sys and system schema are expired &; locked after disaster recovery.
Hi allIn one of our development database, I conducted disaster recovery and he succeeded.
After completing the recovery thre, sys and system schema are expired & locked.
So, I'm not able to carry out any type of operation that is performed by the user sys and system.
Database Version: 11g r2
Operating system: RedHat 5.5
Please please suggest me how can I solve this problem?
Thank you
Pitard.
It might be
What is the status of the users in the source database from which you have taken backup? Maybe he has so locked even after performing refresh status remains the same.
See your profile stats below. All have remained unanswered. You simply test patience? If this isn't the case, close all threads as answered. Clean up the forum.
User profile for pitard
Pitard
Handle: Pitard
Status level: Beginner
Join date: March 4, 2010
Total messages: 9
Total Questions: 8 (8 open)
Viren name
Published by: CKPT on February 20, 2012 19:47
Tags: Database
Similar Questions
-
DB version: 11.2.0.2
Operating system: Solaris 10
In our production of DBs, I noticed that the SYS and SYSTEM users are locked
1. How can I connect to the SYS account despite the confinement. Is it because I have connected via external authentication?$ sqlplus / as sysdba SQL*Plus: Release 11.2.0.2.0 Production on Thu Jan 19 14:21:34 2012 Copyright (c) 1982, 2010, Oracle. All rights reserved. Connected to: Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - 64bit Production With the Partitioning option SQL> select username, account_status from dba_users where username like 'SYS%'; USERNAME ACCOUNT_STATUS ------------------------------ -------------------------------- SYSTEM LOCKED SYS LOCKED
2. don't lock the user SYS standard practice? If so, why?1. How can I connect to the SYS account despite the confinement. Is it because I have connected via external authentication?
you are the owner of the HOUSE of the ORACLE, you need to connect. Yes its because of external authentication.
Of course you can not connect the user to the system. Have you tried?2. don't lock the user SYS standard practice? If so, why?
Depends on the security, some cases, a user will be created with DBA roles.
-
Expiry of the password for user SYS and SYSTEM
My database 11g 2 on Redhat 5 has sys and system user password expired
But I can still connect the databsae with expired password t.SQL> select username,account_status,EXPIRY_DATE from dba_users where username like 'SYS%'; 2 USERNAME ACCOUNT_STATUS EXPIRY_DA ------------------------------ -------------------------------- --------- SYSMAN OPEN SYSTEM OPEN 15-FEB-11 SYS OPEN 15-FEB-11
Should I worry about the expiration of the password of the user these? For a normal user, I can not connect with expired passwordDear user13148231,
Here's an illustration;
SQL> alter user sys account lock; User altered. SQL> select username, account_status, lock_date, expiry_date from dba_users where USERNAME='SYS'; USERNAME ACCOUNT_STATUS LOCK_DATE EXPIRY_DA ------------------------------------------------------ SYS LOCKED 20-AUG-10 23-FEB-09 SQL> host sqlplus sys/password@opttest as sysdba SQL*Plus: Release 10.2.0.4.0 - Production on Fri Aug 20 12:25:43 2010 Copyright (c) 1982, 2007, Oracle. All Rights Reserved. Connected to: Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production With the Partitioning, OLAP, Data Mining and Real Application Testing options SQL> exit Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production With the Partitioning, OLAP, Data Mining and Real Application Testing options SQL> alter user sys identified by password password expire; User altered. SQL> select username, account_status, lock_date, expiry_date from dba_users where username='SYS'; USERNAME ACCOUNT_STATUS LOCK_DATE EXPIRY_DA ------------------------------------------------------ SYS EXPIRED & LOCKED 20-AUG-10 20-AUG-10 SQL> host sqlplus sys/password@opttest as sysdba SQL*Plus: Release 10.2.0.4.0 - Production on Fri Aug 20 12:27:02 2010 Copyright (c) 1982, 2007, Oracle. All Rights Reserved. Connected to: Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production With the Partitioning, OLAP, Data Mining and Real Application Testing options SQL> exit Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production With the Partitioning, OLAP, Data Mining and Real Application Testing options SQL> alter user sys identified by password account unlock; SQL> select username, account_status, lock_date, expiry_date from dba_users where username='SYS'; USERNAME ACCOUNT_STATUS LOCK_DATE EXPIRY_DA ------------------------------ -------------------------------- --------- --------- SYS OPEN
Even if the State expired and locked it's OK to connect to the database for the user SYS.
