Encrypt the sys and system tables

Similar Questions

• SYS and SYSTEM account status

  By default, the user SYS and SYSTEM are assigned the DEFAULT profile. According to this profile setting (PASSWORD_LIFE_TIME), the password is suppose to be expired every 180 days, but the SYS and system accounts State is OPEN even after 1 year, not EXPIRED. Pls someone clarify this point.

  USER NAME CREATED THE ACCOUNT_STATUS PROFILE

  ------------------------------ --------- -------------------------------- ------------------------------

  SYS 24 AUGUST 13 OPEN BY DEFAULT

  24 AUGUST 13 OPEN BY DEFAULT

  
  

  PROFILE RESOURCE_NAME RESOURCE LIMIT

  ------------------------------ -------------------------------- -------- ----------------------------------------

  PASSWORD_LIFE_TIME 180 DEFAULT PASSWORD

  
  

  1762432 wrote:

  When was the last time that someone actually tried to connect as SYSTEM?

  --> No not tried until now. This means if try to connect as a SYSTEM, then it gets only EXPIRED remains OPEN even if the PASSWORD_LIFE_TIME stretches limited 180.

  Have you read the link I gave you?  In particular, the discussion on the fig. 5 and fig. 6.

  If you had, you would have the answer to this question.

  I thought the account that EXPIRES based on PASSWORD_LIFE_TIME even gets does not attempt to connect DB via the account.

  Then, you thought wrong.  As I said earlier, the database does not spend time constantly trawling through accounts looking to see if something has passed its expiration date.  If she did that, he would never time to do something else.  He checks in the context of a connection request and responds

  as a result.

• Locked user SYS and SYSTEM

  DB version: 11.2.0.2
  Operating system: Solaris 10
  
  In our production of DBs, I noticed that the SYS and SYSTEM users are locked

  $ sqlplus / as sysdba
  
  SQL*Plus: Release 11.2.0.2.0 Production on Thu Jan 19 14:21:34 2012
  
  Copyright (c) 1982, 2010, Oracle.  All rights reserved.
  
  
  Connected to:
  Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - 64bit Production
  With the Partitioning option
  
  SQL> select username, account_status from dba_users where username like 'SYS%';
  
  USERNAME                       ACCOUNT_STATUS
  ------------------------------ --------------------------------
  SYSTEM                         LOCKED
  SYS                            LOCKED

  1. How can I connect to the SYS account despite the confinement. Is it because I have connected via external authentication?
  
  2. don't lock the user SYS standard practice? If so, why?

  1. How can I connect to the SYS account despite the confinement. Is it because I have connected via external authentication?

  you are the owner of the HOUSE of the ORACLE, you need to connect. Yes its because of external authentication.
  Of course you can not connect the user to the system. Have you tried?

  2. don't lock the user SYS standard practice? If so, why?

  Depends on the security, some cases, a user will be created with DBA roles.

• Why is password for SYS and SYSTEM different

  I use 10g Express
  During the installation I created the password and I use it as a password with SYS, but it does not work with the SYSTEM
  
  (I'm with Windows 7 on AMD x 64)
  
  Thank you.

  Hello

  The SYS and SYSTEM password are asked during the database creation process.

  May be that a different password has been set.

  Anyway, as you know the password for SYS, you can change the password for the SYSTEM with the following statement:

  alter user system identified by ;
  

  Hope this helps.
  Best regards
  Jean Valentine

• Expiry of the password for user SYS and SYSTEM

  My database 11g 2 on Redhat 5 has sys and system user password expired

  SQL> select username,account_status,EXPIRY_DATE
   from dba_users where username like 'SYS%';
    2
  USERNAME                       ACCOUNT_STATUS                   EXPIRY_DA
  ------------------------------ -------------------------------- ---------
  SYSMAN                         OPEN
  SYSTEM                         OPEN                             15-FEB-11
  SYS                            OPEN                             15-FEB-11

  But I can still connect the databsae with expired password t.
  
  Should I worry about the expiration of the password of the user these? For a normal user, I can not connect with expired password

  Dear user13148231,

  Here's an illustration;

  SQL> alter user sys account lock;
  
  User altered.
  SQL> select username, account_status, lock_date, expiry_date from dba_users where USERNAME='SYS';
  
  USERNAME                      ACCOUNT_STATUS                   LOCK_DATE EXPIRY_DA
  ------------------------------------------------------
  SYS                                      LOCKED                           20-AUG-10      23-FEB-09
  
  SQL> host sqlplus sys/password@opttest as sysdba
  
  SQL*Plus: Release 10.2.0.4.0 - Production on Fri Aug 20 12:25:43 2010
  
  Copyright (c) 1982, 2007, Oracle.  All Rights Reserved.
  
