1

I know that I can query the "dba_users_with_defpwd" table, but I've seen reports that for some accounts (mainly SYS and SYSTEM) even if you provide a new non-trivial password during install, they will be shown as having the default password.

Is there any way to verify the users with default passowrds other than manually comparing the "sys.users$" and "sys.defalut_pwd$" tables?

NOTE: I don't have direct access to the environment, I just receive the user tables to check for compliance with the company's rules.

2
  • Try to logon with default passwords. Jan 31 '18 at 16:05
  • I need to provide some documentation about this process and prove that the passwords are not default, mostly non-tecnhical people will review my tests. Comparing the "sys.users$" and "sys.defalut_pwd$" tables is the way to go? Since it will be easier to show them a comparison between two excel files instead of screenshot from Linux.
    – Gleisson
    Jan 31 '18 at 16:56
0

SYS and SYSTEM accounts are incorrectly listed in DBA_USERS_WITH_DEFPWD in 12c (Doc ID 2173962.1)

SYS and SYSTEM have that flag set a database create time, and the flag doesn't clear until the first password change AFTER the database is created. So it may or may not be a default password, but it if it isn't default, it's one that hasn't been changed since the database was created and therefore should be changed.

If you do not have access to this, then:

https://mandysandhu.com/2017/10/20/oracle-12c-syssystem-accounts-are-incorrectly-listed-in-dba_users_with_defpwd/

2
  • Thanks. Since I need to provide some documentation about this process and prove that the passwords are not default, comparing the "sys.users$" and "sys.defalut_pwd$" tables is the way to go?
    – Gleisson
    Jan 31 '18 at 16:50
  • @Gleisson Oracle provided the view dba_users_with_defpwd. Use it, with keeping in mind the above. Jan 31 '18 at 17:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.