When updating the password file database

In our infrastructure, we have several databases (all 11 GR 2 on Linux) who have access to the same password file.

If the password of a user stored in the password file is changed in a database, this user password is changed in all databases that use this password file.

If I query the view of sys.user$, I can see when a user has changed, but only for this database and need to check each database to see if the password has been changed for this database. Is it possible to see which update this file to shared password without connecting to each individual database database?

Thank you!

Hi Garrett.

You have active audit? Also, if you have defined AUDIT_SYS_OPERATIONS to true, you should have some information placed in the $ aud. As Joel Suggested, check the timestamp of the change in the password file.

I think that if you enabled audit_sys_operations, you would also have records written to audit trail operating systems $ORACLE_HOME/rdbms/audit.

On another note, according to the literature and my test, if the REMOTE_LOGIN_PASSWORDFILE = SHARED, then you could not change the password for the SYS or other users with SYSDBA privilege.

Take a look on:

C:\Users\xxxxx>sqlplus / as sysdba

SQL*Plus: Release 11.2.0.1.0 Production on Wed Feb 5 08:17:58 2014

Copyright (c) 1982, 2010, Oracle.  All rights reserved.

Connected to an idle instance.

SQL> startup
ORACLE instance started.

Total System Global Area 1068937216 bytes
Fixed Size                  2182592 bytes
Variable Size             796918336 bytes
Database Buffers          264241152 bytes
Redo Buffers                5595136 bytes
Database mounted.
Database opened.

SQL> show parameter remote_login_passwordfile;

NAME                                 TYPE        VALUE
------------------------------------ ----------- ------------------------------
remote_login_passwordfile            string      EXCLUSIVE

SQL> alter system set REMOTE_LOGIN_PASSWORDFILE=shared scope=spfile;

System altered.

SQL> startup force
ORACLE instance started.

Total System Global Area 1068937216 bytes
Fixed Size                  2182592 bytes
Variable Size             796918336 bytes
Database Buffers          264241152 bytes
Redo Buffers                5595136 bytes
Database mounted.
Database opened.

SQL> show parameter remote_login_passwordfile;

NAME                                 TYPE        VALUE
------------------------------------ ----------- ------------------------------
remote_login_passwordfile            string      SHARED

SQL> alter user sys identified by oracle1;
alter user sys identified by oracle1
*
ERROR at line 1:
ORA-28046: Password change for SYS disallowed

So, I was wondering if REMOTE_LOGIN_PASSWORDFILE was the EXCLUSIVE value before the change and changed back? This isn't a dynamic parameter, so you will have to restart your DB. Please check if there's any DB restart or change the setting in the alert.log.

Kind regards

Suntrupth

Tags: Database

Similar Questions

  • Connecting to a remote database (slowed down) with the password file authentication

    Hi all

    I was wondering if it is possible to connect to a remote database is stopped (idle instance) as user sys with sysdba privileges? It is said in the Oracle book - one to page 210 in the section - operating system and the file password authentication:

    Connection with authentication by password file or operating system is always possible, any State of the instance and the database are in and it is necessary to issue commands to START or STOP.

    Above indicates that it is possible, but I can't do it.

    I managed to connect to the remote database that was in mode nomount (see below for more details).

    When I first tried to connect to a remote database (idle instance) using the password file authentication, it gave due to error:
    sqlplus sys@ORCL as sysdba
    SQL * more: Production of the version 11.2.0.3.0 Fri dec 21 13:59:28 2012

    Copyright (c) 1982, 2011, Oracle. All rights reserved.

    Enter the password:
    ERROR:
    ORA-12514: TNS:listener is not currently of service requested in connect
    descriptor of

    Enter the user name:

    After the start of the database in nomount mode I was getting following error:
    sqlplus sys@ORCL as sysdba
    SQL * more: Production of the version 11.2.0.3.0 Fri dec 21 13:48:36 2012

    Copyright (c) 1982, 2011, Oracle. All rights reserved.

    Enter the password:
    ERROR:
    ORA-12528: TNS:listener: all appropriate instances are blocking new connections

    Enter the user name:

    Then I added the clause (UR = A) my listener.ora file and after that it work and I was able to connect:
    sqlplus sys@ORCL as sysdba
    SQL * more: Production of the version 11.2.0.3.0 Fri dec 21 14:04:49 2012

    Copyright (c) 1982, 2011, Oracle. All rights reserved.

    Enter the password:

    Connected to:
    Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - Production
    With partitioning, OLAP, Data Mining and Real Application Testing options


    SQL >

    I have all the entries of necessairly in tnsnames.ora on my local host.

    Also, I have no problems when connecting as user sys with sysdba when the DB is open, but can't get it working on an idle instance.

    I know I can use OS authentication but want to know if there is a mistake in the book or I'm doing something wrong.

    Kind regards
    Dawid

    Edited by: 978239 2012-12-21 06:24

    I was wondering if it is possible to connect to a remote database is stopped (idle instance) as user sys with sysdba privileges?

    You can, but you need to statically register the database with the listener.

