SYSDBA and USER password

I developed an app. with VB.NET and Oracle 9i. The database has a user name with which a user can work. I have to deploy my app. and submit entire documentation of database. There I need to mention the user name and password in case other person takes care of service later and need to re-install database, he may be able to create the schema.
In that case, how can I secure the database so that the data is not tampered. The documentation contains the user name and password needed for the app.

If you release the administrative or schema user password, the only warranty you have is to trust people who receive your application won't try to corrupt information.
You could try, if possible to add checksum to the columns, it's a mean to at least detect unauthorized data modifications.
~ Madrid.

Similar Messages

  • Confusion about 'sysdba'; random user/password logs in as 'sysdba'

    Hi everybody,
    I just installed oracle 9.2 enterprise edition. My problem is that i created a database after completing the installation and it seems that any random username/password is accepted if entered with 'as sysdba' option in sqlplus editor as well as the Enterprise Manager Console. Even if I type
    conn dseane/fdgdsg as sysdba
    it logs in successfully as sysdba.
    I want to take disable that feature. Can anybody please help me out here??
    Also, can anybody please tell me the difference between 'sysdba' and 'sysoper'?
    Thanks in advance,
    Andy x

    There is in fact a little more to it than that.
    The default authentication mechanism for SYSDBA is by OS Group, which in this case is provided by the NTS mechanism [ i.e  standard WIndows Call  ]
    If you created a bog-standard Win2K user with no group memberships then you would not be able to do this.
    It is worth reading up on why this is the case. Have a look at the Windows Platform Guides.

  • Saving a document and user password

    I tried to save a document online and when i tried to save it a box popped up saying that i needed a user password to unlock and save. Well i thought that i knew what that password was but when i typed it in it said that it was incorrect. This is my first mac computer so i have no idea what i am doing or where i could even find out what that password is?

    rvdcdancer2000 wrote:
    it is a document someone sent me and i am pretty sure that it was created using adobe and i did not download that yet onto my computer so do you think that could be why?
    Call the person who created the document and ask them the password. If they password protected the document you can not open it unless they provide the password.

  • Network User ID and User Password

    When I try to connect to the IMAC on my Windows network, I can find the IMAC but I cannot log in to it. I have tried all the Users set up on the IMAC but nothing seems to work.
    What do I need to do?

    Hello and Welcome to Apple Discussions. 
    Have a read of the instructions that iFelix provides on his web site. Last time I had to network with a Windows PC they had me up and working in a couple of minutes.
    Let us now how you get on.
    cheers
    mrtotes

  • Diffrence between "/ as sysdba" and "sys/pswrd as sysdba"

    hi..
    can anyone plss tell me the difference between...
    sqlplus "/ as sysdba" and "sys/<password>@<SID> as sysdba"
    thanks...

    user12780416 wrote:
    thanks a lot for your answers...
    but what does OS authorization and database authorization means???
    as for example...i dont think we can bounce a database using sys/password@sid.
    for that we have to use / as sysdba...
    (if am not wrong)
    thanks...when you installed Oracle in UNIX for example, you login as Oracle/passwdnix and then did the installation. so Oracle user is the owner of the oracle.
    so when you launched sqlplus / as sysdba, oracle will check whether you logged in to the O/S using Oracle/passwdnix or not.
    if you connect using sqlplus sys/pwdorcl@sid, oracle will authenticate your connection using database user that you created when you create the database after installing oracle. (remember in the OUI, they asked you to put password for SYS, SYSTEM, SYSMAN).
    and @sid need listener to be up, can be done either in the server or client side based on the entry in your tnsnames.ora.
    sqlplus / as sysdba does not require listener to be up but has to be done in the server side.
    Edited by: HGDBA on Mar 21, 2011 10:07 AM

  • Portege R500 - No response to user password

    Having just taken delivery of a new Portege R500, I was trying to make a bluetooth connection when a screen came up asking to set up both an administrator and user password. I set up the user password only, typing it in once (but was not asked to confirm it.) When I switched on the computer again there was a request for the password in the top right hand corner. But when I typed it in, nothing happens apart from the computer going off after 3 tries.
    It is the correct password but I did notice that when I was originally putting it in the series of *** only appeared with the second letter. Is there any simple solution or does it have to go back to the dealers? I have no data on it only have added programmes so far.
    Thank you for any advice.

    If there is nothing specially on the HDD I recommend you to use recovery image and make clean OS installation. After doing this there is second chance to make a Bluetooth connection.

  • Satellite A100 is locked due to the fingerprint BIOS & user password

    Hi all
    I've got my A100 at my job, with TouchChip fingerprint recognition a year ago. On the initial installation I have recorded my fingerprint from the windows interface.
    Six months ago, I had to reinstall windows XP because of a non repairable virus infection. I've installed WXP and downloaded all the drivers and additional software from Toshibas site.
    I have NOT recorded again my fingerprint, and I have NOT enabled the TouchChip software this time. My entire problem was only an annoying message at logon time that said "You haven't recorded your fingerprint yet . . ." and that was all.
    After a 2 week trip out of town ( My A100 was locked in my desk, powered OFF-no connection to mains) at the first boot, TouchChip software came back from the grave ! ! !
    "TouchChip Bios Extension" screen appeared after power on, and my finger is required to load in WXP ! ! !
    At WXP user logon dialogue the additional message "You haven't recorded your fingerprint yet . . . is still here, but I can NOT boot the machine at all, without my fingerprint. After some digging in PowerProtector suite (?) I found an option that said "Enable or Disable the use of fingerprint for BIOS System and User passwords" or something like that.
    I disable this, and the machine asks for reboot. This was the last time I saw the desktop.
    After the boot the system asks for password. BUT I HAVE NOT SET ANY SYSTEM OR USER PASSWORD!
    Is this possible?
    I've done something wrong?
    What's the solution?
    I'm locked out; I don't know why and how the BIOS is locked with a password (so I can't unlock it).
    Please somebody help.
    Regards, Georgios

    I don't know what exactly A100 notebook you have but it looks like the notebook was delivered with the preinstalled Vista OS.
    You have installed XP and the single XP drivers from the Toshiba page.
    But from my understanding the BIOS must be updated too! The Satellite A100 series supports an special XP BIOS version. If the BIOS was not updated then the notebook could run not correctly.
    I don't know if this could have a bad influence on the fingerprint but nothing is impossible!
    However, fact is that BIOS asks for the password. If you don't know this you will have to delete it on other way...and this can be done only by an authorized service provider in your country.
    Ask the technicians for the help and explain the whole story! Maybe they will remove the password for free!
    Bye and good luck

  • SYS and SYSTEM user password expired

    My 11g2 database on Redhat 5 has sys and system user password expiredSQL> select username,account_status,EXPIRY_DATE
    from dba_users where username like 'SYS%';
      2
    USERNAME                       ACCOUNT_STATUS                   EXPIRY_DA
    SYSMAN                         OPEN
    SYSTEM                         OPEN                             15-FEB-11
    SYS                            OPEN                             15-FEB-11But I can still connect the databsae with t expired password.
    Do I need worry about the expiration of these user's password? For a normal user, I connot login with expired password

    Dear user13148231,
    Here is an illustration;
    SQL> alter user sys account lock;
    User altered.
    SQL> select username, account_status, lock_date, expiry_date from dba_users where USERNAME='SYS';
    USERNAME                      ACCOUNT_STATUS                   LOCK_DATE EXPIRY_DA
    SYS                                      LOCKED                           20-AUG-10      23-FEB-09
    SQL> host sqlplus sys/password@opttest as sysdba
    SQL*Plus: Release 10.2.0.4.0 - Production on Fri Aug 20 12:25:43 2010
    Copyright (c) 1982, 2007, Oracle.  All Rights Reserved.
    Connected to:
    Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    SQL> exit
    Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    SQL> alter user sys identified by password password expire;
    User altered.
    SQL> select username, account_status, lock_date, expiry_date from dba_users where username='SYS';
    USERNAME                      ACCOUNT_STATUS                   LOCK_DATE EXPIRY_DA
    SYS                                EXPIRED & LOCKED                 20-AUG-10   20-AUG-10
    SQL> host sqlplus sys/password@opttest as sysdba
    SQL*Plus: Release 10.2.0.4.0 - Production on Fri Aug 20 12:27:02 2010
    Copyright (c) 1982, 2007, Oracle.  All Rights Reserved.
    Connected to:
    Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    SQL> exit
    Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    SQL> alter user sys identified by password account unlock;
    SQL> select username, account_status, lock_date, expiry_date from dba_users where username='SYS';
    USERNAME                       ACCOUNT_STATUS                   LOCK_DATE EXPIRY_DA
    SYS                            OPENEven if it shows expired and locked it is OK to connect to the database for the SYS user.
    SQL> alter user ogan identified by password account lock password expire;
    User altered.
    SQL> select username, account_status, lock_date, expiry_date from dba_users where username='OGAN';
    USERNAME                       ACCOUNT_STATUS                   LOCK_DATE EXPIRY_DA
    OGAN                           EXPIRED & LOCKED                 20-AUG-10 20-AUG-10
    SQL> conn ogan/password
    ERROR:
    ORA-28000: the account is locked
    Warning: You are no longer connected to ORACLE.
    SQL> conn / as sysdba
    Connected.
    SQL> alter user ogan account unlock;
    User altered.
    SQL> conn ogan/password@opttest
    ERROR:
    ORA-28001: the password has expired
    Changing password for ogan
    New password:
    Retype new password:
    Password changed
    Connected.
    SQL>Ogan

