Security problem for sqlplus / as sysdba

Hi all

11.2.0.1

My boss is not comfortable with the command "sqlplus / as sysdba.  It seems would prefer that a name of user and password be used or forced? as in 'sqlplus sys/change_on_install as sysdba'

Is there really an advantage or a drawback of this command in terms of security?

Your comment is very much appreciated.

Merry Christmas to all!

Thank you

pK

In addition to the response of Hemant see this demo:

C:\Windows\System32>sqlplus / as sysdba

SQL * more: Production release 11.2.0.1.0 Thu Dec 26 10:58:07 2013

Copyright (c) 1982, 2010, Oracle.  All rights reserved.

Connected to:

Oracle Database 11 g Enterprise Edition Release 11.2.0.1.0 - 64 bit Production

With partitioning, OLAP, Data Mining and Real Application Testing options

C:\Windows\System32>type E:\app\serverroom\product\11.2.0\dbhome_1\NETWORK\ADMIN\sqlnet.ora

sqlnet.ora # Network Configuration file: E:\app\serverroom\product\11.2.0\dbhome_1\network\admin\sqlnet.ora

# Generated by Oracle configuration tools.

# This file is actually generated by netca. But if customers can opt for

# install 'Software Only', this file does not exist and without the native

authentication #, they will not be able to connect to the database on NT.

SQLNET. AUTHENTICATION_SERVICES = (NTS)

NAMES. DIRECTORY_PATH = (TNSNAMES, EZCONNECT)

I am able to connect as / dBA because I SQLNET. AUTHENTICATION_SERVICES = (NTS)

OK, now I am just cheigng NTS to ZERO and now tries to connect / as sydba:

C:\Windows\System32>type E:\app\serverroom\product\11.2.0\dbhome_1\NETWORK\ADMIN\sqlnet.ora

sqlnet.ora # Network Configuration file: E:\app\serverroom\product\11.2.0\dbhome_1\network\admin\sqlnet.ora

# Generated by Oracle configuration tools.

# This file is actually generated by netca. But if customers can opt for

# install 'Software Only', this file does not exist and without the native

authentication #, they will not be able to connect to the database on NT.

SQLNET. AUTHENTICATION_SERVICES = (NONE)

NAMES. DIRECTORY_PATH = (TNSNAMES, EZCONNECT)

C:\Windows\System32>sqlplus / as sysdba

SQL * more: Production release 11.2.0.1.0 Thu Dec 26 11:02:31 2013

Copyright (c) 1982, 2010, Oracle.  All rights reserved.

ERROR:

ORA-01031: insufficient privileges

Enter the user name:

ERROR:

ORA-01017: name of user and password invalid. connection refused

Enter the user name:

ERROR:

ORA-01017: name of user and password invalid. connection refused

SP2-0157: unable to connect to ORACLE after 3 attempts, leaving SQL * more

SYS C:\Windows\System32>sqlplus / * as sysdba

SQL * more: Production release 11.2.0.1.0 Thu Dec 26 11:02:43 2013

Copyright (c) 1982, 2010, Oracle.  All rights reserved.

Connected to:

Oracle Database 11 g Enterprise Edition Release 11.2.0.1.0 - 64 bit Production

With partitioning, OLAP, Data Mining and Real Application Testing options

C:\Windows\System32 >

So, just change SQLNET. AUTHENTICATION_SERVICES (NTS) in SQLNET. AUTHENTICATION_SERVICES (None) in sqlnet.ora and you did.

Concerning

Girish Sharma

Tags: Database

Similar Questions

  • SG300 security problem for the Switch

    I think it's a security risk to have a port configured as anything other than access if it's only to be "dumb" connected hosts (printers, workstations, etc.).  So, I usually only assign the VLAN management as the PVID of a trunk port that goes to a server or another switch / virtual machine host and a port configured in the access mode with him VLAN management implemented because its PVID (unidentified), and then a PC can be connected directly to access the web management interface.

    My concern is that no matter what VLAN I assign a port to, both when trunk or access, I can connect a PC and navigate to any IP VLAN (*. 254) and press canvas logical interface of the switch.  What a security risk?  How can I configure the switch so that the only way to access the management interface is via a host that is directly connected to a port that has the management VLAN, as is PVID?