SQL> alter user ogan identified by password account lock password expire; User altered. SQL> select username, account_status, lock_date, expiry_date from dba_users where username='OGAN'; USERNAME ACCOUNT_STATUS LOCK_DATE EXPIRY_DA ------------------------------ -------------------------------- --------- --------- OGAN EXPIRED & LOCKED 20-AUG-10 20-AUG-10 SQL> conn ogan/password ERROR: ORA-28000: the account is locked Warning: You are no longer connected to ORACLE. SQL> conn / as sysdba Connected. SQL> alter user ogan account unlock; User altered. SQL> conn ogan/password@opttest ERROR: ORA-28001: the password has expired Changing password for ogan New password: Retype new password: Password changed Connected. SQL>
Ogan
-
Why is password for SYS and SYSTEM different
I use 10g Express
During the installation I created the password and I use it as a password with SYS, but it does not work with the SYSTEM
(I'm with Windows 7 on AMD x 64)
Thank you.Hello
The SYS and SYSTEM password are asked during the database creation process.
May be that a different password has been set.
Anyway, as you know the password for SYS, you can change the password for the SYSTEM with the following statement:
alter user system identified by
; Hope this helps.
Best regards
Jean Valentine -
By default, the user SYS and SYSTEM are assigned the DEFAULT profile. According to this profile setting (PASSWORD_LIFE_TIME), the password is suppose to be expired every 180 days, but the SYS and system accounts State is OPEN even after 1 year, not EXPIRED. Pls someone clarify this point.
USER NAME CREATED THE ACCOUNT_STATUS PROFILE
------------------------------ --------- -------------------------------- ------------------------------
SYS 24 AUGUST 13 OPEN BY DEFAULT
24 AUGUST 13 OPEN BY DEFAULT
PROFILE RESOURCE_NAME RESOURCE LIMIT
------------------------------ -------------------------------- -------- ----------------------------------------
PASSWORD_LIFE_TIME 180 DEFAULT PASSWORD
1762432 wrote:
When was the last time that someone actually tried to connect as SYSTEM?
--> No not tried until now. This means if try to connect as a SYSTEM, then it gets only EXPIRED remains OPEN even if the PASSWORD_LIFE_TIME stretches limited 180.
Have you read the link I gave you? In particular, the discussion on the fig. 5 and fig. 6.
If you had, you would have the answer to this question.
I thought the account that EXPIRES based on PASSWORD_LIFE_TIME even gets does not attempt to connect DB via the account.
Then, you thought wrong. As I said earlier, the database does not spend time constantly trawling through accounts looking to see if something has passed its expiration date. If she did that, he would never time to do something else. He checks in the context of a connection request and responds
as a result.
-
Encrypt the sys and system tables
How encrypt/limit sys and system tables so that no users can view them.
On a user database few have access s/n.
Is it possible to restrict their access to the tables of the dictionary.RAC_DBA wrote:
How encrypt/limit sys and system tables so that no users can view them.On a user database few have access s/n.
Is it possible to restrict their access to the tables of the dictionary.
If you want to protect the data dictionary, then use 07_DICTIONARY_ACCESSIBILITY parameter to deny users that has 'SELECT ANY TABLE' privilege to select the data belonging to SYS
And don't forget, if you share the password for user SYS or SYSTEM, it means that you share all the information as data dictionary
-
Symbols and menu fonts are too small after FrameMaker 12.0.4
Menu fonts and symbols are too small after FrameMaker 12.0.4 update on Windows 8.1 - no effect on the evolution of preferences - were I can chnge it?
