Re: User Internal

"Rubens Mars" <anonimo678_at_portugalmail.pt> wrote in message news:9n5h7f$21u$1_at_venus.telepac.pt...
> Hi !
>
>
> I'm using WinNT 4, and I connect to as the administrator of the machine.
> As I have installed Oracle 8.1.6, the dba group ( ORAxxx ) has been
> created... everything ok up to here.
>
>
> The problem is : I've got the parameter REMOTE_LOGIN_PASSWORD= EXCLUSIVE
,
> and if it's set to EXCLUSIVE i should only be able to connect giving a
> password ( the one that's in the password file pwdinit.ora ) but the fact
is
> I can connect with a simple connect internal. !!! How come ?
>
> Please explain.... The feeling I get is that if the O.S user is part of
the
> magic group ( ORADBA, ot whatever ) it is able to connect with no
password
> ! ( even when the init.ora parameter REMOTE_LOGIN.... is set to
> EXCLUSIVE ) and what the documentation says is that if this parameter is
> other than NONE , you'll have to supply a password. This is NOT what
happens
> ! The parameter is EXCLUSIVE and I connect just with : connect internal !
> Just because the O.S user is part of the group oradba.
>
> Comments please
>
> thanx
>
>
>
>

This is working as designed.
If you have set ORACLE_SID, or you have ORACLE_SID in your registry and you are on the server, you can connect without password. IMO the idea about this is if you are capable to hack the administrator password, Oracle won't be safe for you anyway. If you are not on the server and you try to connect internal, you need to know the password.
You misunderstand the documentation with respect to exclusive. The purpose of exclusive is other users than sys or internal can be granted sysdba and sysoper privilege, and if they issue connect rubens as sysdba they will need to provide a password, and the password check is done using the password file, not using the datadictionary.
So everything is really ok and working as designed. If you don't like the way it works, that's a different story.

Regards,

Sybrand Bakker, Senior Oracle DBA Received on Wed Sep 05 2001 - 11:17:40 CDT