Re: Everyone can log on as sysdba on oracle 8i??????

From: Hieraklion <hieraklion_nospam_at_noos.duchemol>
Date: Thu, 1 Aug 2002 11:50:36 +0200
Message-ID: <3d4904a0$0$18976$79c14f64@nan-newsreader-03.noos.net>

I assume the users are in the unix group 'dba'. So / as sysdba without password are possible.
...

---

Envoyé/Sent by Hieraklion

Pour répondre : Enlever "_nospam" à l'adresse mail et remplacer ".duchemol" par ".fr".
To answer : remove "_nospam" from the e-mail adress and replace ".duchemol" by ".fr".

"Cihat" <c.genc_at_interpay.nl> a écrit dans le message de news: 75fbbd1e.0208010149.7d4a236d_at_posting.google.com...
> Hi,
>
> I have a weird situation here. I have an oracle 8i on a
> Unix (aix) machine. There are a total of 6 users in the password file
> (thats the result i get when i do a select on v$pwfile_users),
> two of them are sys and internal. When I create a user like this:
> 'create user test identified by test' it is possible to logon to the
> database with test as sysdba?! It also doesn't matter what i fill in
> as a password, it connects?! How is this possible? How can I deny normal
> users to log on as sysdba and how can I change the password of sysdba?
>
> thanks,
> Cihat
Received on Thu Aug 01 2002 - 04:50:36 CDT