Almost certainly you are allowing operating system authentication of sysdba
users. Thus it doesn't matter what value you put as username and password in
the sqlplus connection string it only matters what os account you are using
and if that account is a member of the dba group.
You can change this behaviour by modifying the value of the init.ora
parameter remote_login_password_file and bouncing the database if you wish.
--
Niall Litchfield
Oracle DBA
Audit Commission UK
*****************************************
Please include version and platform
and SQL where applicable
It makes life easier and increases the
likelihood of a good answer
******************************************
"Cihat" <c.genc_at_interpay.nl> wrote in message
news:75fbbd1e.0208010149.7d4a236d_at_posting.google.com...
> Hi,
>
> I have a weird situation here. I have an oracle 8i on a
> Unix (aix) machine. There are a total of 6 users in the password file
> (thats the result i get when i do a select on v$pwfile_users),
> two of them are sys and internal. When I create a user like this:
> 'create user test identified by test' it is possible to logon to the
> database with test as sysdba?! It also doesn't matter what i fill in
> as a password, it connects?! How is this possible? How can I deny normal
> users to log on as sysdba and how can I change the password of sysdba?
>
> thanks,
> Cihat
Received on Thu Aug 01 2002 - 05:07:10 CDT
