There is OS authentication (through the password file mechanism and
membership of the unix dba group) and OS authentication (through the
dictionary and the OS).
The Oracle account, being a member of the dba group, always logs in
using the former mechanism.
Consequently, setting up an OPS$ORACLE account is redundant, and
turning it into a normal account doesn't work, the Oracle user will
still be able to use connect /
Also, one should lock the Oracle account from the O/S level and make
sure you can only su to it.
--
Sybrand Bakker
Senior Oracle DBA
Received on Thu Dec 15 2005 - 03:13:50 CST
