Oracle 8x monitors the login status of sysdba role users

  • 2020-05-15 02:27:03
  • OfStack

The ORACLE tutorial you are looking at is :Oracle 8x monitors the login status of sysdba role users. Before the Oracle 8i version, use internal users to perform database startup and shutdown, create database and other operations; Since the 8i version, Oracle has gradually phased out internal users. Users who have been granted sysdba or sysoper roles can only perform database startup and shutdown operations. In order to maintain user habits, internal users and svrmgrl users are still retained in 8i, but svrmgrl tools and internal users can be completely eliminated. The newly released oracle 9i has completely phased out the svrmgrl tool and internal users. Because users with roles sysdba have large permissions to perform operations such as database startup and shutdown, users with these roles should be monitored

In the Oracle database product on the unix platform, every time a user logs into the database with the sysdba permission, the system automatically creates a file named ora_.aud, which by default is in the $ORACLE_HOME/rdbms/audit directory. The automatic creation of this file does not require the system to turn on the audit function at all. This file records the user who is connected, the name of the terminal machine, and the login time. Based on this information, we can easily monitor who is logging into the database with sysdba access and when. Here's an example:

1. First connect to the database server with sysdba in the client sqlplus:

SQL > conn sys@gs1 as sysdba

Please enter password: ********

The connected.

2. View the latest ora_.aud file contents in the directory $ORACLE_HOME/rdbms/audit on the server side:


As you can see from the above file, this file details the login time, the operation performed, the name of the client user, and the name of the login server terminal machine. With this information, it is easy to determine who logged into the database server with sysdba privileges and when. Note that the interpretation of Chinese characters in ora_589980.aud is added by the author, not automatically generated by the system.



Related articles: