Re: installed users

Knowing Oracle 9.2 database creation locks some users: dbms_websearch.metalink('lock default users') included 131752.1 and 160861.1 => reading suggested 'lock outln' search, which included 234712.1 and 207959.1 (All About Security).

Have Fun :)

Rachel Carmichael wrote:

>hm, when I did the metalink search I got nothing -- what keyword did
>you use????? sometimes it's all in the creativity of the search :)
>
>We did NOT create the databases at the time of install. at least, I
>don't think they did, it was done by a hosting company and the other
>dba (this is the person who let them install and create production
>databases at 9.2.0.2 when development was at 9.2.0.1!!!!!)
>
>Okay, but does CTXSYS *really* need DBA privs? off to check the
>notes...
>
>Thanks!
>
>
>--- Chip <ocp-dba_at_earthlink.net> wrote:
>
>
>>dbms_websearch.metalink => 234712.1 160861.1 131752.1
>>
>> From 160861.1:
>>
>>MDSYS, ORDSYS, CTXSYS, and ORDPLUGINS are created to support Oracle
>>Intermedia.
>>
>>
>>Have Fun :)
>>
>>Jacques Kilchoer wrote:
>>
>>
>>
>>>ctxsys - intermedia text (the old Context text cartridge)
>>>ordsys - intermedia data types for storing of audio and video data
>>>mdsys - data types for storing of spatial data
>>>
>>>I think that in 9.0 and 9.2, by default those users are created with
>>>
>>>
>>expired and locked logins.
>>
>>
>>>
>>>
>>>
>>>
>>>>-----Original Message-----
>>>>From: Rachel Carmichael [mailto:wisernet100_at_yahoo.com]
>>>>
>>>>I've started a project to review all users in all our databases and
>>>>remove unused/unnecessary users or at the very least restrict the
>>>>privileges they have to the minimal ones they need. In several of
>>>>
>>>>
>>the
>>
>>
>>>>databases there are both ORDSYS and CTXSYS. From what I've
>>>>been able to
>>>>find out by running the above procedures, ORDSYS is for Intermedia.
>>>>
>>>>
>>I
>>
>>
>>>>could have sworn CTXSYS was the Intermedia account. So... is there
>>>>
>>>>
>>a
>>
>>
>>>>manual I've missed that tells me exactly which of these two I have
>>>>
>>>>
>>to
>>
>>
>>>>have in my databases and why?
>>>>
>>>>In addition, I know you have to install Spatial Option as part of
>>>>
>>>>
>>an
>>
>>
>>>>Oracle installation, even if you don't want to use it. Some of
>>>>
>>>>
>>these
>>
>>
>>>>databases also have the account MDSYS, some don't. All but one are
>>>>9iR2. We don't use Spatial. The two databases that have this
>>>>
>>>>
>>account
>>
>>
>>>>(8.1.7.4 and 9.2.0.2) both use Intermedia. Does that have something
>>>>
>>>>
>>to
>>
>>
>>>>do with it? I don't want to remove an account I need, but I don't
>>>>
>>>>
>>want
>>
>>
>>>>to leave ones I don't need in the databases.
>>>>
>>>>Let's not even begin to talk about the fact that just about EVERY
>>>>
>>>>
>>user
>>
>>
>>>>seems to have "unlimited tablespace" priv.
>>>>
>>>>This is not going to be pretty, easy or clean. But I will have
>>>>
>>>>
>>secure
>>
>>
>>>>databases. Except of course, every app has a configuration file in
>>>>which they hard-code the passwords. Sigh
>>>>
>>>>
>>>>
>>>>
>>
>>--
>>Please see the official ORACLE-L FAQ: http://www.orafaq.net
>>--
>>Author: Chip
>> INET: ocp-dba_at_earthlink.net
>>
>>Fat City Network Services -- 858-538-5051 http://www.fatcity.com
>>San Diego, California -- Mailing list and web hosting services
>>---------------------------------------------------------------------
>>To REMOVE yourself from this mailing list, send an E-Mail message
>>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>>the message BODY, include a line containing: UNSUB ORACLE-L
>>(or the name of mailing list you want to be removed from). You may
>>also send the HELP command for other information (like subscribing).
>>
>>
>
>
>__________________________________
>Do you Yahoo!?
>SBC Yahoo! DSL - Now only $29.95 per month!
>http://sbc.yahoo.com
>
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Chip
  INET: ocp-dba_at_earthlink.net

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).