No experience myself, but this recent thread may cover:
-
sys and system of export and import
Hi all
is there a difference with exports or imports, usiing the sys user and user of the system.
a schema export and import has to do with the system user only.
What is the difference in fact.
Thank you!Hello
In general, never use sys - you can't export consistent reading on the one hand, that the sys user. As long as the user you run expdp/impdp a permission/imp_full_database, they should be able to unload/load anything.SYS the property in the goods may not be imported/exported in any case. tab$ is for example a table in sys but rows in it are added/removed by sql recursive create/delete table implementation.
Kind regards
Harry -
Subsidies granted by user SYS and SYSTEM
Hi all
Please, help me to understand this problem.
I have a few schema named maps_ref where I create a view. (table abc discovers abc01).
Here, I have granted the create view, creates all privs view to maps_ref by linking the SYS as SYSDBA.
He alllowed me to create the view.
As a test, I revoked the privileges by connecting as a SYSTEM and he revoked the privileges granted by SYS as SYSDBA.
Later, of course, I couldn't create the view.
This means that subsidies granted by SYS as SYSDBA resumable system however SYSDBA is then more powerful SYSTEM?
I'm a little confused how it worked? Please explain.
Rgds,
AashishHello
SYS is not normal user and you are not able to connect without clause SYSDBA.
sqlplus sys@test
SQL * more: version 11.1.0.7.0 - Production on Wed Apr 8 09:48:37 2009
Copyright (c) 1982, 2008, Oracle. All rights reserved.
Enter the password:
ERROR:
ORA-28009: connection as SYS must be SYSDBA or SYSOPEREnter the user name:
sqlplus sys@test as sysdba
SQL * more: version 11.1.0.7.0 - Production on Wed Apr 8 09:48:55 2009
Copyright (c) 1982, 2008, Oracle. All rights reserved.
Enter the password:
Connected to:
Oracle Database 11 g Enterprise Edition Release 11.1.0.7.0 - 64 bit Production
With partitioning, OLAP, Data Mining and Real Application Testing optionsSQL >
Kind regards
Tom
http://OracleDBA.cz -
Change for SYS and SYSTEM profile
Is there an effect (or problem) by moving the SYS, SYSTEM RMAN & accounts SYSMAN DEFAULT profile to my user define the profile ($service_accounts). The main reason being I want to control password settings in the DEFAULT profile, which should not apply to service Oracle accounts.
Kind regards
KevinDear Kevin world countries,
When a user is created they are put in DEFAULT the default profile
You can create any user with the profile of your choice parameter. There is no limit to this topic. Here's the syntax;
SQL > create ogan user identified by the profile password OGAN_PROF;
If you want to use the default profile for newly created users, use it. Create another profile called for example SYSPROF and change the settings as you wish.
Keep in mind that using profiles and changins profile settings parameter to TRUE resource_limit need.
It will be useful,
Ogan
-
Windows Update and System Restore does not work after that the virus
I recently had a virus on my computer, when I finally had removed my windows update does not work, my system restore will restore to any previous point and my computer seems to generally work more slowly. Also groovemonitor seems still exists but is not really available to use, it runs in the process but is not available anywhere else. Any suggestions?
Hi TedDanson,
1. do you get an error message when you try to run the restore system or Windows updates?
I suggest you run a complete antivirus scan using Microsoft Safety Scanner to make sure that there is no virus infection:
I hope this helps.
-
What are these workspaces? They are created by default when you install APEX in a DB of Oracle XE. I understand what each is for the database, I was wondering why they work for APEX spaces.
I don't know why they exist, or when they are used.
Will need to look in, or comments from the Oracle gurus.For now, I would say keep them.
You can however do a test installation and remove these from the test facility just to see what happens! Of course, you must be prepared to reinstall if something horrible happens.
Kind regards
-
I bought and installed Adobe Photoshop Lightroom 5.7 64 - bit on 8 April.
I've upgraded to Adobe Lightroom 6.0 by purchasing the upgrade and download. I have now two versions installed.
