default role with the password - reality check

I support the database for an application. We went from Oracle10 in Oracle11 9 months. Then recently, we applied the CPU of OCT.

The application administrator says they have a program which has recently stopped working and who worked after the Oracle11 upgrade.

The user of the application has a default role that has a password. Is this possible? A default role with a password. Would this be worked in any version of Oracle?

Default role with the password is even available with Oracle XE. The default roles are enabled without the need for role password in Oracle 10.2:

SQL> drop user admin cascade;

User dropped.

SQL> drop user test cascade;

User dropped.

SQL> drop role rwp;

Role dropped.

SQL> select * from v$version;

BANNER
----------------------------------------------------------------
Oracle Database 10g Express Edition Release 10.2.0.1.0 - Product
PL/SQL Release 10.2.0.1.0 - Production
CORE    10.2.0.1.0      Production
TNS for 32-bit Windows: Version 10.2.0.1.0 - Production
NLSRTL Version 10.2.0.1.0 - Production

SQL>
SQL> create user admin identified by oraclexe;

User created.

SQL> grant create session, create table to admin;

Grant succeeded.

SQL> grant unlimited tablespace to admin;

Grant succeeded.

SQL> grant create user to admin;

Grant succeeded.

SQL> grant create role to admin;

Grant succeeded.

SQL>
SQL> create user test identified by oraclexe;

User created.

SQL> grant create session to test;

Grant succeeded.

SQL>
SQL> connect admin/oraclexe;
Connected.
SQL> create table t(x varchar2(10));

Table created.

SQL> insert into t values('admin OK');

1 row created.

SQL> commit;

Commit complete.

SQL> create role rwp identified by oraclexe;

Role created.

SQL> grant all on t to rwp;

Grant succeeded.

SQL> grant rwp to test;

Grant succeeded.

SQL>
SQL> connect test/oraclexe;
Connected.
SQL> select * from session_roles;

ROLE
------------------------------
RWP

SQL> select * from admin.t;

X
----------
admin OK

SQL> insert into admin.t values('test OK');

1 row created.

SQL> commit;

Commit complete.

SQL> select * from admin.t;

X
----------
admin OK
test OK

SQL>

There has been changes between Oracle 10.2 and 11.2 because the same script fails to 11.2 unless the role is defined with the password:

SQL> drop user admin cascade;

User dropped.

SQL> drop user test cascade;

User dropped.

SQL> drop role rwp;

Role dropped.

SQL> select * from v$version;

BANNER
--------------------------------------------------------------------------------
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
PL/SQL Release 11.2.0.1.0 - Production
CORE    11.2.0.1.0      Production
TNS for Linux: Version 11.2.0.1.0 - Production
NLSRTL Version 11.2.0.1.0 - Production

SQL>
SQL> create user admin identified by oraclexe;

User created.

SQL> grant create session, create table to admin;

Grant succeeded.

SQL> grant unlimited tablespace to admin;

Grant succeeded.

SQL> grant create user to admin;

Grant succeeded.

SQL> grant create role to admin;

Grant succeeded.

SQL>
SQL> create user test identified by oraclexe;

User created.

SQL> grant create session to test;

Grant succeeded.

SQL>
SQL> connect admin/oraclexe;
Connected.
SQL> create table t(x varchar2(10));

Table created.

SQL> insert into t values('admin OK');

1 row created.

SQL> commit;

Commit complete.

SQL> create role rwp identified by oraclexe;

Role created.

SQL> grant all on t to rwp;

Grant succeeded.

SQL> grant rwp to test;

Grant succeeded.

SQL>
SQL> connect test/oraclexe;
Connected.
SQL> select * from session_roles;

no rows selected

SQL> select * from admin.t;
select * from admin.t
                    *
ERROR at line 1:
ORA-00942: table or view does not exist

SQL> insert into admin.t values('test OK');
insert into admin.t values('test OK')
                  *
ERROR at line 1:
ORA-00942: table or view does not exist

SQL> commit;

Commit complete.

SQL> select * from admin.t;
select * from admin.t
                    *
ERROR at line 1:
ORA-00942: table or view does not exist

SQL>
SQL> set role rwp identified by oraclexe;

Role set.

SQL> select * from session_roles;

ROLE
------------------------------
RWP

SQL> select * from admin.t;

X
----------
admin OK

SQL> insert into admin.t values('test OK');

1 row created.

SQL> commit;

Commit complete.

SQL> select * from admin.t;

X
----------
admin OK
test OK

SQL>

10.2 security Guide says:

If you have a role that is protected by a password, you can activate or disable the role by providing the correct password for the role in a statement of the VALUE. However, if the role is rendered a default and active role at the time of the connection, then the user should not enter a password.

