Expdp unable the aud$ table as the user sys

Similar Questions

• Prevent the user SYS acess to non-redacted data in Oracle 12 c

  Hello

  I have a strategy of writing created with the following options:

  function_type = > DBMS_REDACT. FULL,

  expression = > ' sys_context ("userenv", "session_user")! = "MY_REDACTION" ')

  By default users SYS has the following privileges to the redaction: EXEMPT DML DRAFTING a STRATEGY and EXEMPT DDL WRITING

  the DBA role has the following privileges to the redaction: EXEMPT DDL DRAFTING a STRATEGY and EXEMPT DML WRITING

  the EEXP_FULL_DATABAS role has the following privileges to the redaction: POLICE TAX-FREE of REDACTION.

  When I revoke all these privileges users/roles above, the user SYS was always 'see' the non-redacted data.

  How can I prevent the SYS user does not ' see ' the non-redacted data?

  Thanks and greetings

  Hello Laury,

  We can't prevent the SYS to see the redacted data. It is exempt from these policies.

  You can prevent to access the table with the Vault database.

  Kind regards

  Vlad

• Failure to logon with the user SYS: ORA-01031: insufficient privileges

  Hello
  
  Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
  PL/SQL Release 11.2.0.1.0 - Production
  CORE 11.2.0.1.0 Production
  AMT for Linux: Version 11.2.0.1.0 - Production
  NLSRTL Version 11.2.0.1.0 - Production
  
  OS: CentOS 5.5
  
  I can't log in with the user SYS via PL/SQL Developer. I get the message: ORA-01031: insufficient privileges. PL/SQL Developer is installed on Windows 7 Professional. Version of the Oracle Client is 11.2.0.1.0. However, I connect successfully with SYSMAN and SYSTEM.
  For those who may wonder if I try to connect 'as sysdba' when I use the SYS user, the answer is YES, I do.
  In addition, I think that the name of the tool (PL/SQL Developer) does not matter because I think I'm going to face the same error with any other tool (but I mentioned just in case).
  
  Server side, I have no problem with the SYS user. I can connect via SQLPlus with connect / as sysdba or connect "virtue sysdba" without fault.
  
  The sec_case_sensitive_logon initialization parameter is set to FALSE
  SQL > show parameter sensi
  
  VALUE OF TYPE NAME
  ------------------------------------ ----------- ------------------------------
  SEC_CASE_SENSITIVE_LOGON boolean FALSE
  
  I use the local name to connect and client side, I have a tnanames.ora file. The sqlnet.ora file looks like this:

  SQLNET.AUTHENTICATION_SERVICES= (NTS)
  
  NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)

  I read in this forum (another thread) on the use of a password file. I created a password file using orapwd this way:

  orapwd file=orapwDB11G2 entries=100 ignorecase=y password=a_password

  where I replaced "a_password" with the SYS password.
  
  In fact, I'm not sure that the customer is influenced by the file password anyway because I said to use a local naming.
  
  Clues?
  
  Thank you very much!

  So your ORACLE_SID is planet but not DB11G2 , second password file must be located in $ORACLE_HOME/dbs location if you want to connect the planet of database/sid and therefore

  orapwd file= $ORACLE_HOME/dbs/orapwplanet password=syspass
  

  Then try again.

• Unable to connect using string using the user sys Linux linus connection

  Hello
  
  I am facing problem in the use of connection string when you connect as user sys on Linux OS
  
  For example:
  
  When I connect as
  
  sysoracle/sys as sysdba its connection.
  
