Use of password file?
good day !
i am confused and still cannot digest the need to use a password file!
can anyone provide me with links or any explaination on why we need a password file!
i need the password file so that i can setup dataguard!
thnx
You can Oralce administration guide,
Database Administrator Authentication
http://download.oracle.com/docs/cd/B19306_01/server.102/b14231/dba.htm#i1006534
Similar Messages
-
How to know whether the current database is using a password file or not?
How to know whether the current database is using a password file or not?
The remote_password_file is the parameter that determines if you can use or not a password file. The values this parameter can have are NONE, SHARED, EXCLUSIVE. It is pretty obvious, if it is set to either SHARED or EXCLUSIVE the oracle instance has enabled the access through a password file for the SYSDBA and SYSOPER roles.
~ Madrid -
How do i find the location of Oracle password file in the HDD
we giv the location of the password file while we use the orapwd command to create one.
later if we forget the location of the password file (incase it is not at the default location) then is there a way to find it or do we just create a new password file?
secondly, for oracle to use the password file we giv the remote_login_passwordfile='EXCLUSIVE' in the parameter file. wat tells oracle the location of the exact password file??
Thanks
Arvind
Edited by: iinfi on Sep 29, 2008 12:15 AMThe default location are OS dependant.
On Unix/Linus it is under $ORACLE_HOME/dbs
On Windows, it is under %ORACLE_HOME%/database
To change the default location, nothing inside database, but :
On Unix/Linux, you have to create a symbolic link for that file to the target location
On Windows, you have to change env variable (regedit) ORA_PWFILE and ORA_SID_PWFILE
So, you have to check this setting for the real password file location.
Nicolas. -
Password file issue in Oracle 10g
Hi,
While trying connecting from SQL prompt using command
SQL> CONNECT SYS/PASSWORD@CONNECT_STRING AS SYSDBA
It gives error
ORA-01031 insufficient privilege
If SQL> CONNECT SYS/PASSWORD AS SYSDBA
It works successfully??
After connecting without using connect_string.
Only one DB is running on this machine.
Then SELECT * FROM V$PWFILE_USERS;
0 ROWS RETURNED
Recreated the pwd file same issue persists. What may be the reason?
If SQL> GRANT SYSDBA TO SYS;
ERROR ORA-01994: GRANT FAILED: PASSWORD FILE MISSING OR DISABLED
Password file created using command
orapwd file=/u01/app/oracle/product/10.2.0db_1/dbs/orapwPRIMDB password=pwd entries=5
Please help me.
Thanks in advance.
Edited by: Bharat Kaushik on May 31, 2009 4:20 PMThe first command is a 'remote connection'. To be able to connect as sysdba remotely, spfile remote_login_passwordfile should be set to exclusive.
When there is no password file or the parameter is incorrect this results in ora-1031.
The second command uses O/S authentication, and doesn't use the password file at all.
O/S authentication is set up in sqlnet.ora.
SYS has always SYSDBA, by design. Granting SYSDBA to SYS is redundant.
Obviously in this directory name
/u01/app/oracle/product/10.2.0db_1/dbs/
there is a / missing and it should have been
/u01/app/oracle/product/10.2.0/db_1/dbs/
So you still have no valid passwordfile.
You could have and should have easily spotted this yourself.
Sybrand Bakker
Senior Oracle DBA
Experts: those who did read the documentation. -
Why does more users can login as sysdba than specified in password file
I have multiple databases using same password file which has five entries for sysdba, but i have more than five users who have sysdba right and all of them can simultaneously login as sysdba, can any one explain why
How do your users connect ? You may have any number of users connected locally as sysdba. Local connections are authenticated by OS, no password file is used.
Moreover, the five entries of password file have to be intended as DISTINCT users, but you may have a much higher number of connections. -
Password file users issue... RAC help please...
