Home » RDBMS Server » Backup & Recovery » password on RMAN (11.2.0.4)
password on RMAN [message #631878] Wed, 21 January 2015 06:54 Go to next message
bvo65
Messages: 25
Registered: November 2009
Location: US
Junior Member
Hello,

I have a problem to understand how the prior DBA set up the rman here. He had server called rman to backup the production daily. From rman_backup.sh script connect to target server (production) using sys/password @prod alias

"
rman catalog rman/rman@rman target sys/password123@prod_rman cmdfile /oracle/scripts/prod_sid/rman_dailybackup.sh log /oracle/script/prod_sid/rman_prodsid_daily_$today
"

now the prod_sid sys and system's password about to expired. I found out the database's sys and system passwords were different from the rman_backup.sh of rman server. If I am going to change the password of sys and system on the prod_sid db... will it affect the rman_backup.sh to connect to the prod_sid for backup? The passwords are different and I couldn't connect to the prod_sid db using the password from rman_backup.sh

Only 1 sys for each database how could he had 2 different servers? Would you please help me to understand this rman backup and can I change the sys/system password without effect the rman_backup.sh.

Thanks in advances.

BN
Re: password on RMAN [message #631879 is a reply to message #631878] Wed, 21 January 2015 07:04 Go to previous messageGo to next message
John Watson
Messages: 7212
Registered: January 2010
Location: Global Village
Senior Member
The SYS password does not expire.
Re: password on RMAN [message #631881 is a reply to message #631879] Wed, 21 January 2015 07:44 Go to previous messageGo to next message
bvo65
Messages: 25
Registered: November 2009
Location: US
Junior Member
it is.... due to DOD STIG we need to set it expire in 180 days and need to change it. Now, I have faced to different passwords for sys. I need to know if I alter the sys' password from db, will it affect the one from rman_backup.sh script? They were different two passwords for sys here.
Re: password on RMAN [message #631883 is a reply to message #631881] Wed, 21 January 2015 08:00 Go to previous messageGo to next message
Michel Cadot
Messages: 65317
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Quote:
it is....


And how do you do it?

SQL> alter user sys password expire;

User altered.

SQL> conn sys/XXXXX@XXX as sysdba
Connected.

***SYS*** sur la base XXX de XXXXXX

***SYS***> select account_status, expiry_date, sysdate from dba_users where username='SYS';
ACCOUNT_STATUS                   EXPIRY_DATE         SYSDATE
-------------------------------- ------------------- -------------------
EXPIRED                          21/01/2015 14:56:54 21/01/2015 14:59:40

[Updated on: Wed, 21 January 2015 08:00]

Report message to a moderator

Re: password on RMAN [message #631885 is a reply to message #631881] Wed, 21 January 2015 08:12 Go to previous messageGo to next message
gazzag
Messages: 907
Registered: November 2010
Location: Bristol, UK
Senior Member
Personally, I would use:

export ORACLE_SID=<prod_database>
rman target / catalog rman/<rman_password>@<rman_catalog_db>


This negates the need for a running listener on the database server (it might be down) and the hard-coding of or worrying about SYS passwords. And, as you've been told, SYS does not actually expire.

HTH
-g
Re: password on RMAN [message #631886 is a reply to message #631883] Wed, 21 January 2015 08:12 Go to previous messageGo to next message
bvo65
Messages: 25
Registered: November 2009
Location: US
Junior Member
I knew how to alter the username and check when it's expired...

yes, the expire date is this Sunday. My question is how the prior DBA set 2 different passwords for sys? If I alter sys' password, is it affected the one from script? Not asking how to alter the password and/or check the expire date dear Smile

If I can't find out how it set up, I need to extend the limit password profile (and this is against the STIG) until I know for sure once alter the sys' password the sys's password from rman_backup.sh is still running. I couldn't test since it used sys/password
Re: password on RMAN [message #631890 is a reply to message #631885] Wed, 21 January 2015 08:35 Go to previous messageGo to next message
bvo65
Messages: 25
Registered: November 2009
Location: US
Junior Member
I am not worried about rman's password from rman server. I am worried about sys' password on production server (target)


rman catalog rman/rman@rman target sys/password123@prod_rman cmdfile

why two different passwords for sys? How did he create it? Once I alter the password for sys, will this sys' password from script affected? Beside, the sys' password from script couldn't connect on TOAD even as sysdba

