RE: Locking the SYS account.

It would be bad if it was truly locked and we were not able to connect
to do things like shut it down.  Or recover it from a crash.  Or any of
the other dozen things you can only do while connected as SYS.

Duh!

-----Original Message-----
From: Terrian, Tom (Contractor) (J6D) [mailto:Tom.Terrian.ctr@xxxxxxx] 
Sent: Wednesday, January 03, 2007 10:31 AM
To: Mercadante, Thomas F (LABOR); rgoulet@xxxxxxxxxx;
oracle-l@xxxxxxxxxxxxx
Subject: RE: Locking the SYS account.

Ok, I will bite, how is this a bad thing?  We have locked and expired
the SYS account on all of our databases for years now.  How is this bad?

-----Original Message-----
From: oracle-l-bounce@xxxxxxxxxxxxx
[mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Mercadante, Thomas F
(LABOR)
Sent: Wednesday, January 03, 2007 10:12 AM
To: rgoulet@xxxxxxxxxx; oracle-l@xxxxxxxxxxxxx
Subject: RE: Locking the SYS account.

For good reason I think.  Being able to lock the SYS account would be a
very bad thing.


--------------------------------------------------------
This transmission may contain confidential, proprietary, or privileged
information which is intended solely for use by the individual or entity
to whom it is addressed.  If you are not the intended recipient, you are
hereby notified that any disclosure, dissemination, copying or
distribution of this transmission or its attachments is strictly
prohibited.  In addition, unauthorized access to this transmission may
violate federal or State law, including the Electronic Communications
Privacy Act of 1985.  If you have received this transmission in error,
please notify the sender immediately by return e-mail and delete the
transmission and its attachments.


-----Original Message-----

From: oracle-l-bounce@xxxxxxxxxxxxx
[mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Richard J. Goulet
Sent: Wednesday, January 03, 2007 10:02 AM
To: oracle-l@xxxxxxxxxxxxx
Subject: RE: Locking the SYS account.

 
If one does the RTFM thing one will find that SYS is immune to any and
all restrictions by default.  Therefore things like restricting idle
time via a profile don't work, nor does locking the account or expiring
the password.  Granted it's buried & not easy to find, but it's been
that way for a very LONG time.

 
Dick Goulet, Senior Oracle DBA
45 Bartlett St  Marlborough, Ma 01752, USA
Tel.: 508.573.1978 |Fax:  508.229.2019 | Cell:508.742.5795 
RGoulet@xxxxxxxxxx
: POWERING TRANSFORMATION 

-----Original Message-----
From: oracle-l-bounce@xxxxxxxxxxxxx
[mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Andrey Kriushin
Sent: Wednesday, January 03, 2007 7:12 AM
To: DEVA@xxxxxxxx
Cc: oracle-l@xxxxxxxxxxxxx
Subject: Re: Locking the SYS account.

Denham Eva wrote:  
> What if any are the implications of locking the SYS account?
Kicking your client out of the business perhaps?

--Andrey


--
http://www.freelists.org/webpage/oracle-l


--
http://www.freelists.org/webpage/oracle-l
--
http://www.freelists.org/webpage/oracle-l



--
http://www.freelists.org/webpage/oracle-l

Other related posts: