我爱电脑技术论坛's Archiver

不和人说话 发表于 2008-6-5 08:13

讲解Oracle数据库的sysdba权限登录问题

sysdba权限的登录测试：
F4D TCp.^
fB.k$]x4uXz5E
C$RS5XXf!o+I]n 数据库用sysdba登录的验证有两种方式，一种是通过os认证，一种是通过密码文件验证；登录方式有两种，一种是在数据库主机直接登录（用os认证的方式），一种是通过网络远程登录；需要设置的参数有两个，一个是SQLNET.AUTHENTICATION_SERVICES，一个是REMOTE_LOGIN_PASSWORDFILE。 9dG5Wv1|A

O-LXK vlTVB
2j#I2Z2N,dy4E[6_t os认证：假如启用了os认证，以sysdba登录，那么只需要使用oracle软件的安装用户就能登录：sqlplus “/ as sysdba”。如果我们要禁用os认证，只利用密码文件登录，我们首先要有一个密码文件： %^6`c:^d-Ren'S#G]
%n3L@4r6^
D:\oracle\ora92\database>orapwd file=PWDoralocal.ora password=mypassword entries=10;
*? A:fw.FY b"d?6y Pj
D:\oracle\ora92\database> /o_u Rp&N#W

c c:U tE 然后我们要把$ORACLE_HOME/network/admin/sqlnet.ora中设置： k"bk dT!ZaG

'qeC!py;a;tV b
;h VT)U CL SQLNET.AUTHENTICATION_SERVICES= none &P$x f6Nd"U/mH#d

5K"@S{eN y/~ 大家需要注意，密码文件只在数据库启动的时候加载进去，一旦加载进去，密码文件就脱离了oracle管理，所以在你使用orapwd新建密码文件后，里面指定的密码需要在数据重启后才能发生作用：
x0j? u tr KO4iV1~ Px[`1q ~+B

t@;h q6_*Y D:\oracle\ora92\database>sqlplus "sys/mypassword as sysdba"
m$\&Ig$Gv?5z2\
z;i&u8Dq#[ \ )H$nC[O c4J*t
SQL*Plus: Release 9.2.0.1.0 - Production on Fri May 16 21:59:42 2008 ;{*F'v4o1@ N:O+Q.j

ja M%}b3\Eh j6@I-I(N2[
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved. LH6MX%Bb

;L].T%U\
p8RMaX6\h;q M-|-K ERROR:
r*zB5TM jyP)u ,s7|#jm&Z(uf
ORA-01031: insufficient privileges
6e N W/^!L
u snNB_:O5q{
X8Sj*s/Dn
"euiL;j,re.c|+u Enter user-name:
5b2T N'z;Y"g7`5X _u,\+d6Z J)Sm
ERROR:
cY E\3ij c,p3C !n&RCo`e
ORA-01017: invalid username/password; logon denied e0Z4RJ&x;?#tsL
X7]0~~h(q

N%P"D0V'X ph"u7o 1EtNR'Vx N
Enter user-name:
7gX&WM.S@
1Q2S,kY a0p ERROR: $b{q0p ^(U

[8RM*^"f~K`b ORA-01017: invalid username/password; logon denied 7d*~ ^LX x`'YE

6P N,B1h r jw,vn
5t0I p0H5zrQ6nb S?wc ["Q+C*x
SP2-0157: unable to CONNECT to ORACLE after 3 attempts, exiting SQL*Plus
/t"z VWj SH
`b'Y,i!S-Q&bg-MQ
-N z:SZ nnE ### 这里我们通过改SQLNET.AUTHENTICATION_SERVICES= （NTS）用os认证登录数据库：
F|7\d^2kY'_n | @P7l6`pJ1hl
sys@ORALOCAL(192.168.50.29)> shutdown immediate;
`C]|*TNSwKcr
Yb-V^*N.B+YT Database closed.
6tP?%a p6D F$B
wm.faR6u|L!g Database dismounted. 3rf7P$w zV(\G

2RKNZwMxW$S8j ORACLE instance shut down. w yuf3h @#f x
d"JFb&H3D
sys@ORALOCAL(192.168.50.29)>
:n["k3cq|"\V0`~:i0q :] f)Cv0U4r
sys@ORALOCAL(192.168.50.29)>
]]!G"q?rQ'~m )cdy!Bwt Y\
sys@ORALOCAL(192.168.50.29)>
#l`Y#?u rm8| z.M8JO;L.|7x
sys@ORALOCAL(192.168.50.29)> startup
I(L/giQ] N;vi 4q%^:\lh#Fu
ORACLE instance started.
-_o(U'{n@ Y H $]/@e"ZQ6t~v
)~ T0x.qx-BG
Total System Global Area 135338868 bytes `@'U9s.dx f1s

v'y!M Xe(P|!` Fixed Size 453492 bytes
B V Y*B$q+]{Q
T/\$a1e7V^(fLDvS Variable Size 109051904 bytes
Qw0pL9L,bCN s
xP.{1o [ Qx Database Buffers 25165824 bytes

