Home » RDBMS Server » Security » ORA-01017
ORA-01017 [message #216431] Sat, 27 January 2007 11:51 Go to next message
kiran.athota
Messages: 2
Registered: January 2007
Junior Member
Hi,

I am using Oracle 9i.
I have created a new user "xyz".
I am able to login as a "sysdba" and "sysoper" , but I am not able to loging as a "normal" user.

Whenever I am trying to login as a normal user I am getting a 0RA-01017 error message.

Please suggest what could be the reason for this.

Thanks
Re: ORA-01017 [message #216434 is a reply to message #216431] Sat, 27 January 2007 12:52 Go to previous messageGo to next message
ebrian
Messages: 2794
Registered: April 2006
Senior Member
When connecting as SYSDBA, you are more than likely using O/S authentication and therefore can use any username/password to connect to the database. You should verify the user's password or change it to something you know.
SQL> select username from dba_users
  2  order by 1;

USERNAME
------------------------------
ANONYMOUS
CTXSYS
DBSNMP
HR
LBACSYS
MDSYS
ODM
ODM_MTR
OLAPSYS
ORDPLUGINS
ORDSYS
OUTLN
SCOTT
SH
SYS
SYSTEM
TEST
WKPROXY
WKSYS
WMSYS
XDB

21 rows selected.

SQL> exit
Disconnected from Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production

Now notice how TEST_USER didn't exist above, yet I can connect as that user:
C:\>sqlplus "test_user/none as sysdba"

SQL*Plus: Release 9.2.0.1.0 - Production on Sat Jan 27 13:40:58 2007

Copyright (c) 1982, 2002, Oracle Corporation.  All rights reserved.


Connected to:
Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production


I now create user TEST_USER and grant SYSDBA & CREATE SESSION:

SQL> grant sysdba, create session to test_user identified by pass;

Grant succeeded.

SQL> exit
Disconnected from Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production

C:\>sqlplus "test_user/pass as sysdba"

SQL*Plus: Release 9.2.0.1.0 - Production on Sat Jan 27 13:43:57 2007

Copyright (c) 1982, 2002, Oracle Corporation.  All rights reserved.


Connected to:
Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production

SQL> sho user
USER is "SYS"

SQL> exit
Disconnected from Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production

Even though I supposedly connected as TEST_USER above, notice how the user shows as SYS.

Now connecting without specifying SYSDBA:
C:\>sqlplus test_user/pass

SQL*Plus: Release 9.2.0.1.0 - Production on Sat Jan 27 13:44:33 2007

Copyright (c) 1982, 2002, Oracle Corporation.  All rights reserved.


Connected to:
Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production

SQL> exit
Disconnected from Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
With the Partitioning, Oracle Label Security, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production

C:\>sqlplus test_user/none

SQL*Plus: Release 9.2.0.1.0 - Production on Sat Jan 27 13:44:41 2007

Copyright (c) 1982, 2002, Oracle Corporation.  All rights reserved.

ERROR:
ORA-01017: invalid username/password; logon denied


Enter user-name:

I used the wrong password in the last attempt and therefore received ORA-01017.
Re: ORA-01017 [message #216451 is a reply to message #216434] Sun, 28 January 2007 03:46 Go to previous message
kiran.athota
Messages: 2
Registered: January 2007
Junior Member
Yup it worked.. changed the password and tried logging in and now I am able to login.

And you are right, when I was logging as a SYSDBA/SYSOPER it was showing that, it is the sys user who is logged in but not "xyz".

Thanks a lot for clarifying it.
Previous Topic: Ora-28003 When updating user details
Next Topic: Database audit trail compromised
Goto Forum:
  


Current Time: Thu Mar 28 10:14:40 CDT 2024