http://www.idevelopment.info/data/Oracle/DBA_tips/Database_Administration/DBA_26.shtml
DBA Tips Archive for Oracle
|
Oracle Created (Default) Database Users
by Jeff Hunter, Sr. Database Administrator
During database creation, Oracle creates several default database users or schemas. This article attempts to provide some insight and explain each of these default database users/schemas.
Oracle User Account Details
| Default Users | ||
| Username | Default Password | Account Description |
| SYS | change_on_install | All of the base tables and views for the database's data dictionary are stored in the schema SYS. These base tables and views are critical for the operation of Oracle. To maintain the integrity of the data dictionary, tables in the SYS schema are manipulated only by Oracle; they should never be modified by any user or database administrator, and no one should create any tables in the schema of the user SYS.
The DBA should change the password for SYS immediately after database creation!!! |
| SYSTEM | manager | The SYSTEM username creates additional tables and views that display administrative information, and internal tables and views used by Oracle tools. Never create in the SYSTEM schema tables of interest to individual users.
SYSTEM is a little bit "weaker" user than SYS, for example, it has no access to so called X$ tables (the very internal structure tables of Oracle). Although in real life you may be in a situation when some product or whatever you want to create objects in above mentioned user's schemas. Be flexible, don't sacriface a product only because it will create some objects in SYS or SYSTEM schema The DBA should change the password for SYSTEM immediately after database creation!!! |
| DBSNMP | dbsnmp | Supports Oracle SNMP (Simple Network Management Protocol).
The Oracle Intelligent Agent requires a database logon for each SID that it manages. By default this account is called "DBSNMP" and the password is "DBSNMP". The account name and/or password SHOULD be changed from the default but you will need to make a few additional modifications. In the examples below, you will need to replace any information with brackets < > with the information from your system.
|
| OUTLN | outln | Oracle8i adds the OUTLN user schema to support Plan Stability. The OUTLN user acts as a place to centrally manage metadata associated with stored outlines.
This user has DBA role. It is used for plan stability ie. to keep the same execution plans for the same queries even if your system configuration or statistics changes. Execution plans will be the same in different Oracle releases with different optimizers. The DBA should either lock the user account or change the password for the OUTLN user immediately after database creation!!! |
| MDSYS | mdsys | Supports Oracle Spatial. Oracle Spatial is an integrated set of functions and procedures that enables spatial data to be stored, accessed, and analyzed quickly and efficiently in an Oracle8i database.
[..] The spatial attribute of a spatial feature is the geometric representation of its shape in some coordinate space. This is referred to as its geometry. The DBA should either lock the user account or change the password for the MDSYS user immediately after database creation!!! |
| ORDSYS | ordsys | Supports Oracle8i Time Series. Oracle8i Time Series (in previous releases called the Oracle8 Time Series Cartridge) is an extension to Oracle8i that provides storage and retrieval of timestamped data through object types. Oracle8i Time Series is a building block for applications rather than being an end-user application in itself. It consists of data types along with related functions for managing and processing time series data.
The DBA should either lock the user account or change the password for the ORDSYS user immediately after database creation!!! |
| ORDPLUGINS | ordplugins | Supports Oracle interMedia. Oracle interMedia is a single product that enables Oracle8i to store, manage, and retrieve text, documents, geographic location information, images, audio, and video in an integrated fashion with other enterprise information. Oracle interMedia extends Oracle8i reliability, availability, and data management to text and multimedia content in Internet, electronic commerce, and media-rich applications as well as online Internet-based geocoding services for locator applications.
The DBA should either lock the user account or change the password for the ORDPLUGINS user immediately after database creation!!! |
| CTXSYS | ctxsys | Supports Oracle ConText Cartridge. Oracle8 ConText Cartridge provides powerful search, retrieval, and viewing capabilities for text stored in an Oracle8 database. In addition, ConText provides advanced linguistic processing of English-language text.
The DBA should either lock the user account or change the password for the CTXSYS user immediately after database creation!!! |
| DSSYS | dssys | Dynamic Services Secured Web Service. Dynamic Services Engine (DS Engine) allows creation, aggregation and deployment of services from a variety of content sources. At the moment, Dynamic Services supports content access from databases (SQL/PLSQL) as well as Internet applications (HTTP/HTTPS). DS Engine can interpret XML and HTML content along with the result sets returned from database access. DS Engine is integrated with Oracle Portal via a Web Provider mechanism. This integration allows all the services registered with DS Engine to be accessible as portlets.
