Home » Other » General » Some Confused Oracle Questions (Oracle 9,10,11)
icon5.gif  Some Confused Oracle Questions [message #453128] Tue, 27 April 2010 05:22 Go to next message
wwworafaqcom
Messages: 7
Registered: April 2010
Junior Member

1. Can superusers' name be changed? ( e.g. sysman to ora_admin ) If so, will it cause system hovoc?

2. Can superusers be disabled? If so, will it cause system hovoc?

3. 'sysman' is the only most powerful user ? OR Is it one of the most powerful users? powerful means administrators/superusers

4. How many powerusers exist in Oracle? Do they have same privileges?

5. How to recover Oracle passwords when all superusers passwords are lost?

6. How to recover Oracle accounts when all superusers accounts are locked?

Thank you.
Re: Some Confused Oracle Questions [message #453133 is a reply to message #453128] Tue, 27 April 2010 05:32 Go to previous messageGo to next message
Michel Cadot
Messages: 68625
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
1. No
2. You can disable SYSMAN, if this is what you mean by "superuser"
3. SYSMAN is not the most powerful user. It is less power than SYS or any DBA.
4. As many as you want. No.
5. You can't
6. SYS can't be locked

Regards
Michel
Re: Some Confused Oracle Questions [message #453134 is a reply to message #453128] Tue, 27 April 2010 05:41 Go to previous messageGo to next message
wwworafaqcom
Messages: 7
Registered: April 2010
Junior Member
Thanks, Michel Cadot.

Let me clarify my questions.

4. How many DEFAULT Powerusers exist in Oracle? Do they have same privileges? (Default powerusers that have come with installation)

> I learn these are SYS, SYSMAN, SYSTEM, DBSNMP

5. How to recover Oracle passwords when all superusers passwords are lost?

My learned solution:

#sqlplus /nolog
SQL>conn / as sysdba
SQL>alter user Username identified by password;

6. How to recover Oracle accounts when all superusers accounts are locked?

Incorrect Login attempts as SYS makes Account Locked out when lockout policy is enforced? I haven't tried it out. I tried others and found account locked out. SYS can be locked out, I guess.

Can anyone try it out?

Re: Some Confused Oracle Questions [message #453135 is a reply to message #453134] Tue, 27 April 2010 05:44 Go to previous messageGo to next message
Frank
Messages: 7901
Registered: March 2000
Senior Member
Go to http://otn.oracle.com
Download the Oracle Database software (XE is recommendable if you are on Windows)
Install the database
Try everything you want.
Re: Some Confused Oracle Questions [message #453136 is a reply to message #453134] Tue, 27 April 2010 05:47 Go to previous messageGo to next message
Michel Cadot
Messages: 68625
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Do not guess, either you trust us, either you test by yourself.

In your point 5, you didn't recover the password, you change it.

Regards
Michel

[Updated on: Tue, 27 April 2010 05:48]

Report message to a moderator

Re: Some Confused Oracle Questions [message #453138 is a reply to message #453136] Tue, 27 April 2010 05:56 Go to previous messageGo to next message
wwworafaqcom
Messages: 7
Registered: April 2010
Junior Member
I can't. I don't have oracle. I'm telling about my company's oracle.
Re: Some Confused Oracle Questions [message #453142 is a reply to message #453128] Tue, 27 April 2010 06:10 Go to previous messageGo to next message
cookiemonster
Messages: 13917
Registered: September 2008
Location: Rainy Manchester
Senior Member
Doesn't your company have a test DB you can try these things on?
Re: Some Confused Oracle Questions [message #453144 is a reply to message #453142] Tue, 27 April 2010 06:13 Go to previous messageGo to next message
wwworafaqcom
Messages: 7
Registered: April 2010
Junior Member
I'm not responsible for managing oracle db in my company. I'm just an app developer. So I can't touch anything other than testing connectivity/..etc from applications. I don't dare to do that. Oracle XE is free, right? I must download it and try it out.
Re: Some Confused Oracle Questions [message #453149 is a reply to message #453144] Tue, 27 April 2010 06:32 Go to previous messageGo to next message
ramoradba
Messages: 2456
Registered: January 2009
Location: AndhraPradesh,Hyderabad,I...
Senior Member
If you are interested in doing/learn such things first
read the documents carefully and try to undeerstand them,play with them on your test environment..
And if you still have any questions then come back here and post as per the guide lines described

sriram Smile
Re: Some Confused Oracle Questions [message #453151 is a reply to message #453149] Tue, 27 April 2010 06:38 Go to previous messageGo to next message
wwworafaqcom
Messages: 7
Registered: April 2010
Junior Member
Thanks, sriram Smile.
In fact I want to learn first.
Currently, believe it or not, all my time is fully engaged with application development and programming stuffs. So, I'd like to get fastest help from experts like you.
Re: Some Confused Oracle Questions [message #453153 is a reply to message #453151] Tue, 27 April 2010 06:42 Go to previous messageGo to next message
ramoradba
Messages: 2456
Registered: January 2009
Location: AndhraPradesh,Hyderabad,I...
Senior Member
Quote:
So, I'd like to get fastest help from experts like you.

