Home » RDBMS Server » Security » any password works!!!
any password works!!! [message #131189] Thu, 04 August 2005 15:47 Go to next message
gisdba
Messages: 8
Registered: April 2005
Location: Houston
Junior Member
We're having a problem with passwords. Just discovered that (on prod box) ANY password works for any user as long as not left null.
Here is what I know on the issue...
remote_login_passwordfile='EXCLUSIVE'
that's about it

9i, windows box, have not found how to check if using OS authentication or password file, but I assume its OS auth because our higher-ups set the box up so that you must logon (remotely usually) as the admin of the box, admin that installed oracle, member of ORA_DBA group.
Re: any password works!!! [message #136919 is a reply to message #131189] Mon, 12 September 2005 04:58 Go to previous message
Frank Naude
Messages: 4581
Registered: April 1998
Senior Member
If you connect with AS SYSDBA or AS SYSOPER and you belong to the ORA_DBA group, you can enter any password, or no password at all. This is know and documented behaviour.

Best regards.

Frank
Previous Topic: so many users
Next Topic: Missing Roles
Goto Forum:
  


Current Time: Wed Dec 04 20:38:21 CST 2024