Re: oracle 9i connection string with SYS account

There still are products out there which connect as SYS.

Case in point ?
  Oracle iFS Release 9i.
  We had upgraded from iFS1.1.9 on 8.1.7 to iFS9.0.1 but upgraded the database to 8.1.7.2 and then 8.1.7.3 That was OK. When I tried iFS9.0.1 against an OracleRDBMS9.0.1 database, I hit ORA-28009 when running IFSCONFIG. IFSCONFIG attempts to connect as SYS when validating the database configuration (init.ora, java, intermedia etc) See Note 156095.1 on MetaLink.

Our IT security is currently testing a product called "ESM" which also has an Oracle module. At install time, it looks up oratab and tries to connect to every database in oratab as SYS. This fails against my 9i database !

I'm sure that there would still be a number of 3rd party products with DBA-features which connect as SYS. Quite probably even in iFS9iRelease2.

Hemant K Chitale

"Sybrand Bakker" <postbus_at_sybrandb.demon.nl> wrote in message news:n8upfu030be6jplvqd3sbde0mi87tcc1d5_at_4ax.com...
> On Tue, 4 Jun 2002 11:24:08 +0200, "Bertus Dam" <b.dam_at_gmx.net> wrote:
>
> >I'm trying to create a connectionstring in my application to an oracle 9i
> >database.
> >I can't get it to work though. This is what I try:
> >
> >Provider=OraOLEDB.Oracle;Data Source=svr;User
> >ID=SYS;Password=change_on_install;
> >
> >Errormessage:
> >
> >Message: "ORA-28009: connection to sys should be as sysdba or sysoper"
> >
> >How can I fix this? Or how do I create a connectionstring which uses
> >integrated O/S security?
> >
> >
> >
> >Thanx, Bertus
> >
> >
>
>
>
> You should NEVER EVER use the SYS account as an ordinary account, you
> should NOT use it to create tables under it, and you should ALWAYS
> change the password from the default, which you clearly didn't do.
> In Oracle 9i the SYS account has been changed into a special with
> special privileges.
> Oracle did that in order to BLOCK access to sys, anyone using SYS as
> an ordinary account is likely to create havoc.
> Disregard the other advice, it is clearly 100 percent unprofessional
> in your situation.
> Please start reading those manuals now.
>
> Regards
>
> Sybrand Bakker, Senior Oracle DBA
>
> To reply remove -verwijderdit from my e-mail address
Received on Wed Jun 05 2002 - 09:10:48 CDT