oracle建议口令格式,oracle password file(口令文件) 文件名格式重要性

今天测试dg，用sys  +tnsnames 中指定别名文件远程服务怎么也连不上，ORA-01031: insufficient privileges

查看oracle10g官方文档没发现这个格式问题(可能是我大意了),orapwd  file的格式是有限制的，今天在这记录以提醒大家

请注意我下面的实验

[oracle@orazhang ~]$ lsnrctl status

LSNRCTL for Linux: Version 10.2.0.1.0 - Production on 22-8月 -2011 14:00:16

Copyright (c) 1991, 2005, Oracle. All rights reserved.

Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=orazhang)(PORT=1521)))

STATUS of the LISTENER

------------------------

Alias LISTENER

Version TNSLSNR for Linux: Version 10.2.0.1.0 - Production

Start Date 22-8月 -2011 13:03:40

Uptime 0 days 0 hr. 56 min. 36 sec

Trace Level off

Security ON: Local OS Authentication

SNMP OFF

Listener Parameter File /u01/app/oracle/product/10.2.0/db_1/network/admin/listener.ora

Listener Log File /u01/app/oracle/product/10.2.0/db_1/network/log/listener.log

Listening Endpoints Summary...

(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=orazhang)(PORT=1521)))

(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC0)))

Services Summary...

Service "PLSExtProc" has 1 instance(s).

Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...

Service "orcl" has 1 instance(s).

Instance "orcl", status UNKNOWN, has 1 handler(s) for this service...

Service "orcl.com" has 1 instance(s).

Instance "orcl", status READY, has 1 handler(s) for this service...

Service "orclXDB.com" has 1 instance(s).

Instance "orcl", status READY, has 1 handler(s) for this service...

Service "orcl_XPT.com" has 1 instance(s).

Instance "orcl", status READY, has 1 handler(s) for this service...

The command completed successfully

[oracle@orazhang ~]$ vi /u01/app/oracle/product/10.2.0/db_1/network/admin/tnsnames.ora

# tnsnames.ora Network Configuration File: /u01/app/oracle/product/10.2.0/db_1/network/admin/tnsnames.ora

# Generated by Oracle configuration tools.

ORCL =

(DESCRIPTION =

(ADDRESS_LIST =

(ADDRESS = (PROTOCOL = TCP)(HOST = orazhang)(PORT = 1521))

)

(CONNECT_DATA =

(SERVICE_NAME = orcl)

)

)

[oracle@orazhang sbin]$ /sbin/ifconfig eth0

eth0 Link encap:Ethernet HWaddr 00:1F:D0:1C:06:7F

inet addr:192.168.3.243 Bcast:192.168.3.255 Mask:255.255.255.0

inet6 addr: fe80::21f:d0ff:fe1c:67f/64 Scope:Link

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:14687 errors:0 dropped:0 overruns:0 frame:0

TX packets:447 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:0

RX bytes:1829241 (1.7 MiB) TX bytes:59864 (58.4 KiB)

[oracle@orazhang sbin]$ tnsping orcl

TNS Ping Utility for Linux: Version 10.2.0.1.0 - Production on 22-8月 -2011 14:01:45

Copyright (c) 1997, 2005, Oracle. All rights reserved.

Used parameter files:

/u01/app/oracle/product/10.2.0/db_1/network/admin/sqlnet.ora

Used TNSNAMES adapter to resolve the alias

Attempting to contact (DESCRIPTION = (ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCP)(HOST = orazhang)(PORT = 1521))) (CONNECT_DATA = (SERVICE_NAME = orcl)))

OK (10 msec)

--先把原来的口令文件重命名

[oracle@orazhang dbs]$ mv orapworcl orapworcl_bak

[oracle@orazhang dbs]$ ls

20mhg8fl_1_1 6sm9jgq7_1_1 hc_+ASM.dat init+ASM.ora initorcl.ora lkORCL orapworcl_bak spfile+ASM.ora

6rm9jgh0_1_1 ab_+ASM.dat hc_orcl.dat init.ora lk+ASM orapw+ASM snapcf_orcl.f spfileorcl.ora

[oracle@orazhang dbs]$ sqlplus / as sysdba

SQL*Plus: Release 10.2.0.1.0 - Production on 星期一 8月 22 14:03:02 2011

Copyright (c) 1982, 2005, Oracle. All rights reserved.