    That sounds about right. But something can be done about it.

    Let's say that there are management VLAN 10. Also, there is a production 5 VLAN - 20, 30, 40, 50, 60. It is a place that allows traffic to pass from one VLAN to the other router.

    Someone of VLAN 50 will be able to access the 10 VLAN (VLAN management).

    By implementing a firewall on the router we can restrict access to certain hosts or networks to VLAN 10. For example, VLAN 20 is admin VLAN (your computer is connected to this VLAN), so we load the firewall to reject all traffic to VLAN 10 unless it comes from VLAN 20.

    At this point, there will be no access to the page web of the switch to anyone else than you.

  • Security problem for the source code

    Hello guys '

    I have a question about the safety of coding. So, I know that anyone can create .jar .java or .class file.

    And my question:

    Is it possible to create the .cod file .java file? I think the best solution to save the source code uses secure obfuscator.

    Do you use the Java obfuscator? What obfuscator is the best?

    Please share your knowledge with me ' guy

    TNX'

    You would like to read the following Article:

    How to-obfuscate code in a BlackBerry application
    Article number: DB-00438

    http://www.BlackBerry.com/knowledgecenterpublic/livelink.exe/fetch/2000/348583/800901/How_To_-_Obfus...

    I know that a BlackBerry development company using Proguard.

  • sqlplus virtue sysdba problem

    Hello

    Server: windows
    version (Oracle): 10.1.0.2.0

    Its not letting me connect using sqlplus / as sysdba command...
    However I can connect with the connection string using sys...
    I added in the ora_dba under Computer Management Group

    SQLNET.ora also contains the NTS parameter

    Help, please
    Arun Kumar

    Hi Arun,

    : \>sqlplus ' [email protected]/sys as sysdba'

    Here the name of your db is BPPR but you set local C:\>set = bprr and try?

    Ravi

  • sqlplus / as sysdba

    I am faced with the following question:

    On a database of eBS 11.1 data, I see that all known "sqlplus / as sysdba ' does not work, he responds with: become insufficient

    I have the password and as far as I can see, so the SYS password gets validated positively, but then he says I have to use the SYSDBA role to login as SYS, and that's the problem.

    So, I'm looking for a solution for this problem. Maybe if I can connect as SYS, but WITHOUT the SYSDBA role, which can solve the problem as well.

    What happened to cause this (because it must have worked in a first time), there was a database upgrade, which may have been the cause of this problem.

    The eBS environment is a Vision 12.1.3

    It is not a production, or a copy of a production database (to be clear about this)

    PL see the troubleshooting steps in MOS Docs 761830.1 and 730067.1

    HTH
    Srini

  • sqlplus / as sysdba with insufficient privileges error

    I installed Oracle 10.2.0.1 on Windows XP. I then installed 10g Release 2 (10.2.0.4) Patch Set 3 for Microsoft Windows (32-bit). I imported a database using pump data and then tried to connect in Windows XP box so I could change the sys using password:
    sqlplus / as sysdba
    but I get the following error:
    sqlplus / as sysdba
    SQL*Plus: Release 10.2.0.4.0 - Production on Mon Dec 6 07:58:51 2010
    
    Copyright (c) 1982, 2007, Oracle.  All Rights Reserved.
    
    ERROR:
    ORA-01031: insufficient privileges
    My Windows XP box has access to two other databases that are located on a separate server. I then tried to connect using sqlplus to a user account that was on one of the other databases and it me connected. So my problem seems to be that when I enter:
    sqlplus / as sysdba
    He thinks I'm trying to connect to one of the other servers. How to connect using the command above and the target of the Windows XP box, I'm trying to connect from? How can I specify the server that I want to connect to in the above command?

    Just found it!

    Check $ORACLE_HOME/network/admin/sqlnet.ora file it provide SQLNET. AUTHENTICATION_SERVICES = (NTS)

    then try again

  • 2016 security-01 for 10.11.6 updating removes extensions?

