RE: sysdba

  • From: "Sweetser, Joe" <JSweetser@xxxxxxxx>
  • To: "ian@xxxxxxxxxxxxxxxxx" <ian@xxxxxxxxxxxxxxxxx>, "oracle-l@xxxxxxxxxxxxx" <oracle-l@xxxxxxxxxxxxx>
  • Date: Thu, 16 Oct 2014 18:01:23 +0000

Another way to check/see who are connected is by using a login.sql file with 
this in it:  SET SQLPROMPT "_USER'@'_CONNECT_IDENTIFIER> "

I have found that useful at times.

-joe

-----Original Message-----
From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On 
Behalf Of MacGregor, Ian A.
Sent: Thursday, October 16, 2014 11:56 AM
To: oracle-l@xxxxxxxxxxxxx
Subject: Re: sysdba

This has nothing to do with the user  you created.   You could just as well  
have tried

connect nonsense/monsense  as sysdba

and would have been successfully connected.

When you installed  Oracle, you  indicated which OS groups could obtain roles.  
 The  current logged on system user belongs to the group which can obtain the 
sysdba  role.

Ian MacGregor
SLAC National Accelerator Laboratory
On Oct 16, 2014, at 10:41 AM, Joshua Collier <jcoll1970@xxxxxxxxx> wrote:

> I must have missed something in my years as a DBA, such a basic thing as 
> understanding this.
>
> 1. 11.2.4
> 2. logged on as oracle on the database host machine ( oracle home and 
> binaries OS owner)
>
> sqlplus /nolog
> connect /as sysdba
> create user test identified by test;
> grant create session to test;
> connect test/test as sysdba;
> connected
>
> I am not sure I understand why this user can connect as sysdba without having 
> been explicitly granted the SYSDBA power? Is it because I am logged on to the 
> server as Oracle? Is there a machine setting to change this? documentation is 
> proving sparse on this subject, or my googlefoo has been found lacking.
>
> thanks for your time,
>
> Josh C.

--
//www.freelists.org/webpage/oracle-l


Confidentiality Note: This message contains information that may be 
confidential and/or privileged. If you are not the intended recipient, you 
should not use, copy, disclose, distribute or take any action based on this 
message. If you have received this message in error, please advise the sender 
immediately by reply email and delete this message. Although ICAT, Underwriters 
at Lloyd's, Syndicate 4242, scans e-mail and attachments for viruses, it does 
not guarantee that either are virus-free and accepts no liability for any 
damage sustained as a result of viruses. Thank you.
--
//www.freelists.org/webpage/oracle-l

Other related posts:

  1. Home
  2. oracle-l
  3. Archive
  4. 10-2014