不和人说话 发表于 2008-6-5 08:14

Redo Buffers 667648 bytes {'gG"aQ?
o?,d ? E~Kk%f
Database mounted.
e0^(W#xX;E"h*X.m
Uw!Md l\ Database opened. %W Pu;BF2w
6wCJj,V Eu)md
sys@ORALOCAL(192.168.50.29)>
H3WCX{u 3rVE)DA*_
sys@ORALOCAL(192.168.50.29)> ots[O
~DZ(wH!g
sys@ORALOCAL(192.168.50.29)>
Od9~-wZp} @,]K FxE
sys@ORALOCAL(192.168.50.29)> exit
8U xv d0h ZDo5D(A bJZ+VfN*U7n0wR
Disconnected from Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
6z'H'C~]9Hv2\(~
y6MZQ9G [ With the Partitioning, OLAP and Oracle Data Mining options .QxUVv
^6~1T{!qiW(Wvw0}
JServer Release 9.2.0.1.0 - Production 7\'Yx;o%auw8{8v
dBX;\[ Pp2f.w
$x0]P| M
D:\oracle\ora92\database> B)G;E#h!V
C9]_qG(e%J
D:\oracle\ora92\database> f k`l)m(G7C Y'Y

s'z5yJl'?!F#}q D:\oracle\ora92\database>
rS$s'O'ulY
;ge]tum(E
)I+D-x5XA1a$pMn ### 我们把SQLNET.AUTHENTICATION_SERVICES= （NTS）改回去。
e(SW BopS k $Ey%Flhs
D:\oracle\ora92\database>sqlplus "/ as sysdba"
zV T/?@yG:[k #nF@OG c

*v)x6F!f C4u4fv SQL*Plus: Release 9.2.0.1.0 - Production on Fri May 16 22:03:59 2008
?8HL b1fe p!C
M(u#l.P8q`[|0|,K~
p#i0R|b1n2vq Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved. :Xs)OA&ZU!I(R?+D

"PL%AC%\Z:O
)^ ^3q#t2\]|R ERROR: %f}.Q+M"|I

m9{$A wJa.s-f'[-E'R ORA-01031: insufficient privileges GP8[9ny)S e!qPOP

xq(q:?#`zH'b
A`0b| J;\&Hpz/G 1Nw"K/e-R x
Enter user-name:
[&rk&q1LR\ y 4y/D3E{gO
ERROR: /[-T,u0GI4I B
EIC%U2F$m:^
ORA-01017: invalid username/password; logon denied mqEx,l

n4N pJ^(\)@r,d
+O _XBp*Ur
7T*f yK o)^JB*P Enter user-name:
c\:P*lSHt%O }%S
!\3P1K G EU pP ERROR:
Q@ M$x.I 5N rp:e'|_G
ORA-01017: invalid username/password; logon denied x0l2[5oQR9H]8K
.p1k\&yn+@D

h/K(h J R{
5So i{B&Q'w(K j SP2-0157: unable to CONNECT to ORACLE after 3 attempts, exiting SQL*Plus h+Z:Grw2nf%HE/^
z{^(Y,gy#j'p4@
a7WMD6tW
D:\oracle\ora92\database>
6Ks,{Xz/S2V ?!Q
Ls-Q(S6u"] o;AA D:\oracle\ora92\database> ,}$D;r"R%}0Y

%wm~.RId({{ D:\oracle\ora92\database>
N"r+p j8O z} n b FP4y \`(H
D:\oracle\ora92\database>sqlplus "sys/mypassword as sysdba" 6yqh9Ifl(|.cQ
z ef/krg l
^-J v5O@(O
SQL*Plus: Release 9.2.0.1.0 - Production on Fri May 16 22:04:07 2008
e7M Uh1W-GQR UAz4oOX:X0L7y;r

7G C}2Cx"L-S*~ Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved. 9q+N9D!t8oC,j T

6B.Q6h$fF!u+v` CX]/z$A:t8Fb
}{sF v2f.s
Connected to:
1] W7ZG^Z2d
g#wz9RX] Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production R.XEa&~0QG

j9VuE*ncT.v$s With the Partitioning, OLAP and Oracle Data Mining options
!W(C5I$ZA3eN}'X
-pWl)T9@T@6Y uk JServer Release 9.2.0.1.0 - Production
P!nw u rh3E ;[*z8A(q ~(nrio

JBr{6rhu sys@ORALOCAL(192.168.50.29)> exit O ?Y1dI~)j9Sn

c%s,F [ dJ7dx&l 在这里，我们看到这个新改的密码要数据库重启后加载才生效。同时我们看到，用os认证是无法登录的，但是通过网络（用@sid）是可以登录。
j KS l,FJ:N|0h j`i
qCY}8M:f0p _h{4j9a/UpFo
D:\oracle\ora92\database>sqlplus "/ as sysdba" -j;e9WhSCFq8^4`