11.1 and 11.2 Secuirty Guide says:

If a user is given a role that is protected by a password, you can activate or disable the role by providing the correct password for the role in the ROLE DEFINED declaration. Cannot you authenticate a role authenticated by logon password, even if you add it to the list of default roles. You must enable it explicitly to the ROLE DEFINED statement by using the required password.

Edited by: P. Forstmann on 20 Feb. 2010 10:28

Tags: Database

Similar Questions

I'm trying to access a wireless network with the password provided for me. I get the following error message

I'm trying to access a wireless network with the password provided for me. I get the following error message: "the network password needs to be 40bits or 104bits depending on your network configuration. This can be entered as 5 or 13 characters ascii or hexadecimal 10 or 26. "what does this error message mean and how do I address so that I can access the wireless network?

I use XP Professional with service pack 3. I get this error message every other time I try to log in to a protected wireless network security. I used to not get this message; but, now, it may be impossible, sometimes to call all wireless providers when I might only need for a short period or after hours service opening.

In addition, it is my computer that requires the network password to be different, not the provider of wireless. A password is given to me who works for other users, but my computer won't let me use it.

Hello

I suggest you to visit these links and check if it helps:

http://answers.Microsoft.com/en-us/Windows/Forum/windows_xp-networking/the-network-password-needs-to-be-40-bits-or-104/f3fdc3ee-CB40-4107-A632-082093dcdcb8

http://answers.Microsoft.com/en-us/Windows/Forum/windows_xp-networking/need-to-connect-to-home-wireless-network-Windows/5bf37a22-cc42-4a0f-9d15-83e780f00123

It will be useful.

cannot log on as administrator with the password and open a user button session sends to the temporary profile.

cannot log on as administrator with the password and log on user button wife sends him to temp. access to some of my articles on his desk. She lost all access to his information.

Original title: cannot log on as administrator with the password and log on user button wife sends him to temp. access to some of my articles on his desk. She lost all access to his information.
Hello
- Remember to make changes to your computer before this problem started?
However, you can access the link below and follow the steps mentioned in the article and check if it helps you to fix the problem, and connect you to your normal user account.

http://support.Microsoft.com/kb/947242

I hope this helps. Let us know the result.

Thank you and best regards,

Srinivas R

Microsoft technical support.

Visit our Microsoft answers feedback Forum and let us know what you think.

Publish with the choice never 'check updates' when installing

Hello
I was flash deployment on our computers (win 7 clients) with the option 'never check the updates. I was choosing this option because we use user account control in our environment and updates have been asking to specify a name of user and password.
Well I learned yesterday update silent and deployed a mms.cfg file customized via Group Policy. I checked, and flash has not updated on computers in question. The question, I discovered, is that when I choose 'never check updates' service update flash and the task were not installed!
Does this mean that I have to reinstall flash on each computer where I installed flash with the option 'never check updates'?
Thank you.

I solved it.

Run FlashPlayerUpdateService.exe from a command line located at C:\Windows\SysWOW64\Macromed\Flash\ (64-bit) or C:\Windows\system32\Macromed\Flash\ (32-bit) with the - Setup switch.

This installs the service update of flash player and the task of updating flash player.

Thanks Process Monitor!

Change password with the password token does not work

My mother lost her password. So, we asked an e-mail with a password token and clicked on the link in the mail. Responses from the site sorry this token of password is not recognized, please try retyping or get password another token. Then we have copied and pasted the token giving the same result.

We did this three days after another. So every day we ask you an email with a password token, and every day the site said us sorry this token of password is not recognized, please try retyping or get password another token.

The system of resetting password with a token does not, at least not in the Netherlands. Does anyone have an idea how to solve this problem?

Sorry, but the mentioned page asks you to connect with your name Skype and password, so that we cannot further. My mother has a balance of Skype credit that she doesn't use anymore.

What is the problem with the password reset procedure?

OK, after a very good conversation with Cherry B we discovered that the account is a Windows Live account, then we should change the password in Windows Live. The password reset procedure could mention this...

I HAVE COMPAQ MINI 110 HAVE A PROBLEM WITH THE PASSWORD OF PIOS. SYSTEM HAULT CODE IS; CNU9243TDY

I HAVE COMPAQ MINI 110 HAVE A PROBLEM WITH THE PASSWORD OF PIOS.

SYSTEM HAULT CODE IS; CNU9243TDY

ways to help

Hello

Try to enter: e9lo7vfati (3rd character is a lowercase L)

Kind regards

DP - K

How can I change the setting in the administrator with the password in Windows XP?

