2.188 LDAP_DIRECTORY_SYSAUTH
LDAP_DIRECTORY_SYSAUTH
allows or disallows directory-based authorization for users granted administrative privileges, such as SYSDBA
, SYSOPER
, SYSBACKUP
, SYSDG
, and SYSKM
.
Property | Description |
---|---|
Parameter type |
String |
Syntax |
|
Default value |
|
Modifiable |
No |
Modifiable in a PDB |
Yes |
Basic |
Yes |
When LDAP_DIRECTORY_SYSAUTH
is set to yes
, directory users are allowed to connect to the database as SYSDBA
, SYSOPER
, SYSBACKUP
, SYSDG
, or SYSKM
, if they have mapped database global users that are granted corresponding administrative privileges such as SYSDBA
, SYSOPER
, SYSBACKUP
, SYSDG
, and SYSKM
.
When LDAP_DIRECTORY_SYSAUTH
is set to no, directory users are not allowed to connect to the database as SYSDBA
, SYSOPER
, SYSBACKUP
, SYSDG
, or SYSKM
, even if they have mapped database global users that are granted corresponding administrative privileges such as SYSDBA
, SYSOPER
, SYSBACKUP
, SYSDG
, and SYSKM
.
When modifying this parameter in a PDB, use the ALTER
SYSTEM
command with SCOPE=SPFILE
.