  • Forgotten Sys and System user passwords

    In the case of forgetting the Sys and the System user passwords, is there anyway of logging on with privilages to be able to change these passwords, if not, are there any other solutions?
    Thanks,
    Nick

    In order for "/ as sysdba" to work, you need to run
    the password file creation utility (orapwd).
    No, it has nothing to do with the password file. In order for "connect / as sysdba" to succeed, it is necessary to have an operating system account which is a member of the "osdba group". In Windows, this OS group is : "ORA_DBA". Any member of this group can and has privileges to connect "/ as sysdba". Again, it has nothing to do with password file.
    In Windows there is another condition for it to work :
    The file %ORACLE_HOME%\network\admin\sqlnet.ora must have the following line :
    SQLNET.AUTHENTICATION_SERVICES= (NTS)
    In Unix systems, the osdba group is configured at installation and is conventionally named "dba".

  • LiveCycle - passwords and users question

    With LiveCycle, can I assign one password to one user to track who is opening and printing the pdf on the server?  OR can I assign one password to one user if I email the pdf? Can I do this with regular Adobe Acrobat?  I am a small business and prefer the most cost effective solution. 
    How much is LiveCycle?  

    Hi,
    999496 wrote:
    I am working on some problems and would like some help.
    Here is the first problem:
    User SCOTT, who had the password TIGER, changed it to something more secure, but has since forgotten it. If possible, demonstrate what you as a DBA can do to give SCOTT access to his account.
    This is what I think will work for user SCOTT.
    SQL> conn / as sysdba
    Connected.
    SQL> alter user SCOTT identified by NewPassword;
    User altered.That's right. Not even SYS can tell what scott's password is; all you can do is change it.
    Here is the second problem.
    Other users need access to the tables belonging to IGGY. Create a role named CLERK that has SELECT privileges for tables PART, SUPPLIER, and QUOTE.
    Assign the role CLERK to user SCOTT. Connect as user SCOTT and SELECT * FROM QUOTE.
    CREATE ROLE CLERKYou need a semicolon after the CREATE ROLE command.
    GRANT SELECT, INSERT ON oe. Orders TO CLERK;
    GRANT r1 TO scott;
    GRANT SELECT ON oe.SUPPLIER TO scott;
    REVOKE SELECT ON oe. SUPPLIER FROM QUOTE.This doesn't match the requirements. Is the table owner iggy or oe? Is the new role clerk or r1?
    Usually, roles are created so that you don't need to grant privielges directly to the users. Did you mean to grant priivileges on supplier to scott, or to the role?
    If anyone has any more advice, I would greatly appreciate it.If you have the table owner grant the privileges, then if you export the schema, you can export the privileges along with the tables.
    I would like to know if there are other ways of recovering user passwords and granting priviledges SELECT priviledges to user IGGY?Do you want to grant privileges to user iggy, or user scott, or role clerk, or role r1?

  • TS3276 Cannot send mail from my iPad...."user name and or password is incorrect"......mail can be sent from my iPhone

    Why do I get the message   "Cannot send mail, the user name and or password for my email outgoing server is incorrect"?  I use the same account, etc. on my iPhone and haven't any trouble sending mail.

    If your email requires a password for the SMTP server you can set it up in the settings in the General mail setup. Some i.e Gmail require a password for SMTP.
    Otherwise you will probably get better answers in the iPad forum.
    https://discussions.apple.com/community/ipad/using_ipad

  • My 3GS will not accept my correct password and user name to start using the Cloud.  It just spins while "verifying."

    My 3GS will not accept my correct password and user name to start using the Cloud.  It just spins while "verifying." How can I make it stop so I can activate iCloud ?

    try using @me.com instead of your service address, i mean hotmail or yahoo or else, thanks.

  • Firefox has remberd a password to a website ... chessatwork and I get loged in to my main page and when I click on any link it takes me right back to my log in page, where it has it stored.... password and user name,,, whats up and how do I turn that off?