BN
Re: password on RMAN [message #631891 is a reply to message #631890] Wed, 21 January 2015 08:37 Go to previous messageGo to next message
BlackSwan
Messages: 25793
Registered: January 2009
Location: SoCal
Senior Member
>rman catalog rman/rman@rman target sys/password123@prod_rman cmdfile

password123 resides in the external password file; not the data dictionary
Re: password on RMAN [message #631892 is a reply to message #631891] Wed, 21 January 2015 08:41 Go to previous messageGo to next message
bvo65
Messages: 25
Registered: November 2009
Location: US
Junior Member
how to create this external password? Is ok for me to alter sys w/o update this password from rman_backup.sh right?

thanks for replying

White Swan (Bach Nga)
Re: password on RMAN [message #631893 is a reply to message #631890] Wed, 21 January 2015 08:43 Go to previous messageGo to next message
gazzag
Messages: 907
Registered: November 2010
Location: Bristol, UK
Senior Member
I don't understand. What do you mean that the SYS passwords are different? There is only one SYS password on a database.
Re: password on RMAN [message #631895 is a reply to message #631892] Wed, 21 January 2015 08:53 Go to previous messageGo to next message
BlackSwan
Messages: 25793
Registered: January 2009
Location: SoCal
Senior Member
bvo65 wrote on Wed, 21 January 2015 06:41
how to create this external password? Is ok for me to alter sys w/o update this password from rman_backup.sh right?

thanks for replying

White Swan (Bach Nga)


what is SYS' password in my DB?

[oracle@localhost ~]$ sqlplus / as sysdba

SQL*Plus: Release 11.2.0.2.0 Production on Wed Jan 21 06:51:49 2015

Copyright (c) 1982, 2010, Oracle.  All rights reserved.


Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options

SQL> show user
USER is "SYS"
SQL> connect sys/fubar as sysdba
Connected.
SQL> show user
USER is "SYS"
SQL> connect sys/NoPassword as sysdba
Connected.
SQL> show user    
USER is "SYS"
SQL> connect sys/Does_not_matter as sysdba
Connected.
SQL> show user
USER is "SYS"
SQL> 


--mod update: code tags added. Please do so yourself in future.

[Updated on: Wed, 21 January 2015 08:55] by Moderator

Report message to a moderator

Re: password on RMAN [message #631896 is a reply to message #631892] Wed, 21 January 2015 08:54 Go to previous messageGo to next message
gazzag
Messages: 907
Registered: November 2010
Location: Bristol, UK
Senior Member
orapwd.
Re: password on RMAN [message #631897 is a reply to message #631893] Wed, 21 January 2015 08:56 Go to previous messageGo to next message
bvo65
Messages: 25
Registered: November 2009
Location: US
Junior Member
yes, two different passwords. One from rman script and another one I could log on into dbconsole and TOAD fine. the password from rman script didn't work at all... That's why I posted for help. What do you think I post this for? Smile)

I have checked online how to clone rman backup for a week and it didn't mention how to create two different sys password but my end here were different. I want to know how the prior DBA did since he left w/o any documentations.
Re: password on RMAN [message #631898 is a reply to message #631897] Wed, 21 January 2015 09:00 Go to previous messageGo to next message
gazzag
Messages: 907
Registered: November 2010
Location: Bristol, UK
Senior Member
You shouldn't be logging in as SYS to things like Toad and DBConsole. SYSMAN is used for DBConsole and you should create another user/schema to log into TOAD.
Re: password on RMAN [message #631901 is a reply to message #631898] Wed, 21 January 2015 09:13 Go to previous messageGo to next message
bvo65
Messages: 25
Registered: November 2009
Location: US
Junior Member
I know that but this is one thing you can test out when people gave me different password for sys/system and I saw the script has another password for sys.

never mind. I will another source how the prior dba did... the problem is, I don't have account with Oracle support yet
Re: password on RMAN [message #631902 is a reply to message #631901] Wed, 21 January 2015 09:21 Go to previous message
gazzag
Messages: 907
Registered: November 2010
Location: Bristol, UK
Senior Member
You don't mention what version of Oracle you're using. However, you could do worse than read some documentation - that is free to do.
Previous Topic: rman
Next Topic: RMAN restoring archivelogs before given PIT
Goto Forum:
  


Current Time: Wed Jan 17 14:58:14 CST 2018

Total time taken to generate the page: 0.01735 seconds