11.07.2015 Views

Oracle Database 11 g - Online Public Access Catalog

Oracle Database 11 g - Online Public Access Catalog

Oracle Database 11 g - Online Public Access Catalog

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

CHAPTER 5 ■ DATABASE SECURITY 233SCOTTSI_INFORMTN_SCHEMAWK_TESTWMSYSXDB14 rows selected.A better query would be to cross-reference the DBA_USERS_WITH_DEFPWD view withthe DBA_USERS view. This will identify database accounts with default passwords and activestatus. You can use the following query to find such culprits:SQL> select usernamefrom dba_users_with_defpwdwhere username in(select usernamefrom dba_userswhere account_status='OPEN')SQL> /USERNAME----------SHFor this particular example, the sales history (SH) database account was intentionallyenabled to provide this output. You can easily change the passwords for any accounts that theDBA_USERS_WITH_DEFPWD view lists as offenders. Let’s change the password for the SHaccount to a strong password:SQL> alter user sh identified by Oracl3D3v3lop3r123;User altered.This DBA_USERS_WITH_DEFPWD view reports only those accounts with default passwordsfor <strong>Oracle</strong>-supplied database accounts. It does not protect the database from otheraccounts that have weak passwords.<strong>Database</strong> Links and Case SensitivitySince <strong>Oracle</strong> <strong>Database</strong> 9i and 10g are not case-sensitive, connecting to <strong>Oracle</strong> <strong>Database</strong> <strong>11</strong>gcan pose some complications. <strong>Oracle</strong> provides a set of rules to govern password management,and connection negotiation is between <strong>Oracle</strong> <strong>Database</strong> <strong>11</strong>g and other versions of the database.Obviously, if you are connecting from <strong>Oracle</strong> <strong>Database</strong> <strong>11</strong>g to another <strong>Oracle</strong> <strong>Database</strong><strong>11</strong>g using a database link, the password sensitivity remains case-sensitive.First, look at what has to happen to make connections from a previous release of <strong>Oracle</strong> toa case-sensitive <strong>Oracle</strong> <strong>Database</strong> <strong>11</strong>g. You must alter the password on <strong>Oracle</strong> <strong>Database</strong> <strong>11</strong>g tothe uppercase equivalent of the password designated in the database link’s CONNECT TO USERNAMEIDENTIFIED BY clause section. <strong>Oracle</strong> stores the password for the database links in uppercase.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!