Connected to:

Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production

With the Partitioning, OLAP and Data Mining options

sys@ORCL> show parameter remot

NAME TYPE VALUE

------------------------------------ ----------- ------------------------------

remote_archive_enable string true

remote_dependencies_mode string TIMESTAMP

remote_listener string

remote_login_passwordfile string EXCLUSIVE

remote_os_authent boolean FALSE

remote_os_roles boolean FALSE

[oracle@orazhang dbs]$ cd ../network/admin

[oracle@orazhang admin]$ ls

listener.ora samples shrept.lst sqlnet.ora tnsnames.ora

[oracle@orazhang admin]$ cat sqlnet.ora

# SQLNET.AUTHENTICATION_SERVICES= (none)

# sqlnet.authentication_services=(beq, kerberos5)

NAMES.DIRECTORY_PATH=(TNSNAMES,EZCONNECT)

[oracle@orazhang admin]$ sqlplus sys/oracle@orcl as sysdba

SQL*Plus: Release 10.2.0.1.0 - Production on 星期一 8月 22 14:04:04 2011

Copyright (c) 1982, 2005, Oracle. All rights reserved.

ERROR:

ORA-01031: insufficient privileges

Enter user-name:

ERROR:

ORA-01017: invalid username/password; logon denied

--没有口令文件肯定不可以，orapwd 的file 路径一定是标准路径，记的切路径

[oracle@orazhang admin]$ pwd

/u01/app/oracle/product/10.2.0/db_1/network/admin

[oracle@orazhang admin]$ cd ../../dbs

[oracle@orazhang dbs]$ ls

20mhg8fl_1_1 6sm9jgq7_1_1 hc_+ASM.dat init+ASM.ora initorcl.ora lkORCL orapworcl_bak spfile+ASM.ora

6rm9jgh0_1_1 ab_+ASM.dat hc_orcl.dat init.ora lk+ASM orapw+ASM snapcf_orcl.f spfileorcl.ora

[oracle@orazhang dbs]$ orapwd

Usage: orapwd file= password=

entries= force=

where

file - name of password file (mand),

password - password for SYS (mand),

entries - maximum number of distinct DBA and force - whether to overwrite existing file (opt),

OPERs (opt),

There are no spaces around the equal-to (=) character.

--随便给个名字，试试

[oracle@orazhang dbs]$ orapwd file=PWDanbob.ora password=oracle entries=5

[oracle@orazhang dbs]$ sqlplus sys/oracle@orcl as sysdba

SQL*Plus: Release 10.2.0.1.0 - Production on 星期一 8月 22 14:05:49 2011

Copyright (c) 1982, 2005, Oracle. All rights reserved.

ERROR:

ORA-01031: insufficient privileges

[oracle@orazhang dbs]$ sqlplus / as sysdba

SQL*Plus: Release 10.2.0.1.0 - Production on 星期一 8月 22 14:07:06 2011

Copyright (c) 1982, 2005, Oracle. All rights reserved.

Connected to:

Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production

With the Partitioning, OLAP and Data Mining options

sys@ORCL> select * from v$pwfile_users;

no rows selected

--用orapw+试试

[oracle@orazhang dbs]$ orapwd file=orapworcl password=oracle entries=5

[oracle@orazhang dbs]$ sqlplus / as sysdba

SQL*Plus: Release 10.2.0.1.0 - Production on 星期一 8月 22 14:07:23 2011

Copyright (c) 1982, 2005, Oracle. All rights reserved.

Connected to:

Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production

With the Partitioning, OLAP and Data Mining options

sys@ORCL> select * from v$pwfile_users;

USERNAME SYSDB SYSOP

------------------------------ ----- -----

SYS TRUE TRUE

sys@ORCL> exit

Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production

With the Partitioning, OLAP and Data Mining options

[oracle@orazhang dbs]$ sqlplus sys/oracle@orcl as sysdba

SQL*Plus: Release 10.2.0.1.0 - Production on 星期一 8月 22 14:07:34 2011

Copyright (c) 1982, 2005, Oracle. All rights reserved.

Connected to:

Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production

With the Partitioning, OLAP and Data Mining options

sys@ORCL> exit

Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production

With the Partitioning, OLAP and Data Mining options

[oracle@orazhang dbs]$

note:

1，oracle的登录验证，分os认证或口令认证，又受三个参数的制约，请看我以前的http://www.anbob.com/?p=416

2，oracle 口令文件格式在windows平台是 PWD.ORA

在linux平台是orapw

打赏

微信扫一扫，打赏作者吧～