The DBA should either lock the user account or change the password for the DSSYS user immediately after database creation!!! |
| PERFSTAT | perfstat | Oracle Statistics Package (STATSPACK) user that supersedes UTLBSTAT/UTLESTAT. The PERFSTAT user will hold all of the tables and packages for the performance diagnostic tool STATSPACK.
Created By: $ORACLE_HOME/rdbms/admin/spcusr.sql |
| WKPROXY | change_on_install | Used to support Oracle's Ultrasearch option. This feature (and user) was introduced in Oracle9i. The user account IS NOT locked by default is only assigned the "CREATE SESSION" privilege. None the less, this account is not locked by default and Oracle highly recommends that this default password be changed.
Created By:$ORACLE_HOME/ultrasearch/admin/wk0csys.sql |
| WKSYS | change_on_install | Used to support Oracle's Ultrasearch option. This feature (and user) was introduced in Oracle9i. The user account IS NOT locked by default and as you can see below, is granted the highly privileged role of DBA. Given that this user is granted the DBA role and is not locked by default, Oracle highly recommends that this default password be changed.
This support account is assigned the following privileges in Oracle9i:
The default tablespace for this user will be "DRSYS" while its temporary tablespace will be "TEMP". Created By:$ORACLE_HOME/ultrasearch/admin/wk0install.sql |
| WMSYS | wmsys | Used to store all the metadata information for Oracle Workspace Manager. This user was introduced in Oracle9i and (like most Oracle9i supporting accounts) is locked by default. The user account is locked because we want the password to be public but restrict access to the account to the SYS schema. So, to unlock the account, DBA privileges are required.
Created By:$ORACLE_HOME/rdbms/admin/owmctab.plb |
| XDB | change_on_install | Used to support SQL XML management: XML DB. This user is granted two roles: "RESOURCE" and "JAVAUSERPRIV". Oracle recommends changing the password for this user after creation. This user is configured with a default tablespace of "XDB" and a temporary tablespace of "TEMP".
Created By: $ORACLE_HOME/rdbms/admin/catqm.sql |
| ANONYMOUS | ...IDENTIFIED BY VALUES 'anonymous' | Used to support SQL XML management: XML DB. Allows HTTP access to Oracle XML DB. This user should only be used for HTTP logins. The account is locked near the end of the catqm.sqlscript.
Created By: $ORACLE_HOME/rdbms/admin/catqm.sql |
| ODM | odm | Used to support Oracle Data Mining. In Oracle9i, this user is granted the roles: "SELECT_CATALOG_ROLE", "HS_ADMIN_ROLE", "AQ_USER_ROLE". Oracle recommends changing the default password as the account IS NOT locked after creation. The default tablespace for this user is "ODM" with temporary tablespace "TEMP". The "ODM" tablespace is populated with segments from users ODM and ODM_MTR.
Created By: $ORACLE_HOME/dm/admin/dmcrt.sql |
| ODM_MTR | mtrpw | Used to support Oracle Data Mining. In Oracle9i, this user is granted "SELECT_CATALOG_ROLE" and "HS_ADMIN_ROLE". Oracle recommends changing the default password as the account IS NOT locked after creation. The default tablespace for this user is "ODM" with temporary tablespace "TEMP". The "ODM" tablespace is populated with segments from users ODM and ODM_MTR.
Created By: $ORACLE_HOME/dm/admin/dmcrt.sql |
| OLAPSYS | mtrpw | This user is create if OLAP option is installed and is used to create OLAP metadata structures. In Oracle9i, this user is granted "SELECT_CATALOG_ROLE" and "HS_ADMIN_ROLE". Oracle recommends changing the default password. The default tablespace for this user is "ODM" with temporary tablespace "TEMP". The "ODM" tablespace is populated with segments from users ODM and ODM_MTR.
Created By: $ORACLE_HOME/dm/admin/dmcrt.sql |
| TRACESVR | trace | Oracle Trace server. Supports Oracle Trace for OEM in Oracle7. Oracle Trace is used to collect a wide variety of data, such as performance statistics, diagnostic data, system resource usage, and business transaction details.