Hi guys,
i have a two node rac database installed on my laptop.. 11gr2.
in rac a database will be accessed by more than once instance correct....
here i have two instance myinst1 and myinst2.
here if we add a user in any one of the instances (say myinst1).. using that user account. the user can connect to either the myinst1 and myinst2.... correct....
say now i grant the user i just created with the SYSDBA and SYSOPER privileges.. (user created on myinst1).
now i can connect to both of the instance using the following syntax as a sysdba..
connect user/password@servicename as sysdba
now here comes the best part..
oracle states that once the user is given either the sysdba or sysoper it will be updated in the password file...
now as i have created the user in the myinst1 instance and granted the privileges there... the password file at the node myinst1 shows the details of the user in the V$PWFILE_USERS views. where as the other instance myinst2 V$PWFILE_USERS does nt have the user...
can any one tell me why is this happening... do i have to explictly grant the SYSDBA privilege on all the instances once if i want to grant a user with the sysdba or sysoper privilege...Surely there is more than this? I have always believed that the only valid configuration of a Password File in RAC is for a single file to be shared by all instances - by putting it on a shared file system or multipathed raw volume (like the database files), with a Unix symbolic link or init.ora SPFILE reference on each node. I have seen documentation that people have stored a database password file in ASM (SPFILE=+XYZ...) and even on NFS and CIFS.
SYSDBA and SYSOPER access uses the password file of course and it is effectively part of the database, and to me it seems reasonable to expect that an instance will only update the one Password File it knows aboutwhen SYSDBA/OPER access is added, removed or changed; so the consequences of having multiple copies for a single database may be expected to be bad. It was noted here that granting SYSDBA privilege on one node leads to inconsistency in that account's privileges across nodes. Maybe worse is that removing SYSDBA access from one node could leave SYSDBA access to other nodes/instances in place, in clusters where there are multiple local password files... this can be viewed as a very serious security defect, which one of our DBAs has demonstrated.
Now I have learned that Oracle's documentation does not actually give much advice about the configuration of Password Files for RAC; that while some people have done what I expected for years, some product guides suggest on the contrary that local copies should be created on each node; and even that Oracle may not support a single Password File on a shared device. Having Googled the web and scanned this forum quickly, I haven't found a resolution. I am stunned.
I am sure that, of all people, the RAC SIG will be able to advise on this authoritatively, so please do so. If it turns out that Oracle does not recommend or support the use of a single shared file (*),then I suggest there is a significant issue.
(*) Just to be clear, I am not refering to a SHARED password file, but to an EXCLUSIVE one that is on a shared storage volume accessed by every instance of the same RAC database. How Oracle behaves with a SHARED parameter setting may be another issue. -
Can't delete a file or folde after using admin. password.
Can't delete a file or folder after using admin. password.
Solving Trash Problems...
http://thexlab.com/faqs/trash.html -
I don't have an encrypted code, I didn't use my vault file upon starting my computer and I didn't associate it to my apple ID. I bought a refurbished macbook pro (10.7.4), and now I forgot the administrator password. how can I reset that?
A bug has been filed: https://bugzilla.mozilla.org/show_bug.cgi?id=644566 .
-
Problem setting up user ids to use the Oracle password file.
I want to set up my database users so that a password file is used for connecting to the database. I have completed these steps successfully.
BTW - DB is 11.2.0.3 on AIX power 64
1. Created the password file for the database using the orapwd command. Allowing 20 entries. Confirmed the file was created in the $ORACLE_HOME/dbs directory
2. Created a database user, sbrower
CREATE USER SBROWER IDENTIFIED BY <password> DEFAULT TABLESPACE USERS TEMPORARY TABLESPACE TEMP PROFILE DEFAULT ACCOUNT UNLOCK ;
GRANT DBA TO SBROWER;
ALTER USER SBROWER DEFAULT ROLE ALL;
GRANT UNLIMITED TABLESPACE TO SBROWER;
ALTER USER SBROWER QUOTA UNLIMITED ON USERS;
3. Connected to the database as SYS and granted sysoper to SBROWER
4. Using putty, ssh'ed into the server where the database resides.
5. Set the oracle variables (ORACLE_HOME, ORACLE_BASE, etc.) and PATH
6. Was able to connect to the database using sqlplus / as syoper
THE PROBLEM
For another user, EA_RDX_ORACLE1, I follow the same steps (2-6) bu when I execute step 6, it does not allow the connection
ERROR:
ORA-01031: insufficient privileges
but, if I use sqlplus ea_rdx_oracle1/thepassword as sysoper it works
Looking at v$pwfile_users on the database:
USERNAME SYSDBA SYSOPER SYSASM
SYS TRUE TRUE FALSE
SBROWER FALSE TRUE FALSE
EA_RDX_ORACLE1 FALSE TRUE FALSE
3 rows selected.
There is one thing that is different for the ea_rdx_oracle1 id's:
- The users who use this id, use a took called CyberVault to check out the id. The password for the id changes each time the id is checked out; however, the way the id is set up on the DB servers, us user does not have to enter the password when they log in (ssh).
I have sent an email to our unix admin asking his how the id was set up so that it can ssh into the server. It is not included in the list of users in any group in the /etc/ogroup file and it is not included in the /etc/opassword file.The OS authentication ( sqlplus / as sysdba ) does not require the password file.
The problem may be related to the OS user you are connecting to that server - it is not a member of OSDBA group ( usually DBA ). -
How can i find out how many users can login as sysdba using password file
can any one please tell me how can i find out how many users can login as sysdba using password file
please reply
asifSYS@db102 SQL> select * from v$pwfile_users;
USERNAME SYSDB SYSOP
SYS TRUE TRUE
SYS@db102 SQL> -
not able to open mail from my mac, gmail repeatedly asking for password. but using same password able to open gmail on safari
okay well they got me to take out some .plist files to see if that would help it didn't. I'm not sure what ones that they deleted for my self maybe someone here would be abel to tell you what ones to take out but didn't work the one that came close to working was this going into keychain and deleting the account(s) then reading them again.
if you are to do this please back up first with Time Machine. You can do this with a usb drive.
Okay so go back to where you had internet accounts and make sure mail is shut. click the - on the account your having problems with then quit system preferences.
Okay so then press cmd and space bar at the same time then type 'keychain access' into the search then click on 'keychain access'
once it is open go to the top of the window and put your email address that you are having problems with.
once you have put in your full email, have a look at what comes up i deleted things in the kind colome with 'internet password' and anything with under name that had smtp.gmail.com or imap.gmail.com so it would look like this, map.gmail.com - internet password.
right click and delete them. make sure not to touch any other files that dont say them things on them.
Once you have done this quit keychain access and then restart the computer, once the computer is restarted go back to system preferences and internet accounts and re-add the account.
Hope this helps. if something is not clear just ask. -
How to tune data loading time in BSO using 14 rules files ?
Hello there,
I'm using Hyperion-Essbase-Admin-Services v11.1.1.2 and the BSO Option.
In a nightly process using MAXL i load new data into one Essbase-cube.
In this nightly update process 14 account-members are updated by running 14 rules files one after another.
These rules files connect 14 times by sql-connection to the same oracle database and the same table.
I use this procedure because i cannot load 2 or more data fields using one rules file.
It takes a long time to load up 14 accounts one after other.
Now my Question: How can I minimise this data loading time ?
This is what I found on Oracle Homepage:
What's New
Oracle Essbase V.11.1.1 Release Highlights
Parallel SQL Data Loads- Supports up to 8 rules files via temporary load buffers.
In an Older Thread John said:
As it is version 11 why not use parallel sql loading, you can specify up to 8 load rules to load data in parallel.
Example:
import database AsoSamp.Sample data
connect as TBC identified by 'password'
using multiple rules_file 'rule1','rule2'
to load_buffer_block starting with buffer_id 100
on error write to "error.txt";
But this is for ASO Option only.
Can I use it in my MAXL also for BSO ?? Is there a sample ?
What else is possible to tune up nightly update time ??
Thanks in advance for every tip,
ZeljkoThanks a lot for your support. I’m just a little confused.
I will use an example to illustrate my problem a bit more clearly.
