Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Manage (001): ORAPWD command

2025-03-27 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Database >

Share

Shulou(Shulou.com)06/01 Report--

The ORAPWD command creates and maintains a password file.

The syntax of the ORAPWD command is:

Orapwd FILE=filename [FORCE= {y | n}] [DBUNIQUENAME=dbname] [FORMAT= {12.2 | 12}] [SYS= {y | n | password | external ('sys-external-name') | global (' sys-directory-DN')}] [SYSBACKUP= {y | n | password | external ('sysbackup-external-name') | global (' sysbackup-directory-DN')}] [SYSDG= {y | n | password | external ('sysdg-external-name') | global (' sysdg-directory-DN')}] [SYSKM= {y | n | password | external ('syskm-external-name') | global (' syskm-directory-) | DN')}] [DELETE= {y | n}] [INPUT_FILE=input-fname] orapwd DESCRIBE FILE=filename

The following table summarizes the command parameters.

Parameter description FILE specifies the name to assign to the new password file if it does not include the DESCRIBE parameter. You must provide the complete path. If only the file name is provided, the file is written to the current directory.

If the DESCRIBE parameter is included, specify the name of the existing password file. FORCE (optional) if y, allows existing password files to be overwritten. ASM (optional) if y, create an ASM password file in the disk group.

If n (the default), a password file is created in the operating system file system. When the DBUNIQUENAME parameter is specified, the password file is a database password file. When the DBUNIQUENAME parameter is not specified, the password file can be a database password file or an Oracle ASM password file. DBUNIQUENAME unique database name that identifies database password files that reside only in ASM disk groups. This parameter is required when the database password file is stored in the Oracle ASM disk group. When you create an Oracle ASM password file by setting the ASM parameter to y, this parameter is ignored. FORMAT (optional) specifies one of the following values: 12.2, which is the default value, to 12.2. To create a password file in the format of This format supports granting administrative rights to external users and enabling SSL and Kerberos authentication for administrative users. 12 create a password file in Oracle database 12c format. This format supports SYSBACKUP, SYSDG, and SYSKM administrative rights. SYS (optional) this parameter specifies whether the SYS user is a password, external authentication, or global authentication.

This parameter can be set to y, n, password, external ('sys-external-name') or global (sys-directory-DN).

If you specify SYS=y and INPUT_FILE to migrate password file entries, you are prompted to enter a new password for the SYS administrative user.

If it is password, you will be prompted to enter the password of the SYS administrative user.

If it is external ('sys-external-name'), replace sys-external-name with the external name of the system administrative user's SSL or Kerberos authentication.

If global (sys-directory-DN), specify the directory service name for the global SYS user. SYSBACKUP (optional) creates a SYSBACKUP entry. This parameter specifies whether the SYSBACKUP user is a password, external authentication, or global authentication.

This parameter can be set to y, n, password, external ('sysbackup-external-name') or global (sysbackup-directory-DN).

If it is password, you will be prompted for the password of the SYSBACKUP administrative user.

In the case of external ('sysbackup-external-name'), replace sysbackup-external-name with the external name used for SSL or Kerberos authentication for SYSBACKUP administrative users.

If global (sysbackup-directory-DN), specify the directory service name for the global SYSBACKUP user. SYSDG (optional) creates a SYSDG entry. This parameter specifies whether the SYSDG user is a password, external authentication, or global authentication.

This parameter can be set to y, n, password, external ('sysdg-external-name') or global (sysdg-directory-DN).

If it is password, you will be prompted for the password of the SYSDG administrative user.

If it is external ('sysdg-external-name'), replace sysdg-external-name with the external name of the SSL or Kerberos authentication of the SYSDG administrative user.

If global (sysdg-directory-DN), specify the directory service name for the global SYSDG user.

SYSKM (optional) creates a SYSKM entry. This parameter specifies whether the SYSKM user is a password, external authentication, or global authentication.

This parameter can be set to y, n, password, external ('sysk-external-name') or global (sysk-directory- dn).

If it is password, you will be prompted for the password of the SYSKM administrative user.

In the case of external ('syskm-external-name'), replace syskm-external-name with the external name used for SSL or Kerberos authentication for SYSKM administrative users.

If global (syskm-directory-DN), specify the directory service name for the global SYSKM user. DELETE (optional) if y, delete the specified password file.

If n (the default), the specified password file is created. INPUT_FILE (optional) enter the name of the password file. ORAPWD migrates the entries in the input file to the new password file.

This parameter can be used to convert password files from one format to another, for example, from 12 to 12.2.

This parameter can also be used to reset the password of the SYS administrative user.

ORAPWD cannot migrate input passwords stored in ASM disk groups. DESCRIBEDESCRIBE specifies the properties of the password file, including format values (12.2 or 12).

Spaces are not allowed around the equal-to (=) character.

The following sections provide more information about ORAPWD command-line arguments.

FILE

This parameter sets the name of the password file being created. This argument is mandatory.

