2006. 12. 5. 10:26 오라클
Oracle Created Database Users: Password, Usage and Files
오라클 default 유저 및 passwd에 대한 설명
Purpose
~~~~~~~
The following table lists the default usernames and passwords you may encounter
in your database as a result of installing various additional
--> products/components
--> options
--> new features of the version
It provides references to
--> which option or product should be installed to have it
--> what script created it
--> what it is used for
--> suggestion to secure the account
This note is intended to be an up-to-date list of default usernames: as such the
information is subject to change.
SCOPE & APPLICATION
~~~~~~~~~~~~~~~~~~~
Database Administrators who need to export full databases, manage users and
security.
List Of Users Created at Database Creation
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
By default, are automatically created during database creation :
SCOTT by script $ORACLE_HOME/rdbms/admin/utlsampl.sql
OUTLN by script $ORACLE_HOME/rdbms/admin/sql.bsq
Optionally:
DBSNMP if Enterprise Manager Intelligent Agent is installed
MGMT_VIEW is part of the DB Control Repository
SYSMAN is part of the DB Control Repository and Grid
see Note 331209.1 for details
TRACESVR if Enterprise Manager is installed
AURORA$ORB$UNAUTHENTICATED \
AURORA$JIS$UTILITY$ -- if Oracle Servlet Engine (OSE) is installed
OSE$HTTP$ADMIN /
MDSYS if Oracle Spatial option is installed
ORDSYS if interMedia Audio option is installed
ORDPLUGINS if interMedia Audio option is installed
CTXSYS if Oracle Text option is installed
REPADMIN if Replication Option is installed
LBACSYS if Oracle Label Security option is installed
ODM if Oracle Data Mining option is installed
ODM_MTR idem
DMSYS (10g) if Oracle Data Mining 10g option is installed
DMSYS in 10g version to replace ODM and ODM_MTR schemas
OLAPSYS if OLAP option is installed
WMSYS if Oracle Workspace Manager script owmctab.plb is
executed.
ANONYMOUS if catqm.sql catalog script for SQL XML management
XDB is executed
EXFSYS is the Expression Filter Feature repository
DIP for provisioning event processing
Oracle9i Sample Schemas if you need to test through a complete sample
system of information (see Note 207560.1)
Note
~~~~
If you have already the 9i sample schemas (hr, oe, pm, etc.) and you don't need
them, you can removed them safely and without damage to the database.
a. The SCOTT user is created by default to provide sample user tables. You can
alter the password. To create the default tables, run the script
$ORACLE_HOME/sqlplus/demo/demobld.sql. To drop the objects, run
$ORACLE_HOME/sqlplus/demo/demodrop.sql connected as SCOTT.
b. The OUTLN (OUTLiNes) user is automatically created during installation of
Oracle8i and Oracle9i. OULTN is the schema of Stored Outlines.
The package OUTLN_PKG is used to manage stored outlines and categories.
OUTLN is the owner of tables OL$, OL$HINTS (Oracle8i) as well as OL$NODES
(Oracle9i) used to store hints for stored outlines.
You can change the password for the OUTLN schema just as for the SYS and SYSTEM
schemas.
b. The DBSNMP user can be dropped by running the catnsnmp.sql script. If you
need to re-create it, run the catsnmp.sql script. Ensure that there are no
jobs running or scheduled in Oracle Enterprise Manager before you run the
script.
MGMT_VIEW is part of the DB Control Repository, it is created by running
the script $OH/sysman/admin/emdrep/bin/RepManager, the password is
autogenerated (it does not have a fixed or default value).
SYSMAN belongs to the same feature ( see Note 331209.1 for details):
it is the schema of the Grid OMS repository of the 10G Enterprise Manager Grid.
c. The TRACESVR user is created by $ORACLE_HOME/otrace/admin/otrcsvr.sql during
the installation of OEM.
If you change TRACESVR user's password, you will not be able to do OTrace
collections. This user is only used with 7.x Databases where stored procedures
are used by OTrace to start and stop data collections. The TRACESVR/stored
procedure mechanism is no longer used to control OTrace collections starting
with Oracle 8.x Databases. Therefore in this case you can change the password
(or drop that user).
d. The three JSERV accounts (AURORA$JIS$UTILITY$, AURORA$ORB$UNAUTHENTICATED and
OSE$HTTP$ADMIN) are used internally by Enterprise Java Beans and CORBA Tools
and created with randomly-generated passwords 'INVALID_ENCRYPTED_PASSWORD'.