    Hello

    I just installed 2016 update security-01 for OS X 10.11.6 El Capitan on the App Store on my MBP 17 ".  Everything seems to be fine; However, some Extensions (-> System Preferences |) Extensions) seem to have been deleted.  Specifically, the third extension of Finder ownCloud and extensions today are missing.

    On my MBP 13 "I installed the same level of security to date without encountering these problems.  There is not much difference between the software on both machines.  BitDefender Antivirus for Mac is running on both, but Little Snitch is only installed on the affected machine.

    I tried to reinstall the desktop client ownCloud in order to obtain the extension of Finder back, but that didn't work.  Or download the update of security on Apple's site and install it.

    Everyone knows about these problems?  If this is not the case, how can I recover at least the extensions today?  On the computer on which the security update installed successfully for reminders, calendar, Stocks, and weather conditions are checked and iTunes, clock, calculator, social and find my friends aren't.

    I solved this problem by using the information found in another thread.  This has to do with the Protection of the integrity of system of El Capitan.  It should be disabled to allow extensions to load.  Subsequently, it must be activated again.  The steps:

    1. start in recovery mode by pressing CMD + R during startup until the ringing is heard.

    2. once in recovery mode, open a Terminal session.

    3. Enter the command 'csrutil disable.

    4 restart the computer.

    5. check that the extension has been requested.

    6. close, then once more start in recovery mode.

    7. Enter the "enable csrutil" command

    8 restart the computer.

    I don't know why a MBP tripped over SIP, while the other apparently didn't, but the steps above seem to solve the problem.

  • Get a pop up message saying that I have a Firefox security problem

    I started to receive messages pop up saying that my Firefox browser has a problem of serious security and for me to give a phone number.
    !. It is a real message of Mozilla, or is it a phishing message?
    2 should Whtat action I take in the future?

    1. no that is not true. Mozilla has never communicates by telephone.
    Sounds like malware on your PC.
    2. ignore in the future.

    Sometimes a problem with Firefox can be a result of malware installed on your computer, you may not be aware of.

    You can try these free programs to search for malicious software that work with your existing anti-virus software:

    Microsoft Security Essentials is a good permanent antivirus for Windows 7/Vista/XP, if you do not already have one.

    More information can be found in the article troubleshooting Firefox problems caused by malware .

    This solve your problems? Please report to us!

  • Security: Firefox for mobile phishing and fake Web site

    Firefox for Android mobile load the page title on the URL space.

    If a fake site Web put the name of the page as the user of the website address can be confused.

    Suppose that the Bank Web site is www.mybank6567.ext

    The fake site may be fakebank.ext this Web site can have a SSL and the name of the page on mybank65.ext can be the url of the originating bank.

    If the user opens hidden mobile Firefox link can be easily confused.

    Look try to open this URL from Firefox Mobile on Android https://github.com/webcompat/web-bugs/issues/405 you must be logged on github.com after loading the page, if you see on top, it seems to be on the right site of the Bank, there is the simbol of lockpad, and the address that you read is the address of the Bank. The inexperienced user can be confusing.

    Oh, I'm sorry.
    It is very important issue and I hope that security of Firefox will be fixxed as soon as possible.

    Bad image for Firefox in this issue. Very dangerous.
    So here I end my question.

    Sorry, but I'm not registered in bugzilla and I won't record because I don't want to make my email address public so I hope more people continue to insist on bugzilla for this security problem.
    I stop my discussion here, I alerted on the security issue on Firefox Mobile.

  • OfficeJet Pro 8610: Get the Permission of HPeprint or security problem error

    I used printing wireless for several months successfully to print from my work computer, but am now able to print to the e-mail address provided.

    The error reads 'your message was not delivered because of a permission or a security problem.  It may have been rejected by a moderatory, the address can only accept email from certain senders, or another restriction to prevent any delivery.

    The Organization rejected your message: hpeprint.com. »

    I've reconfigured my printer to my router.  Any suggestions?

    Hey @LoreeW,

    Welcome to the Forum from HP Support. I hope you enjoy your experience here.

    I understand that you have a few problems with ePrint using your HP Officejet Pro 8610 e-all-in-one printer.  I want to help you with this.