HIN6k'J3ph%e)C6] 4y?:Y8a:F!o
SQL*Plus: Release 9.2.0.1.0 - Production on Sat May 17 00:58:32 2008 Qay p{X+R
9q"DsAV
j3jZ|V@/cj%c
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved. s I7W:W3G1g$w J
+[8g+{TD}

3g3YoH9b5Sh ERROR: L },w2C0p] `:r)q'n
3b(K1\2p~
ORA-01031: insufficient privileges
9CG:O n:CZ
d$s+y;q)tdLaDe t5Q7l ~g"H#Z%?-h
W;u!G.xzM LR*X
Enter user-name: mpF.@uHj6IK5C

)]+^0Mh;B z;? ERROR: SdwJP q H'f zQ

3Y{]%Tq y ORA-01017: invalid username/password; logon denied .u2_Z7C$MS Q]V
;t&f&z5W7~.iJ^ })?

+e xp6d g:d+GXjJ
Tw;Z]v,x Enter user-name: H x"J{ O

U7K,pdnkS1{;| ERROR:
;g/j m{)lG%` j"r[C!di
ORA-01017: invalid username/password; logon denied /{oE#p.l%CLE0u'v x

oBY-L8\u6Js-q
)eRGaM;oGn Q'c.~0T4r wf'HK
SP2-0157: unable to CONNECT to ORACLE after 3 attempts, exiting SQL*Plus h T xu E;N
6}%C#nD z{+_E
S ~:cO:J\.vB1]r
D:\oracle\ora92\database>
}/_#^w0z$CyoC Hd%D@\D'X
D:\oracle\ora92\database>sqlplus "sys/mypassword as sysdba"
P PL`g;pt
&nInx@_i H-A^5n%VQ;}
SQL*Plus: Release 9.2.0.1.0 - Production on Sat May 17 00:59:15 2008
-a)UZ+[R?0O~ d_5lhi|+g.Q-u
E ~dq9oHB&R,u
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
$lkuI&ow(G5L-Z 4]1]i&@oc,vx.^+G m
XWU&o*q
d"E!EHL0Q]
Connected to:
{(U)z5OX +itRhq
Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
3oV.Un%L8C "e7\)P!q#n(@;dYa
With the Partitioning, OLAP and Oracle Data Mining options 1x;HxZ] R.jig!_ s

\/h%x9e*R dYh JServer Release 9.2.0.1.0 - Production
? ]A-rb Ggin2V'm %qYHu6d2K
FA3RG u'] {v
sys@ORALOCAL(192.168.50.29)>
R7H`B z Olx0}lr oL1V?PT
sys@ORALOCAL(192.168.50.29)>
bjsb.i/? 4uJM0X+H C3S
sys@ORALOCAL(192.168.50.29)> exit
s9j%q9gB2l` eL)C7~n rb)C
Disconnected from Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
xq m1Y7`:d +g]q1xyF
With the Partitioning, OLAP and Oracle Data Mining options x#P)Qic k8gacUz
N'Xs2IC;x
JServer Release 9.2.0.1.0 - Production
Zi"S Q~sK.t Z B ju4?dIs ~
"L Y+G9Dwy!S[
D:\oracle\ora92\database>sqlplus "sys/mypassword@oralocal as sysdba" $p(^c^9G
n7_-A |"B
"n(u X~UT~cp}&]
SQL*Plus: Release 9.2.0.1.0 - Production on Sat May 17 00:59:38 2008 %BT'[ J1m!z5J)J
Y&gmzVAs#p

I l^,T+C Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved. 7HIX BjAxNo
fT%x4i3B$T
-{x[\.y2t}
[ Pt snrT6v@
Connected to:
ec"i-lc T1Ze*f.Y3J.u-n
Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production *Hf!c%k,hAf
(E.w2{yR'}2SSN
With the Partitioning, OLAP and Oracle Data Mining options ;tRH.qw SU

2Nmj aaN8C+zx JServer Release 9.2.0.1.0 - Production )m:q\8O3N:J u

/D jZ h)[
r.Y!GH!LLVENP sys@ORALOCAL(192.168.50.29)>

不和人说话 发表于 2008-6-5 08:14

至此，我们已经实现不用os认证（sqlplus “/ as sysdba”的方式登录不了）。那么我们怎么限制网络方面利用sysdba远程登录呢？我们可以设置初始化文件中的REMOTE_LOGIN_PASSWORDFILE=none。
j[xd-iK!` Xt3l Fa{-C5` ?

o0DJJ8i u |l!K B Ot'} 注意，当REMOTE_LOGIN_PASSWORDFILE=none时，这个参数生效需要重启数据库，并且，一旦启用这个参数，将使用操作系统认证，不使用口令文件。因此如果REMOTE_LOGIN_PASSWORDFILE=none且SQLNET.AUTHENTICATION_SERVICES= none这个时候数据库是无法登录的。 .n*gl;A"w#Z2`\eK
8COD s3_i+F
[coolcode lang=”sql” linenum=”off”] C ]-r(J!n sB#pZM
+Wmc2K'f mu;I8xx
D:\oracle\ora92\database>sqlplus “sys/change_on_install as sysdba” Xj[$P:a?B3Xx
G3N'o_.Vb