How can I parameter string in the admin with the password in windows xp professional

You can not.

John

Problem of password; I tried to log in with the password that I had for years and now it says its wrong.

I tried to log in with the password that I had for years and now it says its wrong. I have reset the password without the disc? I am trying to renew new internet protection and it wont let me because I need to approve it.

Thank you

If you want to tell your Windows 7 user password, see guide to recovering lost passwords or other defects preventing log on Windows 7 Home Premium

A general error occurred: could not connect with the password of administrator of vim cannot configure VIM account on the host

Community salvation.
Story: I was called to look at the configuration of vSphere for a customer. When I started looking, I noticed several problems in the environment of the person who has put in place initially. I've been noting but have done nothing to fix these up to the...
A question that I've seen is that the server vSphere does not apper communicate properly on ESX 3.5 servers. The error message is similar to a post on this forum ( http://communities.vmware.com/message/1450789?tstart=0) however the same method of solution did not work.
Currently I have two ESX hosts connected to a console vSphere. The Console displays the disconnected hosts and the error points to the problems with the VPXUSER account. I found
I searched and found several articles with similar questions, so I chose a course of action
http://KB.VMware.com/selfservice/microsites/search.do?language=en_US & cmd = displayKC & externalId = 1007132
http://communities.VMware.com/message/1168241
As a note - vSphere client connections toESX welcomes also directly works very well - don't show no problems and everything seems fine.
So - my first actions were to disconnect and reconnect one of the hosts. The operation failed with the error "a general error has occurred: unable to connect with the password of administrator of vim cannot configure VIM account on the host. After that, I followed the elimination of the VPXUSER process, restarted the agents and you reconnect the server for vSphere - to the same result. I then deleted the ESX host, removed the VPXUSER, restarted the agents and added that the host ESX back once again - but no change - the same exact error message. I don't see the VPXUSER ID are re-created by this process - so I guess that ESX and vSphere should know the ID and the password.
Nothing shows up in the var for this - but one of the articles above explains that as a result of the use of the PAM modules.
Just for fun, I also tried using the ROOT password and reallowing ROOT to connect via SSH - but I got the same failures. I also tried lifting the VPXUSER ID privleges but - same questions.
If - goes here - any ideas? I can give other details or screen caputres

ESX3:

#%PAM-1.0
1. Automatically generated by esxcfg-auth
/lib/security/$ISA/pam_unix.so account required

AUTH required /lib/security/$ISA/pam_env.so

AUTH sufficient /lib/security/$ISA/pam_unix.so likeauth nullok

AUTH required /lib/security/$ISA/pam_deny.so

attempts at password required /lib/security/$ISA/pam_cracklib.so = 3

shadow md5 password sufficient /lib/security/$ISA/pam_unix.so nullok use_authtok

/lib/security/$ISA/pam_deny.so password required

session required /lib/security/$ISA/pam_limits.so

session required /lib/security/$ISA/pam_unix.so

ESX4

#%PAM-1.0

account required pam_per_user.so /etc/pam.d/login.map

AUTH required pam_per_user.so /etc/pam.d/login.map

/etc/pam.d/login.map pam_per_user.so password required

/etc/pam.d/login.map pam_per_user.so sign in required

-KjB

Switch Cisco 2960/3560 = > recovery password and default settings with the button Mode

Hi Experts,

I have some confusion with the button Mode with cisco 2960/3560 switches.

I read on many forums and articles, but where things are not clear.

a place given 3 seconds and somewhere is given 7 or 10 seconds.

Qus1), what is the exact time to press/hold Mode button to perform two following tasks:

A. password recovery (according to my knowledge 3 sec) good or bad?

Configuration of the switch (start + run) would be safe

After the recovery of password? Yes or no

B. factory default (according to my knowledge 10 dry) good or bad?

I'm afraid, because if I press mode button more than 3 seconds, then

It will delete any configuration of cisco switch. Yes or no

Qus2) I want to recover the catalyst 2960/3560 switch password without

Start/run configuration to lose. That is my main concern.

Please tell me how to do this, what will be the time keeping Mode buttom

in a few seconds?

Qus3) which means this line

"If the password recovery mechanism is disabled in switch

then you will lose all the config.

This sentence has been given on this forum url

https://supportforums.Cisco.com/thread/140848

KS

Attach a terminal or PC with terminal emulation (for example, Hyper Terminal) port console switch.

Use the following terminal settings:
- Bits per second (baud): 9600
- Data bits: 8
- Parity: None
- Stop bits: 1
- Flow control: Xon/Xoff
Note: For more information on the wiring and connection of a terminal to the console port, refer to connecting a Terminal to the Console Port of Catalyst switches.

