When connecting as SYSDBA, you are more than likely using O/S authentication and therefore can use any username/password to connect to the database. You should verify the user's password or change it to something you know.
SQL> select username from dba_users
2 order by 1;
USERNAME
------------------------------
ANONYMOUS
CTXSYS
DBSNMP
HR
LBACSYS
MDSYS
ODM
ODM_MTR
OLAPSYS
ORDPLUGINS
ORDSYS
OUTLN
SCOTT
SH
SYS
SYSTEM
TEST
WKPROXY
WKSYS
WMSYS
XDB
21 rows selected.
SQL> exit
Disconnected from Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production
Now notice how TEST_USER didn't exist above, yet I can connect as that user:
C:\>sqlplus "test_user/none as sysdba"
SQL*Plus: Release 9.2.0.1.0 - Production on Sat Jan 27 13:40:58 2007
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
Connected to:
Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production
I now create user TEST_USER and grant SYSDBA & CREATE SESSION:
SQL> grant sysdba, create session to test_user identified by pass;
Grant succeeded.
SQL> exit
Disconnected from Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production
C:\>sqlplus "test_user/pass as sysdba"
SQL*Plus: Release 9.2.0.1.0 - Production on Sat Jan 27 13:43:57 2007
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
Connected to:
Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production
SQL> sho user
USER is "SYS"
SQL> exit
Disconnected from Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production
Even though I supposedly connected as TEST_USER above, notice how the user shows as SYS.
Now connecting without specifying SYSDBA:
C:\>sqlplus test_user/pass
SQL*Plus: Release 9.2.0.1.0 - Production on Sat Jan 27 13:44:33 2007
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
Connected to:
Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production
SQL> exit
Disconnected from Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production
C:\>sqlplus test_user/none
SQL*Plus: Release 9.2.0.1.0 - Production on Sat Jan 27 13:44:41 2007
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
ERROR:
ORA-01017: invalid username/password; logon denied
Enter user-name:
I used the wrong password in the last attempt and therefore received ORA-01017.