When I insert a memory stick, 5.7 starts automatically and asks me if I want to import images. Is it OK if I uninstall 5.7 from the control panel?
Yes, but you might want to keep a few backups just in case 5 Lightroom Catalog.
-
ICONS ARE TOO BIG AFTER THE RECOVERY PROCESS
MY SYSTEM CRASHED AND I MADE THE RECOVERY DISC, EVERYTHING WORKS WELL, LIKE A PC BRAND NEW, HOWEVER, MY ICONS WHEN I'M ONLINE, ARE HUGE, I CAN NOT THE LITTLE ONES, SO I'LL HAVE DIFFICULT TO READ EMAIL, MAIL, ETC.
We have the same problem when you post in all capitals!
It makes it difficult to read and is considered as shouting.
Go to the Web site of the manufacturer of your laptop computer-graphics/computer card > drivers and downloads Section > key in your model number > look for the latest Vista drivers > download/install them.
Then:
http://Windows.Microsoft.com/en-AU/Windows-Vista/change-screen-resolution
Change the screen resolution
Screen resolution refers to the clarity of the text and images on your screen. At higher resolutions, items appear sharper. They appear also smaller, so more items adapted to the screen. At lower resolutions, fewer items adapted to the screen, but they are larger and easier to see. At very low resolutions, however, images may have serrated edges.
See you soon.
Mick Murphy - Microsoft partner
-
Hi all
We have 10.2.0.4 on solaris 10.
Currently we have I.T. audit on our environment, and the auditor commented to lock the user sys and system and use a single user with any name (not the name generic oracle) and grant him the privilege of sys and system and use this user for admin purposes. is this true?... is it recommended?
Please notifyHello
I think that this is not a good way to lock SYS.
In addition, if you connect as administrator (root for Unix/linux) operating system on the server and use
Authentication of the BONE and then, you can connect to SYS AS SYSDBA anyway.So, in fact, it is not possible to lock SYS even if you run the following:
ALTER USER SYS ACCOUNT LOCK;
If you want to prevent access on SYS, you must set a password long and complex and
apply the same rule for the admin / root user OS.These passwords must be known very little and well - to identify the people and written nowhere
(in files or scripts).Plus more, you should restrict DBA role to SYS and SYSTEM and remove this powerful role
other Oracle users.Then, you can enable the CHECK in order to control the connection to the session database and,.
create a LOGIN TRIGGER to verify the connection, the workstation, the program end-users
that connect to the database.In 10g, DBConsole EM shows an alert whenever a user is logged on with SYS.
Please find attached, an interesting paper written by Pete Finigan on this topic:
http://www.insight.co.UK/files/presentations/hacking%20and%20securing%20Oracle.PDF
Hope this helps.
Best regards
Jean Valentine
Maybe you are looking for
-
How can I update my iPad 2 to 4G to work
How can I update my iPad 2 wifi / 3G to 4G to work
-
Firefox does not load the sites, google, or facebook
It is extremely frustrating and has happened for months. Sometimes the loading sites, but then stop working after a few minutes, and then it's almost impossible to get load them again. It hangs just to "connecting" for always, until it's time out or
-
latest version of the OS for Macbook Pro 7.1
Dear users: My MackBook Pro 7.1 (Intel Core 2 Duo 2. 4 GHz, 4 GB RAM) works with 10.6.8 Snow Leopard OS, so, I can't put Java to its new version 1.7 or 1.8. This limits the compatibility with access to bank account and tax return to the Brazil softwa
-
Satellite A500-15N "windows failed to load.
I turned on my laptop today and started the usual startup process.Toshiba - logo (press F2, F12)-Green windows loading bar Then the laptop displays a black screen and nothing happens.When I turned off the laptop and turn it on again I get a message s
-
RAZR M, HD Webtop Removal
Now that Goole is removed WEBTOP, seems there is no way to stream HD via HDMI port (of course, there are none on Razr M but looking forward to HD). I think it was the only way to do it from sources such as YouTube and Netflix. Is this fair?