Administration (003): keep administrator passwords synchronized with data dictionaries

If you change the REMOTE_LOGIN_PASSWORDFILE initialization parameter from none to exclusive or shared, you must ensure that the passwords stored in the data dictionary are the same as those of non-sys administrative users such as SYSDBA, SYSOPER, SYSBACKUP, SYSDG, and SYSKM stored in the password file.

To synchronize the passwords of non-system administrative users, such as SYSDBA, SYSOPER, SYSBACKUP, SYSDG, and SYSKM users, you must first revoke the passwords of those users and then re-grant these users the following permissions:

First, SYSDBA finds all the users who have been granted SYSDBA rights. SELECT USERNAME FROM V$PWFILE_USERS WHERE USERNAME! = 'SYS' AND SYSDBA='TRUE'; revokes and regrants SYSDBA permissions to these users. REVOKE SYSDBA FROM non-SYS-user; GRANT SYSDBA TO non-SYS-user; II. SYSOPER finds all the users who have been granted SYSOPER rights. SELECT USERNAME FROM V$PWFILE_USERS WHERE USERNAME! = 'SYS' AND SYSOPER='TRUE'; revokes and regrants SYSOPER permissions to these users. REVOKE SYSOPER FROM non-SYS-user; GRANT SYSOPER TO non-SYS-user; 3. SYSBACKUP finds all the users who have been granted SYSBACKUP rights. SELECT USERNAME FROM V$PWFILE_USERS WHERE USERNAME! = 'SYS' AND SYSBACKUP =' TRUE'; revokes and regrants these users SYSBACKUP permissions. REVOKE SYSBACKUP FROM non-SYS-user; GRANT SYSBACKUP TO non-SYS-user; 4. SYSDG finds all the users who have been granted SYSDG rights. SELECT USERNAME FROM V$PWFILE_USERS WHERE USERNAME! = 'SYS' AND SYSDG='TRUE'; revokes and regrants SYSDG permissions to these users. REVOKE SYSDG FROM non-SYS-user; GRANT SYSDG TO non-SYS-user; 5. SYSKM finds all users who have been granted SYSKM permissions. SELECT USERNAME FROM V$PWFILE_USERS WHERE USERNAME! = 'SYS' AND SYSKM='TRUE'; revokes and regrants SYSKM permissions to these users. REVOKE SYSKM FROM non-SYS-user; GRANT SYSKM TO non-SYS-user