12c New Feature: Changes to the Password file


buch2

Also some changes have done to the Password file in the New Oracle 12c Database.

Password file can now be stored in the ASM.

This feature eliminates the behavior where the sys Passwort is changed on one RAC site only and the DBA forget to change it on the other nodes or after a recover of the database where the creation of the password file is been forgotten.

If you add a database to the cluster there is a new Parameter for the Password file.

[oracle@# bin]$ ./srvctl config database -d ECDB1
Database unique name: ECDB1
Database name: ECDB1
Oracle home: /u01/app/oracle/product/12.1.0/db_ee_1
Oracle user: oracle
Spfile: +DATA/ECDB1/spfileECDB1.ora
Password file: +DATA/ECDB1/orapwecdb1
Domain: example.com
Start options: open
Stop options: immediate
Database role: PRIMARY
Management policy: AUTOMATIC
Server pools: SPOOL1
Database instances: 
Disk Groups: DATA
Mount point paths: 
Services: 
Type: RAC
Start concurrency: 
Stop concurrency: 
Database is policy managed

Password file creation example:

orapwd file=+DATA/orapwdORCL entries=20 asm=y

Password prompt:

If you do not supply a password for the sys user or for the one of the new roles then orapwd utilitie will prompt for it.

Sample:

[oracle@# bin]$ ./orapwd file=+DATA/orapwdORCL1 entries=20 asm=y sysbackup=y syskm=y 

Enter password for SYS: 

Enter password for SYSBACKUP: 

Enter password for SYSKM:

Other things:

There is also a parameter (input_file) which allows you to migrate the password file to the new 12c standard. If you are not sure how your Password file is configured then you can desribe it.

[oracle@# bin]$ ./orapwd describe file=+DATA/ECDB1/orapwecdb1
Password file Description : format=12 ignorecase=N

Also the v$pwfile_users is extended to cover the new roles.

SQL> select * from v$pwfile_users;

USERNAME              SYSDB SYSOP SYSAS SYSBA SYSDG SYSKM CON_ID
--------------------- ----- ----- ----- ----- ----- ----- ----------
SYS                   TRUE  TRUE  FALSE FALSE FALSE FALSE        0
SYSDG                 FALSE FALSE FALSE FALSE TRUE  FALSE        1
SYSBACKUP             FALSE FALSE FALSE TRUE  FALSE FALSE        1
SYSKM                 FALSE FALSE FALSE FALSE FALSE TRUE         1
Advertisements

Kommentar verfassen

Trage deine Daten unten ein oder klicke ein Icon um dich einzuloggen:

WordPress.com-Logo

Du kommentierst mit Deinem WordPress.com-Konto. Abmelden / Ändern )

Twitter-Bild

Du kommentierst mit Deinem Twitter-Konto. Abmelden / Ändern )

Facebook-Foto

Du kommentierst mit Deinem Facebook-Konto. Abmelden / Ändern )

Google+ Foto

Du kommentierst mit Deinem Google+-Konto. Abmelden / Ändern )

Verbinde mit %s