  • Disabling update the configuration file without stopping the VI

    I would like to perform a function that when the new modules are added in the existing system of the public Service or hot swapping modules autour, the VI can update its configuration file. I don't want the VI to stop we will collect data 24/7.

    I use cFP2220 and two or three modules of different types. I have my work VI and it is fairly straightforward FP read.vi in a time loop. All data are stored in the database using the Labview database tool. My screws are hosted on the local PC, not on the controller. I'm using Labview 8.6.

    I guess I have to get the file configuration (iak), whenever new modules are added, the iak file can be changed (without MAX aperture). In any case, I would have the flexibility to run the VI continuous. I know there is a similar code here: http://zone.ni.com/devzone/cda/epd/p/id/3221and they get the configuration file in the ini file. But I don't know how it's done as I can save only the configuration file as a file iak for FP system.

    Another potential problem associated with that, I guess, is the database format. For now, I use a three column structure, i.e., DateStamp, value and ChannelID. In this case, if I want to add/remove/swap channels, I can just change the ID of the corresponding channel. What happens if I have a horizontal arrangement of the database, namely 10 columns corresponding to 10 sensors, would he be in trouble if I change channels modules?

    Thank you very much.

    There is a way to change the module and programmatically updated the IAK file without stopping the VI.  You will need to change the FP read.vi front right by with the constant e/s FieldPoint.  You will need to use the Open FP, FP create Tag, read FP, and close to the public Service.  The trick to this is that you must pre-create files IAK in MAX first.  The way to do is to set up your cart in a configuration and then find devices to MAX.  Then save the iak.  Then reorganize your bottom of basket to the next setting would have desired, then have MAX find devices and who save in a file different iak.  You will need to do this for each configuration you have.  Then, you need to place the code below when you want to Ministry the configuration file.  I have also included a screenshot of MAX that you can see what the strings are correlated with.

  • Question about the password file

    Good afternoon

    In document s/n 2 days, she says:

    >
    When you call DBCA as part of the installation procedure for Oracle, DBCA database
    create a password with a single input file: the user SYS.
    >

    I created the database using DBCA and it must have created a file password for me since I was able to connect to the database remotely.

    The question is: I can't locate the created password THAT DBCA, I don't know what his name. Can someone give me the name of THAT DBCA is using the password file?

    Thanks a lot for help.

    John.

    ORACLE_HOME/dbs/orapw * IX and ORACLE_HOME/database / PWD.ora under windows

    Kind regards
    Uwe Hesse

    http://uhesse.WordPress.com

  • How do we stop it Firefox asking to update the password on the secondary registration pages?

    Many sites Web uses a name of user and password and a 'secret question' sign in. Part II contains usually enter the answer a random question, as 'the mother maiden name. " 'place of birth' etc.

    When this happens, Firefox asks if I want to update the password that it stores. I have obviously not because it will change my real password, and the answer will be different the next time in any case. This happens on all the signs in and there is no way I can tell Firefox not do; the only options are up to date or "not now".

    I always feel like Firefox to remember the user principal name and the real password, so how do I prevent him from asking questions about these pseudo passwords without turning off the main connection details record?

    Hello gheathen, enter Subject: authorizations in the address bar, locate the site in question and block its ability to store passwords (which should not affect the currently registered).

  • What is "you want to update the password saved for"

    Given that I deleted prefs.js and user.js when I connect to any account in the upper-left appears
    "you want to update the password saved for" this interferes with the connection and now it won't let me connect you to your e-mail account.
    I wonder where it appears? I don't want to use it and want better to delete, but don't know how?
    I wanted to add a page in this issue, but as usual Firefox won't like that I guess. So, after this announcement I'll add.

    Thank you.

    Hello

    Thanks for the very useful reply.
    I followed the direction and it seems to work.

  • Need help updated the VMX file on several Virtual Machine

    All,

    Can anyone help with a problem I'm having?  Here is a brief explanation of what is happening and what we need to solve.

    Recently we found out that we need to add a line in the file VMX of several virtual machines.  In the past, I was able to do this, but would have cold start the virtual machine for the changes to take effect.  Starts cold won't be a problem, because we can program it.

    However, no one knows a way to add this line in the file VMX virtual machines in a cluster.

    Here's the line I need added:

    Devices.hotplug = "false".

    Here is a script that was used earlier (esx 3.0 days) to keep the VM tools updated on reboot.  At this point, if the virtual machine has been turned on, this change could not do through the UI.  However, this script worked to update the .vmx file and then we have cold reboots for the changes to take effect.

