Re: Locking the SYS account.

No, you can "LOCK" the SYS account with the command "ALTER USER SYS ACCOUNT LOCK ;".
Query DBA_USERS after that and you will see SYS as "LOCKED"

However, that does not prevent SYSDBA connections. So Startup/Shutdown is possible
and anyone with the correct privileges [ie member of the "dba" group or granted SYSDBA
through the passwd file] can still connect "AS SYSDBA".

Hemant

At 04:46 PM Wednesday, Norman Dunbar wrote:

>Morning Denham,
>
><snip>
>
> >> What if any are the implications of locking the SYS account?
>
>I would imagine, if it was possible to lock SYS, that starting and
>stopping the database would be difficult. When you connect anything as
>sysdba/sysoper you connect to the SYS schema. If you have it locked
>....

Hemant K Chitale
http://web.singnet.com.sg/~hkchital

--
http://www.freelists.org/webpage/oracle-l