`5E5z2trL5j_b4x/TP+bN SQL*Plus: Release 9.2.0.1.0 - Production on Sat May 17 01:28:58 2008
_ ~@@5~&|!?(gW
0~?/{L;_p,C w"zz~4yCbE
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
e M1~K []7Vo.O
,e0T*SB+?k ](q({[x0Sx
Connected to:
}8[ m%OmB*SO"pv gbx]|+uX
Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production OC5Z-e.K4w^

4H;h+_uyrpY With the Partitioning, OLAP and Oracle Data Mining options
)Z W;ZA{ Xg!U3@1EP&u!D
JServer Release 9.2.0.1.0 - Production
p'm-l)j.J)W`7BN4o 7LJ ~ Eq5ixA&b]ff

Yn(m#\~ W sys@ORALOCAL(192.168.50.29)> show parameter remote_login K[K,g9[&_)A

_:aB)}q.i/H
"f,tC0gH(u3hJ%^o/r NAME TYPE VALUE 9}!fj9F'~s
)h8{|[)Wxs
———————————— ———– —————————— ^5^4a"K cv

9d9F"cob o remote_login_passwordfile string EXCLUSIVE
F P+[ _`A _vbn%^+vT%Qk
sys@ORALOCAL(192.168.50.29)> alter system set remote_login_passwordfile=none scope=spfile; I,Z+x2rE U#Sy

[ i L5C:M7`I5~U 3hi-EW0B}*S$t8w[
System altered.
5F"y*l ]t h
S n6H T$h WTZlH"Eo2j/V-P
Elapsed: 00:00:00.01 s _$h/F1R[X

I7H/d I GX.N ^| sys@ORALOCAL(192.168.50.29)> shutdown immediate;
;Hm};\L-o1GN S#{ 7~ B S4xd Y
Database closed.
}o1u|C0y9k3H"W w'}7YnZ&?#Cp
Database dismounted.
7N x5Mh0?9HZ)a6~
@)X@kO$Cp0n6V ORACLE instance shut down.
| b8fMBl wa#o:\4l A3VZ
sys@ORALOCAL(192.168.50.29)> startup
i)Y y \6onR%uR"LLFT
T$P:mO,FU ORA-01031: insufficient privileges F%p(~{[g K

e3q4Wp)ZbG sys@ORALOCAL(192.168.50.29)>exit
/ENi+X1I 2[:X(my"Z ^ d{

u*NPh*`PgL u0Wk C:\Documents and Settings\Administrator>sqlplus “/ as sysdba” .KT:Q8@+hk;G4v3o0|!Xu

;A T.I2z2?%f{(dT ZV f9L [1^ V'C
SQL*Plus: Release 9.2.0.1.0 - Production on Sat May 17 08:26:43 2008 3Q%U;h)U0mer7bPEu
:H/`!]9pi*kaW!m
Z%MXalf
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved. t-kn&C| oo8p
dK[u8q W

'ci~9m$X ERROR: N8Vb\V2j^S8z8{

2L%D)Yx*B"IC ORA-01031: insufficient privileges 4KWA7w/ZD%l;x4q

c}:~6j+}:Can "OknCM
Enter user-name:
(M4`p8cC `7_'Qt
b{L:D#|%G[n0KR ERROR: MI;h1K,tx6U4T0}
I*a;z'w;h$O6B%o D!l
ORA-01017: invalid username/password; logon denied 3Z]ChHh3k
J6n\2~ }8v

C!H|?Jh ? ? Enter user-name:
n2p(X,dd qF:uC$k0BK8Z
ERROR:
:~pS0pH1H*I
(G1i0R;H A6uF U z ORA-01017: invalid username/password; logon denied J]$DNm
,u$A t/~o a

:g ~2_M O[X SP2-0157: unable to CONNECT to ORACLE after 3 attempts, exiting SQL*Plus &eh Ikg~Ws g+I
M;@ M(e }*Zj#B

H8G t:U/S!Y.~g C:\Documents and Settings\Administrator>sqlplus “sys/change_on_install as sysdba” d U Wc'xyM0M+j
YGSE4Q*Lu#ZS[I+g
Y@5I r$q
SQL*Plus: Release 9.2.0.1.0 - Production on Sat May 17 08:26:53 2008 aY;Z*UB)W4A-n
9N4zN;K3L(E
C` j*zi3E`i
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
s4b hZo6@
N`K0vf7G5P"y $QAA#Tp#i8l(a&T
ERROR:
]_H:[)L Y [#v RV*DpkE
ORA-01017: invalid username/password; logon denied
2y1APPZI@NAL,h 8Q_$zl2tNIp

.Q(G,kmV#R%}ts1H Enter user-name:
AQ1M?4@'ivJ~
P/p-VA(N { ERROR: &M?h)P%w
P'zy0nZC3?
ORA-01017: invalid username/password; logon denied
1C&nkL p
#Y&L8PE| tc#p Tr2cBm
Enter user-name: Wg:q{n'Y6rJD