    Get-viserver - < Server > - < user > - < password >

    $viview = get-Cluster-name NOMCLUSTER | Get - VM | foreach-object {get-view ($_.ID)}
    $viview | {foreach-object
    $vmConfigSpec = new-Object VMware.Vim.VirtualMachineConfigSpec
    $vmConfigSpec.Tools = new-Object VMware.Vim.ToolsConfigInfo
    $vmConfigSpec.Tools.afterPowerOn = 'True '.
    $vmConfigSpec.Tools.afterResume = 'True '.
    $vmConfigSpec.Tools.beforeGuestStandby = 'True '.
    $vmConfigSpec.Tools.beforeGuestShutdown = 'True '.
    $vmConfigSpec.Tools.ToolsUpgradePolicy = "UpgradeAtPowerCycle".
    $_. ReconfigVM ($vmConfigSpec)
    }

    The exact script can be found in Disable HotPlug

  • problem connecting via the password file

    Hi all

    I'm using oracle 11g release 1 on CENTOS LINUX 5.
    I have a problem with the connection AS

    connection on OS authentication is successful

    SQL > connect sys as sysdba
    Enter the password:
    Connected.
    SQL >

    but when I connect from the file of passwords as
    SQL > connect sys/oracle@stan as sysdba
    ERROR:
    ORA-01031: insufficient privileges


    SQL >

    I created the new file password as

    orapwd file=$ORACLE_HOME/dbs/orapwSTAN.ora password = entries = 5 oracle

    opertaing authentication system are given as

    [oracle@testserver ~] $ id
    UID = 500 (Oracle) gid = 500 (oinstall) groups = 500 (oinstall), 501 (dba) context = user_u:system_r:unconfined_t

    any help is appreciated

    The name of the password file is not random.
    The SID is case-sensitive, and the UNIX password file has No extension!
    So if we're not the file name, the passwordfile will not be used.
    This file name looks bad, at least the .ora bit should be removed.

    -----------
    Sybrand Bakker
    Senior Oracle DBA

  • Deleted data file update the control file?

    Hello!

    I deleted a file from data in a tablespace. It was done on purpose because I have no more need. Unfortunately
    I have not updated the database control file, now I get an error message:

    ORA-01157: impossible to identify or to lock the 202 data file - see DBWR trace file
    ORA-01110: data file 202: "D:\ORACLE\PRODUCT\10.2.0\ORADATA\MINOTAUR\TMP_01.DBF."

    How update the control file to get rid of this error?

    I use Windows and exit DB 10.2.0.2.

    Thank you very much for your help!

    Christian

    I think that I made a mistake of reading here.
    Looks like you have deleted a TMP file.

    You then have to join v$ tablespace with v$ tempfile in the statement.

    It's a 10 G (or higher) database?

    Try to drop the tablespace that belongs to this data file, otherwise recreate the controlfile (needs database is offline)

    HTH
    FJFranken

  • Cannot insert or update the password column

    For the site that I am building, I have problems with the Member to add, change, and change password pages. I determined that the problem lies in the insert or update the password for the database column. If I remove the field of password in both add and edit pages members, they work very well (in doing so, to change the password page would go on to defeat its purpose, so have not tried it). I have Dream Weaver 8 allows to design and was wondering if there is something in the log in user and restrict access (user, password and level) it is tool that creates some how would lock the column preventing the modification of the server behaviors. Can someone help me with this you problem?

    It's probably a reserved word, try to escape the domain name with brackets
    (for example [password]), or rename it.
    HTH
    --
    Tim Carley
    www.recfusion.com
    [email protected]

  • Queries continued to update the password by e-mail

    Since the upgrade to El Capitan, I get repeated requests to update the password on my main email account. The password I am entering my account of TWC Roadrunner IS accurate, yet he says that he does not recognize. If I connect via webmail, it works very well. I have a software problem. If anyone else has experienced this?

    As I recall there is a bug. What you have to do is to go to e-mail accounts and select the account. Simply enter the password and close the window. This method works. but months from now, you will have to do it again.

  • Yahoo password email changed computer but the iPhone and iPad can always GET mails without updating the password

    Yahoo password email changed computer but the iPhone and iPad can always GET mails without updating the password...
    Normally, it should show as 'could not load the mail' or 'impossible to download the mail' or 'Please verify your password... "
    It's really wired.

    You are probably using IMAP

    Update contained in one place - it synchronizes across devices - all as is your email

    With POP accounts, you'd see what shows your question

    Instructions on how do to vs in IMAP POP3 - IMAP

  • Problem with the password file / restore

    I have a big problem. My laptop [Win XP] had a hardware problem, and I have no external data backup.
    The hard drive is always perfect and I have now connected it as external drive to another laptop [Win Vista].
    Now, I like to use / recover the password file and copy it from the external drive on the new laptop so I have all the passwords again.

    How can I do this?
    Where can I find the encrypted file and where should I put it?
    Depends on this version? I have an older version on the old laptop [I think than 3.4] and now I have 3.6.

    A BIG Thank YOU in advance
    Arthur

    Recovering password files is treated in this article.
    http://support.Mozilla.com/en-us/KB/recovering+important+data+from+an+old+profile

  • Receive an error message when updating the iPad to 9.2.  What should do?

    Receive an error message when updating the iPad to 9.2.  What should do?

    What is the wording accurate and complete error message? What troubleshooting

    did you?

  • Windows 2008 Server: unable to update the password. the value provided for the new password does not respect length, complexity, or history of the field requirements

    Unable to update the password. the value provided for the new password does not respect length, complexity, or history of the field requirements

    Hello

    I suggest you to send your request in this forum for better support.

Maybe you are looking for