This user was last used in Oracle7 and can be dropped from databases using Oracle8 and higher. |
| REPADMIN | Managed by DBA when user is created. | Replication user. This user is manually created by the DBA using CREATE USER... This user is also created in the scripts: $ORACLE_HOME/ldap/admin/oidrsrms.sql and $ORACLE_HOME/ldap/admin/oidrsms.sql. Oracle recommends changing the default password if automatically created. |
| JSERV Accounts | ||
| The three JSERV accounts (AURORA$JIS$UTILITY$, AURORA$ORB$UNAUTHENTICATED and OSE$HTTP$ADMIN) are used internally by Enterprise Java Beans and CORBA Tools and created with randomly-generated passwords 'INVALID_ENCRYPTED_PASSWORD'.
These 3 scripts are launched by init_jis.sql script to install the Oracle Servlet Engine (OSE). Changing their passwords would prevent the ORB from working. This is supposed to change in a future version so that you can change their password. |
||
| Username | Default Password | Account Description |
| AURORA$ORB$UNAUTHENTICATED | <Random> | Description: Create the public user for the Aurora/ORB. This is the identity any non-validated ORB client will run as. This is the user for users who don't authenticate in the Aurora/ORB
Created By: jisorb.sql |
| AURORA$JIS$UTILITY$ | <Random> | Description: Create the public user for the Aurora/ORB. This is the identity any non-validated ORB client will run as. This is the user for users who don't authenticate in the Aurora/ORB
Created By: jisbgn.sql |
| OSE$HTTP$ADMIN | <Random> | Description: Create the public user for the Aurora/ORB. This is the identity any non-validated ORB client will run as. This is the user for users who don't authenticate in the Aurora/ORB
Created By: jishausr.sql |
| Sample Schemas | ||
| Username | Default Password | Account Description |
| SCOTT | tiger | Well known and often referenced sample schema. Everyone should know about the magical emp and dept tables. VERY MANY examples in Oracle docs and not only are based on this schema so You should know it!
The user should be dropped in all production databases. |
| ADAMS | ||
| JONES | ||
| CLARK | ||
| BLAKE | ||
| Oracle9i Sample Schemas | ||
| The Oracle9i Sample Schemas provides installed schemas meant to be used for demonstration purposes only. | ||
| Username | Default Password | Account Details |
| HR | hr | Human Resources schema. The Human Resources division tracks information on the company's employees and facilities. |
| OE | oe | Order Entry schema requires "Oracle Spatial" option. The Order Entry division tracks product inventories and sales of the company's products through various channels. |
| PM | pm | Product Media schema requires "Oracle JVM" and "Oracle Intermedia" options. The Product Media division maintains descriptions and detailed information on each product sold by the company. |
| SH | sh | Sales History schema requires "Oracle OLAP Services" set up. The Sales History division tracks business statistics to facilitate business decisions. |
| QS | qs | Queued Shipping schema The Shipping division manages the shipping of products to customer. The sample company has decided to test the use of messaging to manage its proposed B2B applications. |
| QS_ES | qs_es | (Eastern Shipping) |
| QS_WS | qs_ws | (Western Shipping) |
| QS_OS | qs_os | (Overseas Shipping) |
| QS_CB | qs_cb | (Customer Billing) |
| QS_CS | qs_cs | (Customer Service) |
| QS_ADM | qs_adm | (Administration) |
| QS_CBADM | qs_cbadm | (Customer Billing Administration) |
Copyright (c) 1998-2016 Jeffrey M. Hunter. All rights reserved.
All articles, scripts and material located at the Internet address of http://www.idevelopment.info is the copyright of Jeffrey M. Hunter and is protected under copyright laws of the United States. This document may not be hosted on any other site without my express, prior, written permission. Application to host any of the material elsewhere can be made by contacting me at jhunter@idevelopment.info.
I have made every effort and taken great care in making sure that the material included on my web site is technically accurate, but I disclaim any and all responsibility for any loss, damage or destruction of data or any other property which may arise from relying on it. I will in no case be liable for any monetary damages arising from such loss, damage or destruction.
Wednesday, 14-Aug-2002 00:00:00 EDT
Page Count: 419259