Re: Locking the SYS account.
- From: Hemant K Chitale <hkchital@xxxxxxxxxxxxxx>
- To: norman.dunbar@xxxxxxxxxxxxxxxxxxxxxxxxx, <oracle-l@xxxxxxxxxxxxx>, <DEVA@xxxxxxxx>
- Date: Wed, 03 Jan 2007 22:48:03 +0800
No, you can "LOCK" the SYS account with the command "ALTER USER
SYS ACCOUNT LOCK ;".
Query DBA_USERS after that and you will see SYS as "LOCKED"
However, that does not prevent SYSDBA connections. So
Startup/Shutdown is possible
and anyone with the correct privileges [ie member of the "dba" group
or granted SYSDBA
through the passwd file] can still connect "AS SYSDBA".
Hemant
At 04:46 PM Wednesday, Norman Dunbar wrote:
Morning Denham,
<snip>
>> What if any are the implications of locking the SYS account?
I would imagine, if it was possible to lock SYS, that starting and
stopping the database would be difficult. When you connect anything as
sysdba/sysoper you connect to the SYS schema. If you have it locked
....
Hemant K Chitale
http://web.singnet.com.sg/~hkchital
--
//www.freelists.org/webpage/oracle-l
Other related posts:
