6
Oracle9i Default Accounts and Passwords

This chapter describes the Oracle9i Personal Edition default accounts and passwords.

This chapter contains these topics:

Overview

Oracle9i Personal Edition installs with a number of default accounts. The Oracle Database Configuration Assistant locks and expires all default database accounts upon successful installation with the following exceptions:

SYS
SYSTEM
SCOTT
DBSNMP
OUTLN
AURORA$ORB$UNAUTHENTICATED
AURORA$JIS$UTILITY$
OSE$HTTP$ADMIN

You must unlock all other accounts before using them. Oracle Corporation recommends changing all user passwords immediately after installation.

Important:

If installing Oracle Internet Directory, then change the passwords for SYS and SYSTEM only after the Oracle Internet Directory installation is complete.

At a minimum, the Oracle Database Configuration Assistant creates the SYS, SYSTEM, and DBSNMP accounts in all databases. Additional accounts are created depending on the components installed. Unlock accounts and change passwords before using them. Table 6-2 describes the accounts and passwords.

See Also:

Oracle9i Personal Edition Administrator's Guide for Windows 98 for information on Oracle security procedures and security best practices

Unlocking and Changing Passwords

At the end of installation, several configuration assistants automatically start to create and configure your database and network environments. One such assistant is the Oracle Database Configuration Assistant, which automatically prompts you to change passwords and unlock accounts immediately after installation.

To change a password during the database installation and configuration process:

From the Oracle Database Configuration Assistant window, choose the Password Management button.

Note:

The Password Management button is not available when using Oracle Database Configuration Assistant as a standalone tool (that is, after the installation and configuration process is complete).

Select a username and clear the check mark.
Enter a new password and confirm the new password for each username.

Note:
If you unlock a password, but do not specify a new password, then the password is expired until the next time you access that account.

Alternatively, use SQL*Plus to unlock accounts and change passwords any time after the installation process.

To change a password after installation:

Start SQL*Plus:
```
C:\> SQLPLUS /NOLOG
```
Connect as SYSDBA:
```
SQL> CONNECT SYS/PASSWORD AS SYSDBA
```

Change the password according to the SQL commands indicated in Table 6-1.

Table 6-1 SQL Statements for Administering Accounts and Passwords

Action	SQL Statement
Unlock a password	`ALTER` `USER` `username` `ACCOUNT` `UNLOCK;`
Lock a password	`ALTER` `USER` `username` `ACCOUNT` `LOCK;`
Change the password of an unlocked account	`ALTER` `USER` `username` `IDENTIFIED` `BY` `password``;`
Change the password of a locked account	`ALTER` `USER` `username` `ACCOUNT` `IDENTIFIED` `BY` `password` `ACCOUNT` `UNLOCK;`

Granting Limited SYS Database Role Privileges

Any database user can be granted a limited SYS database role privilege to use the Oracle Enterprise Manager Diagnostic Pack. Grant users access to these necessary SYS privileges by granting the OEM_MONITOR role. This role is created when the database is installed and is defined in the SQL script at \ORACLE_BASE\ORACLE_HOME\rdbms\admin\catsnmp.sql.

See Also:

Oracle9i SQL Reference for information on the GRANT statement

Reviewing Accounts and Passwords

Table 6-2 lists Oracle9i default accounts and passwords. It also briefly describes the purpose of each username and shows where to find additional information.

Table 6-2 Oracle9i Default Accounts and Passwords

Username	Password	Description	More Information
`SYSTEM^{Foot 1}`	`MANAGER`	Used for performing database administration tasks. `SYSTEM` includes the `AQ_ADMINISTRATOR_ROLE` and `DBA` database roles.	Oracle9i Database Administrator's Guide
SYS^{Foot 2}	CHANGE_ON_ INSTALL^{Foot 3}	Used for performing database administration tasks.	Oracle9i Database Administrator's Guide
`AURORA$JIS$UTILITY$`	Randomly assigned at installation	Used internally by Enterprise Java Beans and CORBA Tools. Log on as `SYS` to change the password for this username.	Not applicable
`AURORA$ORB$UNAUTHENTICATED`	Randomly assigned at installation	Used internally by Enterprise Java Beans and CORBA Tools. Log on as `SYS` to change the password for this username.	Not applicable
`OSE$HTTP$ADMIN`	Randomly assigned at installation	Used internally by the Oracle Servlet Engine. Log on as `SYS` to change the password for this username.	Not applicable
`OUTLN`	`OUTLN`	Centrally manages metadata associated with stored outlines. Supports plan stability, which allows you to maintain the same execution plans for the same SQL statements. Includes `CONNECT` and `RESOURCE` database roles.	Oracle9i Database Concepts Oracle9i Database Performance Guide and Reference
`SCOTT`	`TIGER`	Includes `CONNECT` and `RESOURCE` database roles.	Oracle9i Personal Edition Database Administrator's Guide for Windows 98

¹ If installing Oracle Internet Directory, then change the passwords for SYS and SYSTEM only after the Oracle Internet Directory installation is complete.
² If installing Oracle Internet Directory, then change the passwords for SYS and SYSTEM only after the Oracle Internet Directory installation is complete. SYS includes the following database roles: AQ_ADMINISTRATOR_ROLE, AQ_USER_ROLE, CONNECT, CTXAPP, DBA, DELETE_CATALOG_ROLE, EXECUTE_CATALOG_ROLE, EXP_FULL_DATABASE, HS_ADMIN_ROLE, IMP_FULL_DATABASE, JAVA_ADMIN, JAVADEBUGPRIV, JAVA_DEPLOY, JAVAIDPRIV, JAVAUSERPRIV, JAVASYSPRIV, OEM_MONITOR, OLAP_DBA, RECOVERY_CATALOG_OWNER, RESOURCE, SELECT_CATALOG_ROLE, WKADMIN, WKUSER, and WM_ADMIN_ROLE.
³ SQL statement must include the privilege AS SYSDBA or AS SYSOPER.