oracle sysdba級用戶的認證方式
The default value of this parameter is OPS$ for backward compatibility with previous versions. However, you might prefer to set the prefix value to "" (a null string), thereby eliminating the addition of any prefix to operating system account names.
可見，用ops$只是為了向前兼容。
下面，我們來實驗一下。
一、創(chuàng)建操作系統(tǒng)用戶
[root@node1 ~]# useradd test
二、創(chuàng)建Oracle用戶并授予相應(yīng)的權(quán)限
SQL> create user ops$test identified externally;
SQL> grant create session to ops$test;
三、用test用戶登錄數(shù)據(jù)庫
[test@node1 ~]$ /u01/app/oracle/product/11.2.0.4/db_1/bin/sqlplus /
Error 6 initializing SQL*Plus
SP2-0667: Message file sp1
SP2-0750: You may need to set ORACLE_HOME to your Oracle software directory
報以上錯誤，根據(jù)提示，我們?yōu)镺RACLE_HOME設(shè)置相應(yīng)的值
在/home/test/.bash_profile中添加如下值：
export ORACLE_BASE=/u01/app/oracle
export ORACLE_HOME=$ORACLE_BASE/product/11.2.0.4/db_1
重新用test用戶登錄數(shù)據(jù)庫
[test@node1 ~]$ /u01/app/oracle/product/11.2.0.4/db_1/bin/sqlplus /
SQL*Plus: Release 11.2.0.4.0 Production on Sat Jan 10 01:14:53 2015
Copyright (c) 1982, 2013, Oracle. All rights reserved.
ERROR:
ORA-12162: TNS:net service name is incorrectly specified
Enter user-name:
又報TNS:net service name is incorrectly specified錯誤。
懷疑沒有指定相應(yīng)的SID，在/home/test/.bash_profile中添加如下值：
export ORACLE_SID=orcl
重新用test用戶登錄
[test@node1 ~]$ /u01/app/oracle/product/11.2.0.4/db_1/bin/sqlplus /
SQL*Plus: Release 11.2.0.4.0 Production on Sat Jan 10 01:18:22 2015
Copyright (c) 1982, 2013, Oracle. All rights reserved.
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - Production
With the Partitioning, Automatic Storage Management, OLAP, Data Mining
and Real Application Testing options
SQL> show user
USER is "OPS$TEST"
終于成功登錄!
這個是在本地環(huán)境下的操作系統(tǒng)認證，即test與oracle數(shù)據(jù)庫在同一個主機上。
倘若不在同一個主機上，必須將remote_os_authent設(shè)置為TRUE。
外部認證之網(wǎng)絡(luò)認證
Network authentication is performed using Oracle Advanced Security, which can be configured to use a third-party service such as Kerberos. If you are using Oracle Advanced Security as your only external authentication service, then the REMOTE_OS_AUTHENT parameter setting is irrelevant, becauseOracle Advanced Security only allows secure connections.
關(guān)于外部認證，我們來看看官方文檔的說明
1> More choices of authentication mechanism are available, such as smart cards, fingerprints, Kerberos, or the operating system.
2> Many network authentication services, such as Kerberos support single sign-on, enabling users to have fewer passwords to remember.
3> If you are already using some external mechanism for authentication, such as one of those listed earlier, then there may be less administrative overhead to use that mechanism with the database as well.
Easy Connect
[oracle@node3 ~]$ sqlplus system/oracle@192.168.2.12:1521/sz.being.com
其中，192.168.2.12是數(shù)據(jù)庫所在主機的IP，1521是數(shù)據(jù)庫所在主機的監(jiān)聽端口，sz.being.com是數(shù)據(jù)庫提供的服務(wù)名
【oracle sysdba級用戶的認證方式】相關(guān)文章：