8
Oracle9i Default Accounts and Passwords

This chapter describes the Oracle9i Database default accounts and passwords.

This chapter contains these topics:

• Overview

• Unlocking and Changing Passwords

• Granting Limited SYS Database Role Privileges

• Reviewing Accounts and Passwords

Overview

Oracle9i installs with a number of default accounts. The Oracle Database Configuration Assistant locks and expires all default database accounts upon successful installation with the following exceptions:

• SYS

• SYSTEM

• SCOTT

• DBSNMP

• OUTLN

• AURORA$ORB$UNAUTHENTICATED

• AURORA$JIS$UTILITY$

• OSE$HTTP$ADMIN

You must unlock all other accounts before using them. Oracle Corporation recommends changing all user passwords immediately after installation.

Important: If installing Oracle Internet Directory, then change the passwords for SYS and SYSTEM only after the Oracle Internet Directory installation is complete.

At a minimum, the Oracle Database Configuration Assistant creates the SYS, SYSTEM, and DBSNMP accounts in all databases. Additional accounts are created depending on the components installed. Unlock accounts and change passwords before using them. Table 8-2 describes the accounts and passwords.

See Also: Oracle9i Database Administrator's Guide for Windows for information on Oracle security procedures and security best practices Oracle Enterprise Manager Administrator's Guide for information on security management

Unlocking and Changing Passwords

At the end of installation, several configuration assistants automatically start to create and configure your database and network environments. One such assistant is the Oracle Database Configuration Assistant, which automatically prompts you to change passwords and unlock accounts immediately after installation.

To change a password during the database installation and configuration process:

1. From the Oracle Database Configuration Assistant window, choose the Password Management button.

   Note: The Password Management button is not available when using Oracle Database Configuration Assistant as a standalone tool (that is, after the installation and configuration process is complete).

2. Select a username and clear the check mark.

3. Enter a new password and confirm the new password for each username.

   Note: If you unlock a password, but do not specify a new password, then the password is expired until the next time you access that account.

Alternatively, use SQL*Plus to unlock accounts and change passwords any time after the installation process.

To change a password after installation:

1. Start SQL*Plus:

   C:\> sqlplus /NOLOG
   
   

2. Connect as SYSDBA:

   SQL> CONNECT / AS SYSDBA
   
   

3. Change the password according to the SQL commands indicated in Table 8-1:

   Table 8-1  SQL Statements for Administering Accounts and Passwords

   Action	SQL Statement
   Unlock a password	ALTER USER username ACCOUNT UNLOCK;
   Lock a password	ALTER USER username ACCOUNT LOCK;
   Change the password of an unlocked account	ALTER USER username IDENTIFIED BY password;
   Change the password of a locked account	ALTER USER username ACCOUNT IDENTIFIED BY password ACCOUNT UNLOCK;

Granting Limited SYS Database Role Privileges

Any database user can be granted a limited SYS database role privilege to use the Oracle Enterprise Manager Diagnostic Pack. Grant users access to these necessary SYS privileges by granting the OEM_MONITOR role. This role is created when the database is installed and is defined in the SQL script at \ORACLE_BASE\ORACLE_HOME\rdbms\admin\catsnmp.sql.

See Also: Oracle9i SQL Reference for information on the GRANT statement

Reviewing Accounts and Passwords

Table 8-2 lists Oracle9i default accounts and passwords. It also briefly describes the purpose of each username and shows where to find additional information.

