Home » RDBMS Server » Security » how am I to know that I have logged in not as SYSDBA???
how am I to know that I have logged in not as SYSDBA??? [message #297165] Wed, 30 January 2008 07:26 Go to next message
prajjwal
Messages: 28
Registered: January 2008
Location: kolkata
Junior Member

After changing the parameter O7_DICTIONARY_ACCESSIBILITY to true, I can log in as SYS without (as sysdba) or (as sysoper)...

From sqlplus

SQL> show user
USER is "SYS"

At any later stage how am I to know that I have logged in not as SYSDBA???
Re: how am I to know that I have logged in not as SYSDBA??? [message #297168 is a reply to message #297165] Wed, 30 January 2008 07:52 Go to previous messageGo to next message
Frank Naude
Messages: 4581
Registered: April 1998
Senior Member
It's recorded in sys.v$session_connect_info:

SQL> conn sys/oracle
Connected.
SQL> SELECT DISTINCT(authentication_type) FROM v$session_connect_info WHERE sid = USERENV('SID');

AUTHENTICATION_TYPE
--------------------------
DATABASE

SQL> conn / as sysdba
Connected.
SQL> /

AUTHENTICATION_TYPE
--------------------------
INTERNAL


PS: O7_DICTIONARY_ACCESSIBILITY should be set to FALSE for better security.
Re: how am I to know that I have logged in not as SYSDBA??? [message #297170 is a reply to message #297165] Wed, 30 January 2008 07:56 Go to previous messageGo to next message
Michel Cadot
Messages: 68718
Registered: March 2007
Location: Saint-Maur, France, https...
Senior Member
Account Moderator
Quote:
After changing the parameter O7_DICTIONARY_ACCESSIBILITY to true

Never do that, this parameter MUST be set to FALSE.

Regards
Michel
Re: how am I to know that I have logged in not as SYSDBA??? [message #297173 is a reply to message #297168] Wed, 30 January 2008 07:58 Go to previous message
prajjwal
Messages: 28
Registered: January 2008
Location: kolkata
Junior Member

ohh.. thanks a lot Frank!!
Previous Topic: Descriptions of these Logins
Next Topic: Applying SSHA algorithm within Oracle
Goto Forum:
  


Current Time: Wed Dec 04 03:27:06 CST 2024