Physical Dataguard Password change

September 14, 2009
Tags:

Oracle Performs redo shipping and authentication services between the primary and the standby using Password files and if your security protocols dictate a sys password change  you will start having issues with stopped log shipping with errors like .

Error 1017 received logging on to the standby
————————————————————
Check that the primary and standby are using a password file
and remote_login_passwordfile is set to SHARED or EXCLUSIVE,
and that the SYS password is same in the password files.
returning error ORA-16191
————————————————————

The solution to fixing thiscan be

1. Open the physical Standby  read only  and change the sys password.

2. Use orapwd to create anew password file.

3. ship/sftp the password file from the primary.

11g Brings  a new twist to options 1 and 2 .

SEC_CASE_SENSITIVE_LOGON=TRUE by default in Oracle 11g which means the option 1 and 2 will generate different hash when done on different systems

Metalink note #462219.1 provides an explanation and the solution to this problem. The solution includes a new option in the orapwd utility which allows you to ignorecase.

$ORAPWD FILE=filename [ENTRIES=numusers] [FORCE={Y|N}] [IGNORECASE={Y|N}] [NOSYSDBA={Y|N}

The other solution includes  changing case sensitivity by changing SEC_CASE_SENSITIVE_LOGON=FALSE . This is a dynamic parameter.

Please evaluate and implement all solutions based on your company security practice.

Related posts:

  1. Applying Datafile resize in logical standby Well,with the record_unsupported_operations-true . I was able to capture the...
  2. User Defined Metrics in Oracle EM Grid Control Everyone has various ways to manage scripts. I have found...
  3. Using EMC Clones and IBM ESS FlashCopy to Backup your Database Lets Face it. Todays Databases are getting bigger and bigger...
  4. 11GR2 is out OK So the buzz around the Oracle World is that...
  5. Dataguard notes Part 1 Over the recent weeks pretty much most of my time...

Related posts brought to you by Yet Another Related Posts Plugin.

Filed under:
dataguard, oracle by fuadar

  • Thanks for the info, and for time being I will stick to the Option 3.
  • chandrapabba
    Ok, then check this out as regards your option 1:

    sys@DOE01:11g> Select open_mode, database_role from v$database;

    OPEN_MODE DATABASE_ROLE
    ---------- ----------------
    READ ONLY PHYSICAL STANDBY

    1 row selected.

    sys@DOE01:11g> alter user sys identified by temppass;
    alter user sys identified by temppass
    *
    ERROR at line 1:
    ORA-00604: error occurred at recursive SQL level 1
    ORA-16000: database open for read-only access


    sys@DOE01:11g>
  • fuadar
    Agreed.
    The behaviour of a read only database does not allow for passwords to be changedin physical standby;
    Option #1 thus can only be used if the database is open for read write .
    i will update the post . Thanks
  • fuadar
    Thanks .
    I was referring to 1,2 and 3 as independent options not linked to each other
  • chandrapabba
    Actually, you just need step 3 (which is copying over the file from primary to standby)...that should do it...even valid for 11g irrespective of SEC_CASE_SENSITIVE_LOGON setting.
blog comments powered by Disqus