system the user's actual permissions

Before a new database, by plsqldeveloper log on, use the system user, identity as SYSDBA, the result error: insufficient privileges (Permission denied). Choice but to let the user log in the implementation of sys grant sysdba to system users for the system to give sysdba privileges.

Here was the question: Is not the default system user with SYSDBA privileges it? If not, why the former often built directly after the database system can use it as sysdba login?

Must first understand that, in the Oracle database system, user privileges if you want to user (INTERNAL / SYSDBA / SYSOPER) Log Oracle have two authentication methods: the operating system authentication (OS), the password file authentication. OS authentication refers to Oracle in the registry, let the operating system to complete the logged on user permissions validation. Specifically: When installing Oracle (note not create Oracle database instance), Oracle database server where the operating system will have a user group (windows default is ORA_DBA), this group of users log on after the operating system to log on Oracle , whether he entered what user name password, can log on to sysdba success. But this time is actually a sys user login, so login to show user command after the success of the current logged in user view, the return to the sys.

Password file validation is, Oracle through a password file permissions of the logged on user to verify that this file records the sys user password and other privileges of the user's user name / password, popular to say that this file records the current with sysdba The user name and password privileges. Usually the password file is stored in the% ORACLE_HOME% \ DATABASE directory, using the Oracle Instance Manager to create a database instance when Hou, Oracle will automatically create a corresponding instance of the password file, the file name PWDSID.ORA, including representatives of SID the corresponding Oracle database system identifier. This password file is the initial basis for database management. After this, the administrator can also require the use of hand tools ORAPWD.EXE create a password file.

So where the two authentication settings do? Specific in Oracle9i is% ORACLE_HOME% \ ora92 \ network \ admin \ sqlnet.ora file, the following configuration:

SQLNET.AUTHENTICATION_SERVICES = (NONE) # This is the password file authentication.
SQLNET.AUTHENTICATION_SERVICES = (NTS) # This is OS authentication.

Having the authentication, to tell you the sys, system user privileges. sys user has dba, sysdba, sysoper other role or authority, is the highest authority oracle user, all oracle data dictionary base tables and views are stored in the sys user, the landing can only use sysdba, sysoper these two identities , can not use normal status. system users have the role of general dba privileges, can only be landed as normal, unless you give it a sysdba of system privileges or syspoer system privileges.

Back to the previous question, why a lot of time before the system user can use it as a syadba login? Because Oracle's authentication time is the OS mode. This time I log on before the changes to the sqlnet.ora file, so I can not log on the system user sysdba.

分类:Database 时间:2010-07-22 人气:181
分享到:
blog comments powered by Disqus

相关文章

  • Oracle's password file 2010-04-08

    Oracle's password file To the previous script, created and launched the following examples, Oracle began to call eygle.sql script, this script will be introduced separately. The initial part of this script is to require the definition of user passwor

  • Oracle password file was created. Use and maintenance 2010-05-23

    Oracle database password file storage with super user INTERNAL / SYS's password and other privileges of the user's user name / password, it is generally stored in the ORACLE_HOME \ DATABASE directory. First, create the password file: Using the Oracle

  • sqlplus "/ as sysdba" connection closed, report ora-01031: insufficient privileges solution 2011-02-24

    sqlplus "/ as sysdba" connection closed, report ora-01031: insufficient privileges solution Note that when more than one database instance, set ORACLE_SID ='', 1, check the sqlnet.ora (WINDOWS located under% ORACLE_HOME% NETWORKADMIN directory)

  • ubuntu oracle ORA-01031: insufficient privileges 2010-06-03

    1: ubuntu terminal input slqplus sytem / password as sysdba reported the following error: ORA-01031: insufficient privileges, online google to find the http://weiruan85.javaeye.com/blog/335344 The friends of the post, but felt myself clear. But still

  • The Oracle database model to a shared server mode - adjust the ORACLE memory settings - modify the maximum connection Oracle 2010-04-20

    First, the database model to a shared server mode Note: The Oracle database server the machine operation. 1 Click Start, select Programs menu from the "Database Configuration Assistant", as shown below. 2, into the "Welcome" screen, cl

  • Oracle on the password and password file 2010-09-29

    To install the Oracle user into the system: Forgot your password: 1. At the command line, type sqlplus / nolog SQL * PLUS access 2. Input: conn / as sysdba 3. Change your password: alter user sys identified by "admin" 4. Then you can use the sys

  • Oracle's password and password file 2010-09-29

    To install the Oracle user into the system: Forgot your password: 1 In the command line, enter sqlplus / nolog SQL * PLUS to enter 2 Enter: conn / as sysdba 3 to change the password: alter user sys identified by "admin" 4. Then you can use the s

  • SQL Server 2008 R2 x64 Oracle connectivity solutions 2010-12-15

    A: Environment Operating system environment: Windos Server 2008 R2 64bit Required software version: SQLSERVER 2008 64 Bit Oracle client 32-bit and Oracle client 64 Bit II: Problems With the Oracle client to connect to remote Oracle database can be, b

  • JDBC connection using a named instance of SQL Server 2000 (Named Instance) 2010-11-25

    JDBC connection using a named instance of SQL Server 2000 (Named Instance) 2006-09-11 22:09 by Bing Ge, 2561 visits, network picking, collection , editing Until recently, free to love playing with a number of gadgets, the first time more interested i

  • oracle password file name suffix can not send the log leading to Data Guard 2010-08-02

    DG remote log delivery problems, primary manual switch logs, standby does not receive the remote to send over the log. After the hand-filed, without any error messages, check the alert file: Sun Aug 1 23:18:12 2010 Errors in file /opt/app/oracle/admi

iOS 开发

Android 开发

Python 开发

JAVA 开发

开发语言

PHP 开发

Ruby 开发

搜索

前端开发

数据库

开发工具

开放平台

Javascript 开发

.NET 开发

云计算

服务器

Copyright (C) codeweblog.com, All Rights Reserved.

CodeWeblog.com 版权所有 黔ICP备15002463号-1

processed in 1.011 (s). 10 q(s)