Home » RDBMS Server » Server Administration » Strange User *** (Oracle Database, 10.2.0.1, Windows 2003 Server)
Strange User *** [message #426852] Tue, 20 October 2009 01:55 Go to next message
saleh_binmasood
Messages: 30
Registered: October 2009
Member
Sir,

In our database there is a user seen with name ***. It have same privilages as the user SYS have. The objects of ***are the same as the SYS user. Even the user_id for both users are same.

The SYS user is having user_id= 0 and the user *** has the user_id= 0.

In other words user *** is the clone of SYS user.

When i am trying to operate on this user. Its giving the error
For Example:

alter user *** identified by it;

ERROR at line 1
ORA-00604 error occoured at recursive SQL level1
ORA-00001 unique constraint (SYS.I_USER1) violated



Please HELPPPPPP

Thanks
Re: Strange User *** [message #426865 is a reply to message #426852] Tue, 20 October 2009 02:38 Go to previous messageGo to next message
JRowbottom
Messages: 5933
Registered: June 2006
Location: Sunny North Yorkshire, ho...
Senior Member
When you say 'Cloned', does it have the same Created Date in Dba_Users?

You should be able to operate on this user by wrapping the username in ""
ie
alter user "***" identified by it;


I'd say that either you'e got a major security problem, or a very odd bug.
Re: Strange User *** [message #426872 is a reply to message #426852] Tue, 20 October 2009 02:57 Go to previous messageGo to next message
Michel Cadot
Messages: 63820
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Post the result of:
select * from sys.user$ where user#=0;

Regards
Michel
Re: Strange User *** [message #426884 is a reply to message #426865] Tue, 20 October 2009 03:47 Go to previous messageGo to next message
saleh_binmasood
Messages: 30
Registered: October 2009
Member
Yes JRowbottom the syntax you gave, i tried that before the same error is returned.

And the creation of the user is same as the SYS have.
Re: Strange User *** [message #426887 is a reply to message #426884] Tue, 20 October 2009 03:51 Go to previous messageGo to next message
Michel Cadot
Messages: 63820
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Post the result of the query I gave.

Regards
Michel
Re: Strange User *** [message #426892 is a reply to message #426872] Tue, 20 October 2009 04:40 Go to previous messageGo to next message
saleh_binmasood
Messages: 30
Registered: October 2009
Member
Sir,

Michel output for the query you gave is in attachment
  • Attachment: output.txt
    (Size: 0.42KB, Downloaded 150 times)
Re: Strange User *** [message #426894 is a reply to message #426892] Tue, 20 October 2009 04:44 Go to previous messageGo to next message
JRowbottom
Messages: 5933
Registered: June 2006
Location: Sunny North Yorkshire, ho...
Senior Member
Lots of people round here don't/won't read attachments.

USER#	NAME	TYPE#	PASSWORD	DATATS#	TEMPTS#	CTIME	PTIME	EXPTIME	LTIME	RESOURCE$	AUDIT$	DEFROLE	DEFGRP#	DEFGRP_SEQ#	ASTATUS	LCOUNT	DEFSCHCLASS	EXT_USERNAME	SPARE1	SPARE2	SPARE3	SPARE4	SPARE5	SPARE6

0	SYS	1	C25321863066B3B5	0	3	2005-08-30 13:50:29.0	2007-09-15 11:54:36.0			0		1			0	0	DEFAULT_CONSUMER_GROUP		0					
0	***	1	***TRIAL MODE***	0	3	2005-08-30 13:50:29.0	2007-09-15 11:54:36.0			0		1			0	0	***TRIAL MODE***		0					
Re: Strange User *** [message #426896 is a reply to message #426894] Tue, 20 October 2009 04:48 Go to previous messageGo to next message
saleh_binmasood
Messages: 30
Registered: October 2009
Member
Thanks JRowbottom. i would be more thankful if you have any solution in above regards
Re: Strange User *** [message #426897 is a reply to message #426896] Tue, 20 October 2009 04:56 Go to previous messageGo to next message
Michel Cadot
Messages: 63820
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Post the result of:
select * from v$version;


Check in alert.log and/or init.ora/spfile if there is any event set.

Regards
Michel

[Updated on: Tue, 20 October 2009 04:57]

Report message to a moderator

Re: Strange User *** [message #426907 is a reply to message #426897] Tue, 20 October 2009 05:32 Go to previous messageGo to next message
saleh_binmasood
Messages: 30
Registered: October 2009
Member
Sir,

BANNER
---------------------------

-------------------------------------
Oracle Database 10g Enterprise Edition Release

10.2.0.1.0 - Prod
PL/SQL Release 10.2.0.1.0 - Production
CORE

10.2.0.1.0 Production
TNS for 32-bit Windows: Version

10.2.0.1.0 - Production
NLSRTL Version 10.2.0.1.0 - Production


----------------------------------------------------------------
Total: 5



We didnot found any errors in alert logfile on that date
Re: Strange User *** [message #426916 is a reply to message #426896] Tue, 20 October 2009 05:51 Go to previous messageGo to next message
JRowbottom
Messages: 5933
Registered: June 2006
Location: Sunny North Yorkshire, ho...
Senior Member
Nothing leaps to mind from the information posted.

Unless it's something odd that came with your version of Oracle, I'd raise an SR with Oracle and ask them about it.
Re: Strange User *** [message #426919 is a reply to message #426916] Tue, 20 October 2009 05:57 Go to previous messageGo to next message
saleh_binmasood
Messages: 30
Registered: October 2009
Member
Even We are struck here. We could not find any thing in alertlog file. We cannot even do any thing to the ghost user ***.

Could the dropping of the user is possible?
Will the dropping effects the data?

Thanks everybody
Re: Strange User *** [message #426922 is a reply to message #426919] Tue, 20 October 2009 06:05 Go to previous messageGo to next message
JRowbottom
Messages: 5933
Registered: June 2006
Location: Sunny North Yorkshire, ho...
Senior Member
Have you installed any 3rd party software in the database?
Re: Strange User *** [message #426923 is a reply to message #426922] Tue, 20 October 2009 06:07 Go to previous messageGo to next message
saleh_binmasood
Messages: 30
Registered: October 2009
Member
There is a FrontEnd software which is from ESRI, ArcGIS. It contacts with Oracle to store the data. Mainly it stores images and tables even.
Re: Strange User *** [message #426927 is a reply to message #426923] Tue, 20 October 2009 06:20 Go to previous messageGo to next message
JRowbottom
Messages: 5933
Registered: June 2006
Location: Sunny North Yorkshire, ho...
Senior Member
Given that you're getting errors trying to alter this user, I'd talk to Oracle at this point.

I would be very, very wary of trying to drop the user.
Re: Strange User *** [message #426950 is a reply to message #426907] Tue, 20 October 2009 06:52 Go to previous messageGo to next message
Michel Cadot
Messages: 63820
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
I didn't ask for error in alert.log but for "event" parameters.

Regards
Michel

[Updated on: Tue, 20 October 2009 06:53]

Report message to a moderator

Re: Strange User *** [message #426959 is a reply to message #426950] Tue, 20 October 2009 07:12 Go to previous message
saleh_binmasood
Messages: 30
Registered: October 2009
Member
Sir Michel

We couldnot find any event in sparameter file or in alertlog file
Previous Topic: ASM on single instance DB
Next Topic: Objects displays incorrect date (merged 3)
Goto Forum:
  


Current Time: Sat Oct 01 17:52:40 CDT 2016

Total time taken to generate the page: 0.08315 seconds