sys user can not remotely log in

1. Use the sys user remote login

[oracle@edbjr2p2 admin]$ sqlplus system/oracle@PROD3 as sysdba

SQL*Plus: Release 11.2.0.3.0 Production on Wed Jun 12 18:19:27 2019

Copyright (c) 1982, 2011, Oracle.  All rights reserved.

ERROR:
ORA-01031: insufficient privileges

 

 

2. Start investigation and the reasons

1) First tnsping PROD3 (check monitor whether the client can ping)

[oracle@edbjr2p2 dbs]$  tnsping PROD3

TNS Ping Utility for Linux: Version 11.2.0.3.0 - Production on 12-JUN-2019 18:42:00

Copyright (c) 1997, 2011, Oracle.  All rights reserved.

Used parameter files:


Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST = edbjr2p2.example.com)(PORT = 1521)) (CONNECT_DATA = (SERVER = DEDICATED) (SERVICE_NAME = PROD3.us.oracle.com)))
OK (0 msec)
--以上结果证明监听客户端没问题

 

2) Parameters remote_login_passwordfile parameter settings are correct (should be exclusive)

SYS@PROD3>show parameter remote_login_passwordfile

NAME                                 TYPE        VALUE
------------------------------------ ----------- ------------------------------
remote_login_passwordfile            string      EXCLUSIVE

3) Check the password file is correct

SYS @ PROD3> select * from v $ pwfile_users; - if empty, proof password file in question

4) to view the password file

cd $ORACLE_HOME/dbs

ls

It found that the password file name is: orapwdPROD3 (correct name format should prapwPROD3)

 

5) to rebuild the password file

[oracle@edbjr2p2 dbs]$ orapwd file=orapwPROD3 password=oracle entries=30 force=y

6) remote login, normal

[oracle@edbjr2p2 dbs]$ sqlplus sys/oracle@PROD3 as sysdba

SQL*Plus: Release 11.2.0.3.0 Production on Wed Jun 12 18:51:54 2019

Copyright (c) 1982, 2011, Oracle.  All rights reserved.


Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options

7) Again query v $ pwfile_users view, verify the password file status, the following is the normal

SYS@PROD3>select * from v$pwfile_users;

USERNAME                       SYSDB SYSOP SYSAS
------------------------------ ----- ----- -----
SYS                            TRUE  TRUE  FALSE

Guess you like

Origin www.cnblogs.com/gw666/p/11011563.html