Re: oracle 9i connection string with SYS account

Ever noticed that the 9i Network Assistant still performs its tests on your new configuration by logging in as Scott/Tiger??? Despite Scott not being one of the sample schemas included in any of the new database templates??!

Fortunately, that can be fixed with the 'change login' button -but it just goes to show that these sort of anomalies are indeed out there.

Regards
HJR "Hemant K Chitale" <hkchital_nospam_at_singnet_nospam.com.sg> wrote in message news:adl658$rda$1_at_dahlia.singnet.com.sg...
>
>
> There still are products out there which connect as SYS.
>
> Case in point ?
> Oracle iFS Release 9i.
> We had upgraded from iFS1.1.9 on 8.1.7 to iFS9.0.1
> but upgraded the database to 8.1.7.2 and then 8.1.7.3 That was OK.
> When I tried iFS9.0.1 against an OracleRDBMS9.0.1
> database, I hit ORA-28009 when running IFSCONFIG.
> IFSCONFIG attempts to connect as SYS when validating
> the database configuration (init.ora, java, intermedia etc)
> See Note 156095.1 on MetaLink.
>
> Our IT security is currently testing a product called "ESM"
> which also has an Oracle module. At install time, it looks
> up oratab and tries to connect to every database in oratab
> as SYS. This fails against my 9i database !
>
> I'm sure that there would still be a number of 3rd party
> products with DBA-features which connect as SYS.
> Quite probably even in iFS9iRelease2.
>
>
> Hemant K Chitale
>
> "Sybrand Bakker" <postbus_at_sybrandb.demon.nl> wrote in message
> news:n8upfu030be6jplvqd3sbde0mi87tcc1d5_at_4ax.com...
> > On Tue, 4 Jun 2002 11:24:08 +0200, "Bertus Dam" <b.dam_at_gmx.net> wrote:
> >
> > >I'm trying to create a connectionstring in my application to an oracle
9i
> > >database.
> > >I can't get it to work though. This is what I try:
> > >
> > >Provider=OraOLEDB.Oracle;Data Source=svr;User
> > >ID=SYS;Password=change_on_install;
> > >
> > >Errormessage:
> > >
> > >Message: "ORA-28009: connection to sys should be as sysdba or sysoper"
> > >
> > >How can I fix this? Or how do I create a connectionstring which uses
> > >integrated O/S security?
> > >
> > >
> > >
> > >Thanx, Bertus
> > >
> > >
> >
> >
> >
> > You should NEVER EVER use the SYS account as an ordinary account, you
> > should NOT use it to create tables under it, and you should ALWAYS
> > change the password from the default, which you clearly didn't do.
> > In Oracle 9i the SYS account has been changed into a special with
> > special privileges.
> > Oracle did that in order to BLOCK access to sys, anyone using SYS as
> > an ordinary account is likely to create havoc.
> > Disregard the other advice, it is clearly 100 percent unprofessional
> > in your situation.
> > Please start reading those manuals now.
> >
> > Regards
> >
> > Sybrand Bakker, Senior Oracle DBA
> >
> > To reply remove -verwijderdit from my e-mail address
>
>
Received on Wed Jun 05 2002 - 15:20:52 CDT