]\+N7Pt!R.L"jSg ERROR:
J.t$BV%z O9a
#Da1g&w%ly]mRN\s ORA-01017: invalid username/password; logon denied
I!t/}V0?j8O,k G LpJ jh k&N}
D @GE!Tr'MP)h
SP2-0157: unable to CONNECT to ORACLE after 3 attempts, exiting SQL*Plus !XlrCc"}al:?
J+iQLH)XO
&h)kj_#Ya4Fq:_;P+UY D
C:\Documents and Settings\Administrator> h {_8Myo:\EK5z
O,z3Z pM6T+o
C:\Documents and Settings\Administrator>sqlplus “sys/change_on_install@oralocal as sysdba”
#M&Os*O5yZV2x f-A2T#h:G$N(c#]l,F
ahrs6]
SQL*Plus: Release 9.2.0.1.0 - Production on Sat May 17 08:27:03 2008
p-?0Wno8g3m:H {RUP @ do

?5YvrC.Sj Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
s({IjPx4R
fS]I K!u9UH&K4S d1O/gNBw)s/}
ERROR:
-`:t*j d N7\%}b4Zg
-@%_~ |$l"SrP ORA-01017: invalid username/password; logon denied
E5H&wP&j0L l S3v"owU/\C
Cakq ['R/uI
Enter user-name:
(Lih_.{{-F%Mx GJL8h-X b$h(q#b
ERROR:
?ze|Iw!I raB'zF6fs+h
ORA-01017: invalid username/password; logon denied
/g:n@i1a;W;z Z uCFvT,rR1d$aF0x

g[cX![4ry Enter user-name:
}Pa[,WJe_:^
aQ:i3\-u$I U ERROR: "VeX)?Z!l

R(N6[ E#p*b/q ORA-01017: invalid username/password; logon denied G:zs"E2jCr
g;z^+L3N M
@ReI]9IL
SP2-0157: unable to CONNECT to ORACLE after 3 attempts, exiting SQL*Plus
e0]9s"g~x 6]~4p'n"N[*sD

{EJ)h1uGT)vC}5z2^ C:\Documents and Settings\Administrator>
l JpZs 4G(i-A x b%T%r#G4d0?{A
[coolcode]

不和人说话 发表于 2008-6-5 08:14

这里我们看到由于启用了REMOTE_LOGIN_PASSWORDFILE=none，使用os认证，不用密码文件认证，必须将SQLNET.AUTHENTICATION_SERVICES= none取消，不然是无法登录。我们改成SQLNET.AUTHENTICATION_SERVICES= （NTS）后再次测试。
-E| ]d3| \oO'F :{tY7PFo\nq
[coolcode lang=”sql” linenum=”off”] \rE8C*r1cb
Zg$HOp e
### 非oracle软件安装软件用户：###
%w3z;d5zpAp{tn\
'UL}d.?*Q+@(d C:\Documents and Settings\hejianmin>sqlplus “/ as sysdba”
{Enh1C&~'[)d&qX.V"p $Ul,mf-OboP

NVJr%X5n.b SQL*Plus: Release 9.2.0.1.0 - Production on Sat May 17 20:15:13 2008
){)k2].M6Om A s)DwD,j|:K b

{EtK{2CA%J f&S Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved. :nu[zM PqOkm
8@ t.?!b?9n
+c8xI'E$D.q}E
ERROR: -Z]f4fe J

Vx#kp(Q'pz1{$`8s,X ORA-01031: insufficient privileges t,A U"x9S \,G%}

Ds R3UpM*}!F {6wlC8gMPL
Enter user-name:
W4e8n%{lr$F
_s6P,l1^J FI ERROR:
t8c6|z H?zx _3HW-~;c:b+^#eI
ORA-01017: invalid username/password; logon denied t^["V}y
r2US4J}]#|)Se

+c1S&R;fx"f Enter user-name:
.I ~p T/U!s!q P5j y-x qx AF+Wm5D:Wj7B:}
ERROR: P ~V2DP#v,eS!VX
f.n| m Q1K'v {_j$~
ORA-01017: invalid username/password; logon denied
m3gp`+}0P"y
$`_3~0M{'Rz i C7Q y$Q :CRbUD*bRFa
SP2-0157: unable to CONNECT to ORACLE after 3 attempts, exiting SQL*Plus
/p'l|DzcF-H!Yn*}8Y D-l!H;C2Y.bp9{*q&p

Qh]5jF ~;W]*p!e C:\Documents and Settings\hejianmin>
4um'Ge!y
XSu{;P~r I C:\Documents and Settings\hejianmin>sqlplus “sys/change_on_install as sysdba”
0Uo+y2I{L
Fj8qL{
Y2k$e,L.|T-@ SQL*Plus: Release 9.2.0.1.0 - Production on Sat May 17 20:15:30 2008 (z!E Wi:~^&\)^h
k-q`8h"a?[
p)V#Cip)^ N#T~
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
s2J)wA#aB#aj 'w9u#Wbm2Ew @
8sX9R^gH$Y
ERROR:
\\ Z9Z2h#G%boT*RJ
a-_E(Ft6dw\ ORA-01031: insufficient privileges .OxkX)Q5j)WbC

