/VIS/apps/apps_st/comn/util/unzip/unzip/unzip-5.50::
/oracle/VIS/apps/tech_st/10.1.2/bin:/usr/bin:/usr/ccs/bin:
/usr/sbin:/oracle/VIS/apps/tech_st/10.1.3/bin:/oracle/VIS/inst/apps/VIS_linux12/ora/10.1.3/opmn/bin
:/oracle/VIS/inst/apps/VIS_linux12/ora/10.1.3/Apache/Apache/bin:/oracle/VIS/apps/tech_st/10.1.3/Apache/Apache/bin:/oracle/VIS/apps/tech_st/10.1.3/oui/bin:/oracle/VIS/apps/tech_st/10.1.3/OPatch:/oracle/VIS/apps/tech_st/10.1.3/jdk/jre/bin:/oracle/VIS/apps/tech_st/10.1.3/perl/bin:/usr/bin:/usr/ccs/bin:/usr/sbin:/usr/lib/qt-3.3/bin:/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin:/oracle/VIS/apps/tech_st/10.1.3/appsutil/jdk/bin:/root/bin
[root@linux12 ~]# path
[root@linux12 ~]#

Issue encountered when Login as sysdba role using Thin Oracle JDBC Driver

Hello all,
we are now considering to use Thin oracle JDBC driver to create database in our project, but we met one issue when we tried to connect to oracle as sysdba role using Thin driver, and it throws java.sql.SQLException: Io Exception: SO Exception was generated, I have found some tips on oracle jdbc website and it says :
How do I connect as SYSDBA or SYSOPER?
The only way to do this is to use the Properties object when connecting, rather than specifying the username and password as strings. Put the username into the "user" property, and the password into the "password" property. Then, put the mode into the "internal_logon" property. Something like the following:
Properties props = new Properties();
props.put("user", "scott");
props.put("password", "tiger");
props.put("internal_logon", "sysoper");
Connection conn = DriverManager.getConnection (url, props);
When connecting as SYSDBA or SYSOPER using the Thin driver, the RDBMS must be configured to use a password file. See "Creating and Maintaining a Password File" in the "Oracle Database Administrator's Guide".
So, i did execute orapwd command to create a password file and also set remote_login_passwordfile=execlusive in my initxxx.ora initial parameter file, however, when i tried to connect, it failed.
private static void createEmsdbDatabase(){
String url = "jdbc:oracle:thin:@localhost:1521:";
StringBuffer sqlStatement = new StringBuffer();
sqlStatement.append("create database xxx");
sqlStatement.append("maxdatafiles 254 ");
sqlStatement.append("maxinstances 8 ");
sqlStatement.append("maxlogfiles 32 ");
sqlStatement.append("character set UTF8 ");
sqlStatement.append("national character set UTF8 ");
sqlStatement.append("DATAFILE 'c:\\oracle\\xxx\\system01.dbf' SIZE 18M REUSE ");
sqlStatement.append("logfile 'c:\\oracle\\xxx\\redo01.log' SIZE 2M REUSE, ");
sqlStatement.append("'c:\\oracle\\xxx\\redo02.log' SIZE 2M REUSE, ");
sqlStatement.append("'c:\\oracle\\xxx\\redo03.log' SIZE 2M REUSE ");
try {
DriverManager.registerDriver(new OracleDriver());
Properties props = new Properties();
props.put("user", "sys");
props.put("password", "password");
props.put("database","xxx");
props.put("internal_logon", "sysdba");
Connection conn = DriverManager.getConnection(url, props);
Statement statement = conn.createStatement();
statement.executeUpdate(sqlStatement.toString());
statement.close();
conn.close();
} catch (SQLException e) {
e.printStackTrace();
But what made me puzzled a lot is if i use OCI driver, it did work great, why??? guys, anybody knows, please give me some tips, thanks in advance.
regards,
Kaixuan @ Shanghai