-> jisorb.sql creates user AURORA$ORB$UNAUTHENTICATED.
-> jisbgn.sql creates user AURORA$JIS$UTILITY$
-> jishausr.sql creates user OSE$HTTP$ADMIN
These 3 scripts are launched by init_jis.sql script to install the Oracle
Servlet Engine (OSE)
Changing their passwords would prevent the ORB from working.
This is supposed to change in a future version so that you can change their
password.
e. MDSYS, ORDSYS, CTXSYS, and ORDPLUGINS are created to support Oracle
Intermedia. The default password for the ORDSYS user during automatic
installation is 'ORDSYS', and for ORDPLUGINS is 'ORDPLUGINS'.
You have to change these passwords once the installation is complete.
f. REPADMIN user: it is usual to have a separate user for the replication
administrator to protect master groups from being managed by snapshot
administrators.
This user configures the replicated environment and performs administration
of all replicated schemas / groups.
g. LBACSYS user: the Oracle Label Security administrator username.
h. ODM user: who performs data mining operations.
In 10g, a user can be created with a chosen name.
i. ODM_MTR user: the account associated with the data repository for data
mining sample programs.
In 10g, DMSYS is the schema for the data repository.
j. OLAPSYS user: identity used to create OLAP metadata structures.
k. WMSYS user: used to store all the metadata information for Oracle Workspace
Manager.
l. ANONYMOUS user: allows HTTP access to Oracle XML DB.
m. XDB user: Used for storing Oracle XML DB data and metadata.
n. EXFSYS is the Expression Filter Feature repository (see Note 258618.1):
the user is created with the script exfsys.sql that asks for a password.
o. DIP is created in rdbms/admin/catdip.sql (password is DIP): for provisioning
event processing
p. The Oracle9i Sample Schemas provides installed schemas meant to be used for
demonstration purposes only:
-> HR: Human Resources schema
The Human Resources division tracks information on the company's
employees and facilities.
-> OE: Order Entry schema requires "Oracle Spatial" option.
The Order Entry division tracks product inventories and sales of the
company�s products through various channels.
-> PM: Product Media schema requires "Oracle JVM" and "Oracle Intermedia"
options.
The Product Media division maintains descriptions and detailed
information on each product sold by the company.
-> SH: Sales History schema requires "Oracle OLAP" set up.
The Sales History division tracks business statistics to facilitate
business decisions.
-> QS: Queued Shipping schema
The Shipping division manages the shipping of products to customer.
The sample company has decided to test the use of messaging to
manage its proposed B2B applications.
-> QS_ES (Eastern Shipping)
-> QS_WS (Western Shipping)
-> QS_OS (Overseas Shipping)
-> QS_CB (Customer Billing)
-> QS_CS (Customer Service)
-> QS_ADM (Administration)
-> QS_CBADM (Customer Billing Administration)
If any of the user accounts is locked and expired upon installation and needs to
be activated, unlock and assign a new meaningful password to that user account:
SQL> ALTER USER "schema_name" IDENTIFIED BY "newpass" ACCOUNT UNLOCK;
Passwords and Referenced Files List
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Username | Description | Default Password | Created or Referenced |Comments
| | | in $ORACLE_HOME/ files |
------------+-------------------------+------------------+-------------------------------+--------
| | | |
CTXSYS | Intermedia Text schema | CTXSYS |./ctx/admin/dr0csys.sql |change
| | |./bin/ctxsrv -user ctxsys/* |
------------+-------------------------+------------------+-------------------------------+--------
DBSNMP | Intelligent Agent user | DBSNMP |./rdbms/admin/catsnmp.sql |change
| | |./bin/dbsnmp |
| | |./network/admin/snmp_rw.ora |
------------+-------------------------+------------------+-------------------------------+--------
MGMT_VIEW | DB Control Repository | autogenerated |./sysman/admin/emdrep/bin/RepManager|
------------+-------------------------+------------------+-------------------------------+--------
SYSMAN | DB Control Repository | asked | |See Note 259379.1