This is the basic table, in my case a view, which is queried by all 14 rules files:
column1 --- column2 --- column3 --- column4 --- ... ---column n
dim 1 --- dim 2 --- dim 3 --- data1 --- data2 --- data3 --- ... --- data 14
Region -- ID --- Product --- sales --- cogs ---- discounts --- ... --- amount
West --- D1 --- Coffee --- 11001 --- 1,322 --- 10789 --- ... --- 548
West --- D2 --- Tea10 --- 12011 --- 1,325 --- 10548 --- ... --- 589
West --- S1 --- Tea10 --- 14115 --- 1,699 --- 10145 --- ... --- 852
West --- C3 --- Tea10 --- 21053 --- 1,588 --- 10998 --- ... --- 981
East ---- S2 --- Coffee --- 15563 --- 1,458 --- 10991 --- ... --- 876
East ---- D1 --- Tea10 --- 15894 --- 1,664 --- 11615 --- ... --- 156
East ---- D3 --- Coffee --- 19689 --- 1,989 --- 15615 --- ... --- 986
East ---- C1 --- Coffee --- 18897 --- 1,988 --- 11898 --- ... --- 256
East ---- C3 --- Tea10 --- 11699 --- 1,328 --- 12156 --- ... --- 9896
Following 3 out of 14 (load-) rules files to load the data columns into the cube:
Rules File1:
dim 1 --- dim 2 --- dim 3 --- sales --- ignore --- ignore --- ... --- ignore
Rules File2:
dim 1 --- dim 2 --- dim 3 --- ignore --- cogs --- ignore --- ... --- ignore
Rules File14:
dim 1 --- dim 2 --- dim 3 --- ignore --- ignore --- ignore --- ... --- amount
Is the upper table design what GlennS mentioned as a "Data" column concept which only allows a single numeric data value ?
In this case I cant tag two or more columns as “Data fields”. I just can tag one column as “Data field”. Other data fields I have to tag as “ignore fields during data load”. Otherwise, when I validate the rules file, an Error occurs “only one field can contain the Data Field attribute”.
Or may I skip this error massage and just try to tag all 14 fields as “Data fields” and “load data” ?
Please advise.
Am I right that the other way is to reconstruct the table/view (and the rules files) like follows to load all of the data in one pass:
dim 0 --- dim 1 --- dim 2 --- dim 3 --- data
Account --- Region -- ID --- Product --- data
sales --- West --- D1 --- Coffee --- 11001
sales --- West --- D2 --- Tea10 --- 12011
sales --- West --- S1 --- Tea10 --- 14115
sales --- West --- C3 --- Tea10 --- 21053
sales --- East ---- S2 --- Coffee --- 15563
sales --- East ---- D1 --- Tea10 --- 15894
sales --- East ---- D3 --- Coffee --- 19689
sales --- East ---- C1 --- Coffee --- 18897
sales --- East ---- C3 --- Tea10 --- 11699
cogs --- West --- D1 --- Coffee --- 1,322
cogs --- West --- D2 --- Tea10 --- 1,325
cogs --- West --- S1 --- Tea10 --- 1,699
cogs --- West --- C3 --- Tea10 --- 1,588
cogs --- East ---- S2 --- Coffee --- 1,458
cogs --- East ---- D1 --- Tea10 --- 1,664
cogs --- East ---- D3 --- Coffee --- 1,989
cogs --- East ---- C1 --- Coffee --- 1,988
cogs --- East ---- C3 --- Tea10 --- 1,328
discounts --- West --- D1 --- Coffee --- 10789
discounts --- West --- D2 --- Tea10 --- 10548
discounts --- West --- S1 --- Tea10 --- 10145
discounts --- West --- C3 --- Tea10 --- 10998
discounts --- East ---- S2 --- Coffee --- 10991
discounts --- East ---- D1 --- Tea10 --- 11615
discounts --- East ---- D3 --- Coffee --- 15615
discounts --- East ---- C1 --- Coffee --- 11898
discounts --- East ---- C3 --- Tea10 --- 12156
amount --- West --- D1 --- Coffee --- 548
amount --- West --- D2 --- Tea10 --- 589
amount --- West --- S1 --- Tea10 --- 852
amount --- West --- C3 --- Tea10 --- 981
amount --- East ---- S2 --- Coffee --- 876
amount --- East ---- D1 --- Tea10 --- 156
amount --- East ---- D3 --- Coffee --- 986
amount --- East ---- C1 --- Coffee --- 256
amount --- East ---- C3 --- Tea10 --- 9896
And the third way is to adjust the essbase.cfg parameters DLTHREADSPREPARE and DLTHREADSWRITE (and DLSINGLETHREADPERSTAGE)
I just want to be sure that I understand your suggestions.
Many thanks for awesome help,
Zeljko -
Configuring password file in oracle 10g
Hi
Can anyone here guide me to the steps to be followed in configuring password file.
I am learning cloning using RMAN. For that purpose I need to configure password file at first.
I created the password file using orapwd utility.
and then made the required changes in tnsnames.ora and listener.ora files. Reloaded listener.