If you specify a location on the Oracle ASM disk group, the database password files are automatically shared among the nodes in the cluster. When you use Oracle ASM disk groups to store password files, but you do not use Oracle managed files, you must specify the name of the password file, including its full path. If you use Oracle managed files, you do not need a full path.

If you do not specify a location on the ASM disk group, the file name required for the password file is operating system-specific. Some operating systems require password files to follow a specific format and be located in a specific directory. Other operating systems allow you to use environment variables to specify the name and location of the password file.

The following table lists the names and locations required for password files on UNIX, Linux, and Windows platforms. For other platforms, refer to the platform-specific documentation.

Platform required name required location UNIX and Linuxorapw ORACLE_SIDORACLE_BASE/dbsWindowsPWD ORACLE_SID .oraOracle _ BASE\ database

For example, for a database instance of SID orcldw, the password file must be named orapworcldw on Linux and PWDorcldw.ora on Windows.

In an Oracle Real Application Clusters (Oracle RAC) environment on a platform that needs to set the environment variable to the password file path, the environment variable for each instance must point to the same password file.

For policy-managed Oracle RAC databases or Oracle RAC One Node databases with ORACLE_SID in the form of db_unique_name_n (where n is a number), first use ORACLE_BASE/dbs/orapw sid_prefix or ORACLE_BASE\ database\ PWD sid_prefix .ora to search for the password file. Sid_prefix (the first 8 characters of the database name) is used to locate the password file.

FORCE

If you set this parameter to y, you can overwrite the existing password file. If a password file with the same name already exists and the parameter is omitted or set to n, an error is returned.

ASM

If this parameter is set to y, then ORAPWD will create an Oracle ASM password file. The FILE parameter must specify a location in the ASM disk group.

If this parameter is set to n (the default), ORAPWD will create a password file. The FILE parameter can specify a location in an ASM disk group or operating system file system. When the DBUNIQUENAME parameter is specified, the password file is a database password file. When the DBUNIQUENAME parameter is not specified, the password file can be a database password file or an Oracle ASM password file.

DBUNIQUENAME

This parameter sets a unique database name for the database password file being created on the Oracle ASM disk group. It identifies the database resource to update with the location of the database password file.

This parameter is not required when creating a database password file on the operating system file system.

When you create an Oracle ASM password file by setting the ASM parameter to y, this parameter is ignored.

FORMAT

If this parameter is set to the default of12.2, ORAPWD will create a database password file in the12.2 format. 12.2 password files need a format to support the granting of administrative rights to external users and to provide SSL and Kerberos authentication for administrative users. Password profiles assigned to users are also enforced for administrative users.

If this parameter is set to 12, ORAPWD will create a database password file in Oracle database 12c format. The password file requires Oracle database 12c format to support SYSBACKUP, SYSDG, and SYSKM administrative rights. If this parameter is set to legacy, ORAPWD will create a database password file in the format prior to Oracle database 12c. Password files support SYSDBA and SYSOPER administrative rights, but do not support SYSBACKUP, SYSDG, and SYSKM administrative rights.

SYS

If you specify SYS=Y and INPUT_FILE to migrate password file entries, you are prompted to enter a new password for the SYS administrative user.

If it is password, you will be prompted to enter the password of the system administrative user.

If it is external ('sys-external-name'), replace sys-external-name with the external name of the system administrative user's SSL or Kerberos authentication. If global (sys-directory-DN), specify the directory service name for the global SYS user.

SYSBACKUP

If it is password, you will be prompted for the password of the SYSBACKUP administrative user.

In the case of external ('sysbackup-external-name'), replace sysbackup-external-name with the external name of the SSL or Kerberos authentication of the SYSDG administrative user.

If global (sysbackup-directory-DN), specify the directory service name for the global SYSBACKUP user.

SYSDG

If it is password, you will be prompted for the password of the SYSDG administrative user.

If it is external ('sysdg-external-name'), replace sysdg-external-name with the external name of SSL or Kerberos authentication for the SYSDG administrative user.

If global (sysdg-directory-DN), specify the directory service name for the global SYSDG user.

SYSKM

If it is password, you will be prompted for the password of the SYSKM administrative user.

In the case of external ('syskm-external-name'), replace syskm-external-name with the external name used for SSL or Kerberos authentication for SYSKM administrative users.

If global (syskm-directory-DN), specify the directory service name for the global SYSKM user.

DELETE

If this parameter is set to y, ORAPWD deletes the specified password file. When you specify y, you must specify a file, ASM, or DBUNIQUENAME. When you specify a file, it must be in an ASM disk group.

If this parameter is set to n (the default), ORAPWD will create a password file.

INPUT_FILE

This parameter specifies the name of the input password file. ORAPWD migrates the entries in the input file to the new password file. This parameter converts the password file from one format to another, for example, from 12 to 12.2.

This parameter can also be used to reset the password of the SYS administrative user.

When the INPUT_FILE parameter is specified, ORAPWD does not create any new entries. Therefore, ORAPWD ignores the following parameters:

PASSWORDSYSBACKUPSYSDGSYSKM

When you specify an input file and replace the input file with a new password file, you must set FORCE to y.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 209

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Database

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report