8
Oracle9i Default Accounts and Passwords

This chapter describes Oracle9i database default accounts and passwords.

This chapter contains these topics:

• Overview
  
  
• Unlocking and Changing Passwords
  
  
• Granting Limited SYS Database Role Privileges
  
  
• Reviewing Accounts and Passwords

Overview

Oracle9i installs with a number of default accounts. Database Configuration Assistant locks and expires all default database accounts upon successful installation with the following exceptions:

• SYS
  
  
• SYSTEM
  
  
• SCOTT
  
  
• DBSNMP

You must unlock all other accounts before using them. Oracle Corporation recommends changing all user passwords immediately after installation.

At a minimum, Database Configuration Assistant creates SYS, SYSTEM, and DBSNMP accounts in all databases. Additional accounts are created depending on components installed. Unlock accounts and change passwords before using them. Table 8-2 describes accounts and passwords.

Unlocking and Changing Passwords

At the end of installation, several configuration assistants automatically start to create and configure your database and network environments. One such assistant is Database Configuration Assistant, which automatically prompts you to change passwords and unlock accounts immediately after installation.

To change a password during database installation and configuration:

1. From the Database Configuration Assistant window, click Password Management.

   Note: Password Management is not available when using Database Configuration Assistant as a standalone tool (that is, after installation and configuration are complete).

2. Select a username and clear the check mark.
   
   
3. Enter a new password and confirm the new password for each username.

   Note: If you unlock a password, but do not specify a new password, then the password is expired until the next time you access that account.

Alternatively, use SQL*Plus to unlock accounts and change passwords any time after installation.

To change a password after installation:

1. Start SQL*Plus:
   
   

   C:\> sqlplus /NOLOG
   
   

2. Connect as SYSDBA:
   
   

   SQL> CONNECT / AS SYSDBA
   
   

3. Change the password according to SQL commands indicated in Table 8-1:
   
   

   Table 8-1  SQL Statements for Administering Accounts and Passwords

   Action	SQL Statement
   Unlock a password	ALTER USER username ACCOUNT UNLOCK;
   Lock a password	ALTER USER username ACCOUNT LOCK;
   Change password of an unlocked account	ALTER USER username IDENTIFIED BY password;
   Change password of a locked account	ALTER USER username IDENTIFIED BY password ACCOUNT UNLOCK;

   Note: For information on Oracle Enterprise Manager accounts and passwords, see "Parameters for Oracle Performance Monitor for Windows NT" and "Modifying Oracle Performance Monitor for Windows NT Parameters".

Granting Limited SYS Database Role Privileges

Any database user can be granted a limited SYS database role privilege to use Oracle Enterprise Manager Diagnostic Pack. Grant users access to these necessary SYS privileges by granting the OEM_MONITOR role. This role is created when Oracle9i database is installed and is defined in the SQL script at \ORACLE_BASE\ORACLE_HOME\rdbms\admin\catsnmp.sql.

Reviewing Accounts and Passwords

Table 8-2 lists Oracle9i default accounts and passwords. It also briefly describes the purpose of each username and shows where to find additional information.

Beginning with Oracle9i release 2 (9.2), the CREATE DATABASE statement enables you to specify passwords for users SYS and SYSTEM. Default values shown in Table 8-2 apply only if no password is specified. For more information, see "Protecting Your Database: Specifying Passwords for Users SYS and SYSTEM" in Oracle9i Database Administrator's Guide.

Table 8-2  Oracle9i Default Accounts and Passwords  

Username	Password	Description	More Information
SYSTEMFoot 1	MANAGER	Used for performing database administration tasks. SYSTEM includes AQ_ADMINISTRATOR_ROLE, DBA, and SALES_HISTORY_ROLE database roles.	Oracle9i Database Administrator's Guide
SYSFoot 2	CHANGE_ON_ INSTALLFoot 3	Used for performing database administration tasks.	Oracle9i Database Administrator's Guide
ANONYMOUS	ANONYMOUS	Allows HTTP access to Oracle XML DB.	Not applicable
CTXSYS	CTXSYS	Oracle Text username with CONNECT, DBA, and RESOURCE database roles.	Oracle Text Reference
DBSNMP	DBSNMP	Includes CONNECT and SELECT ANY DICTIONARY database roles. Run catnsnmp.sql if you want to drop this role and user.	Oracle Intelligent Agent User's Guide
LBACSYS	LBACSYS	Oracle Label Security administrator username.	Oracle Label Security Administrator's Guide
MDSYS	MDSYS	Oracle Spatial and Oracle Locator administrator username.	Oracle Spatial User's Guide and Reference
OLAPSYS	MANAGER	Includes CONNECT, OLAP_DBA, and RESOURCE database roles	Oracle9i OLAP User's Guide
ORDPLUGINS	ORDPLUGINS	Oracle interMedia Audio and Video username with CONNECT and RESOURCE database roles. Allows non-native plug-in formats for one session.	Oracle interMedia User's Guide and Reference
ORDSYS	ORDSYS	Oracle interMedia Audio, Video, Locator, and Image administrator username with CONNECT, JAVAUSERPRIV, and RESOURCE database roles.	Oracle interMedia User's Guide and Reference
OUTLN	OUTLN	Centrally manages metadata associated with stored outlines. Supports plan stability, which maintains the same execution plans for the same SQL statements. Includes CONNECT and RESOURCE database roles.	Oracle9i Database Concepts Oracle9i Database Performance Tuning Guide and Reference
SCOTT	TIGER	Includes CONNECT and RESOURCE database roles.	Oracle9i Database Administrator's Guide for Windows
WKSYS	WKSYS	Used for storing Ultra Search system dictionaries and PL/SQL packages. WKSYS includes CONNECT, CTXAPP, DBA, JAVASYSPRIV, JAVAUSERPRIV, and RESOURCE database roles.	Oracle Ultra Search Online Documentation
WMSYS	WMSYS	WMSYS schema is used to store all metadata information for Oracle Workspace Manager. WMSYS includes CONNECT, RESOURCE, and WM_ADMIN_ROLE database roles.	Oracle9i Application Developer's Guide - Workspace Manager
XDB	CHANGE_ON_INSTALL	Used for storing Oracle XML DB data and metadata. Includes CONNECT and RESOURCE database roles.	Not applicable

1 If installing Oracle Internet Directory, then change passwords for SYS and SYSTEM only after Oracle Internet Directory installation is complete. 2 If installing Oracle Internet Directory, then change passwords for SYS and SYSTEM only after Oracle Internet Directory installation is complete. SYS includes the following database roles: AQ_ADMINISTRATOR_ROLE, AQ_USER_ROLE, CONNECT, CTXAPP, DBA, DELETE_CATALOG_ROLE, EXECUTE_CATALOG_ROLE, EXP_FULL_DATABASE, GATHER_SYSTEM_STATISTICS, HS_ADMIN_ROLE, IMP_FULL_DATABASE, JAVA_ADMIN, JAVADEBUGPRIV, JAVA_DEPLOY, JAVAIDPRIV, JAVAUSERPRIV, JAVASYSPRIV, LOGSTDBY_ADMINISTRATOR, OEM_MONITOR, OLAP_DBA, RECOVERY_CATALOG_OWNER, RESOURCE, SELECT_CATALOG_ROLE, and WKUSER 3 SQL statement must include the privilege AS SYSDBA or AS SYSOPER.