Unplug the power cable.

The power switch and take it to the switch: command prompt:

2900XL, 3500XL, 2940, 2950, 2960, 2970, 3550, 3560, and 3750 switches of the series, to do this:

Press and hold the mode button located on the left side of the façade, while you reconnect the power cable from the switch.

2960, 2970 Release the Mode button when the SYSTEM LED flashes orange and then turns green. When you release the Mode button, the SYSTEM LED flashes green.

3560, 3750 Release the Mode button after about 15 seconds when the SYSTEM LED turns green. When you release the Mode button, the SYSTEM LED flashes green.

The system was interrupted before the flash at the end file system initialization

loading the operating system software:

flash_init

load_helper

boot

switch:

Run the flash_init command.
```
switch: flash_init Initializing Flash... flashfs[0]: 143 files, 4 directories flashfs[0]: 0 orphaned files, 0 orphaned directories flashfs[0]: Total bytes: 3612672 flashfs[0]: Bytes used: 2729472 flashfs[0]: Bytes available: 883200 flashfs[0]: flashfs fsck took 86 seconds ....done Initializing Flash. Boot Sector Filesystem (bs:) installed, fsid: 3 Parameter Block Filesystem (pb:) installed, fsid: 4 switch: !--- This output is from a 2900XL switch. Output from !--- other switches will vary slightly.
```
Run the load_helper command.
```
switch: load_helper switch:
```
Question the dir flash: command.

Note: Be sure to type a colon ":" after the dir flash.

Appears in the file system of the switch:
```
switch: dir flash: Directory of flash:/ 2    -rwx  1803357                  c3500xl-c3h2s-mz.120-5.WC7.bin !--- This is the current version of software. 4    -rwx  1131                     config.text !--- This is the configuration file. 5    -rwx  109                      info 6    -rwx  389                      env_vars 7    drwx  640                      html 18   -rwx  109                      info.ver 403968 bytes available (3208704 bytes used) switch: !--- This output is from a 3500XL switch. Output from !--- other switches will vary slightly.
```
Type rename flash: flash: config.old config.text to rename the configuration file.
```
switch: rename flash:config.text flash:config.old switch: !--- The config.text file contains the password !--- definition.
```
Issue the boot command to boot the system.
```
switch: boot Loading "flash:c3500xl-c3h2s-mz.120-5.WC7.bin"...############################### ################################################################################ ###################################################################### File "flash:c3500xl-c3h2s-mz.120-5.WC7.bin" uncompressed and installed, entry po int: 0x3000 executing... !--- Output suppressed. !--- This output is from a 3500XL switch. Output from other switches !--- will vary slightly.
```
Enter "n" at the prompt to abort the initial configuration dialog box.
```
--- System Configuration Dialog --- At any point you may enter a question mark '?' for help. Use ctrl-c to abort configuration dialog at any prompt. Default settings are in square brackets '[]'. Continue with configuration dialog? [yes/no]: n !--- Type "n" for no. Press RETURN to get started. !--- Press Return or Enter. Switch> !--- The Switch> prompt is displayed.
```
At the switch prompt, type en to enter a mode.
```
Switch>en Switch#
```
Password recovery

Type rename flash: config.old flash: config.text to rename the configuration file with its original name.
```
Switch#rename flash:config.old flash:config.text Destination filename [config.text] !--- Press Return or Enter. Switch#
```
Copy the configuration file in the memory.
```
Switch#copy flash:config.text system:running-config Destination filename [running-config]? !--- Press Return or Enter. 1131 bytes copied in 0.760 secs Sw1#
```
The configuration file is now reloaded.

Replace the current passwords that you do not know. Choose a password with at least one capital letter, one number and one special character.

Note: Replace passwords that are required. You must crush not all passwords listed.
```
Sw1# conf t !--- To overwrite existing secret password Sw1(config)#enable secret !--- To overwrite existing enable password Sw1(config)#enable password !--- To overwrite existing vty password Sw1(config)#line vty 0 15 Sw1(config-line)#password Sw1(config-line)#login !--- To overwrite existing console password Sw1(config-line)#line con 0 Sw1(config-line)#password 
```
Write the running configuration in the configuration file with the write memory command.
```
Sw1#write memory Building configuration... [OK] Sw1#
```
For factory reset:

do not give under the control of factory reset
```
Switch#copy flash:config.text system:running-config
```
can I copy the running configuration to Flash

Switch flash running-config #copy:

Destination file name [running-config]?

Building configuration...

[OK]

Switch #copy running-config startup-config

Name of destination file [startup-config]?

Building configuration...