Rd5O o#I/?z([
lz9d Z|,D X%O Enter user-name: ma {-\.s#oZ7Cnu

yU)v-RP%v(b ERROR:
4G;nP p K7s Si(o&]
[p._-?!esGv [!S$X ORA-01017: invalid username/password; logon denied -{.{n+C|&N
X9J{qQ.D-x

d!C8xS;q$y+Ik Enter user-name:
;[(H HlC5p(aEg ?zUH9DW'W
ERROR: #\ J.^&~.d So9ArL @
4] Mb3l1B7xHGJK
ORA-01017: invalid username/password; logon denied
;z8A5ZvUF n;xg,fmd%n H

I%C-p|Qf4K SP2-0157: unable to CONNECT to ORACLE after 3 attempts, exiting SQL*Plus &i9~ Raj1X+x
q-_2AbJ \0U%GIt4^

"N+jarrO:cO C:\Documents and Settings\hejianmin> w:WsI[0f
EW I5e2J_4X0]2yE
C:\Documents and Settings\hejianmin>sqlplus “sys/change_on_install@oralocal as sysdba” 6XBxh$k'?Ig\

1y8V/qz$\8{
Q%Eu2n~kGRA7w^ SQL*Plus: Release 9.2.0.1.0 - Production on Sat May 17 20:15:42 2008
"qQt.t_G.x
B K6y4cB/b
nR |Ys y4Z;M| Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved. $c3^$e8lAe,P U
G`u#hY&}L n1B

W'T Er(HR4r ERROR:
MX4TG^A
h2R"k#v0^ ORA-01031: insufficient privileges o"iYW.S|
;F8F d'\[iX*\
n]1Oh!C i!\7Y@y
Enter user-name:
!G)p_J,S|9qx
%X f4MO+l ERROR: 8R7i-L [h |'T.d
5S{M!kW t"_
ORA-01017: invalid username/password; logon denied &S3HJ-k1F}

rpS(L#o1W9b
]!hd y,XMu I:u Enter user-name:
-v3U SSK/R7h C~ y
9z5J^C1Y&D-{ ERROR: ^'x?qY&m
l9~MsCu ~
ORA-01017: invalid username/password; logon denied &p ?(X\$G

4]"f:x:[O)V o_1j;?)a#x^
SP2-0157: unable to CONNECT to ORACLE after 3 attempts, exiting SQL*Plus +y k)m&IK*f
{j(g9iv*e\.y;R
ADDB*o6tY:{6_p
C:\Documents and Settings\hejianmin>
.stY DE$A|X Pg%E$^!ZH0s m I

B N[M/g:W ### oracle 软件安装用户 #### EP O2VP

M aF%s,]._:R OH C:\Documents and Settings\Administrator>sqlplus “/ as sysdba”
c2t;f c"?gm nl.` ?RT;bds(i

L9WM~}(^ARmd SQL*Plus: Release 9.2.0.1.0 - Production on 星期六 5月 17 20:19:13 2008
j wa:gMr:W
"?} B {%~$g-px
]8J:R2\5e2f Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
ea!\$O!_f6T#D 5k~q({)}v V*vB ~

,gd$PxrZ| 连接到:
(fI\?"M;qRI[I)]c[
)Ph@4dq|Lbc Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
$~l5q.o gbclxK*e /pqd:Q"bG)w
With the Partitioning, OLAP and Oracle Data Mining options }.kD0tA7e{k]1?!b

e8^ `ms_"^[ JServer Release 9.2.0.1.0 - Production r W)q@M

}*L@!S;~ @
Cq1T2J/f m!fN,{9z%T sys@ORALOCAL(192.168.0.29)> exit P:I$@*D`@4}yy

9n oWb(E9w?;n4y 从Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production *W2C%? K"N n0H~.c

4x9MK t({+O With the Partitioning, OLAP and Oracle Data Mining options ILGgi,Oo

e-K+I6R(A?h JServer Release 9.2.0.1.0 - Production中断开 /L4Z3hH9K"j"`k\o

[a+~-^.w|r(Fx U,U5H W!g9cc
C:\Documents and Settings\Administrator>sqlplus “sys/change_on_install as sysdba”
1BXG0|9K6` N2l W rH XYXB6e

"D'SG.|GeORK SQL*Plus: Release 9.2.0.1.0 - Production on 星期六 5月 17 20:19:33 2008 z2V2w8\!C+[,Aq

8l:wLS+K4s#Iw"n
6NqYF1B Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.