  But when I provide the connection string as sys/sysoracle@TEST as sysdba its display with the error like:
  
  ORA-12505: TNS: listener is not currently know of SID in connect descriptor
  
  Any help will be benefitial for me
  
  Thanks and greetings

  Save your listener.ora as this with Oracle Home location has changed and that the reboot,

  SID_LIST_LISTENER =
    (SID_LIST =
      (SID_DESC =
        (SID_NAME = PLSExtProc)
        (ORACLE_HOME = E:\oracle\product\10.2.0\db_1)
        (PROGRAM = extproc)
      )
      (SID_DESC =
        (GLOBAL_DBNAME = TEST)
        (ORACLE_HOME = E:\oracle\product\10.2.0\db_1)
        (SID_NAME = TEST)
      )
    )
  
  LISTENER =
    (DESCRIPTION_LIST =
      (DESCRIPTION =
        (ADDRESS = (PROTOCOL = TCP)(HOST = oracle)(PORT = 1521))
      )
      (DESCRIPTION =
        (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC0))
      )
    )
  

  HTH
  Aman...

• Planner linking not post other than the user sys

  Hello
  
  The below mentioned job scheduler works successfully from the SYS user, but fails in the attempt of another user.
  
  Start
  SYS. DBMS_SCHEDULER. () CREATE_JOB
  job_name = > 'RUN_DDL_JOB ',.
  start_date = > SYSDATE,.
  repeat_interval = > NULL,
  End_date = > NULL,
  job_class = > 'DEFAULT_JOB_CLASS ',.
  job_type = > 'EXECUTABLE. "
  job_action = > "c:\windows\system32\cmd.exe /c C:\Anjan\run_ddl.bat > C:\Anjan\run_ddl.log',"
  auto_drop = > TRUE,
  enabled = > TRUE);
  end;
  
  
  In the User_Scheduler_Job_Run_Details table, error message below is,.
  ORA-27370: slave to the job could not launch an EXECUTABLE type work
  ORA-27300: dependent operation of the OS: access enforcement officer failed with the State: 2
  ORA-27301: OS Error Message: the system cannot find the specified file.
  ORA-27302: an error occurred in: 6a sjsec
  ORA-27303: additional information: the system cannot find the specified file.
  
  
  I found below thread similar to the problem, but no solution found.
  Re: executable dbms_scheduler errors
  
  
  I use Oracle 10.2.0.1.
  
  Thank you
  Anjan

  You can create the position of OEM Planner (Business Manager)

  Logged in as SYS to EM
  On the Administration tab > Scheduler option > link jobs

  Then create the job, you will find the OWNER under the NAME field, create the work by providing appropriate parameter values.

  Take a look at this below

  BEGIN
  () sys.dbms_scheduler.create_job
  job_name => ""ADMIN"". "" TEST_JOB' '.
  job_type-online "PLSQL_BLOCK."
  job_action => ' begin
  -Insert here the PL/SQL code
  end;',
  start_date-online systimestamp to the time zone '+ 6:00 ',
  job_class-online "DEFAULT_JOB_CLASS."
  observations-online "test job"
  auto_drop => FALSE,
  enabled-online TRUE);
  END;

  In your scenario that should be: job_name => ' 'your_USER. RUN_DDL_JOB"", "
  change the prefix of your code, the i.e:user_name of schema name that you want to run the task

  This problem is related with the privileges on the work of the Planner, when your job owner is SYS, and if the user HR has no privilege to run the created SYSTEM of jobs, he is unable to perform this work as HR.
  by creating employment by above way you actually create work for your user name and give him the privilege to run.

  You should look at these privileges below

  JOB SCHEDULER OBJECTS: The following privileges are necessary to perform procedures in the DBMS_SCHEDULER package.
  CREATE JOB to create jobs, schedules and programs in the scheme of the dealer
  CREATE ANY JOB create, modify or delete jobs, schedules and programs in any schema
  Note: This extremely powerful privilege allows the recipient to run code as any other user. She should be granted with caution.

  RUN ANY PROGRAM use any program in a job in the scheme of the dealer
  EXECUTE ANY CLASS specify no job in a job class in the schema of the dealer
  SCHEDULER to MANAGE create, modify or delete no matter what group of class, window or work

  Published by: adnanKaysar on April 12, 2010 17:16

• Get ORA-00942 error with the clause, but not when the user sys.

