分类： Oracle
2012-06-26 22:28:13
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
Normal
0
0
2
false
false
false
MicrosoftInternetExplorer4
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:表格內文;
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
Normal
0
0
2
false
false
false
MicrosoftInternetExplorer4
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:表格內文;
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
1:OS认证。
oracle安装之后默认情况下启用了服务器端os认证。登录数据库的用户和口令校验放在了操作系统一级。
|
Operating System Group |
UNIX User Group |
Windows User Group |
|
OSDBA |
dba |
ORA_DBA |
|
OSOPER |
oper |
ORA_OPER |
Windows注意两点:
1: $ORACLE_HOME/NETWORK\ADMIN\sqlnet.ora
SQLNET.AUTHENTICATION_SERVICES = (NTS)
SQLNET.AUTHENTICATION_SERVICES = (ALL)
2: Windows user存在于ORA_DBA或者是ORA_SID_DBA群组。
Linux则无此限制，只要用户在dba或oper群组即可。
以SYSDBA登錄，show user顯不為SYS.
以SYSOPER登錄，show user顯不為PUBLIC
2、口令文件文件
ORAPWD FILE=filename [ENTRIES=numusers] [FORCE={Y|N}] [IGNORECASE={Y|N}]Command arguments are summarized in the following table.
|
Argument |
Description |
|
FILE |
Name to assign to the password file. You must supply a complete path. If you supply only a file name, the file is written to the current directory. |
|
ENTRIES |
(Optional) Maximum number of entries (user accounts) to permit in the file. |
|
FORCE |
(Optional) If y, permits overwriting an existing password file. |
|
IGNORECASE |
(Optional) If y, passwords are treated as case-insensitive. |
Oracle通過参数remote_login_passwordfile来控制的，有 none，shared，exclusive3个值，none表示不使用口令文件，exclusive表示实例独占使用口令文件，也就是各自实例使用单独的口令文件，shared表示多个实例共享一个口令文件，RAC有用到。
Windows PWDsid.ora
IF register THEN
ora_sid_pwfile
ELSE
Variable set ora_pwfile
ELSE
$ORACLE_HOME/database/PWDsid.ora
ELSE
MOUNT
END IF;
Linux orapwSID(大小写敏感），
IF ＄ORACLE_HOME\dbs\orapwSID THEN
MOUNT
ELSE
＄ORACLE_HOME\dbs\orapw
ELSE
MOUNT
END IF;
system_privilege_map
3 DB口令認証。
SQLPLUS USER/PASSWORD
4: 外部口令認証。
