oracle 认证方式

SYS

When you create an Oracle database, theuser SYS is automatically created and granted the DBA role.

All of the base tables and views for thedatabase data dictionary are stored in the schema SYS. These base tables andviews are critical for the operation of Oracle Database. To maintain theintegrity of the data dictionary, tables in the SYS schema are manipulated onlyby the database. They should never be modified by any user or databaseadministrator, and no one should create any tables in the schema of user SYS.(However, you can change the storage parameters of the data dictionary settingsif necessary.)

Ensure that most database users are neverable to connect to Oracle Database using the SYS account.

SYSTEM

When you create an Oracle Database, theuser SYSTEM is also automatically created and granted the DBA role.

The SYSTEM user name is used to createadditional tables and views that display administrative information, andinternal tables and views used by various Oracle Database options and tools.Never use the SYSTEM schema to store tables of interest to non-administrativeusers.

数据库安装完了之后的两个默认权限

另外用户使用as sysdba或者as sysoper用户登录的时候跟仅仅单独账户登录的时候不一致

CONNECT center

CREATE TABLE test(nameVARCHAR2(20));

Later, user centerissues these statements:

CONNECT center ASSYSDBA

SELECT * FROM test;

User center nowreceives the following error:

ORA-00942: tableor view does not exist

Having connectedas SYSDBA, user center now references the SYS schema, but the table was createdin the center schema.

1)        操作系统认证、：

如果

可以使用sqlplus/ as sysdba  或者sqlplus /nolog

然后使用conn/ as sysdba

2)        密码文件验证

这个需要在默认路径中有密码文件，如果没有的话需要创建

创建命令

Usage: orapwd file=entries= force= ignorecase=nosysdba=

  where

    file -name of password file (required),

    password- password for SYS will be prompted if not specified at command line,

    entries- maximum number of distinct DBA (optional),

    force -whether to overwrite existing file (optional),

   ignorecase - passwords are case-insensitive (optional),

    nosysdba - whether to shut out the SYSDBAlogon (optional Database Vault only).

 There must be no spaces around the equal-to (=) character.

密码文件位置

查看密码文件内容

[oracle@localhost dbs]$ strings orapwORCL

]\[Z

ORACLE Remote Password file

INTERNAL

8D81CE2BEA8C6ACC

41F238AD5AB73258

CENTER

7A295E4EB6BAA121

8jL!

最后说明下查询用户权限

SQL>select* from system_privilege_map where name like '%SYS%';

 PRIVILEGE NAME                                       PROPERTY

-------------------------------------------------- ----------

        -3 ALTER SYSTEM                                      0

        -4 AUDIT SYSTEM                                      0

       -83 SYSDBA                                            0

       -84 SYSOPER                                           0

查看在密码文件中的用户

SQL>select* from v$pwfile_users;

USERNAME                       SYSDBA SYSOPER SYSASM

------------------------------------ ------- ------

SYS                            TRUE   TRUE   FALSE

CENTER                         TRUE   FALSE  FALSE