Creating and Maintaining a Password File

Password File Creation.

You can create password file through ORAPWD utility

> orapwd
Usage: orapwd file= password= entries= force=

where
file - name of password file (mand),
password - password for SYS (mand),
entries - maximum number of distinct DBAs and OPERs (opt),
force - whether to overwrite existing file (opt)
There are no spaces around the equal-to (=) character.



Note: ORAPWD is invoke on OS command prompt. Windows "C:" , *nix "$"


PASSWORD
This parameter sets the password for user SYS. If you issue the ALTER USER statement to change the password for SYS after connecting to the database, both the password stored in the data dictionary and the password stored in the password file are updated. This parameter is mandatory.


Note:

You cannot change the password for SYS if REMOTE_LOGIN_PASSWORDFILE is set to SHARED. An error message is issued if you attempt to do so.

Adding Users to a Password File

When you grant SYSDBA, SYSOPER privs to a user, that user's name and privs infomation are added to the password file.

but if the server doesn't have an EXCLUSIVE password file (that is, if the initialization parameter REMOTE_LOGIN_PASSWORDFILE is NONE or SHARED, or the password file is missing), Oracle Database issues an error if you attempt to grant these privileges.


SQL> grant SYSDBA,SYSOPER to [username];

Viewing Password File Members

SQL> select * from v$pwfile_users;

USERNAME SYSDB SYSOP
------------------------------ ----- -----
SYS TRUE TRUE
SCOTT TRUE TRUE



USERNAME This column contains the name of the user that is recognized by the password file.

SYSDBA If the value of this column is TRUE, then the user can log on with SYSDBA system privileges.

SYSOPER If the value of this column is TRUE, then the user can log on with SYSOPER system privileges.