Set SQLNET.AUTHENTICATION_SERVICES = (NONE) in the sqlnet.ora file
Made the changes required in the initialization parameter file for the duplicate database instance.
Next, export ORACLE_SID= <DUPLICATE DATABASE NAME>
CREATE SPFILE FROM PFILE
STARTUP FORCE NOMOUNT;
rman TARGET sys/password@target-tnsname AUXILIARY sys/password@duplicate-tnsname
At this stage, I get the below error.
RMAN-00554 initialization of internal recovery manager package failed
RMAN- 04006 error from auxiliary database: ORA- 01031 : Insufficient privilegesuserark160 wrote:
rman TARGET sys/password@target-tnsname AUXILIARY sys/password@duplicate-tnsname
At this stage, I get the below error.
RMAN-00554 initialization of internal recovery manager package failed
RMAN- 04006 error from auxiliary database: ORA- 01031 : Insufficient privileges
Are the Auxiliary and Target databases on the same machine?
Can you also check the parameter Local_Listener for Auxiliary Database?
Regards,
Z.K. -
Hi, I'm traying to start up a database in sqlplus on SuSE 8.2 and Ora9.2, I have the next error:
SQL> conn / as sysdba
Connected to an idle instance.
SQL> startup pfile=/opt/ora9/admin/pavilion/pfile/initmydb.ora
ORACLE instance started.
Total System Global Area 101781824 bytes
Fixed Size 450880 bytes
Variable Size 83886080 bytes
Database Buffers 16777216 bytes
Redo Buffers 667648 bytes
ORA-01990: error opening password file '/opt/ora9/product/9.2/dbs/orapw'
ORA-27037: unable to obtain file status
Linux Error: 2: No such file or directory
Additional information: 3
My password file is /opt/ora9/product/9.2/dbs/orapwmydb
How can I use my orapwmydb file?Hi Marco,
as far as I know, you have to use the REMOTE_LOGIN_PASSWORDFILE = SHARED option in your init...ora file.
In this case you have one password file for one or more databases. It can only have the entries for SYS and INTERAL.
I'm sorry to cannot answer your question of having different password files for different databases %-)
Klaus -
Ora-01990 error in opening the password file
Hi,
I created a password file by using orapwd utility. Then later on I modified the remote_login_passwordfile in the spfile by giving the command:
sql> alter system set remote_login_passwordfile=exclusive
scope=spfile.
Then it is altered. Later on I shutdown the database and When I was trying to connect to the databse again, I am getting the following errors.
ORA-01990 error openeing the passowrd file.
ORA-27037 unable to obtain file status
linux error:2 no such file or directory.
Thanks in advance.Hi,
I tried that also.It is giving ora-32001 write to spfile requested but no spfile specified at startup.
First Manually I deleted the password file and I set the remote_login_passwordfile=none in the parameter file and again I started the instance just by giving
sql>startup open pfile='OraHome1/dbs/initRADHI.ora'
then I tried to modify the the Remote_Login_PASSWORDFILE thru alter system set command.then it is giving the above error. then I again shutdown the DB and again I started without specifying the parameter file or spfile just saying sql>startup. Then also it is not taking the SPFILE to startup. why is so? Then also same error I am getting?
ora-32001 write to spfile requested but no spfile at startup. can anyone of you help me.
Thanks,
Have a nice day.
Maybe you are looking for
-
I'm tring to setup my HP laserjet Pro 200 Color Mfp M276nw to Scan to fax. I'm being promted to give the SMTP user id and password. I'm usin mac os 10.7.5 Can anyone help me out with this issue? I called yahoo twice. They never return calls as prom
-
How can I add a song that's playing to a play list easily
How can I add a song to a playlist whilst the song is playing? I was sown in a store have forgotten.
-
Create stored procedure with table from another schema throws PLS-00201
Oracle 10g. I'm new to procedures, so maybe I'm missing something obvious. Schema owner ABC has table T2001_WRITEOFF. The SYSDBAs granted SIUD to Some_Update_Role, and granted that role to developer user IJK. User IJK then created a private synonym T
-
How to retrieve the email id of the creatpr of a PO
-
I updated iTunes to the latest version and then I started getting this plus: iTunes was not installed correctly. Please reinstall. Error 7 (Windows error 127). I tried reinstalling twice but I still get it, please help.