[OK]

Review the link for more information below

http://www.Cisco.com/en/us/products/hw/switches/ps628/products_password_recovery09186a0080094184.shtml

Please note the useful messages.

Concerning
Vesta
"Everybody is genius." But if you judge a fish by its ability to climb on a tree, he will live his entire life, believing that this is stupid. "

IAM trying to get into my own laptop it starts up but there has been a change in the name of the Director and had then caused a problem with the password which is not known if windows is not letting me do anything which must be given to this official stat

I tried, but the splash screen displays only the image and wants your password

http://support.Microsoft.com/default.aspx/KB/189126

"Microsoft's strategy concerning lost or forgotten passwords"

Microsoft cannot help you recover the passwords of the files and Microsoft who are lost or forgotten product features.

http://social.answers.Microsoft.com/forums/en-us/vistasecurity/thread/3eba3150-8742-4264-be9f-0daaad2282cd

Read theBANNING of cracking of passwords information tools information provided in these forums in the thread above posted byBill fill MSFT, moderator

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

I suggest you reinstall Vista:

Contact your computer manufacturer and ask them to send a recovery disk/s Vista set.

Normally, they do this for a cost of $ small.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

In addition, ask them if you have a recovery Partition on your computer/laptop to restore it to factory settings.

See if a manual provided with the computer or go to the manufacturer's website, email or you can call for information on how to make a recovery.

Normally, you have to press F10 or F11 at startup to start the recovery process...

Another way I've seen on some models is press F8 and go to a list of startup options, and launch a recovery of standards of plant with it, by selecting the repair option.

See you soon.

Mick Murphy - Microsoft partner

With the help of check box in number to add/subtract a value of 0.5

Hello

I use a formula that calculates working hours daily and then subtract a half hour for lunch if a check box is selected. The formula applies with the exception of the time 0.5 being added or subtracted. Any ideas? The box strives to subtract the Boolean value (0 or 1), I just need this value to be represented as 0.5 If you get my drift...

Thanks in advance!

Tender Hello,

Formula in D2 (fill down)

= B2−a2−if(C2,"0.5H","0h")

Kind regards

Ian.

Problem with the password suddenly failing to authenticate with MSN

Hello. I use Thunderbird version 24.5.0. on a Windows Vista operating system.
I use a pop framework to connect to my email.

My problem is when I try to check my e-mail MSN.com of Thunderbird account, I get the error message:
```
"Sending of password did not succeed. Mail server pop3.live.com responded: authentication failed"
```
This just started happening earlier today after having worked well for a very long time. I tried a number of things to solve this problem, including empty them the saved passwords, then reset my password on MSN and then to try the new password and nothing did. If I connect directly from the web browser on e-mail MSN account, it works fine. As far as I can see the password and user name that matches the full email address is entered correctly. Thanks for any help!

OK I solved the problem.

I looked through all the account settings hotmail/msn and found the so-called step 2 audit was active on the account. I do not remember to activate but I disabled it and everything works fine now.

Here is some info on step 2 check and mail apps:

http://Windows.Microsoft.com/en-CA/Windows/two-step-verification-FAQ

Cannot connect with the password

Hi all, this is my first time on this thread, but I hope you can help...

Recently my laptop had the habit of locking me, and I know that my password is good and was able to open a session to create a new admin account to delete some installed programs to... However I n t think its associated virus.

I get t no has no chance to create a recovery disk of password for it, fuck me this kind of here.
When I start the laptop and it happens to the logo Vista makes a radiosonde of noise of high ground as the gun shot on Duke nukem - OS/dos version lol.
So when I try to log in with the correct password... He says that it s wrong...
It's really annoying me now and I have no idea how to solve, I hope you can help!

Thanks in advance

LOL, he sorted and answered my own question... Maintained Shift key sticking down and left on hold of my password is incorrect

You have attempted to connect with the password wrong too many times. Please try again later.

I think I tried something like 4 - 5 times. Then I reset the pwd. After the reboot, the message appeared (the counter needs to be reset too once I reset the pwd). If only the system would have said e more soon as I have a few attempts I would have been more careful when you type in the pwd (I could remember, so I tried a bit of my common pwd).

Now I can't use my account, and I would like to know what "try again later" means exactly. Next time? Tomorrow? Next month? I have a kind of urgent need of making an international phone call. Unfortunately with a motive to the Japan is bit tricky and I could still not managed to get a. I was hoping to use Skype, but it seems that the only option I have is to find somewhere near a public phone in the room.

OK, I was able to post so the password worked now.

Can delete the whole post.

default role with the password - reality check

Similar Questions

Maybe you are looking for