    Firefox has remberd a password to a website ... chessatwork and I get loged in to my main page and when I click on any link it takes me right back to my log in page, where it has it stored.... password and user name,,, whats up and how do I turn that off? chessatwork has ran great for me for many yrs, then one day I down loaded firefox and went to play chess on this site chessatwork.com, well the window popped up asking to remember the log in and pass word and so I said ok, and it did, but now when I click log in and I go to my main page (home) and click on any link, say to play game I return right back to log in

    See http://kb.mozillazine.org/Deleting_autocomplete_entries<br />
    Remove a saved password here: Tools > Options > Security: Passwords: "Saved Passwords" > "Show Passwords"
    You may also need to remove the cookies from that website.<br />
    * Tools > Options > Privacy > Cookies: "Show Cookies"

  • HT204053 I did not know my kids had set up an Itunes account for me with one user name and password.  then i got an i phone and set it up with a different email address and new password.  how can i get my accounts to merge so i can have all of my music on

    I did not know my kids had set up an Itunes account for me with one user name and password.  then i got an i phone and set it up with a different email address and new password.  how can i get my accounts to merge so i can have all of my music on my iphone

    Quote: "You cannot merge two or more Apple IDs into a single one. You can, however, use one Apple ID for iCloud services and another Apple ID for store purchases (including iTunes in the Cloud and iTunes Match). See “Using one Apple ID for iCloud and a different Apple ID for Store Purchases” above for details." See also Apple ID & iCloud FAQ: http://support.apple.com/kb/HT4895?viewlocale=en_US&locale=en_US
    You can set up your iCloud account on your iOS device under: "Settings > iCloud" and a other account for store purchases under "Settings > iTunes & App Stores". Unfortunately merging accounts is not possible but you could transfer all of your music manually via iTunes from your Mac or PC.

  • [SOLVED] How to get sudo and kdesu to honor my user password?

    Hi folks,
    Well, I must be missing something. I think I've tried everything listed here https://bbs.archlinux.org/viewtopic.php?id=143487 and in the referenced links, but I still have the problem of my system rejecting my password for some uses of sudo and kdesu but not others.  I've included my /etc/sudoers file below.
    My problem may be due to screwing around with users:  I started out using bruce (1000), then switched to bbraley (1001), then deleted bruce in kusers, then changed bbraley to 1000. When that created more problems without solving the original one, I switched back to 1001.  I've played with adding and removing my user from groups, including creating a sudo group, making sure I am a member of wheel group, etc. 
    What seemed to be everyone's magic fix,
    pacman -S pambase
    didn't work when I tried it successfully with my bbraley password, then later, when that began failing, using the root password. pambase reinstalls, but there is no resulting change in the behavior of sudo.
    Side question: Most of my experience is with kubuntu in which I never created a root user and never had any trouble having my user password work with sudo or kdesu. Is there a reason Archwiki beginners guide suggests assigning a separate root account and password?
    Can anyone help?
    Here's the output of
    groups
    root adm disk wheel log locate network video audio optical storage scanner power users nm-openconnect systemd-network bbraley sudo sddm
    Here's the output of
    cat /etc/group |grep `id -un`
    root:x:0:bbraley
    adm:x:4:root,daemon,bbraley
    disk:x:6:root,bbraley
    wheel:x:10:root,bbraley
    log:x:19:root,bbraley
    locate:x:21:bbraley
    network:x:90:bbraley
    video:x:91:bbraley
    audio:x:92:bbraley
    optical:x:93:bbraley
    storage:x:95:bbraley
    scanner:x:96:bbraley
    power:x:98:bbraley
    users:x:100:bbraley
    systemd-network:x:193:bbraley
    nm-openconnect:x:104:bbraley
    sddm:x:619:bbraley
    bbraley:x:500:
    sudo:*:501:bbraley
    Here's what
    ls -l /etc/sudoer
    yields:
    -r--r----- 1 root root 2948 Mar 22 07:25 /etc/sudoers
    And here's my sudoers file:
    ## Defaults specification
    ## You may wish to keep some of the following environment variables
    ## when running commands via sudo.
    ## Locale settings
    # Defaults env_keep += "LANG LANGUAGE LINGUAS LC_* _XKB_CHARSET"
    ## Run X applications through sudo; HOME is used to find the
    ## .Xauthority file. Note that other programs use HOME to find
    ## configuration files and this may lead to privilege escalation!
    # Defaults env_keep += "HOME"
    ## X11 resource path settings
    # Defaults env_keep += "XAPPLRESDIR XFILESEARCHPATH XUSERFILESEARCHPATH"
    ## Desktop path settings
    # Defaults env_keep += "QTDIR KDEDIR"
    ## Allow sudo-run commands to inherit the callers' ConsoleKit session
    # Defaults env_keep += "XDG_SESSION_COOKIE"
    ## Uncomment to enable special input methods. Care should be taken as
    ## this may allow users to subvert the command being run via sudo.
    # Defaults env_keep += "XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"
    ## Uncomment to enable logging of a command's output, except for
    ## sudoreplay and reboot. Use sudoreplay to play back logged sessions.
    # Defaults log_output
    # Defaults!/usr/bin/sudoreplay !log_output
    # Defaults!/usr/local/bin/sudoreplay !log_output
    # Defaults!REBOOT !log_output
    ## Runas alias specification
    ## User privilege specification
    root ALL=(ALL) ALL
    ## Uncomment to allow members of group wheel to execute any command
    ##%wheel ALL=(ALL) ALL
    ## Same thing without a password
    %wheel ALL=(ALL) NOPASSWD: ALL
    ## Uncomment to allow members of group sudo to execute any command
    %sudo ALL=(ALL) ALL
    bbraley ALL=(ALL) ALL
    ## Uncomment to allow any user to run sudo if they know the password
    ## of the user they are running the command as (root by default).
    Defaults targetpw # Ask for the password of the target user
    ALL ALL=(ALL) ALL # WARNING: only use this together with 'Defaults targetpw'
    ## Read drop-in files from /etc/sudoers.d
    ## (the '#' here does not indicate a comment)
    #includedir /etc/sudoers.d
    Last edited by Bruce1956 (2015-03-28 05:16:03)