    I recommend that you first check your printer to verify its intact ePrint connection:

    • Touch the icon (webservices)
    • If you see an address @hpeprint.com, I recommend that you try to send a test ePrint from a different email domain than what you use on your work computer.  If it prints correctly, we can rule out your printer as being a factor in this particular issue.  If your printer's Web services is enabled is more, re - enable.  Any problem would occur with this, click here to access another relevant post I created.  Scroll to my suggestion re: setting a manual DNS as this tends to help by allowing the webservices where fail the normal steps.

    If you were able to send your printer work ePrint of any e-mail domain other than the one you use at work, read on.  Click here to see an HP ePrint article that focuses on the various factors that can contribute jobs ePrint not printing not.  Note that some areas of corporate email may become incompatible with ePrint due to the presence of a digital signature in the outgoing message template.  EPrint jobs you send work meet these criteria?

    Please let me know the result of your troubleshooting by responding to this post.  Thanks again for reaching out in the Forums - we are always happy to help you.  If I helped you to solve the problem and that you liked this post, feel free to give me virtual accessories by clicking on the 'Thumbs Up' icon below.

    Have a great day!

  • A security update for Microsoft XML Core Services 4.0 Service Pack 2 for x 64 systems (KB954430)

    A security update for Microsoft XML Core Services 4.0 Service Pack 2 for x 64 systems (KB954430)

    Download size: 5.4 MB

    Whenever I start my laptop he wants to re-enstall service pack 2. How can I fix it?

    Glen Yoder

    Hi Gyoder,

    Thank you for visiting the forums!

    To resolve this issue, follow these steps:

    1. Click Start , click run , type cmd and press ENTER.
    2. At the command prompt, type ren %windir%\System32\msxml4.dll msxml4.old, and then press ENTER.

    Note When you press ENTER, you may receive the following error message.

    Cannot find the specified file.

    Ignore this message and proceed to step 3.

    3. At the command prompt, type exit and press ENTER.
    4. Visit the Microsoft Web site at the following address:

    5. Download and install the latest MSXML security update.

    For more information about this problem, go to

    http://VisualKB/VKBWebService/viewContent.aspx?scid=KB; EN-US; 941729 & PortalId = 1

    I hope this helps. Let us know.

    Dave D

    Dave D
    Microsoft Answers Support Engineer
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • A security update for Microsoft XML Core Services 4.0 Service Pack 2 for systems x 64 (KB954430) is not installed!

    A security update for Microsoft XML Core Services 4.0 Service Pack 2 for x 64-based systems (KB954430) is not installed. Windows Update fails to install this update and error reports: 64 C code. The off button displays an alert and when you place the mouse over it it shows "installs the updates and then shuts your computer." When I press it it says is to install the update and my computer shuts down and when I restart it it shows it is update and configuration of the update but when loading Windows Vista, in windows update, it shows that updated security for Microsoft XML Core Services 4.0 Service Pack 2 for systems x 64 (KB954430) becomes available again. I tried to manually install the update by downloading, but when trying to install windows install indicates: "the feature you are trying to use is on a network that is not available. Click OK to try again or enter a different path to the folder containing the installation package ' msxml.msi in the box below. »

    MSXML 4.0 SP2 (KB954430) and MSXML 4.0 SP2 appear in Control Panel programs and features. When I click on them the only option is 'an install. When I try to UN install these the same message appears when you try to install this update manually: "the feature you are trying to use is on a network that is not available. Click OK to try again or enter a different path to the folder containing the installation package ' msxml.msi in the box below. »

    To try to solve this problem, I emptied historical Windows Update. I tried Windows Installer Cleanup to remove MSXML 4.0 SP2 (KB954430) and MSXML 4.0 SP2 so I can reinstall it but Windows Installer Cleanup crashes and displays a command prompt with a lot of text.

    If Windows Update has found that you don't need, you don't have to worry about this. They probably have fixed an error in the update system.

    Messages rating helps other users

    Mark L. Ferguson MS - MVP

  • A security update for Microsoft Office XP (KB2289162), always updates not installed

    I currently have problems with tent to install the KB2289162 update as it appears that others in this discussion forum are some.

