Skip Headers

Oracle9i Database Platform Guide
Release 2 (9.2) for Windows
Part No. B10163-01
Go To Table Of Contents
Contents
Go To Index
Index

Previous Next

11 Oracle9i Default Accounts and Passwords on Windows

This chapter describes Oracle9i database default accounts and passwords.

This chapter contains these topics:

Accounts and Passwords Overview

Oracle9i installs with a number of default accounts. Database Configuration Assistant locks and expires all default database accounts upon successful installation with the following exceptions:

You must unlock all other accounts before using them. Oracle Corporation recommends changing all user passwords immediately after installation.


Note:

If installing Oracle Internet Directory, then change passwords for SYS and SYSTEM only after Oracle Internet Directory installation is complete.

At a minimum, Database Configuration Assistant creates SYS, SYSTEM, and DBSNMP accounts in all databases. Additional accounts are created depending on components installed. Unlock accounts and change passwords before using them. Table 11-2 describes accounts and passwords.


See Also:


Unlocking and Changing Passwords

At the end of installation, several configuration assistants automatically start to create and configure your database and network environments. One such assistant is Database Configuration Assistant, which automatically prompts you to change passwords and unlock accounts immediately after installation.

If you create a database using Database Configuration Assistant in silent mode and pass the -passwordDialog true parameter, then Oracle also presents a dialog requiring that you change the default passwords for user accounts SYS and SYSTEM.

To change a password during database installation and configuration:

  1. From the Database Configuration Assistant window, click Password Management.


    Note:

    Password Management is not available when using Database Configuration Assistant as a standalone tool (that is, after installation and configuration are complete).

  2. Select a username and clear the check mark.

  3. Enter a new password and confirm the new password for each username.


    Note:

    If you unlock a password, but do not specify a new password, then the password is expired until the next time you access that account.

Alternatively, use SQL*Plus to unlock accounts and change passwords any time after installation.

To change a password after installation:

  1. Start SQL*Plus:

    C:\> sqlplus /NOLOG
    
    
  2. Connect as SYSDBA:

    SQL> CONNECT / AS SYSDBA
    
    
  3. Change the password according to SQL commands indicated in Table 11-1:

Table 11-1 SQL Statements for Administering Accounts and Passwords

Action SQL Statement
Unlock a password ALTER USER username ACCOUNT UNLOCK;
Lock a password ALTER USER username ACCOUNT LOCK;
Change password of an unlocked account ALTER USER username IDENTIFIED BY password;
Change password of a locked account ALTER USER username IDENTIFIED BY password ACCOUNT UNLOCK;

Note:

For information on Oracle Enterprise Manager accounts and passwords, see "Parameters for Oracle Counters for Windows Performance Monitor" and "Modifying Oracle Counters for Windows Performance Monitor Parameters".

Granting Limited SYS Database Role Privileges

Any database user can be granted a limited SYS database role privilege to use Oracle Enterprise Manager Diagnostic Pack. Grant users access to these necessary SYS privileges by granting the OEM_MONITOR role. This role is created when Oracle9i database is installed and is defined in the SQL script at \ORACLE_BASE\ORACLE_HOME\rdbms\admin\catsnmp.sql.


See Also:

Oracle9i SQL Reference for information on the GRANT statement

Reviewing Accounts and Passwords

Table 11-2 lists Oracle9i default accounts and passwords. It also briefly describes the purpose of each username and shows where to find additional information.

Beginning with Oracle9i release 2 (9.2), the CREATE DATABASE statement enables you to specify passwords for users SYS and SYSTEM. Default values shown in Table 11-2 apply only if no password is specified. For more information, see "Protecting Your Database: Specifying Passwords for Users SYS and SYSTEM" in Oracle9i Database Administrator's Guide.