不和人说话 发表于 2008-6-5 08:15

连接到: I`c/e.f$eF d(I

$y9|}e3vn9i Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production 2i]%ZX,P2y.J)l&o{J9t

}\2b6F1["o s7V2R With the Partitioning, OLAP and Oracle Data Mining options
Agf8hy-Bo +P J1O.Ou a
JServer Release 9.2.0.1.0 - Production |"e)kj;MN$OZd
8]:ju@0~9l(?5CB

4b+h8ba$I]0yj3A sys@ORALOCAL(192.168.0.29)> exit
k1Z2jxG:dJ x hZ4`
)^hunRWFW 从Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production /E[`]+FG%];U~c7?

wK)b1F!A^.T2E With the Partitioning, OLAP and Oracle Data Mining options
1]B!j;x+v
*z8{(uX el W JServer Release 9.2.0.1.0 - Production中断开 } WC E/{oQ){R1V
TtMi7u
-Cq5o/C7\|/jc&}(|
C:\Documents and Settings\Administrator>sqlplus “sys/change_on_install@oralocal as sysdba” R6mV'R h j

:`)D5? z?0EC9Y
.|l-TZ7ON SQL*Plus: Release 9.2.0.1.0 - Production on 星期六 5月 17 20:19:45 2008
a(u4t:c[
&i+]7hLcI k1nly'E #E7YT$U0m ?1FJ
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
(F'zS'r rx
R,e*X@:Z \W-J4wOz6IH3K
连接到:
_5W:Rl a0I
e x,y+`?&N3g`1d4X Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production M%[aGya.Nt

1k._[C#}\ With the Partitioning, OLAP and Oracle Data Mining options k6h o$x Ks

w&iy#[q/EQ@1G JServer Release 9.2.0.1.0 - Production W(E F"m1D

U7Y5u"L3kj k4RWv r(} Q%upt
sys@ORALOCAL(192.168.0.29)> exit g3i6^$Of\D
RB7i:mh#o J J!O%o
从Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production S a8Ue I7Ah5t3At

'C:LS'm+w8ms,RI With the Partitioning, OLAP and Oracle Data Mining options +ULST0D%D+Pba
oRWH/xR
JServer Release 9.2.0.1.0 - Production中断开
Rtz{sFH1r6y Gl$RaqA
.F?MGL9yz,A w
C:\Documents and Settings\Administrator>sqlplus “11/22 as sysdba” Q*~:W)`h+a0b
,jb;q)s-S

hqT[U.~'D8p{.i&i SQL*Plus: Release 9.2.0.1.0 - Production on 星期六 5月 17 20:19:58 2008
v'LL1e5@$I ay)lyc

6gZl7E\;b0q Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
I1TC4YL&r/c]-S.J
4th @0a-jOT
r Di6M}]:il 连接到:
D.{1Xyn"r.iM hC
A!K(P&u&o/NL Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
R"^p8b c-a-rG!xXc 3Ba Mu#KG8p$g$a
With the Partitioning, OLAP and Oracle Data Mining options
8cyS1z4M6{
/qr#v~I"h,O*t JServer Release 9.2.0.1.0 - Production
NvU P'h h6D(_ pf
i zXFhR6t6qr
3f`s8xp-s!}+b&e sys@ORALOCAL(192.168.0.29)>
!q@ Qg A&mi2Q lh;F"g-\BB7I
[/coolcode] %I-H.k2P)@bBM/g!n

'{fk%h.g Hj#e'm 在这里我们看到由于用了os认证，在oracle安装用户下，无论用什么方式都能登录。非oracle用户无论用什么用户都无法登录。 x{ j"n@ cO ]2h;A k

]d&xWc9^8X )B[,[+r3Z`
如果REMOTE_LOGIN_PASSWORDFILE=exclusive且SQLNET.AUTHENTICATION_SERVICES= none时：
)cc+q~(Z-Pw9Q {
\ [+X m-r`2e8J8~y [coolcode lang=”sql” linenum=”off”]
MG oD,`/Bra
p+|-JiK-X5\%I C:\Documents and Settings\Administrator>sqlplus “sys/change_on_install as sysdba” }v9Va$j| m(X

&rRHN"P 7g#ZoJ fsw3LO
SQL*Plus: Release 9.2.0.1.0 - Production on Sat May 17 20:30:57 2008 ` OR{,hwvl

wLwn0rU&L!f p2xE|7k$O
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved. ,W.nWgie:c

!m0R)S2HXi.C!Ve )oI-}y"t6T+u0~
Connected to: $V)yj)r%H

(e*]lW;OK Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
y~e `-b*Vs.G
mVc`#aCc With the Partitioning, OLAP and Oracle Data Mining options
.Nn{#kMtH5Hs
-un#ELu0Sf JServer Release 9.2.0.1.0 - Production .|$u K-nIX3?m/\

t {@PUUs EVOv*]3f4N,o
sys@ORALOCAL(192.168.0.29)> exit @'A7c eeC~

3O&M(g uu5w,y ];A Disconnected from Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
mNR3Gb#sn:V
i%h&nT;onmZSr9p With the Partitioning, OLAP and Oracle Data Mining options X vs)z!Or

