Re: SYS account with two passwords

Here's a cute little addition with Oracle 9.

It looks as if SYS cannot log in as a normal user, only as a sysdba.

Any attempt I make (HPUX 11, Oracle 9.0.1) to log SYS in without the 'as sysdba' clause results in 'insufficient privileges'.

(Actually if you have the sysdba privilege, you don't even need an Oracle account per se, whatever userid/password you supply, you get into the system under the SYS schema).

--
Jonathan Lewis
http://www.jlcomp.demon.co.uk

Host to The Co-Operative Oracle Users' FAQ
http://www.jlcomp.demon.co.uk/faq/ind_faq.html

Author of:
Practical Oracle 8i: Building Efficient Databases

Screen saver or Life saver: http://www.ud.com
Use spare CPU to assist in cancer research.

Howard J. Rogers wrote in message <3b8d588d_at_news.iprimus.com.au>...


>Perfectly normal... when SYS logs on as a normal user, we use data

>dictionary authentication, and when he claims SYSDBA rights, we use

password


>file authentication.  Two different places to look, two different

passwords.


>

>How do you "fix" it?  By doing what the normal SYS password tells you to

do:


>change SYS's password.  Alter user SYS identified by NEWPASSWORD.  That

>causes the data dictionary version to be updated, and for the new, updated

>password to be written to the password file.  Bingo!  Both passwords are

now


>in synch (and will be thereafter for ever more).

>

>Incidentally, if you want "normal" people to be SYSDBA, the mechanism is

the


>same: "Grant SYSDBA to Frank" causes Oracle to find the data dictionary

>entry for Frank, and to transfer it to the password file -password and all.

>Frank never therefore suffers the problem of two different passwords

>depending on how pwerful he wants to be.

>

>Regards

>HJR

>

>

>