Re: connect as sysdba

You mean "connect fred/password as sysdba" works? Even when fred hasn't been granted sysdba privileges?

Strangely enough, that's because you've implemented operating system authentication (by setting up the dba group in Unix or the ORA_DBA (or ORA_<sid>_DBA) group in NT).

O/S authentication means "I don't give a damn what you type as part of the connect string...I will go out and check whether you, the machine/domain User are a member of the appropriate group and see if you are a member. If you are, you're in".

Try typing this:

connect lkajdslfkahdlkjfhasdlkfalkjf/dhfkjshdfjshfkjsdhfk as sysdba

If it works, it's proof (I hope) that O/S authentication is in place and working just fine. The point being that whatever you type as the User and Password, it's ignored... you as the domain User are already logged onto the network with appropriate group privileges, and those group privileges are what Oracle is worried about.

If this bothers you, then you need to de-implement O/S authentication, and implement password file authentication.

Regards
HJR "montserrat mateos" <m.mateos_at_upsa.es> wrote in message news:3a54820b_at_193.146.156.23...
> I have a problem with oracle, I create a new user and although he hasnīt
> privilegies as sysdba, he can connect as sysdba, can i do to deny this
> privilegie
>
> Thanks
>
>
Received on Fri Jan 05 2001 - 01:20:28 CST