------------+-------------------------+------------------+-------------------------------+--------
MDSYS | Spatial Data Option user| MDSYS |./md/admin/mdinst.sql |change
| | |./ord/admin/ordisysc.sql |
------------+-------------------------+------------------+-------------------------------+--------
ODM | Oracle Data Mining | ODM |./dm/admin/dmcrt.sql |change
ODM_MTR | Oracle Data Mining | MTRPW |./dm/admin/dmcrt.sql |change
DMSYS (10g) | Oracle Data Mining | DMSYS |./dm/admin/odmcrtm.sql |change
any name | Oracle Data Mining | any pasword |./dm/admin/odmcrt.sql |
------------+-------------------------+------------------+-------------------------------+--------
ORDPLUGINS | InterMedia Audio option | ORDPLUGINS |./ord/admin/ordisysc.sql |change
ORDSYS | InterMedia Audio option | ORDSYS |./ord/admin/ordisysc.sql |change
------------+-------------------------+------------------+-------------------------------+--------
OUTLN | Stored Outlines | OUTLN |./rdbms/admin/c0703040.sql |lock
| | |./rdbms/admin/c0800050.sql |
| | |./rdbms/admin/sql.bsq |
------------+-------------------------+------------------+-------------------------------+--------
PERFSTAT | STATSPACK Repository | PERFSTAT |./rdbms/admin/spcreate.sql |change
| | |(./rdbms/admin/spcusr.sql) |
------------+-------------------------+------------------+-------------------------------+--------
RMAN | RMAN catalog Owner | RMAN | manually |change
------------+-------------------------+------------------+-------------------------------+--------
SCOTT | Demo user | TIGER |./rdbms/admin/utlsampl.sql |*drop
------------+-------------------------+------------------+-------------------------------+--------
WKPROXY | Ultraseach user | change_on_install|./ultrasearch/admin/wk0csys.sql|change
WKSYS | Ultraseach user | change_on_install|./ultrasearch/admin/wk0install.sql| ""
------------+-------------------------+------------------+-------------------------------+--------
WMSYS | Oracle Workspace Manager| wmsys |./rdbms/admin/owmctab.plb |lock
------------+-------------------------+------------------+-------------------------------+--------
XDB | SQL XML management | change_on_install|./rdbms/admin/catqm.sql |lock
ANONYMOUS | SQL XML management | values anonymous |./rdbms/admin/catqm.sql |lock
------------+-------------------------+------------------+-------------------------------+--------
TRACESVR | Oracle Trace user | trace |./rdbms/admin/otrcsvr.sql |change
------------+-------------------------+------------------+-------------------------------+--------
OAS_PUBLIC | Web Toolkit/Content | manager | See Note 99088.1 |change
WEBSYS | Web Toolkit/Content | manager | See Note 99088.1 |change
------------+-------------------------+------------------+-------------------------------+--------
REPADMIN | Replication user | managed by DBA |created manually by CREATE USER|
| | |./ldap/admin/oidrsrms.sql |change
| | |./ldap/admin/oidrsms.sql |
------------+-------------------------+------------------+-------------------------------+--------
AURORA$ORB$UNAUTHENTICATED| OSE | random value |./javavm/install/jisorb.sql |lock
AURORA$JIS$UTILITY$ | OSE | random value |./javavm/install/jisbgn.sql |lock
OSE$HTTP$ADMIN | OSE | random value |./javavm/install/jishausr.sql |lock
------------+-------------------------+------------------+-------------------------------+--------
LBACSYS | Label Security | LBACSYS |./rdbms/admin/catlbacs.sql |change
------------+-------------------------+------------------+-------------------------------+--------
SYS | Administrative | change_on_install|./rdbms/admin/sql.bsq |change
SYSTEM | Administrative | manager |./rdbms/admin/sql.bsq |change
------------+-------------------------+------------------+-------------------------------+---------
EXFSYS | Expression Filter Feature repository |asked|./rdbms/admin/exfsys.sql |locked
------------+-------------------------+------------------+-------------------------------+--------
DIP | Provision event processing| DIP |./rdbms/admin/catdip.sql |locked
------------+-------------------------+------------------+-------------------------------+--------
* User SCOTT is for test purposes: drop it if of no use.