Connect as SYS user- possible without PWD??- OS User not in DBA group
Connect as SYS user- possible without PWD??
Right now I have a different kind of a problem (opposite to the one that I faced before). In one of the databases here, Iam able to connect as sys user with SYSDBA privs even though that user is not even in the group DBA ( I checked the group the user is assigned to with the ID command). But for anyother Oracle user, login is possible with the password.
SUN OS 5.8
Looking forward to hear further from you, a solution to this problem.
Last edited by diwakar; 03-25-2003 at 02:53 AM.
Post the exact sequence of steps followed verbatim for the 2 users quoted, right from the OS login.
BTW, post also the result of 'groups' for both the users.
Last edited by ggnanaraj; 03-25-2003 at 03:11 AM.
Pls find the steps below. Iam new to SUN/UNIX. Kindly point out how I should proceed..
$ export ORACLE_SID=oasis
$ echo $ORACLE_SID
SQL*Plus: Release 22.214.171.124.0 - Production on Tue Mar 25 14:15:54 2003
(c) Copyright 2001 Oracle Corporation. All rights reserved.
Enter user-name: sys as sysdba
Enter password: (no password entered)
Oracle9i Enterprise Edition Release 126.96.36.199.0 - Production
With the Partitioning option
JServer Release 188.8.131.52.0 - Production
SQL> select instance_name from v$instance;
Enter user-name: oasis
Enter password: (Password entered)
SQL> connect oasis
Enter password: (Password not entered)
ORA-01017: invalid username/password; logon denied
Warning: You are no longer connected to ORACLE.
cat /etc/group |grep dba
cat /etc/passwd | grep oasisadm
Here is the output:
$ cat /etc/group |grep dba
$ cat /etc/passwd | grep oasisadm
oasisadm:x:1003:102:Oasis Admin User:/oasis/ist73:/bin/ksh
but as you say, the problem is solved. We can see the oasisadm user on DBA group also. The command:
$ id -a
uid=1003(oasisadm) gid=102(oasis) groups=102(oasis),1(other),2(bin),3(sys),4(adm),5(uucp),6(mail),7(tty),400(dba)
We can see that OASISADM belongs to group OASIS as well as DBA. Sorry for Iam new to UNIX and just getting on slowly. and as I could not look for DBA in the command:
I proceeded with the post. Thank u Gnanraj and Pando. Looking forward for continued support from you all.
Click Here to Expand Forum to Full Width