    During the first 4 to 6 weeks, this update via automatic update failed with the message "some updates could not be installed the following updates were not installed upgrading security for Microsoft Office XP (KB2289162).  I tried to download the fullfile update version and run this. I got "Error 1402 Setup cannot open registry HKEY_LOCAL_MACHINE\Software\Classes\giffile\shell\Open\ddeexec key".

    I did a boot minimum and tried again, and the operation has failed with Error 1402. Then I ran the Fixit as recommended in other threads and tried again, but also the operation failed with Error 1402.

    I'm running Windows XP Professional, with Security Essentials for virus protection. I had Norton Internet security on the PC and the Avira Antivirus, but problems with these two led to my abandonment together.

    Can you please suggest a solution to the please my problem?

    You receive an error message when you install an Office program or you open an Office program or a document

    http://support.Microsoft.com/kb/838687>

  • A security update for SQL Server 2005 Service Pack 3 (KB970892) could not istall

    "A security update for SQL Server 2005 Service Pack 3 (KB970892) istall failure."

    I'm not sure if this is the right place to post this but I hope I can get help.
    I can't get the update mentioned above to install after several attempts. Have searched the knowledge base and tried various suggestions of solutions without success.
    If anyone has or had this same problem and it is resolved, I'd appreciate knowing how and where to get information. Thanks in advance for your help and your computer happy.

    Rhamnar68It

    "A security update for SQL Server 2005 Service Pack 3 (KB970892) istall failure."

    I'm not sure if this is the right place to post this but I hope I can get help.
    I can't get the update mentioned above to install after several attempts. Have searched the knowledge base and tried various suggestions of solutions without success.
    If anyone has or had this same problem and it is resolved, I'd appreciate knowing how and where to get information. Thanks in advance for your help and your computer happy.

    Rhamnar68It

    It isn't really the right place (better would have been the forum of Windows Update ), but see the following thread: http://social.answers.microsoft.com/Forums/en-US/vistawu/thread/cafab790-e540-40d3-87ba-4f64e6e82d54/

  • Cannot install the update of security KB979402 for win2k ("Access denied" error)... help?

    for awhile now, I have not been able to install "Security Update for Windows Media Player 9 for Windows 2000 (KB979402)", through windows update. I always failed, and here are the steps I took:

    (1) tried to use windows update. the program launches, recognizes a necessary update, downloads the file and fails to install, leaving this error message:

    "the following updates were not installed:

    "Security Update for Windows Media Player 9 for Windows 2000 (KB979402).

    (2) reinstalled windows update agent according to the instructions here:

    http://social.msdn.Microsoft.com/forums/en-us/windowsdesktopsearchhelp/thread/c1d64ba5-AAA1-4EAE-AD04-d7e85418199e/

    I can't tell if windows update agent has been reinstalled successfully, but the problem persists.

    (3) tried to use http://www.update.microsoft.com/ where the file downloads but won't install.

    (4) manually downloaded "Security Update for Windows Media Player 9 for Windows 2000 (KB979402).

    tried to install, a message "error installation KB979402, Access is denied."

    5) tried to "force installation" by entering this in run:
    C:\WUAGENT\Windows2000-windowsmedia-KB979402-x86-enu.exe /wuforce

    who did get a weird window listed some "availible orders"... end, passing through update.microsoft.com again proves the update has not yet been installed. I'm now ideas. Help?

    Are you running Win2K SP4?

    What application or antivirus security suite is installed and your current subscription?  What anti-spyware (other than Defender) applications?  What third-party firewall (if applicable)?

    A (another) Norton or McAfee application has already been installed on the computer (for example, a free trial version which is preinstalled when you bought it)?

    ~~~~~~~~~~~~~~~~~~~~

    How to reset the Windows Update components?
    [Run the difficulty in default and aggressive mode]
    http://support.Microsoft.com/kb/971058

    NB: Access KB971058 via Internet Explorer (32-bit) only not any other browser.

    ~ Robear Dyer (PA Bear) ~ MS MVP (that is to say, mail, security, Windows & Update Services) since 2002 ~ WARNING: MS MVPs represent or work for Microsoft

Maybe you are looking for