Table 8-2  Oracle9i Default Accounts and Passwords

Username	Password	Description	More Information
SYSTEMFoot 1	MANAGER	Used for performing database administration tasks. SYSTEM includes the AQ_ADMINISTRATOR_ROLE and DBA database roles.	Oracle9i Database Administrator's Guide
SYSFoot 2	CHANGE_ON_ INSTALLFoot 3	Used for performing database administration tasks.	Oracle9i Database Administrator's Guide
AURORA$JIS$UTILITY$	Randomly assigned at installation	Used internally by Enterprise Java Beans and CORBA Tools. Log on as SYS to change the password for this username.	Not applicable
AURORA$ORB$UNAUTHENTICATED	Randomly assigned at installation	Used internally by Enterprise Java Beans and CORBA Tools. Log on as SYS to change the password for this username.	Not applicable
CTXSYS	CTXSYS	The Oracle Text username with CONNECT, DBA, and RESOURCE database roles.	Oracle Text Reference
DBSNMP	DBSNMP	Includes the CONNECT and RESOURCE database roles. Run catnsnmp.sql if you want to drop this role and user.	Oracle Intelligent Agent User's Guide
LBACSYS	LBACSYS	The Oracle Label Security administrator username.	Oracle Label Security Administrator's Guide
MDSYS	MDSYS	The Oracle Spatial and Oracle Locator administrator username.	Oracle Spatial User's Guide and Reference
OLAPDBA	OLAPDBA	OLAP Services uses OLAPDBA to authenticate user credentials. Includes the CONNECT, OLAP_DBA, and RESOURCE database roles. When you change the password for OLAPDBA in the database, you must make the same change to the User Password configuration setting for OLAP Services.	Oracle9i OLAP Services Concepts and Administration Guide OLAP Services Instance Manager Help
OLAPSVR	INSTANCE	Proxy identification used by all OLAP Services connections. Includes CONNECT, OLAP_DBA, RESOURCE, and SELECT_CATALOG_ROLE database roles. When you change the password for OLAPSVR in the database, you must make the same change to the OlapProxyPwd configuration setting for OLAP Services.	Oracle9i OLAP Services Concepts and Administration Guide OLAP Services Instance Manager Help
OLAPSYS	MANAGER	Includes the CONNECT, OLAP_DBA, and RESOURCE database roles	Oracle9i OLAP Services Concepts and Administration Guide
ORDPLUGINS	ORDPLUGINS	The Oracle interMedia Audio and Video username with CONNECT and RESOURCE database roles. Allows non-native plug-in formats for one session.	Oracle interMedia User's Guide and Reference
ORDSYS	ORDSYS	The Oracle interMedia Audio, Video, Locator, and Image administrator username with CONNECT, JAVAUSERPRIV, and RESOURCE database roles.	Oracle interMedia User's Guide and Reference
OSE$HTTP$ADMIN	Randomly assigned at installation	Used internally by the Oracle Servlet Engine. Log on as SYS to change the password for this username.	Not applicable
OUTLN	OUTLN	Centrally manages metadata associated with stored outlines. Supports plan stability, which allows you to maintain the same execution plans for the same SQL statements. Includes CONNECT and RESOURCE database roles.	Oracle9i Database Concepts Oracle9i Database Performance Guide and Reference
SCOTT	TIGER	Includes CONNECT and RESOURCE database roles.	Oracle9i Database Administrator's Guide for Windows
WKSYS	WKSYS	Used for storing Ultra Search system dictionaries and PL/SQL packages. WKSYS includes CONNECT, CTXAPP, DBA, JAVASYSPRIV, JAVAUSERPRIV, and RESOURCE database roles.	Oracle Ultra Search Online Documentation

1 If installing Oracle Internet Directory, then change the passwords for SYS and SYSTEM only after the Oracle Internet Directory installation is complete. 2 If installing Oracle Internet Directory, then change the passwords for SYS and SYSTEM only after the Oracle Internet Directory installation is complete. SYS includes the following database roles: AQ_ADMINISTRATOR_ROLE, AQ_USER_ROLE, CONNECT, CTXAPP, DBA, DELETE_CATALOG_ROLE, EXECUTE_CATALOG_ROLE, EXP_FULL_DATABASE, HS_ADMIN_ROLE, IMP_FULL_DATABASE, JAVA_ADMIN, JAVADEBUGPRIV, JAVA_DEPLOY, JAVAIDPRIV, JAVAUSERPRIV, JAVASYSPRIV, OEM_MONITOR, OLAP_DBA, RECOVERY_CATALOG_OWNER, RESOURCE, SELECT_CATALOG_ROLE, WKADMIN, WKUSER, and WM_ADMIN_ROLE. 3 SQL statement must include the privilege AS SYSDBA or AS SYSOPER.

See Also: "The Oracle Database Administrator" in Oracle9i Database Administrator's Guide "Administering External Users and Roles" in Oracle9i Network, Directory, and Security Guide for Windows