password on RMAN [message #631878] |
Wed, 21 January 2015 06:54 |
bvo65
Messages: 25 Registered: November 2009 Location: US
|
Junior Member |
|
|
Hello,
I have a problem to understand how the prior DBA set up the rman here. He had server called rman to backup the production daily. From rman_backup.sh script connect to target server (production) using sys/password @prod alias
"
rman catalog rman/rman@rman target sys/password123@prod_rman cmdfile /oracle/scripts/prod_sid/rman_dailybackup.sh log /oracle/script/prod_sid/rman_prodsid_daily_$today
"
now the prod_sid sys and system's password about to expired. I found out the database's sys and system passwords were different from the rman_backup.sh of rman server. If I am going to change the password of sys and system on the prod_sid db... will it affect the rman_backup.sh to connect to the prod_sid for backup? The passwords are different and I couldn't connect to the prod_sid db using the password from rman_backup.sh
Only 1 sys for each database how could he had 2 different servers? Would you please help me to understand this rman backup and can I change the sys/system password without effect the rman_backup.sh.
Thanks in advances.
BN
|
|
|
|
Re: password on RMAN [message #631881 is a reply to message #631879] |
Wed, 21 January 2015 07:44 |
bvo65
Messages: 25 Registered: November 2009 Location: US
|
Junior Member |
|
|
it is.... due to DOD STIG we need to set it expire in 180 days and need to change it. Now, I have faced to different passwords for sys. I need to know if I alter the sys' password from db, will it affect the one from rman_backup.sh script? They were different two passwords for sys here.
|
|
|
Re: password on RMAN [message #631883 is a reply to message #631881] |
Wed, 21 January 2015 08:00 |
|
Michel Cadot
Messages: 68732 Registered: March 2007 Location: Saint-Maur, France, https...
|
Senior Member Account Moderator |
|
|
Quote:it is....
And how do you do it?
SQL> alter user sys password expire;
User altered.
SQL> conn sys/XXXXX@XXX as sysdba
Connected.
***SYS*** sur la base XXX de XXXXXX
***SYS***> select account_status, expiry_date, sysdate from dba_users where username='SYS';
ACCOUNT_STATUS EXPIRY_DATE SYSDATE
-------------------------------- ------------------- -------------------
EXPIRED 21/01/2015 14:56:54 21/01/2015 14:59:40
[Updated on: Wed, 21 January 2015 08:00] Report message to a moderator
|
|
|
Re: password on RMAN [message #631885 is a reply to message #631881] |
Wed, 21 January 2015 08:12 |
gazzag
Messages: 1119 Registered: November 2010 Location: Bedwas, UK
|
Senior Member |
|
|
Personally, I would use:
export ORACLE_SID=<prod_database>
rman target / catalog rman/<rman_password>@<rman_catalog_db>
This negates the need for a running listener on the database server (it might be down) and the hard-coding of or worrying about SYS passwords. And, as you've been told, SYS does not actually expire.
HTH
-g
|
|
|
|
Re: password on RMAN [message #631890 is a reply to message #631885] |
Wed, 21 January 2015 08:35 |
bvo65
Messages: 25 Registered: November 2009 Location: US
|
Junior Member |
|
|
I am not worried about rman's password from rman server. I am worried about sys' password on production server (target)
rman catalog rman/rman@rman target sys/password123@prod_rman cmdfile
why two different passwords for sys? How did he create it? Once I alter the password for sys, will this sys' password from script affected? Beside, the sys' password from script couldn't connect on TOAD even as sysdba
BN
|
|
|
|
Re: password on RMAN [message #631892 is a reply to message #631891] |
Wed, 21 January 2015 08:41 |
bvo65
Messages: 25 Registered: November 2009 Location: US
|
Junior Member |
|
|
how to create this external password? Is ok for me to alter sys w/o update this password from rman_backup.sh right?
thanks for replying
White Swan (Bach Nga)
|
|
|
Re: password on RMAN [message #631893 is a reply to message #631890] |
Wed, 21 January 2015 08:43 |
gazzag
Messages: 1119 Registered: November 2010 Location: Bedwas, UK
|
Senior Member |
|
|
I don't understand. What do you mean that the SYS passwords are different? There is only one SYS password on a database.
|
|
|
Re: password on RMAN [message #631895 is a reply to message #631892] |
Wed, 21 January 2015 08:53 |
|
BlackSwan
Messages: 26766 Registered: January 2009 Location: SoCal
|
Senior Member |
|
|
bvo65 wrote on Wed, 21 January 2015 06:41how to create this external password? Is ok for me to alter sys w/o update this password from rman_backup.sh right?
thanks for replying
White Swan (Bach Nga)
what is SYS' password in my DB?
[oracle@localhost ~]$ sqlplus / as sysdba
SQL*Plus: Release 11.2.0.2.0 Production on Wed Jan 21 06:51:49 2015
Copyright (c) 1982, 2010, Oracle. All rights reserved.
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL> show user
USER is "SYS"
SQL> connect sys/fubar as sysdba
Connected.
SQL> show user
USER is "SYS"
SQL> connect sys/NoPassword as sysdba
Connected.
SQL> show user
USER is "SYS"
SQL> connect sys/Does_not_matter as sysdba
Connected.
SQL> show user
USER is "SYS"
SQL>
--mod update: code tags added. Please do so yourself in future.
[Updated on: Wed, 21 January 2015 08:55] by Moderator Report message to a moderator
|
|
|
|
|
Re: password on RMAN [message #631898 is a reply to message #631897] |
Wed, 21 January 2015 09:00 |
gazzag
Messages: 1119 Registered: November 2010 Location: Bedwas, UK
|
Senior Member |
|
|
You shouldn't be logging in as SYS to things like Toad and DBConsole. SYSMAN is used for DBConsole and you should create another user/schema to log into TOAD.
|
|
|
Re: password on RMAN [message #631901 is a reply to message #631898] |
Wed, 21 January 2015 09:13 |
bvo65
Messages: 25 Registered: November 2009 Location: US
|
Junior Member |
|
|
I know that but this is one thing you can test out when people gave me different password for sys/system and I saw the script has another password for sys.
never mind. I will another source how the prior dba did... the problem is, I don't have account with Oracle support yet
|
|
|
|