Re: Database user Oracle

From: Sanjay Mishra <smishra_97_at_yahoo.com>
Date: Thu, 12 Nov 2009 10:10:48 -0800 (PST)
Message-ID: <840382.13902.qm_at_web51306.mail.re2.yahoo.com>



Jared

Setting is False. Also I checked and found that user is created the same time Database is created. Still trying as how it is created in few database and not in all of them

Sanjay



From: Jared Still <jkstill_at_gmail.com> To: smishra_97_at_yahoo.com
Cc: Mark.Bobak_at_proquest.com; "oracle-l_at_freelists.org" <oracle-l_at_freelists.org> Sent: Thu, November 12, 2009 12:30:14 PM Subject: Re: Database user Oracle

On Wed, Nov 11, 2009 at 5:44 PM, Sanjay Mishra <smishra_97_at_yahoo.com> wrote:

>
>Yes it is correct as the DBs are mostly 10g and I check and found that select password from dba_users where username='ORACLE'
>EXTERNAL
It comes to mind that you may want to check and see if remote authentication is turned on:

select value from v$parameter
where name = 'remote_os_authent'

If the answer to that query is true, you need to find out ASAP why this user exists.

If remote_os_authent = true, then any user anywhere on your network could create a local oracle user on their PC and log on to the database without a password.

That is assuming something other than windows.

It becomes a little more complicated on windows.

On windows the OSAUTH_PREFIX_DOMAIN registry entry would also need to be set to FALSE on the server for this to happen.

If not set, then the username on the database would need to be made up of the following values for remote authentication:

OS_AUTHENT_PREFIX: database parameter
DOMAIN_NAME
USERNAME for example, OPS$ORACLE\SCOTT

that is assuming OS_AUTHENT_PREFIX is at the default value of "OPS$"

in your case it appears to be ""

IAC, you may want to review dba_audit_session to see just when this user has been logging on, and where from.

Sorry to go on so long about this, just been using it this week.

Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist Oracle Blog: http://jkstill.blogspot.com Home Page: http://jaredstill.com       

--
http://www.freelists.org/webpage/oracle-l
Received on Thu Nov 12 2009 - 12:10:48 CST

Original text of this message