Re: Question re connecting as sysdba

Since you're not providing a connection alias (connect user/password_at_alias as sysdba), I assume you're doing this in the box where the database resides. Perhaps you're logged into Solaris as oracle? If so, you are a member of the dba group, and can type

connect santa/clause as sysdba
and get in just as easily.

Why? Because Oracle is looking at the _connect_, _sysdba_, the dba group membership and nothing more.

Try logging in as the user from a client box or logged into the box as a non-dba group user.
----- Original Message -----
From: Bill Wagman <wjwagman_at_ucdavis.edu> To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com> Sent: Monday, November 20, 2000 7:00 PM
Subject: Question re connecting as sysdba

> Hello,
>
> I believe I am missing something quite basic here. Using Oracle server
> enterprise edition v8.1.6.2.0 on Solaris 7 a user has been granted the
> following...
>
> connect
> resource
> create public synonym
> drop public synonym
> unlimited tablespace
>
> In sql*plus I do the following...
>
> connect user/password as sysdba
>
> and I am sucessfully connected. Now I can shut down the database. How do I
> prevent this non-dba user from connecting as sysdba?
>
> Thanks.
>
> Bill Wagman
> Univ. of California at Davis
> Information Resources
> wjwagman_at_ucdavis.edu
> (530) 754-6208
>
> -----------------------------------------------------------------------------
> I like to pick up hitchhikers. When they get in the car I say, 'Put on your
> seat belt. I want to try something. I saw it once in a cartoon, but I think
> I can do it.'
> - Steven Wright
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Bill Wagman
> INET: wjwagman_at_ucdavis.edu
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
Received on Tue Nov 21 2000 - 14:42:55 CST