You are too faster than experts like me..
So I can`t help you with that speed...

Goodluck
sriram smile
Re: Some Confused Oracle Questions [message #453156 is a reply to message #453151] Tue, 27 April 2010 06:57 Go to previous messageGo to next message
Michel Cadot
Messages: 68625
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Quote:
So, I'd like to get fastest help from experts like you.

But when you told you "SYS can't be locked" you say "I think it can". So what is the expert opinion for you?
(By the way, you're right to not trust but in this case you have to build your own environment to test our answer.)

Regards
Michel
Re: Some Confused Oracle Questions [message #453169 is a reply to message #453138] Tue, 27 April 2010 09:51 Go to previous messageGo to next message
Frank
Messages: 7901
Registered: March 2000
Senior Member
wwworafaqcom wrote on Tue, 27 April 2010 12:56
I can't. I don't have oracle. I'm telling about my company's oracle.

That is why I told you how to get your hands on your very own test database! Why don't you install one on your local machine?
Re: Some Confused Oracle Questions [message #453225 is a reply to message #453156] Tue, 27 April 2010 23:59 Go to previous messageGo to next message
wwworafaqcom
Messages: 7
Registered: April 2010
Junior Member
Quote:
But when you told you "SYS can't be locked" you say "I think it can". So what is the expert opinion for you?
(By the way, you're right to not trust but in this case you have to build your own environment to test our answer.)

Regards
Michel


Hi Michael,

I've tested. Even though I locked SYS account via SYSTEM,

SQL> alter user SYS account lock;
User altered.
SQL> commit;
Commit complete.

I was able to login as sys.

SQL> connect sys as sysdba;
Enter password:
Connected.




Re: Some Confused Oracle Questions [message #453229 is a reply to message #453225] Wed, 28 April 2010 00:06 Go to previous messageGo to next message
Littlefoot
Messages: 21806
Registered: June 2005
Location: Croatia, Europe
Senior Member
Account Moderator
Not related to your question, but - you don't need commit here.
Re: Some Confused Oracle Questions [message #453231 is a reply to message #453229] Wed, 28 April 2010 00:09 Go to previous messageGo to next message
wwworafaqcom
Messages: 7
Registered: April 2010
Junior Member
doesn't need 'commit' ?
I learn that 'commit' must be needed to affect the change unless 'autocommit' flag is set to true.

[Updated on: Wed, 28 April 2010 00:10]

Report message to a moderator

Re: Some Confused Oracle Questions [message #453234 is a reply to message #453231] Wed, 28 April 2010 00:18 Go to previous messageGo to next message
ramoradba
Messages: 2456
Registered: January 2009
Location: AndhraPradesh,Hyderabad,I...
Senior Member
to you first question(sys lock)
http://www.google.co.in/search?hl=en&source=hp&q=lock+sys+account+in+oracle&meta=&aq=f&aqi=g-m1&aql=&oq=& amp;gs_rfai=

http://www.petefinnigan.com/ramblings/failed_login_attempts.htm

http://www.dba-oracle.com/t_passwords_locking_changing_expiring.htm

to your second questin..

Please read the documents....
DDL doesn`t require commit.
DML require commit for the permanenet change.

sriram Smile
Re: Some Confused Oracle Questions [message #453246 is a reply to message #453225] Wed, 28 April 2010 01:03 Go to previous message
Michel Cadot
Messages: 68625
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Quote:
SQL> alter user SYS account lock;
User altered.
SQL> commit;
Commit complete.

I was able to login as sys.

SQL> connect sys as sysdba;
Enter password:
Connected.

Experimentation is a good way to learn. Wink

You can even verify in DBA_USERS that the account is "locked":
SQL> select account_status from dba_users where username='SYS';
ACCOUNT_STATUS
--------------------------------
OPEN

1 row selected.

SQL> alter user sys account lock;

User altered.

SQL> select account_status from dba_users where username='SYS';
ACCOUNT_STATUS
--------------------------------
LOCKED

1 row selected.

But actually is not.

Remember SYS is special, SYS does not act like any other accounts. When you use SYS/SYSDBA Oracle deactivates some code path and activates others.

Regards
Michel

[Updated on: Wed, 28 April 2010 01:05]

Report message to a moderator

Previous Topic: Virtualization (merged)
Next Topic: User profile
Goto Forum:
  


Current Time: Fri Mar 29 08:16:48 CDT 2024