Changing passwords

[Chucks_k]

Hello everyone,

How do i change the default passwords for the users system and sys?

Is there a way of stopping someone from logging in as / as sysdba? can i change that to another value?

Thanks in advance,
Chucks_k

[julian]

Originally posted by Chucks_k
Hello everyone,

How do i change the default passwords for the users system and sys?

Is there a way of stopping someone from logging in as / as sysdba? can i change that to another value?

Thanks in advance,
Chucks_k

ALTER USER SYS IDENTIFIED BY NEW_PWD;

If the unix user is in the DBA group, then he can log in using "connect / as sysdba". Is the OS user in the DBA group?

[Chucks_k]

Hi Julian..thanks for that..
Yes the oracle user is in the dba group..
So do i change the group for the oracle user? Will that be ok?

[julian]

Originally posted by Chucks_k
Hi Julian..thanks for that..
Yes the oracle user is in the dba group..
So do i change the group for the oracle user? Will that be ok?

Well, the Oracle user should be generally in the dba group. So, if someone logs in as oracle at unix level he should not be asked for password after connecting to the DB as internal or / as sysdba.

[Chucks_k]

So how do i avoid someone coming in an entering the statement '/as sysdba' to log into the database?

[Mnemonical]

Just don`t give them the sysdba privilege.
You can also set remote_login_passwordfile=exclusive
and use a password file (use orapwd for creating a password file) ... at least in 9i.


F.

[pando]

disable os authetification, in 9i. in 8i there is no way to avoid connect internal

[stecal]

Change the user's group to sysoper from sysdba. Do you not want this person to have sysoper privileges as well, or are you only concerned with sysdba?

[TomazZ]

Just change the oracle user password as well. At least one (you) should be able to use it if it is necessary.

Tomaz