The Oracle (tm) Users' Co-Operative FAQ
I've just installed Oracle on my PC - what are the passwords for SYS and SYSTEM ?
| Author's name: Jonathan Lewis Author's Email: Jonathan@jlcomp.demon.co.uk |
Date written: 26th July 2001 Oracle version(s): 7.3 - 8.1.7.0 |
| With the increasing popularity of Oracle, many people are taking advantage of the 'cheap software' option and loading Oracle onto their Windows PCs to experiment with. Unfortunately the first hurdle they come to , if the install works is password protection. |
There is a theory that says no-one will ever read the answer to this question, because if they haven't bothered to read the installation notes that come with Oracle, they won't bother to go looking for a FAQ.
Neverthless, the default install password for SYS is change_on_install, and the default install password for SYSTEM is manager.
If, after connecting, you subsequently check the view dba_users you will find that there are several other users already defined to the database. If your database is exposed to a network, you will definitely want to change a couple of these. In particular:
User OUTLN has password OUTLN - this account is required by Oracle's 'stored outline' feature; however the account has a privilege that allows an interloper to become the SYS user and take control of your database.
User DBSNMP has password DBSNMP - this account is used by Oracle's SNMP agent, and has a number of fairly nice system privileges. If you change this password and are using snmp traps on the system (typically via Oracle Enterprise Manager, I believe) then you will need to change the password in the configuration file for the snmp management software too. You must add the following to your snmp_rw.ora (typically located in the direcotry /var/opt/oracle, or $ORACLE_HOME/network/admin) for each {SID} that you want the agent to connect to:
snmp.connect.{SID}.NAME = dbsnmp
snmp.connect.{SID}.PASSWORD = {new password}
You may also find users ORDSYS, ORDPLUGINS, MDSYS, CTXSYS with passwords matching the accounts - these are the 'InterMedia' accounts.
There are also accounts relevant to all the Java and Web stuff, with names like AURORA$JIS$UTILITY$, OSE$HTTP$ADMIN, AURORA$ORB$UNAUTHENTICATED. If I ever get around to using them, I'll read the documentation and publish their passwords too (perhaps someone would like to drop me a note about them).
Finally there are some demo accounts as follows:
SCOTT IDENTIFIED BY TIGER; ADAMS IDENTIFIED BY WOOD; JONES IDENTIFIED BY STEEL; CLARK IDENTIFIED BY CLOTH; BLAKE IDENTIFIED BY PAPER;
Further reading: N/A.