Table 11-2 Oracle9i Default Accounts and Passwords

Username Password Description More Information
SYSTEMFoot  MANAGER Used for performing database administration tasks. SYSTEM includes AQ_ADMINISTRATOR_ROLE, DBA, and SALES_HISTORY_ROLE database role. Oracle9i Database Administrator's Guide
SYSFoot  CHANGE_ON_ INSTALL Foot  Used for performing database administration tasks. Oracle9i Database Administrator's Guide
ANONYMOUS ANONYMOUS Allows HTTP access to Oracle XML DB. Not applicable
CTXSYS CTXSYS Oracle Text username with CONNECT, DBA, and RESOURCE database roles. Oracle Text Reference
DBSNMP DBSNMP Includes CONNECT and SELECT ANY DICTIONARY database roles. Run catnsnmp.sql if you want to drop this role and user. Oracle Intelligent Agent User's Guide
LBACSYS LBACSYS Oracle Label Security administrator username. Oracle Label Security Administrator's Guide
MDSYS MDSYS Oracle Spatial and Oracle Locator administrator username. Oracle Spatial User's Guide and Reference
OLAPSYS MANAGER Includes CONNECT, OLAP_DBA, and RESOURCE database roles Oracle9i OLAP User's Guide
ORDPLUGINS ORDPLUGINS Oracle interMedia Audio and Video username with CONNECT and RESOURCE database roles. Allows non-native plug-in formats for one session. Oracle interMedia User's Guide and Reference
ORDSYS ORDSYS Oracle interMedia Audio, Video, Locator, and Image administrator username with CONNECT, JAVAUSERPRIV, and RESOURCE database roles. Oracle interMedia User's Guide and Reference
OUTLN OUTLN Centrally manages metadata associated with stored outlines. Supports plan stability, which maintains the same execution plans for the same SQL statements. Includes CONNECT and RESOURCE database roles. Oracle9i Database Concepts

Oracle9i Database Performance Tuning Guide and Reference

SCOTT TIGER Includes CONNECT and RESOURCE database roles. Chapter 7, " Administering a Database on Windows"
WKSYS WKSYS Used for storing Ultra Search system dictionaries and PL/SQL packages. WKSYS includes CONNECT, CTXAPP, DBA, JAVASYSPRIV, JAVAUSERPRIV, and RESOURCE database roles. Oracle Ultra Search Online Documentation
WMSYS WMSYS WMSYS schema is used to store all metadata information for Oracle Workspace Manager. WMSYS includes CONNECT, RESOURCE, and WM_ADMIN_ROLE database roles. Oracle9i Application Developer's Guide - Workspace Manager
XDB CHANGE_ON_INSTALL Used for storing Oracle XML DB data and metadata. Includes CONNECT and RESOURCE database roles. Not applicable
Footnote If installing Oracle Internet Directory, then change passwords for SYS and SYSTEM only after Oracle Internet Directory installation is complete.
Footnote If installing Oracle Internet Directory, then change passwords for SYS and SYSTEM only after Oracle Internet Directory installation is complete. SYS includes the following database roles: AQ_ADMINISTRATOR_ROLE, AQ_USER_ROLE, CONNECT, CTXAPP, DBA, DELETE_CATALOG_ROLE, EXECUTE_CATALOG_ROLE, EXP_FULL_DATABASE, GATHER_SYSTEM_STATISTICS, HS_ADMIN_ROLE, IMP_FULL_DATABASE, JAVA_ADMIN, JAVADEBUGPRIV, JAVA_DEPLOY, JAVAIDPRIV, JAVAUSERPRIV, JAVASYSPRIV, LOGSTDBY_ADMINISTRATOR, OEM_MONITOR, OLAP_DBA, RECOVERY_CATALOG_OWNER, RESOURCE, SELECT_CATALOG_ROLE, and WKUSER
Footnote SQL statement must include the privilege AS SYSDBA or AS SYSOPER.


See Also:



Previous Next
Oracle Logo
Copyright © 2003 Oracle Corporation

All rights reserved
Go To Table Of Contents
Contents
Go To Index
Index