在rac中,如果你仅仅是在一个节点上运行alter user sys的命令,完成更改后,数据库自动在此节点上更新密码文件。但是,在其他节点
sys是数据库库中权限最高的用户,在登录时,我们可以用os认证的方式直接登录,也可以利用sqlplus “sys/your_password@your_tnsnames as sysdba”来登录。特别是对于后面的这种远程登录,,在第三方的备份备份软件中需要配置。因此这个文件对于使用了第三方备份软件的数据库系统,就比较重要了。
在单实例,如果我们在数据库执行了更改密码的命令:alter user sys identified by new_password;这个时候,数据库就会自动的改写$oracle_home/dbs/下的密码文件,将里面的内容改成新密码。但是在rac中,这就是一个比较需要注意的地方了。
在rac中,如果你仅仅是在一个节点上运行alter user sys的命令,完成更改后,数据库自动在此节点上更新密码文件。但是,在其他节点中,这个密码文件不会被更新,还是原来的密码文件。这就造成了一个很奇特的现象:在一个3节点的rac中,rac1上登录数据库后更改了sys的密码,在rac1主机上的密码文件被更新,rac2和rac3主机上密码文件不会被更新,仍然能用老密码来登录rac2和rac3。
rac1:
rac1-> ll
……
-rw-r----- 1 oracle oinstall 1536 jun 21 2009 orapwdevdb1
##我们看到这边的密码文件还是2009年6月21日的。我们到数据库更改sys密码。
rac1-> sqlplus / as sysdba
sql*plus: release 10.2.0.1.0 - production on tue mar 30 22:31:59 2010
copyright (c) 1982, 2005, oracle. all rights reserved.
connected to:
oracle database 10g enterprise edition release 10.2.0.1.0 - production
with the partitioning, real application clusters, olap and data mining options
sql> alter user sys identified by oracle123;
user altered.
sql>
## 我们看到密码文件被更新
rac1-> ls -l
……
-rw-r----- 1 oracle oinstall 1536 mar 30 22:33 orapwdevdb1
rac1-> date
tue mar 30 22:33:42 cst 2010
rac1->
rac2上:
rac2-> ll
……
-rw-r----- 1 oracle oinstall 1536 jun 21 2009 orapwdevdb2
##密码文件未被更新
rac3:
rac3-> cd $oracle_home/dbs
rac3-> ll
……
-rw-r----- 1 oracle oinstall 1536 jun 21 2009 orapwdevdb3
rac3->
## rac3上的密码文件也未被更新。
## 新密码无法登录rac3和rac2,但是可以用老密码远程登录rac3和rac2,用新密码远程登录rac1.
[root@rac3 root]# sqlplus sys/oracle123@devdb3 as sysdba
sql*plus: release 10.2.0.1.0 - production on tue mar 30 22:46:18 2010
copyright (c) 1982, 2005, oracle. all rights reserved.
error:
ora-01017: invalid username/password; logon denied
enter user-name:
error:
ora-01017: invalid username/password; logon denied
enter user-name:
error:
ora-01017: invalid username/password; logon denied
sp2-0157: unable to connect to oracle after 3 attempts, exiting sql*plus
[root@rac3 root]
[root@rac3 admin]# sqlplus sys/oracle@devdb2 as sysdba
sql*plus: release 10.2.0.1.0 - production on tue mar 30 23:59:22 2010
copyright (c) 1982, 2005, oracle. all rights reserved.
connected to:
oracle database 10g enterprise edition release 10.2.0.1.0 - production
with the partitioning, real application clusters, olap and data mining options
sql> exit
disconnected from oracle database 10g enterprise edition release 10.2.0.1.0 - production
with the partitioning, real application clusters, olap and data mining option
[root@rac3 admin]# sqlplus sys/oracle@devdb3 as sysdba
sql*plus: release 10.2.0.1.0 - production on tue mar 30 23:58:49 2010
copyright (c) 1982, 2005, oracle. all rights reserved.
connected to:
oracle database 10g enterprise edition release 10.2.0.1.0 - production
with the partitioning, real application clusters, olap and data mining options
sql> exit
disconnected from oracle database 10g enterprise edition release 10.2.0.1.0 - production
with the partitioning, real application clusters, olap and data mining options
[root@rac3 admin]#
[root@rac3 admin]# sqlplus sys/oracle123@devdb1 as sysdba
sql*plus: release 10.2.0.1.0 - production on wed mar 31 00:23:27 2010
copyright (c) 1982, 2005, oracle. all rights reserved.
connected to:
oracle database 10g enterprise edition release 10.2.0.1.0 - production
with the partitioning, real application clusters, olap and data mining options
sql>