  Hello

  About 3 weeks ago we increased our memary to PGA_aggregate_target = 60 GB, SGA_target = 58 GB Oracle instance. About 1 week ago our cognos user started having errors ORA-00942 for these queries generated with clause, with the same authorization. i.e.

  with 'aBmtQuerySubject4' as
  (select "BANK_NOTE_ADI_INFO_T". ' ' PRINT_BATCH_ID ' 'PRINT_BATCH_ID '.
  'BANK_NOTE_ADI_INFO_T '. ' ' PROCESS_RUN_DT ' 'PROCESS_RUN_DT '.
  'BANK_NOTE_ADI_INFO_T '. ' ' RDP_ID ' 'RDP_ID '.
  'BANK_NOTE_ADI_INFO_T '. ' ' FI_ID ' 'FI_ID '.
  'BANK_NOTE_ADI_INFO_T '. ' ' DEPOSIT_NB ' 'DEPOSIT_NB '.
  'BANK_NOTE_ADI_INFO_T '. ' ' PROCESS_MACHINE_ID ' 'PROCESS_MACHINE_ID '.
  'BANK_NOTE_ADI_INFO_T '. ' ' OUTPUT_STACKER_TYPE_CE ' 'OUTPUT_STACKER_TYPE_CE '.
  'BANK_NOTE_ADI_INFO_T '. ' ' PARTITION_KEY ' 'PARTITION_KEY '.
  'BANK_NOTE_ADI_INFO_T '. ' ' LOAD_ID ' 'LOAD_ID '.
  'BANK_NOTE_ADI_INFO_T '. ' ' SERIAL_NUMBER_ID ' 'SERIAL_NUMBER_ID '.
  'BANK_NOTE_ADI_INFO_T '. ' ' SHIFT_NB ' 'SHIFT_NB '.
  'BANK_NOTE_ADI_INFO_T '. ' ' BANK_NOTE_COUNT_NB ' 'BANK_NOTE_COUNT_NB '.
  of "BOISI '." BANK_NOTE_ADI_INFO_T' 'BANK_NOTE_ADI_INFO_T '.
  )
  'CountResultQuery5' as
  (select count ("aBmtQuerySubject4". "BANK_NOTE_COUNT_NB") 'C_1' "
  , count (1) 'C_2' of 'aBmtQuerySubject4 '.
  After having count (*) > 0)
  Select 'CountResultQuery5 '. "' C_2 ' 'Count1.
  of 'CountResultQuery5 '.
  ;

  
  with 'aBmtQuerySubject4' as
  (select "BANK_NOTE_ADI_INFO_T". ' ' LOAD_ID ' 'LOAD_ID '.
  of "BOISI '." BANK_NOTE_ADI_INFO_T' 'BANK_NOTE_ADI_INFO_T '.
  )
  'CountResultQuery5' as
  (select count ("aBmtQuerySubject4". "LOAD_ID") 'C_1' "
  , count (1) 'C_2 '.
  of 'aBmtQuerySubject4' having count (*) > 0
  )
  Select 'CountResultQuery5 '. "' C_2 ' 'Count1' of 'CountResultQuery5 '.
  ;

  -output like:

  'BANK_NOTE_ADI_INFO_T '. ' ' PROCESS_RUN_DT ' 'PROCESS_RUN_DT '.
  *
  ERROR at line 3:
  ORA-00942: table or view does not exist

  
  of "BOISI '." BANK_NOTE_ADI_INFO_T' 'BANK_NOTE_ADI_INFO_T '.
  *
  ERROR at line 3:
  ORA-00942: table or view does not exist

  Since 2 days ago, we get ORA-0403.

  One thing I noticed that the coguser can run above queries correctly after they are run by a user sys...

  Could you please help me on how I can resolve ORA-00942 error?

  Thank you very much, much in advance for all your help and your advice! :-)

  Jihong.

  "One thing I've noticed the coguser can run over queries correctly after they are run by a user sys... »

  Jihong,

  Do you mean that queries can be run successfully as a sys user, or as long as once a sys cognos user user has run the query at least once?