    Trilby wrote:I've never used the targetpw setting, but I wouldn't be surprised if that was the problem.  With that setting, if you want to run something as root (the default use of sudo) then you'd need the root password, not the user password.  Comment out that setting, and the next line.
    I had never used it, either, but I misread some reference and thought it might help. Since you say it causes the behaviour I'm trying to eliminate, I will get rid of it, as suggested. However, the behavior preceded my addition of this line in the file, so I don't think this will correct the problem. Edit: Removing it kept the root password from being universally required (I can now edit /etc/sudoers using my user password) and returned it to requiring it sometimes (I still need the root password to use kdesu).
    As for some other distro not having a root account, that is simply impossible.  There was a root account.  If you didn't have the password for it, then that installation was severely crippled.
    Sorry, you're right. I should have said that kubuntu does not expect users to assign a password to the root account and instead expects primary users to access that account's privileges via su, sudo, or kdesu only.
    https://help.ubuntu.com/community/RootSudo
    By default, the root account password is locked in Ubuntu. This means that you cannot login as root directly or use the su command to become the root user. However, since the root account physically exists it is still possible to run programs with root-level privileges. This is where sudo comes in - it allows authorized users (normally "Administrative" users; for further information please refer to AddUsersHowto) to run certain programs as root without having to know the root password.
    Thanks for responding to my request for help. Any other ideas?
    Edit:  Here's what I keep getting that only accepts the root password, not my user password
    http://s15.postimg.org/4z0o86oln/Runasroot_KDEsu.png
    -- mod edit: read the Forum Etiquette and only post thumbnails http://wiki.archlinux.org/index.php/For … s_and_Code [jwr] --
    Last edited by Bruce1956 (2015-03-23 04:41:06)

Maybe you are looking for

  • I can't open itunes! is there a solution?

    When I tried opening itunes, the hourglass would appear for a few seconds then disappear, same with the itunes.exe in the task manager. There is no error message when I try to open itunes. My Quicktime opens, no problems. I've tried repairing, un-ins

  • Will not boot from CD ROM - MountCheck Error

    Had a system crash. Since then had problem with corrupt system on one drive. Am trying to load OX10.2 on drive. Start installation telling it to launch from disk and reverts to a SCSI drive. Hold down "S" when starting and also launches from SCSI dri

  • Can't get Bluetooth to work

    I can't seem to get bluetooth to work from the Desktop software. I can pair my laptop and my Storm and transfer my contact to the PC outside of the desktop software but when I go into the desktop software and select configure bluetooth it doesn't see

  • $500 equipment termination fee after paying $350 early termination fee?

    Hello, For some reason, my previous posting now says it is an unauthorized one and it cannot be accessed. I'm posting about a case of my girlfriend who upgraded to iPhone 5S 32G ($299.99+26.62) on December 23, 2013 with the 2-yr contract and had to c

  • Known Issues Upgrading from Apex 3.0.1 to 3.1.1

    Hi, We are in the process of upgrading to 3.1.1 from 3.0.1, are there any known issues (critical) that people can share? Have heard that there might be an issue with the Shuttle item - is this correct? Thanks. Tony.