Re: remote / as sysdba

Bill,

You can't do that. If you try to, you will eventually see ORA-1997

12:18:58 rsysdevdb.radisys.com - sys_at_dv03 SQL> grant sysdba to ops$jkstill;
grant sysdba to ops$jkstill
*
ERROR at line 1:
ORA-01997: GRANT failed: user 'OPS$JKSTILL' is identified externally

12:19:07 rsysdevdb.radisys.com - sys_at_dv03 SQL>

You can create a remote user that can logon as sysdba remotely, but that user must have a password.

See MetaLink Doc # 185703.1

Jared

becker.bill_at_marshfieldclinic.org
Sent by: root_at_fatcity.com
 03/06/2003 11:08 AM
 Please respond to ORACLE-L  

        To:     Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
        cc: 
        Subject:        remote / as sysdba

Hello,

env: Oracle 9.2.0.2 on Solaris 9.

Does anyone know of a way to use the "/ as sysdba" logon remotely?
(to a separate Oracle instance on a separate machine)

Other remote user logons work OK.

I have tried several variations from sqlplus, such as

BECKERB_at_DWS>connect /@DWQ as sysdba
ERROR:
ORA-01031: insufficient privileges

Warning: You are no longer connected to ORACLE.

BECKERB_at_DWS>connect sys/sys_password_at_DWQ as sysdba ERROR:
ORA-01017: invalid username/password; logon denied

BECKERB_at_DWS>connect sys/exr_sys as sysdba_at_DWQ SP2-0306: Invalid option.
Usage: CONN[ECT] [logon] [AS {SYSDBA|SYSOPER}] where <logon> ::= <username>[/<password>][@<connect_string>] | /

BECKERB_at_DWS>connect sys/sys_password_at_DWQ ERROR:
ORA-28009: connection to sys should be as sysdba or sysoper

I also find I cannot even "connect sys/syspassword" locally:

BECKERB_at_DWS>connect sys/sys_password
ERROR:
ORA-28009: connection to sys should be as sysdba or sysoper

This does work locally, but not remotely:

BECKERB_at_DWS>connect sys/sys_password as sysdba Connected.

I am a member of the dba group on both platforms.

I have verified that I am using the correct sys_password for sys on the remote instance.

Eventually, I want to do a remote transportable tablespace import, where the userid would be listed in a parfile; I have tried the same logons in a parfile, and that also fails.

I found a Metalink doc that says the O7_DICTIONARY_ACCESSIBILITY (sp?) must be true to do this, but the same doc strongly advises against setting this to true.

So, has anyone found a way to use the "/ as sysdba" logon remotely?
(without setting the O7 parameter to true)

Thanks to any responders.

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: 
  INET: becker.bill_at_marshfieldclinic.org

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L


(or the name of mailing list you want to be removed from).  You may

also send the HELP command for other information (like subscribing).




-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: 
  INET: Jared.Still_at_radisys.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L


(or the name of mailing list you want to be removed from).  You may

also send the HELP command for other information (like subscribing).