It is possible to block members of Unix 'dba ' group to connect as
sysdba. Two things to check:
1. set REMOTE_LOGIN_PASSWORDFILE=EXCLUSIVE in init.ora or spfile
2. check file $ORACLE_HOME/rdbms/lib/config.c and make sure 'dba ' is not
in following entries
#define SS_DBA_GRP
#define SS_OPER_GRP
Default is 'dba '. Change it to 'nogroup ' or anything else, re-compile it
to get a new config.o.
Lei
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN " >
<HTML > <HEAD >
<META http-equiv=Content-Type content= "text/html; charset=us-ascii " >
<META content= "MSHTML 6.00.2800.1400 " name=GENERATOR >
<STYLE > </STYLE >
</HEAD >
<BODY bgColor=#ffffff >
<DIV > <FONT face=Arial color=#0000ff size=2 > <SPAN class=195574013-17062004 >It is
possible to block members of Unix 'dba ' group to connect as sysdba. Two things
to check: </SPAN > </FONT > </DIV >
<DIV > <FONT face=Arial size=2 > <SPAN class=195574013-17062004 > <FONT
color=#0000ff >1. <FONT face= "Times New Roman " >set <SPAN
style= "FONT-SIZE: 10pt; FONT-FAMILY: 'Times New Roman '; mso-fareast-font-family: 'Times New Roman '; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA " >REMOTE_LOGIN_PASSWORDFILE=EXCLUSIVE </SPAN >
in init.ora or spfile </FONT > </FONT > </SPAN > </FONT > </DIV >
<DIV > <FONT face=Arial color=#0000ff size=2 > <SPAN class=195574013-17062004 >2.
check file $ORACLE_HOME/rdbms/lib/config.c and make sure 'dba ' is
not in following entries </SPAN > </FONT > </DIV >
<DIV > <FONT face=Arial color=#0000ff size=2 > <SPAN
class=195574013-17062004 > </SPAN > </FONT > </DIV > <FONT face=Arial > <SPAN
class=195574013-17062004 >
<P class=MsoNormal style= "MARGIN: 0in 0in 0pt " > <FONT face= "Times New Roman "
color=#0000ff size=2 >#define SS_DBA_GRP </FONT > </P >
<DIV > <SPAN
style= "FONT-SIZE: 10pt; FONT-FAMILY: 'Times New Roman '; mso-fareast-font-family: 'Times New Roman '; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA " > <FONT
color=#0000ff >#define SS_OPER_GRP </FONT > </SPAN > </DIV >
<DIV > <SPAN
style= "FONT-SIZE: 10pt; FONT-FAMILY: 'Times New Roman '; mso-fareast-font-family: 'Times New Roman '; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA " > <FONT
color=#0000ff > </FONT > </SPAN > </DIV >
<DIV > <SPAN
style= "FONT-SIZE: 10pt; FONT-FAMILY: 'Times New Roman '; mso-fareast-font-family: 'Times New Roman '; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA " > <SPAN
class=195574013-17062004 > <FONT face=Arial color=#0000ff >Default is 'dba '.
Change it to 'nogroup ' or anything else, re-compile it to get a new
config.o. </FONT > </SPAN > </SPAN > </DIV >
<DIV > <SPAN
style= "FONT-SIZE: 10pt; FONT-FAMILY: 'Times New Roman '; mso-fareast-font-family: 'Times New Roman '; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA " > <SPAN
class=195574013-17062004 > </SPAN > </SPAN > <SPAN
style= "FONT-SIZE: 10pt; FONT-FAMILY: 'Times New Roman '; mso-fareast-font-family: 'Times New Roman '; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA " > <SPAN
class=195574013-17062004 > <FONT face=Arial
color=#0000ff >Lei </FONT > </SPAN > </SPAN > </SPAN > </FONT > <FONT > <SPAN
class=195574013-17062004 > </DIV > </SPAN > </FONT > </BODY > </HTML >
