system the user's actual permissions

Before a new database, by plsqldeveloper log on, use the system user, identity as SYSDBA, the result error: insufficient privileges (Permission denied). Choice but to let the user log in the implementation of sys grant sysdba to system users for the system to give sysdba privileges.

Here was the question: Is not the default system user with SYSDBA privileges it? If not, why the former often built directly after the database system can use it as sysdba login?

Must first understand that, in the Oracle database system, user privileges if you want to user (INTERNAL / SYSDBA / SYSOPER) Log Oracle have two authentication methods: the operating system authentication (OS), the password file authentication. OS authentication refers to Oracle in the registry, let the operating system to complete the logged on user permissions validation. Specifically: When installing Oracle (note not create Oracle database instance), Oracle database server where the operating system will have a user group (windows default is ORA_DBA), this group of users log on after the operating system to log on Oracle , whether he entered what user name password, can log on to sysdba success. But this time is actually a sys user login, so login to show user command after the success of the current logged in user view, the return to the sys.

Password file validation is, Oracle through a password file permissions of the logged on user to verify that this file records the sys user password and other privileges of the user's user name / password, popular to say that this file records the current with sysdba The user name and password privileges. Usually the password file is stored in the% ORACLE_HOME% \ DATABASE directory, using the Oracle Instance Manager to create a database instance when Hou, Oracle will automatically create a corresponding instance of the password file, the file name PWDSID.ORA, including representatives of SID the corresponding Oracle database system identifier. This password file is the initial basis for database management. After this, the administrator can also require the use of hand tools ORAPWD.EXE create a password file.

So where the two authentication settings do? Specific in Oracle9i is% ORACLE_HOME% \ ora92 \ network \ admin \ sqlnet.ora file, the following configuration:

SQLNET.AUTHENTICATION_SERVICES = (NONE) # This is the password file authentication.
SQLNET.AUTHENTICATION_SERVICES = (NTS) # This is OS authentication.

Having the authentication, to tell you the sys, system user privileges. sys user has dba, sysdba, sysoper other role or authority, is the highest authority oracle user, all oracle data dictionary base tables and views are stored in the sys user, the landing can only use sysdba, sysoper these two identities , can not use normal status. system users have the role of general dba privileges, can only be landed as normal, unless you give it a sysdba of system privileges or syspoer system privileges.

Back to the previous question, why a lot of time before the system user can use it as a syadba login? Because Oracle's authentication time is the OS mode. This time I log on before the changes to the sqlnet.ora file, so I can not log on the system user sysdba.
  • del.icio.us
  • StumbleUpon
  • Digg
  • TwitThis
  • Mixx
  • Technorati
  • Facebook
  • NewsVine
  • Reddit
  • Google
  • LinkedIn
  • YahooMyWeb

Related Posts of system the user's actual permissions

  • eclipse Hibernate proposals

    Error: The 'Hibernate proposals' proposal computer from the' org.hibernate.eclipse.jdt.ui 'plug-in dod not complete normally. Unable to instantiate the extension. To Avoid this message, disable the 'org.hibernate.eclipse.jdt.ui ...

  • Hibernate doubts

    Hibernate has been used recently, encountered in the implementation of inquiry A "Session is closed!" Troublesome, is as follows: org.hibernate.SessionException: Session is closed! at org.hibernate.impl.AbstractSessionImpl.errorIfClosed (Ab ...

  • Rails2.0.2 change the default DB adpter

    In Rails2.0.2 rails demo ... ... MissingSourceFile in SayController # hello no such file to load - sqlite3 RAILS_ROOT: / home / kenb / rails-projects / demo ... ... Checked config / database.yml, adpter default is set become the sqlite3. Check the ra ...

  • The company first entered the company I would like to Optimize SQL project

    I was a time not long into the company of people, but also a person to be graduated, but immediately entered the project team, involved in the development. The project is to make a China Telecom Operation System, is a big system. My so-called develop ...

  • Hibernate primary key strategy-sequence

    Today, the use of hibernate in the company encountered a troublesome problem, the use of hibernate when the primary key generation strategy set sequence, but always reported in the implementation could not get next sequence value of the error, then o ...

  • Memo hibernate problem

    hibernate using myeclipse automatically generated HBM mapping file will be schema ="***" catalog ="***" Separately are the database instance name and database name, but in fact has been stated jdbc url connection database, are the ...

  • Oracle instant clent for ruby / rails on cygwin

    Environment: XP: oracle full client, ruby, rails, gem cygwin: ruby rails, gem (the version with the XP version) Needs: for cygwin is installed under the rails platform support oci Steps: <1> download oracle instant client (10.2.0.3 Instant Client Pa

  • spring + hibernate + oracle9i to read and write CLOB

    Database-driven update classes12-9i.jar Hibernate modify the configuration of the following code <bean/> <bean Lazy-init="true"> <property name="nativeJdbcExtractor"> <ref local="nativejdbcExtractor"/>

  • Hibernate connection pool configuration

    Hibernate connection pool configuration <! - Jdbc -> <property name="connection.driver_class"> oracle.jdbc.driver.OracleDriver </ property> <property name="connection.url"> jdbc: oracle: thin: @ 10.203.14.132:15

blog comments powered by Disqus
Recent
Recent Entries
Tag Cloud
Random Entries