Shulou(Shulou.com)06/01 Report--

This article shows you the initialization parameters REMOTE_LOGIN_PASSWORDFILE set Oracle database password authentication method is what, the content is concise and easy to understand, absolutely can make your eyes bright, through the detailed introduction of this article hope you can get something.

The initialization parameter REMOTE_LOGIN_PASSWORDFILE sets the password authentication method for the Oracle database.

The most common setting for this parameter is EXCLUSIVE, which is also the default setting for the database:

Bash-3.00$ ls-l orapwtest1

-rw-r- 1 oracle oinstall 1536 Apr 14 14:12 orapwtest1

Bash-3.00$ export ORACLE_SID=test1

Bash-3.00$ sqlplus "/ as sysdba"

SQL*Plus: Release 11.1.0.6.0-Production on Thursday April 16 17:23:32 2009

Copyright (c) 1982, 2007, Oracle. All rights reserved.

Connect to:

Oracle Database 11g Enterprise Edition Release 11.1.0.6.0-64bit Production

With the Partitioning, Real Application Clusters, OLAP, Data Mining

And Real Application Testing options

SQL > show parameter remote_login

NAME TYPE VALUE

-

Remote_login_passwordfile string EXCLUSIVE

SQL > grant sysdba to test

Authorization successful.

SQL > host

$cd $ORACLE_HOME/dbs

$ls-l orapwtest1

-rw-r- 1 oracle oinstall 1536 Apr 16 17:24 orapwtest1

$strings orapwtest1

Z [\]

ORACLE Remote Password file

INTERNAL

8D7F004CD7D32C58

D3CE9AB10E42F19D

TEST

7A0F2B316C212D67

If REMOTE_LOGIN_PASSWORDFILE is set to NONE, password file verification is disabled, and the system will report an error when adding SYSDBA permission:

$exit

SQL > conn test/test@test1 as sysdba

Connected.

SQL > alter system set remote_login_passwordfile = none scope = spfile sid = 'test1'

The system has changed.

SQL > shutdown immediate

The database has been closed.

The database has been uninstalled.

The ORACLE routine has been closed.

SQL > conn test/test@test1 as sysdba

ERROR:

ORA-12514: TNS: the listener currently does not recognize the service requested in the connection descriptor

SQL > conn / as sysdba

Connected to an idle routine.

SQL > startup

The ORACLE routine has been started.

Total System Global Area 776896512 bytes

Fixed Size 2098776 bytes

Variable Size 212523432 bytes

Database Buffers 557842432 bytes

Redo Buffers 4431872 bytes

The database is loaded.

The database is already open.

SQL > grant sysoper to test

Grant sysoper to test

*

An error occurred on line 1:

ORA-01994: GRANT failed: password file is missing or disabled

SQL > show parameter remote_login

NAME TYPE VALUE

-

Remote_login_passwordfile string NONE

You can see that if REMOTE_LOGIN_PASSWORDFILE is set to NONE, the attempt to log in using password file verification will fail, and authorization or recall of SYSDBA and SYSOPER permissions will fail.

If REMOTE_LOGIN_PASSWORDFILE is set to SHARED, no database using this password file can authorize the recovery of SYSDBA and SYSOPER permissions, but these databases can use this password file for authentication.

This approach is typically used to manage RAC databases, or multiple different database instances on the same server.

Let's take a look at setting REMOTE_LOGIN_PASSWORDFILE to SHARED:

SQL > alter system set remote_login_passwordfile = shared scope = spfile sid = 'test1'

The system has changed.

SQL > shutdown immediate

The database has been closed.

The database has been uninstalled.

The ORACLE routine has been closed.

SQL > conn / as sysdba

Connected to an idle routine.

SQL > startup

The ORACLE routine has been started.

Total System Global Area 776896512 bytes

Fixed Size 2098776 bytes

Variable Size 212523432 bytes

Database Buffers 557842432 bytes

Redo Buffers 4431872 bytes

The database is loaded.

The database is already open.

SQL > conn test/test@test1 as sysdba

Connected.

SQL > grant sysoper to test

Grant sysoper to test

*

An error occurred on line 1:

ORA-01999: password files cannot be updated in SHARED mode

SQL > show parameter remote_login

NAME TYPE VALUE

-

Remote_login_passwordfile string SHARED

SQL > exit

From Oracle Database 11g Enterprise Edition Release 11.1.0.6.0-64bit Production

With the Partitioning, Real Application Clusters, OLAP, Data Mining

And Real Application Testing options disconnect

Bash-3.00$ mv orapwractest1 orapwractest1.bak

Bash-3.00$ ln orapwtest1 orapwractest1

Bash-3.00$ ls-l orapwractest1

-rw-r- 2 oracle oinstall 1536 Apr 16 17:24 orapwractest1

Bash-3.00$ export ORACLE_SID=ractest1

Bash-3.00$ sqlplus "/ as sysdba"

SQL*Plus: Release 11.1.0.6.0-Production on Thursday April 16 18:07:35 2009

Copyright (c) 1982, 2007, Oracle. All rights reserved.

Connected to an idle routine.

SQL > startup

The ORACLE routine has been started.

Total System Global Area 1603887104 bytes

Fixed Size 2095208 bytes

Variable Size 741722008 bytes

Database Buffers 855638016 bytes

Redo Buffers 4431872 bytes

The database is loaded.

The database is already open.

SQL > conn test/test@ractest1 as sysdba

Connected.

SQL > grant sysoper to test1

Grant sysoper to test1

*

An error occurred on line 1:

ORA-01917: user or role 'TEST1' does not exist

SQL > grant sysoper to test

Authorization successful.

SQL > conn test/test@test1 as sysoper

Connected.

You can see that the database started using SHARED can be authenticated with password files, but SYSDBA and SYSOPER permissions cannot be authorized or reclaimed.

Then, start another database and point the password file of that database to the password file just used by the test database, so that the two databases share the same password file.

However, for the TEST database, the SHARED mode is used, so the authorization of SYSDBA and SYSOPER cannot be performed, while for the RACTEST database, the default REMOTE_LOGIN_PASSWORDFILE setting is used, so the password file can be modified, and this change can take effect immediately in another database.

If the RACTEST database is also set to start in SHARED mode, there is no database to change the password file.

The above content is the initialization parameter REMOTE_LOGIN_PASSWORDFILE sets what is the password authentication method of the Oracle database, have you learned the knowledge or skills? If you want to learn more skills or enrich your knowledge reserve, you are welcome to follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.