FAQ
Hi Gurus,
I used the following set of commands on my DB server.

C:\>sqlplus /nolog

SQL*Plus: Release 9.2.0.7.0 - Production on Tue Sep 6 15:25:27 2005

Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.

SQL> conn sys/change_on_install as sysdba
Connected.
SQL> conn sys/change_on_install123 as sysdba
Connected.
SQL> conn sys/change_on_install123456789 as sysdba
Connected.
SQL> conn sys/change_on_inasdastall123456789 as sysdba
Connected.
SQL>

I would like to know why does Oracle allow me to connect using any random
passowrd for SYS user?

We have remote_login_passwordfile=EXCLUSIVE set in the pfile.

Please help me...

--
Regards,

Deepak
Oracle DBA

--
http://www.freelists.org/webpage/oracle-l

Search Discussions

  • David Sharples at Sep 6, 2005 at 5:40 am
    because most likely you are using a privleged OS user who can log in as
    sysdba with any password - nothing to do with the password file
    Lock down the os account if you dont want people to do that
    On 9/6/05, DBA Deepak wrote:

    Hi Gurus,
    I would like to know why does Oracle allow me to connect using any random

    passowrd for SYS user?
    --
    http://www.freelists.org/webpage/oracle-l
  • Radoulov, Dimitre at Sep 6, 2005 at 5:43 am
    With "/ as sysdba" you get authenticated by the OS, no metter what user/pass you're giving:

    SQL> conn nouser/nopass as sysdba
    Connected.
    SQL> sho user
    USER is "SYS"
    SQL> select username from dba_users where username='NOUSER';

    no rows selected

    SQL>

    Regards,
    Dimitre Radoulov

    Original Message -----
    From: DBA Deepak
    To: oracle-l_at_freelists.org
    Sent: Tuesday, September 06, 2005 12:34 PM
    Subject: URGENT: Strange Problem... Please help...

    Hi Gurus,

    I used the following set of commands on my DB server.

    C:\>sqlplus /nolog

    SQL*Plus: Release 9.2.0.7.0 - Production on Tue Sep 6 15:25:27 2005

    Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.

    SQL> conn sys/change_on_install as sysdba
    Connected.
    SQL> conn sys/change_on_install123 as sysdba
    Connected.
    SQL> conn sys/change_on_install123456789 as sysdba
    Connected.
    SQL> conn sys/change_on_inasdastall123456789 as sysdba
    Connected.
    SQL>

    I would like to know why does Oracle allow me to connect using any random
    passowrd for SYS user?

    We have remote_login_passwordfile=EXCLUSIVE set in the pfile.

    Please help me...

    --
    Regards,

    Deepak
    Oracle DBA
  • Dimitar Radoulov at Sep 6, 2005 at 5:49 am
    ... and of course the OS user has to be added to the DBA(Unix)/ORA_DBA(MS)
    group.


    Dimitre
    On 9/6/05, Radoulov, Dimitre wrote:

    With "/ as sysdba" you get authenticated by the OS, no metter what
    user/pass you're giving:

    SQL> conn nouser/nopass as sysdba
    Connected.
    SQL> sho user
    USER is "SYS"
    SQL> select username from dba_users where username='NOUSER';
    no rows selected
    SQL>
    Regards,
    Dimitre Radoulov
    --
    http://www.freelists.org/webpage/oracle-l

Related Discussions

Discussion Navigation
viewthread | post
Discussion Overview
grouporacle-l @
categoriesoracle
postedSep 6, '05 at 5:36a
activeSep 6, '05 at 5:49a
posts4
users3
websiteoracle.com

People

Translate

site design / logo © 2022 Grokbase