  Gerard

• Error in creating a Net connection with the user "sys" DBA

  I can log in as user "sys" on site, but can not
  connect as user sys as a network connection.
  
  situation #1: connect locally... no problem...
  
  [oracle@localhost ~] $ sqlplus
  
  SQL * more: Production of release 11.2.0.1.0 sam may 12 23:31:39 2012
  
  Copyright (c) 1982, 2009, Oracle. All rights reserved.
  
  Enter the user name: sys as sysdba
  Enter the password:
  
  Connected to:
  Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
  
  situation #2: network connection... "sys" error message - no sufficient privileges...
  
  SQL > connect sys@orcl as sysdba
  Enter the password:
  ERROR:
  ORA-01031: insufficient privileges
  
  situation #3: connect network as user 'system'... no problem...
  
  SQL > connect system@orcl
  Enter the password:
  Connected.

  GabyPR wrote:
  I can log in as user "sys" on site, but can not
  connect as user sys as a network connection.

  situation #1: connect locally... no problem...

  [oracle@localhost ~] $ sqlplus

  SQL * more: Production of release 11.2.0.1.0 sam may 12 23:31:39 2012

  Copyright (c) 1982, 2009, Oracle. All rights reserved.

  Enter the user name: sys as sysdba
  Enter the password:

  Connected to:
  Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production

  situation #2: network connection... "sys" error message - no sufficient privileges...

  SQL > connect sys@orcl as sysdba
  Enter the password:
  ERROR:
  ORA-01031: insufficient privileges

  be GRATEFUL in this case; otherwise anyone can connect to DB from anywhere 'as sysdba'

• Cannot connect on rman after the user sys password change

  Hello
  After to change the password for user sys does not connect with: target rman.
  Can someone help me?
  
  Eder

  OK, good luck, if your problem is resolved, examine fence wire and reward the answers 'correct' and 'useful '...

• How to revoke the right to select the user on the user sys normal?

  I had revoked the privilege in any dictionary, but in the normal user schema, I can also choose * to object
  And I checked the parameter system: o7_dictionary_accessibility = flase and restart the database, it can always still selected
  How can I revoke privileges select sys normal user? Thank you very much
  
  env
  9i
  AIX 5.3

  user9376616 wrote:
  I mean I want to revoke the privilege slect on the current user object

  And this useless IMO all because you don't work all the time with just with your own objects, but all need other objects in schema as well. How, you would get to know about them, if you can not select ALL_ * views? Is not a valid obligation and as I said, I don't worry about everything and am not suggesting that you do too!

  HTH
  Aman...

• How to remove the db link in other patterns as user sys?

  Hi all.
  
  I would like to table db links in other patterns as user sys.
  
  I got the error when droping a link as the user sys.
  
  -------------------------------------------------------------------------------------
  Papa2:SQL > drop database link kht. "" TT ";
  Drop database link kht. "" TT ".
  *
  ERROR on line 1:
  ORA-02024: database link not found
  -------------------------------------------------------------------------------------
  
  Can someone help me?
  
  Thanks in advance.
  Best Rregards.

  869578 wrote:
  Hi all.

  I would like to table db links in other patterns as user sys.

  I got the error when droping a link as the user sys.

  -------------------------------------------------------------------------------------
  Papa2:SQL > drop database link kht. "" TT ";
  Drop database link kht. "" TT ".
  *
  ERROR on line 1:
  ORA-02024: database link not found
  -------------------------------------------------------------------------------------

  Can someone help me?

  Thanks in advance.
  Best Rregards.

  There is no miracle solution

  http://download.Oracle.com/docs/CD/B28359_01/server.111/b28310/ds_admin004.htm#i1008271

  "If the link is private, it must be in your scheme."