  Connected to:
  Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
  With the Partitioning, OLAP, Data Mining and Real Application Testing options
  
  SQL> exit
  Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
  With the Partitioning, OLAP, Data Mining and Real Application Testing options
  
  SQL> alter user sys identified by password password expire;
  
  User altered.
  
  SQL> select username, account_status, lock_date, expiry_date from dba_users where username='SYS';
  
  USERNAME                      ACCOUNT_STATUS                   LOCK_DATE EXPIRY_DA
  ------------------------------------------------------
  SYS                                EXPIRED & LOCKED                 20-AUG-10   20-AUG-10
  
  SQL> host sqlplus sys/password@opttest as sysdba
  
  SQL*Plus: Release 10.2.0.4.0 - Production on Fri Aug 20 12:27:02 2010
  
  Copyright (c) 1982, 2007, Oracle.  All Rights Reserved.
  
  Connected to:
  Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
  With the Partitioning, OLAP, Data Mining and Real Application Testing options
  
  SQL> exit
  Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
  With the Partitioning, OLAP, Data Mining and Real Application Testing options
  
  SQL> alter user sys identified by password account unlock;
  
  SQL> select username, account_status, lock_date, expiry_date from dba_users where username='SYS';
  
  USERNAME                       ACCOUNT_STATUS                   LOCK_DATE EXPIRY_DA
  ------------------------------ -------------------------------- --------- ---------
  SYS                            OPEN
  

  Even if the State expired and locked it's OK to connect to the database for the user SYS.

  SQL> alter user ogan identified by password account lock password expire;
  
  User altered.
  
  SQL> select username, account_status, lock_date, expiry_date from dba_users where username='OGAN';
  
  USERNAME                       ACCOUNT_STATUS                   LOCK_DATE EXPIRY_DA
  ------------------------------ -------------------------------- --------- ---------
  OGAN                           EXPIRED & LOCKED                 20-AUG-10 20-AUG-10
  
  SQL> conn ogan/password
  ERROR:
  ORA-28000: the account is locked
  
  Warning: You are no longer connected to ORACLE.
  SQL> conn / as sysdba
  Connected.
  SQL> alter user ogan account unlock;
  
  User altered.
  
  SQL> conn ogan/password@opttest
  ERROR:
  ORA-28001: the password has expired
  
  Changing password for ogan
  New password:
  Retype new password:
  Password changed
  Connected.
  SQL>
  

  Ogan

• sys and system schema are expired & locked after disaster recovery.

  Hi all
  
  In one of our development database, I conducted disaster recovery and he succeeded.
  After completing the recovery thre, sys and system schema are expired & locked.
  So, I'm not able to carry out any type of operation that is performed by the user sys and system.
  
  Database Version: 11g r2
  Operating system: RedHat 5.5
  
  Please please suggest me how can I solve this problem?
  
  Thank you
  Pitard.

  It might be

  What is the status of the users in the source database from which you have taken backup? Maybe he has so locked even after performing refresh status remains the same.

  See your profile stats below. All have remained unanswered. You simply test patience? If this isn't the case, close all threads as answered. Clean up the forum.

  User profile for pitard
  Pitard
        
        
  Handle: Pitard
  Status level: Beginner
  Join date: March 4, 2010
  Total messages: 9
  Total Questions: 8 (8 open)
  Viren name

  Published by: CKPT on February 20, 2012 19:47

• Where are the APEX_ACCESS_CONTROL and APEX_ACCESS_SETUP tables?

  Hi all
  
  I would like to create an authorisation schemes, but I don't know where the APEX_ACCESS_CONTROL and APEX_ACCESS_SETUP tables?
  
  Anyone, please let me know where they are - a path or a url will do! Thank you!
  
  Concerning
  Kamo

  Check Chapter 11 tuturial Apex advance documentation. The chapter will guide you in the process.

  Caesar_DLS

• sys and system of export and import

  Hi all
  
  is there a difference with exports or imports, usiing the sys user and user of the system.
  
  a schema export and import has to do with the system user only.
  
  What is the difference in fact.
  
  Thank you!

  Hello
  In general, never use sys - you can't export consistent reading on the one hand, that the sys user. As long as the user you run expdp/impdp a permission/imp_full_database, they should be able to unload/load anything.

  SYS the property in the goods may not be imported/exported in any case. tab$ is for example a table in sys but rows in it are added/removed by sql recursive create/delete table implementation.

  Kind regards
  Harry

• Subsidies granted by user SYS and SYSTEM

  Hi all
  
  Please, help me to understand this problem.
  
  I have a few schema named maps_ref where I create a view. (table abc discovers abc01).
  Here, I have granted the create view, creates all privs view to maps_ref by linking the SYS as SYSDBA.
  He alllowed me to create the view.
  
  As a test, I revoked the privileges by connecting as a SYSTEM and he revoked the privileges granted by SYS as SYSDBA.
  Later, of course, I couldn't create the view.
  
  This means that subsidies granted by SYS as SYSDBA resumable system however SYSDBA is then more powerful SYSTEM?
  
  I'm a little confused how it worked? Please explain.
  
  Rgds,
  Aashish

  Hello

  SYS is not normal user and you are not able to connect without clause SYSDBA.

  sqlplus sys@test

  SQL * more: version 11.1.0.7.0 - Production on Wed Apr 8 09:48:37 2009

  Copyright (c) 1982, 2008, Oracle. All rights reserved.

  Enter the password:
  ERROR:
  ORA-28009: connection as SYS must be SYSDBA or SYSOPER

  Enter the user name:

  sqlplus sys@test as sysdba

  SQL * more: version 11.1.0.7.0 - Production on Wed Apr 8 09:48:55 2009

  Copyright (c) 1982, 2008, Oracle. All rights reserved.

  Enter the password:

  Connected to:
  Oracle Database 11 g Enterprise Edition Release 11.1.0.7.0 - 64 bit Production
  With partitioning, OLAP, Data Mining and Real Application Testing options

  SQL >

  Kind regards
  Tom
  http://OracleDBA.cz

• Encrypt the password and store at USR_PASSWORD IOM 11.1.2

  Hi all
  
  I have a requirement to generate a random password when creating the user and store in the USR_PASSWORD attribute.
  
  I've implemented it using a pole and in the face of the slot event handler issues
  
  (1) password is get stored in plain text in DB
  (2) when this user is configured to any target system, get the decryption of password is not error.
  (3) cannot connect to self identity service - console saying incorrect password
  
  
  It would be great, if the password encryption procedure is shared (I want to encrypt it with the same key that IOM using by default).
  
  Thanks in advance.

  Hello

  You can use the encryption API.

  tcCryptoUtil.encrypt (, "DBSecretKey");
  pass this value in the usr_password field.

• in comparing the index and a table between instances PK

  Aloha!
  
  I'll compare the indices and the PK's (Constraint) of 3 instances.
  
  This table of s/n/s best use? The comparison is made on a specific schema only.
  
  Please be kind enough to write the script that I need or tables.
  
  PS
  Which is better dba_ind_columns or dba_objects?
  
  BR,
  Hades
  
  Published by: TheHades0210 on December 2, 2012 21:58

  TheHades0210 wrote:
  Hello

  Thank you for these elaborate explanation. I just want to know why under dba_ind_Columns INDEX_NAME, some of the names of the characters $ and #. Is it system generated index?

  very probably are generated, the system but not necessarily.

  If so, what application generates this index?

  I don't know what applications are installed in your DB.
  No objects appear spontaneously.
  Someone has published the DDL that created.

• Change for SYS and SYSTEM profile

  Is there an effect (or problem) by moving the SYS, SYSTEM RMAN & accounts SYSMAN DEFAULT profile to my user define the profile ($service_accounts). The main reason being I want to control password settings in the DEFAULT profile, which should not apply to service Oracle accounts.
  
  
  Kind regards
  
  Kevin

  Dear Kevin world countries,

  When a user is created they are put in DEFAULT the default profile

  You can create any user with the profile of your choice parameter. There is no limit to this topic. Here's the syntax;

  SQL > create ogan user identified by the profile password OGAN_PROF;

  If you want to use the default profile for newly created users, use it. Create another profile called for example SYSPROF and change the settings as you wish.

  Keep in mind that using profiles and changins profile settings parameter to TRUE resource_limit need.

  It will be useful,

  Ogan

• Update the BIOS and system health report question

  I have two questions to ask you.