C_I/g#k\ y5l!h` JServer Release 9.2.0.1.0 - Production SN2Q Hz3^*s:o'cx

Z"^!}{ B
*h?Aw.Mi {)g C:\Documents and Settings\Administrator>
8Ue!L.X2kf4v"XX$Z,[{ 9y_p+Yk
C:\Documents and Settings\Administrator>sqlplus “/ as sysdba”
!lz[vE/Twb e L8w
-b&j"z%| j#Fpc'L{d *R e6evA'e
SQL*Plus: Release 9.2.0.1.0 - Production on Sat May 17 20:31:04 2008 ?$yeC0m7pEC

|NC*I)R!sN1m7k^ )?)N2p#m&L v
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved. $U$\d6T)f(o$h
u5tn0N n ]3O w

L#yiJb ERROR: 7CG?2GVi

v#AM]{b5W8p-] ORA-01031: insufficient privileges (W$j6YDVtR(?,_

7i2g5j k(F%h,R f }V Ec#D/i4q?&lD
Enter user-name:
eRMM p*FT3c(GC
5| Y-c.wa J ERROR:
1vl(r7f:|"{ 6Bz0h2[7KH
ORA-01017: invalid username/password; logon denied
XtI^+g!b4n#f~} !L rQ AKQ{ I ?

n;JA1R0|AnI Enter user-name: $?a.Nb[F%Ro*]
,A%K/w5| OP
ERROR: ]#\6i2m1@/F
6^I {hb:F
ORA-01017: invalid username/password; logon denied m0dW-c2o2A+F3D

9XGL$O6mFwE7R%XV !{ U{3F_!_&T)z[
SP2-0157: unable to CONNECT to ORACLE after 3 attempts, exiting SQL*Plus
_$L+]7~le _G&{ kx,Fj )[2HAE1]
KlA.y|*o e-L6e
C:\Documents and Settings\Administrator> [e*g3x2Yw/dL&Q

,Rhs\3\ PLb4[Dc,k C:\Documents and Settings\Administrator>
`2Vn i j GU#GvG3h W
"ZAT9b9S$`b] [/coolcode]
k;_1C _+|6B{&G8f *yC`ZH.g"t"Y.k6a

9wV{ cY0[7i 结论： -} \.t%V/RNY

.F q(j kN （1）REMOTE_LOGIN_PASSWORDFILE=none且SQLNET.AUTHENTICATION_SERVICES= none：
X"j.DU7m!R
"j0j&{)Qx-Z(^8uQ oracle安装用户本地sqlplus “/ as sysdba”无法登录 8sB$de!}|

vq M]$o 非oracle安装用户本机sqlplus “sys/change_on_install as sysdba”无法登录
*Af2^%` KVd R
h4@#dr@ g3r^d 非oracle安装用户远程sqlplus “/ as sysdba_on_install@sid as sysdba”无法登录
-c})N#G(}iW+V0|
-];z(i1Q+}W_4?7G /H@Phvn-yi:|,\
（2）REMOTE_LOGIN_PASSWORDFILE=exclusive且SQLNET.AUTHENTICATION_SERVICES= none：

不和人说话 发表于 2008-6-5 08:15

oracle安装用户本地sqlplus “/ as sysdba”无法登录 q)\3{h0F_ ma

x@4x S#W 非oracle安装用户本机sqlplus “sys/change_on_install as sysdba”能登录 1Sz3M&mX
*~8dk$zds"de
非oracle安装用户远程sqlplus “/ as sysdba_on_install@sid as sysdba”能登录
z ce\k E\NC~

,yj%KR.\ （3）REMOTE_LOGIN_PASSWORDFILE=none且SQLNET.AUTHENTICATION_SERVICES= (NTS)：
Dh9V \f1Q!c` OB4]g
;Vh'UI7r oracle安装用户本地sqlplus “/ as sysdba”能登录
?IArN,uX6s#^
;djWZ;^9u/P}A#_ 非oracle安装用户本机sqlplus “sys/change_on_install as sysdba”无法登录
"\,^V2B`
V'aEN#v8V3x;a 非oracle安装用户远程sqlplus “/ as sysdba_on_install@sid as sysdba”无法登录
d(ZWA+}m
6K DG/a2M Y.G` | j$H c&aSj`&@Pz^4W
（4）REMOTE_LOGIN_PASSWORDFILE=exclusive且SQLNET.AUTHENTICATION_SERVICES= (NTS)： :Xz t:ny
4f*ke:z;?M.EG
oracle安装用户本地sqlplus “/ as sysdba”能登录 $\.C.J#TQ

j3qx)fR6@Uw 非oracle安装用户本机sqlplus “sys/change_on_install as sysdba”能登录 4w0SA t(IK0E2yJ ^#AV+M
sV4x:e4P@3qS&V
非oracle安装用户远程sqlplus “/ as sysdba_on_install@sid as sysdba”能登录

页: [1]

Powered by Discuz! Archiver 6.1.0  © 2001-2007 Comsenz Inc.