• Expiry of the password for user SYS and SYSTEM

  My database 11g 2 on Redhat 5 has sys and system user password expired

  SQL> select username,account_status,EXPIRY_DATE
   from dba_users where username like 'SYS%';
    2
  USERNAME                       ACCOUNT_STATUS                   EXPIRY_DA
  ------------------------------ -------------------------------- ---------
  SYSMAN                         OPEN
  SYSTEM                         OPEN                             15-FEB-11
  SYS                            OPEN                             15-FEB-11

  But I can still connect the databsae with expired password t.
  
  Should I worry about the expiration of the password of the user these? For a normal user, I can not connect with expired password

  Dear user13148231,

  Here's an illustration;

  SQL> alter user sys account lock;
  
  User altered.
  SQL> select username, account_status, lock_date, expiry_date from dba_users where USERNAME='SYS';
  
  USERNAME                      ACCOUNT_STATUS                   LOCK_DATE EXPIRY_DA
  ------------------------------------------------------
  SYS                                      LOCKED                           20-AUG-10      23-FEB-09
  
  SQL> host sqlplus sys/password@opttest as sysdba
  
  SQL*Plus: Release 10.2.0.4.0 - Production on Fri Aug 20 12:25:43 2010
  
  Copyright (c) 1982, 2007, Oracle.  All Rights Reserved.
  
  Connected to:
  Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
  With the Partitioning, OLAP, Data Mining and Real Application Testing options
  
  SQL> exit
  Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
  With the Partitioning, OLAP, Data Mining and Real Application Testing options
  
  SQL> alter user sys identified by password password expire;
  
  User altered.
  
  SQL> select username, account_status, lock_date, expiry_date from dba_users where username='SYS';
  
  USERNAME                      ACCOUNT_STATUS                   LOCK_DATE EXPIRY_DA
  ------------------------------------------------------
  SYS                                EXPIRED & LOCKED                 20-AUG-10   20-AUG-10
  
  SQL> host sqlplus sys/password@opttest as sysdba
  
  SQL*Plus: Release 10.2.0.4.0 - Production on Fri Aug 20 12:27:02 2010
  
  Copyright (c) 1982, 2007, Oracle.  All Rights Reserved.
  
  Connected to:
  Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
  With the Partitioning, OLAP, Data Mining and Real Application Testing options
  
  SQL> exit
  Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
  With the Partitioning, OLAP, Data Mining and Real Application Testing options
  
  SQL> alter user sys identified by password account unlock;
  
  SQL> select username, account_status, lock_date, expiry_date from dba_users where username='SYS';
  
  USERNAME                       ACCOUNT_STATUS                   LOCK_DATE EXPIRY_DA
  ------------------------------ -------------------------------- --------- ---------
  SYS                            OPEN
  

  Even if the State expired and locked it's OK to connect to the database for the user SYS.

  SQL> alter user ogan identified by password account lock password expire;
  
  User altered.
  
  SQL> select username, account_status, lock_date, expiry_date from dba_users where username='OGAN';
  
  USERNAME                       ACCOUNT_STATUS                   LOCK_DATE EXPIRY_DA
  ------------------------------ -------------------------------- --------- ---------
  OGAN                           EXPIRED & LOCKED                 20-AUG-10 20-AUG-10
  
  SQL> conn ogan/password
  ERROR:
  ORA-28000: the account is locked
  
  Warning: You are no longer connected to ORACLE.
  SQL> conn / as sysdba
  Connected.
  SQL> alter user ogan account unlock;
  
  User altered.
  
  SQL> conn ogan/password@opttest
  ERROR:
  ORA-28001: the password has expired
  
  Changing password for ogan
  New password:
  Retype new password:
  Password changed
  Connected.
  SQL>
  

  Ogan

• Locked user SYS and SYSTEM

  DB version: 11.2.0.2
  Operating system: Solaris 10
  
  In our production of DBs, I noticed that the SYS and SYSTEM users are locked

  $ sqlplus / as sysdba
  
  SQL*Plus: Release 11.2.0.2.0 Production on Thu Jan 19 14:21:34 2012
  
  Copyright (c) 1982, 2010, Oracle.  All rights reserved.
  
  
  Connected to:
  Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - 64bit Production
  With the Partitioning option
  
  SQL> select username, account_status from dba_users where username like 'SYS%';
  
  USERNAME                       ACCOUNT_STATUS
  ------------------------------ --------------------------------
  SYSTEM                         LOCKED
  SYS                            LOCKED

  1. How can I connect to the SYS account despite the confinement. Is it because I have connected via external authentication?
  
  2. don't lock the user SYS standard practice? If so, why?

  1. How can I connect to the SYS account despite the confinement. Is it because I have connected via external authentication?

  you are the owner of the HOUSE of the ORACLE, you need to connect. Yes its because of external authentication.
  Of course you can not connect the user to the system. Have you tried?

  2. don't lock the user SYS standard practice? If so, why?

  Depends on the security, some cases, a user will be created with DBA roles.

• ORA-01031: insufficient privileges with user SYS when I try to log

  Hello
  
  When I try to connect to our database with the user SYS via TOAD he gives below error.
  ORA-01031: insufficient privileges
  
  If I use SQLPLUS "/ as sysdba" it's conningting but if I try to use another tool like TOAD I can't connect.
  
  You could someone help me what is the problem andhow can I connect the user SYS with TOAD.
  version of database is 9.2.0.8.
  
  Thank you and best regards,

  You set remote_login_passwordfile exclusive.

• issue of pricing user sys

  The user sys and system can be locked? If so, what is the effect on the database?
  
  My user sys and system database showing has already expired and locke date is null.
  
  Please suggest.
  

  USERNAME                       LOCK_DATE EXPIRY_DA
  ------------------------------ --------- ---------
  ACCOUNT_STATUS
  --------------------------------
  MGMT_VIEW                                18-FEB-11
  OPEN
  
  SYS                                      18-FEB-11
  OPEN
  
  SYSTEM                                   01-MAR-11
  OPEN

  You need to use or create a profile for which PASSWORD_LIFE_TIME is set to UNLIMITED. It is normally the case for the DEFAULT profile.

  Example to use the DEFAULT profile:

  SQL> alter user sys profile default;
  
  User altered.
  

  For example, to create a profile:

  SQL> create profile sp limit password_life_time unlimited;
  
  Profile created.
  
  SQL> alter user sys profile sp;
  
  User altered.
  

  But you must take into account all the resources limits related to the PASSWORD_LIFE_TIME not only profile.

• user sys and locking system

  Hi all
  
  We have 10.2.0.4 on solaris 10.
  
  Currently we have I.T. audit on our environment, and the auditor commented to lock the user sys and system and use a single user with any name (not the name generic oracle) and grant him the privilege of sys and system and use this user for admin purposes. is this true?... is it recommended?
  
  Please notify

  Hello

  I think that this is not a good way to lock SYS.

  In addition, if you connect as administrator (root for Unix/linux) operating system on the server and use
  Authentication of the BONE and then, you can connect to SYS AS SYSDBA anyway.

  So, in fact, it is not possible to lock SYS even if you run the following:

  ALTER USER SYS ACCOUNT LOCK;
  

  If you want to prevent access on SYS, you must set a password long and complex and
  apply the same rule for the admin / root user OS.

  These passwords must be known very little and well - to identify the people and written nowhere
  (in files or scripts).

  Plus more, you should restrict DBA role to SYS and SYSTEM and remove this powerful role
  other Oracle users.

  Then, you can enable the CHECK in order to control the connection to the session database and,.
  create a LOGIN TRIGGER to verify the connection, the workstation, the program end-users
  that connect to the database.

  In 10g, DBConsole EM shows an alert whenever a user is logged on with SYS.

  Please find attached, an interesting paper written by Pete Finigan on this topic:

  http://www.insight.co.UK/files/presentations/hacking%20and%20securing%20Oracle.PDF

  Hope this helps.
  Best regards
  Jean Valentine