Oracle 8i DBA Studio

[mrkamran]

Hello,
I have a problem with my DBA studio 8i Personal Edition. When i type any user name and any password and connect as DBA then there is no password error. My dba studio open with any password there is no security. What should i do to overcome this problem.
Thanks

 

[hoinz]

Hello,

I am not familiar with DBA studio 8i, but I think connecting to a database works the same, no matter if in DBA studio or in SQL*plus.
And most probably your problem is neither a faulty configuration nor a bug. It's a feature.
It is called Operating System Authentication: Once you are logged in as a specific operating system user (and only in this case), you may connect to the database as sysdba, without having to enter another password. This operating system user usually is the one who installed the database.

To see if my guess is correct: Can you log in as some other operating system user (which operating system by the way?), and try again? I bet that other user is not allowed to connect as sysdba.
So actually there is some level of security. If you are not satisfied with this level, then there should be ways of changing it.

hope this helps

 

[mrkamran]

I m not giving Operating system user name for login in DBA Studio. I m soo wondering that if i type some thing like "abcd" in user name and "jdsf" in password field and select As DBA, then DBA studio will open. That's mean any user(which dos not exist in database or operating system) with any password can connect as dba studio. But if i connect as normal login (not as dba), it will authnticate password and username correctly.
???

 

[hoinz]

Before we continue guessing and misunderstanding, you should tell us a bit more:

What operating system is your database installed on?
Are database and DBA studio installed on the same computer?
Before you can start DBA studio, you must have been logged in to your operating system; Which operating system system user, and on which computer?
And which operating system user did install the database?

What I tried to explain:
It does not matter what username you type in to DBA studio, as long as it is 'as sysdba', as you found out yourself.
But what does matter: Which operating system user is doing this all?

 

[mrkamran]

Hi,
I m using OS winxp professional, and my database and dba studio is installed on same machiene. My oprating system user is Administrator.

 

[hoinz]

Okay then,
this is what Oracle intended when they created their feature 'Operating System Authentication'.

You were Administrator when you installed your database, and as Administrator you will always be able to access your database whithout any password. But other users will not be able to do so. (But if there is no other user on your box, you will never notice this.)
You should not complain that there is no security. Actually your database is as secure as your Administrator account.

And by the way, not matter what username you type when you connect 'as sysdba': You will not be this (non-existing) user, you will be user sys. I don't know if DBA studio offers a way to show the connected user. But in SQL*plus you could verify this by typing 'show user'.

hope this helps