 Some Confused Oracle Questions [message #453128] |
Tue, 27 April 2010 05:22  |
wwworafaqcom
Messages: 7
Registered: April 2010
|
Junior Member |
|
|
1. Can superusers' name be changed? ( e.g. sysman to ora_admin ) If so, will it cause system hovoc?
2. Can superusers be disabled? If so, will it cause system hovoc?
3. 'sysman' is the only most powerful user ? OR Is it one of the most powerful users? powerful means administrators/superusers
4. How many powerusers exist in Oracle? Do they have same privileges?
5. How to recover Oracle passwords when all superusers passwords are lost?
6. How to recover Oracle accounts when all superusers accounts are locked?
Thank you.
|
|
|
|
|
|
| Re: Some Confused Oracle Questions [message #453134 is a reply to message #453128] |
Tue, 27 April 2010 05:41  |
wwworafaqcom
Messages: 7
Registered: April 2010
|
Junior Member |
|
|
Thanks, Michel Cadot.
Let me clarify my questions.
4. How many DEFAULT Powerusers exist in Oracle? Do they have same privileges? (Default powerusers that have come with installation)
> I learn these are SYS, SYSMAN, SYSTEM, DBSNMP
5. How to recover Oracle passwords when all superusers passwords are lost?
My learned solution:
#sqlplus /nolog
SQL>conn / as sysdba
SQL>alter user Username identified by password;
6. How to recover Oracle accounts when all superusers accounts are locked?
Incorrect Login attempts as SYS makes Account Locked out when lockout policy is enforced? I haven't tried it out. I tried others and found account locked out. SYS can be locked out, I guess.
Can anyone try it out?
|
|
|
|
|
|
|
|
|
|
|
|
| Re: Some Confused Oracle Questions [message #453144 is a reply to message #453142] |
Tue, 27 April 2010 06:13 |
wwworafaqcom
Messages: 7
Registered: April 2010
|
Junior Member |
|
|
|
I'm not responsible for managing oracle db in my company. I'm just an app developer. So I can't touch anything other than testing connectivity/..etc from applications. I don't dare to do that. Oracle XE is free, right? I must download it and try it out.
|
|
|
|
|
|
| Re: Some Confused Oracle Questions [message #453151 is a reply to message #453149] |
Tue, 27 April 2010 06:38 |
wwworafaqcom
Messages: 7
Registered: April 2010
|
Junior Member |
|
|
Thanks, sriram Smile.
In fact I want to learn first.
Currently, believe it or not, all my time is fully engaged with application development and programming stuffs. So, I'd like to get fastest help from experts like you.
|
|
|
|
|
|
|
|
| Re: Some Confused Oracle Questions [message #453169 is a reply to message #453138] |
Tue, 27 April 2010 09:51 |
Frank
Messages: 7901
Registered: March 2000
|
Senior Member |
|
|
wwworafaqcom wrote on Tue, 27 April 2010 12:56I can't. I don't have oracle. I'm telling about my company's oracle.
That is why I told you how to get your hands on your very own test database! Why don't you install one on your local machine?
|
|
|
|
| Re: Some Confused Oracle Questions [message #453225 is a reply to message #453156] |
Tue, 27 April 2010 23:59 |
wwworafaqcom
Messages: 7
Registered: April 2010
|
Junior Member |
|
|
Quote:But when you told you "SYS can't be locked" you say "I think it can". So what is the expert opinion for you?
(By the way, you're right to not trust but in this case you have to build your own environment to test our answer.)
Regards
Michel
Hi Michael,
I've tested. Even though I locked SYS account via SYSTEM,
SQL> alter user SYS account lock;
User altered.
SQL> commit;
Commit complete.
I was able to login as sys.
SQL> connect sys as sysdba;
Enter password:
Connected.
|
|
|
|
|
|
|
|
|
|
| Re: Some Confused Oracle Questions [message #453246 is a reply to message #453225] |
Wed, 28 April 2010 01:03 |
 |
Michel Cadot
Messages: 68728
Registered: March 2007
Location: Saint-Maur, France, https...
|
Senior Member
Account Moderator |
|
|
Quote:SQL> alter user SYS account lock;
User altered.
SQL> commit;
Commit complete.
I was able to login as sys.
SQL> connect sys as sysdba;
Enter password:
Connected.
Experimentation is a good way to learn. 
You can even verify in DBA_USERS that the account is "locked":
SQL> select account_status from dba_users where username='SYS';
ACCOUNT_STATUS
--------------------------------
OPEN
1 row selected.
SQL> alter user sys account lock;
User altered.
SQL> select account_status from dba_users where username='SYS';
ACCOUNT_STATUS
--------------------------------
LOCKED
1 row selected.
But actually is not.
Remember SYS is special, SYS does not act like any other accounts. When you use SYS/SYSDBA Oracle deactivates some code path and activates others.
Regards
Michel
[Updated on: Wed, 28 April 2010 01:05] Report message to a moderator |
|
|
|
] 
Blog
Search
Help
Members
Register
Login
Home