  1. I just bought a Quad DV6T-7000 a month ago. I'm unable to create a report of health system through the control panel > performance & information > advanced tools > generate system health report.  I get an error saying "cannot run" with no other information. It apparently came from HP in this way. Something has been corrupted? I have configured my laptop the way I like it and have installed all programs and applications of my previous laptop, so I hope that I don't need to do an installation of windows 7 to fix this. It is not really important. But it should work.

  2 HP Support Assistant automatically installs updates to bios, or is it something that has to be done manually? I am currently set to auto critical or important updates. There is an update of the bios (f.22 I think) available for my Pavilion DV6T - 7000 Quad Edition, however, I am wary to update my bios given the many problems that people have after doing an update their bios.  So far, HP support Assistant has not notified me of the update and I have problems with the problems it addresses. Should I be worried?

  Thank you, appreciate your making this feature expert day!

  CRS says:
  

  I have two questions to ask you.

  1. I just bought a Quad DV6T-7000 a month ago. I'm unable to create a report of health system through the control panel > performance & information > advanced tools > generate system health report.  I get an error saying "cannot run" with no other information. It apparently came from HP in this way. Something has been corrupted? I have configured my laptop the way I like it and have installed all programs and applications of my previous laptop, so I hope that I don't need to do an installation of windows 7 to fix this. It is not really important. But it should work. , You can run the System File Checker to see if there are problems of file system.  Open a command prompt with admin permissions and type sfc/scannow, and then on enter. The files of your operating system will be inspected and the files that are supposed to be corrupted or damaged will be replaced with fresh copies of the repository own Windows file.  If this does not resolve the problem, then I suggest that you run Windows update. There may be an update that resolves this problem

  2 HP Support Assistant automatically installs updates to bios, or is it something that has to be done manually? I am currently set to auto critical or important updates. There is an update of the bios (f.22 I think) available for my Pavilion DV6T - 7000 Quad Edition, however, I am wary to update my bios given the many problems that people have after doing an update their bios.  So far, HP support Assistant has not notified me of the update and I have problems with the problems it addresses. Should I be worried? I recommend not updating the BIOS if everything works. Updated the BIOS, just because you can, this is certainly an adventure risky for most people.

  Does your laptop have a UEFI environment.  This in fact safe update the BIOS if you decide to do.

   

  You can set the HP Support Assistant to install updates or to notify you when updates are available.

  I recommend that you do not set automatically update anything. My preference is that the Windows operating system and the laptop / desktop only doing what I want to do and when I want them to... That way I don't get surprises not unexpected and mysterious death blue screens or black screens.

     

  Thank you, appreciate your making this feature expert day!

  Greetings from nest,

  ERICO

• How a dimwit rolls back the changes it would bring to the certificates and system folders

  I have pls need help updated collapsed theres also a problem preventing troubleshooting; explore stops when he loves, and I'm sure I changed something I was not supposed too there at - it a way to change it back to the way its supposed to be or if I have to reinstall windows and a second mentioned something to do with certificates

  I have pls need help updated collapsed theres also a problem preventing troubleshooting; explore stops when he loves, and I'm sure I changed something I was not supposed too there at - it a way to change it back to the way its supposed to be or if I have to reinstall windows and a second mentioned something to do with certificates

  ====================================
  No guarantee... but it can be interesting to try to make a
  Restore the system to an hour before the beginning of the question.

  Windows 7 system restore: frequently asked questions
  http://Windows.Microsoft.com/en-us/Windows7/system-restore-frequently-asked-questions

• Journal of the external and bad table

  Hi, I defined the following access to my external table settings and LIMITS to REJECT the value 0:
  
  ACCESS SETTINGS
  (
  RECORDS DELIMITED by newline
  BADFILE BAD_DIR: 'CARDS.bad'
  LOG_DIR LOG file: 'CARDS.log'
  NODISCARDFILE
  FIELDS TERMINATED BY ', '.
  SURROUNDED OF POSSIBLY "" "
  TAILLELUE 1048576
  LRTRIM
  MISSING FIELD VALUES ARE NULL
  REJECT ROWS WITH ALL FIELDS ARE NULL
  
  
  I want to know whenever I have query the external table, my log file and the wrong file will be crushed or attached? I want that they be replaced.

  [LOGFILE/BADFILE/DISCARDFILE for external Tables | http://download-uk.oracle.com/docs/cd/B19306_01/server.102/b14215/et_params.htm#sthref1716]