Re: No password prompt for "sqlplus '/ as sysdba"

On Mon, 03 Jan 2005 08:59:18 -0800, qazmlp wrote:

> Whenever the user tries to login as "sqlplus '/ as sysdba", there is
> no password prompt given and it is possible for the user to do any
> modification in the important/critical DB tables(includes Tables
> maintained by Oracle).
> This seems dangerous for the Database setup for the application.
>
> What exactly is missing in my Database configurations? Is this was
> what intended? If yes/no, could anybody provide more information?
>

Nothing is missing from the config and it works exactly as intended - becuase you configured it that way, or failed to configure it for another method.

In this case, the key is security at the OS level, and under UNIX/Linux anyone who belongs to the 'dba' group (as specified during install) should have DBA capability without an extra challenge.

There are other variants. Very well described in the Database Administrator's Guide at http://tahiti.oracle.com

lol/FGB Received on Mon Jan 03 2005 - 12:05:28 CST