clarify my question in detail:
Step 1 : create password file using orapwd command
Step 2 : create database instance using oradim command
Step 3 : login using sys as sysdba to startup database, e.g startup nomount pfile='...\initxxx.ora'
Step 4 : create database.
java code showing below:
private static void createEmsdbDatabase(){
String url = "jdbc:oracle:thin:@localhost:1521:";
StringBuffer sqlStatement = new StringBuffer();
sqlStatement.append("create database xxx ");
sqlStatement.append("maxdatafiles 254 ");
sqlStatement.append("maxinstances 8 ");
sqlStatement.append("maxlogfiles 32 ");
sqlStatement.append("character set UTF8 ");
sqlStatement.append("national character set UTF8 ");
sqlStatement.append("DATAFILE 'c:\\oracle\\xxx\\system01.dbf' SIZE 18M REUSE ");
sqlStatement.append("logfile 'c:\\oracle\\xxx\\redo01.log' SIZE 2M REUSE, ");
sqlStatement.append("'c:\\oracle\\xxx\\redo02.log' SIZE 2M REUSE, ");
sqlStatement.append("'c:\\oracle\\xxx\\redo03.log' SIZE 2M REUSE ");
try {
DriverManager.registerDriver(new OracleDriver());
Properties props = new Properties();
props.put("user", "sys");
props.put("password", "password");
props.put("database","xxx");
props.put("internal_logon", "sysdba");
Connection conn = DriverManager.getConnection(url, props);
Statement statement = conn.createStatement();
statement.executeUpdate(sqlStatement.toString());
statement.close();
conn.close();
} catch (SQLException e) {
e.printStackTrace();
issue was met here, when i tried to login as sysdba using sys, and in my java code, i use Thin driver, it then thrus exception, but when OCI driver is used, it works great, i don't know why.
that is, when i use "jdbc:oracle:oci8:@" as database URL and then properties.put("database","xxx"), it works great. but, when i use "jdbc:oracle:thin:@localhost:1521:" as database URL and then properties.put("database","xxx"), it failed. hopefully, i have clarified my question clearly. thanks.

Cannot connect to sqlplus as / as sysdba

Dear Folks,
I am not able to connect to sqlplus as / as sysdba .I can see remote_os_authent=true,in the sqlnet.ora SQLNET.AUTHENTICATION_SERVICES= (NTS)
but for some reasons i am not able to connect it with / as sysdba.Kindly help me with this issue .Thanks in advance.
my enviroinment .
oracle 10.2.04 sparc 64 bit
sun solaris 10 sparc 64 bit

Prasanna.N wrote:
Dear Folks,
I am not able to connect to sqlplus as / as sysdba .I can see remote_os_authent=true,in the sqlnet.ora SQLNET.AUTHENTICATION_SERVICES= (NTS)
but for some reasons i am not able to connect it with / as sysdba.Kindly help me with this issue .Thanks in advance.
my enviroinment .
oracle 10.2.04 sparc 64 bit
sun solaris 10 sparc 64 bitAnd what error you get?!
Kamran Agayev A.
Oracle ACE
My Oracle Video Tutorials - http://kamranagayev.wordpress.com/oracle-video-tutorials/

Why does more users can login as sysdba than specified in password file

I have multiple databases using same password file which has five entries for sysdba, but i have more than five users who have sysdba right and all of them can simultaneously login as sysdba, can any one explain why

How do your users connect ? You may have any number of users connected locally as sysdba. Local connections are authenticated by OS, no password file is used.
Moreover, the five entries of password file have to be intended as DISTINCT users, but you may have a much higher number of connections.

Database Login - Can not login as sysdba

I have a userid for a database on a separate server. I can login as sysdba on the server with the database and from the OEM server. I can not login as sysdba from OEM. Is there a change that needs to be made to the password file or does there need to be password file on the OEM repository server?

What do you mean with OEM server here? Centralized gridcontrol server? That's a different concept, you connect to a specific administration user (often SYSMAN), 'sysdba' is not applicable here. Otherwise a server, which hosts a standalone DBConsole is not different from any other database server.
Werner

SQLPLUS login as SYSDBA

Similar Messages

Maybe you are looking for