[20150529]revoke sysdba from user_name.txt
SYS@test> @ver1
PORT_STRING VERSION BANNER
------------------------------ -------------- --------------------------------------------------------------------------------
x86_64/Linux 2.4.xx 11.2.0.3.0 Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
SYS@test> grant sysdba to scott;
Grant succeeded.
SYS@test> select * from V$PWFILE_USERS;
USERNAME SYSDB SYSOP SYSAS
-------------------- ----- ----- -----
SYS TRUE TRUE FALSE
SCOTT TRUE FALSE FALSE
SYS@test> revoke sysdba from scott;
Revoke succeeded.
SYS@test> select * from V$PWFILE_USERS;
USERNAME SYSDB SYSOP SYSAS
-------------------- ----- ----- -----
SYS TRUE TRUE FALSE
$ strings orapwtest
]\[Z
ORACLE Remote Password file
INTERNAL
921BA08037BF42BA
2E77A75AE2AF294D
SCOTT
57964D8CE8DC6EB2
--可以发现口令文件里面并没有清除,这个是别人问我的问题.why?
SYS@test> revoke sysoper from scott;
Revoke succeeded.
$ strings orapwtest
]\[Z
ORACLE Remote Password file
INTERNAL
921BA08037BF42BA
2E77A75AE2AF294D
SCOTT
57964D8CE8DC6EB2
--问题依旧.
SYS@test> column VIEW_DEFINITION format a100
SYS@test> select * from V$FIXED_VIEW_DEFINITION where view_name='GV$PWFILE_USERS';
VIEW_NAME VIEW_DEFINITION
------------------------------ ----------------------------------------------------------------------------------------------------
GV$PWFILE_USERS select inst_id,username,decode(sysdba,1,'TRUE','FALSE'), decode(sysoper,1,'TRUE','FALSE'), decode(s
ysasm,1,'TRUE','FALSE') from x$kzsrt where valid=1 and username != 'INTERNAL'
--格式化:
SELECT inst_id, username, decode(sysdba, 1,'TRUE','FALSE'), decode(sysoper, 1,'TRUE','FALSE'), decode(sysasm,
1,'TRUE','FALSE')
FROM x$kzsrt
WHERE valid = 1
AND username != 'INTERNAL';
--执行如下:
SYS@test> select * FROM x$kzsrt;
ADDR INDX INST_ID USERNAME SYSDBA SYSOPER SYSASM VALID
---------------- ---------- ---------- -------------------- ---------- ---------- ---------- ----------
0000002A9746B908 0 1 INTERNAL 1 1 0 1
0000002A9746B908 1 1 SYS 1 1 0 1
0000002A9746B908 2 1 SCOTT 0 0 0 0
--可以发现revoke全部取消后,实际上修改口令文件某个标识VALID,并没有清除口令文件的信息.
$ cp orapwtest orapwtest.20150529
SYS@test> grant sysdba to scott;
Grant succeeded.
--对比两个文件orapwtest,orapwtest.20150529.
$ xxd -c 16 orapwtest > /tmp/a2.txt
$ xxd -c 16 orapwtest.20150529 > /tmp/a1.txt
$ diff -Nur /tmp/a1.txt /tmp/a2.txt
--- /tmp/a1.txt 2015-05-29 11:59:41.000000000 +0800
+++ /tmp/a2.txt 2015-05-29 11:59:36.000000000 +0800
@@ -54,7 +54,7 @@
0000350: 0000 0000 0000 0000 0000 0000 0500 0000 ................
0000360: 3537 3936 3444 3843 4538 4443 3645 4232 57964D8CE8DC6EB2
0000370: 0000 0000 0000 0000 0000 0000 0000 0000 ................
-0000380: 1000 0000 18f6 7125 c768 6513 0eb8 99ab .....鰍%莌e.....
+0000380: 1000 0000 1bf6 7125 c768 6513 0eb8 99ab .....鰍%莌e.....
0000390: b60a 06c3 d063 a9a2 6ca2 c95d 7607 8db1 ...眯c..l.蒥v...
00003a0: 1f1f 0a00 0000 0000 0000 0000 0000 0000 ................
00003b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
--可以发现仅仅修改1位. 18=>1b.
SYS@test> grant sysoper to scott;
Grant succeeded.
$ xxd -c 16 orapwtest > /tmp/a3.txt
$ diff -Nur /tmp/a1.txt /tmp/a3.txt
--- /tmp/a1.txt 2015-05-29 11:59:41.000000000 +0800
+++ /tmp/a3.txt 2015-05-29 12:03:00.000000000 +0800
@@ -54,7 +54,7 @@
0000350: 0000 0000 0000 0000 0000 0000 0500 0000 ................
0000360: 3537 3936 3444 3843 4538 4443 3645 4232 57964D8CE8DC6EB2
0000370: 0000 0000 0000 0000 0000 0000 0000 0000 ................
-0000380: 1000 0000 18f6 7125 c768 6513 0eb8 99ab .....鰍%莌e.....
+0000380: 1000 0000 1ff6 7125 c768 6513 0eb8 99ab .....鰍%莌e.....
0000390: b60a 06c3 d063 a9a2 6ca2 c95d 7607 8db1 ...眯c..l.蒥v...
00003a0: 1f1f 0a00 0000 0000 0000 0000 0000 0000 ................
00003b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
1000(0x8)=> 1010(0xb) => 1111(0xf)
