Oralce 系统用户介绍

Oralce DB 系统用户介绍

Doc, MyNote Add comments

二 262012

之前总是会有人向我问到数据库中的某某用户是系统用户还是什么，有什么作用，可不可以删除等之类的问题，今天就结合MOS里的一篇文档简单总结下，与各位分享。

我们通常最熟悉的用户有sys和system，sys是超级用户，通常DBA在进行数据库维护性操作时都是用的此用户；system的权限较sys次之，也是在日常工作中会经常用的。另外还有perfstat用户，perfstat是9I里的statspack组件的用户，hr和scott用户分别是Oracle9i和10g里的sampleuser。

另外一些其他的用户，见下：

List of users created at database creation

By default, are automatically created during databasecreation:

SCOTT by script $ORACLE_HOME/rdbms/admin/utlsampl.sql

OUTLN by script $ORACLE_HOME/rdbms/admin/sql.bsq

Optionally:

DBSNMP if Enterprise Manager Intelligent Agent is installed

MGMT_VIEW is part of the DB Control Repository

SYSMAN is part of the DB Control Repository and Grid

TRACESVR if Enterprise Manger is installed

AURORA$ORB$UNAUTHENTICATED \

AURORA$JIS$UTILITY$ – if Oracle Servlet Engine(OSE) is installed

OSE$HTTP$ADMIN /

MDSYS if Oracle Spatial option is installed

MDDATA if Oracle Spatial option is installed

ORDSYS if interMedia Audio option is installed

ORDPLUGINS if interMedia Audio option is installed

SI_INFORMIN_SCHEMA if interMedia option is installed

CTXSYS if Oracle Text option is installed

WKSYS if Oracle Ultra Search option is installed

WKUSER(9i)/WK_TEST(10g) if Oracle Ultra Search option isinstalled

REPADMIN if Replication Option is installed

LBACSYS if Oracle Label Security option is installed

DVF if Oracle Database Vault option is installed

DVSYS if Oracle Database Vault option is installed

ODM if Oracle Data Mining option is installed

ODM_MTR idem

DMSYS(10g) if Oracle Data Mining 10g option is installed

DMSYS in 10g version to replace ODM and ODM_MTR schemas

OLAPSYS if OLAP option is installed

WMSYS if Oracle workspace Manager script owmctab.plb isexecuted.

ANONYMOUS if catqm.sql catalog script for SQL XML management isexecuted

EXFSYS if the Expression Filter Feature repository

DIP for provisioning event processing

TSMSYS Transparent Session Migration

Note

If you have a already the 9i sample schemas(hr,oe,pm,etc.) andyou don’t need them,you can removed them safely and without damageto the database.

a) The SCOTT user is created by default to provide sample usertables.You can alter the password.

To create the default tables,run the script

$ORACLE_HOME/sqlplus/demo/demobld.sql.

To drop the objects,run

$ORACLE_HOME/sqlplus/demo/demodrop.sql connected as SCOTT.

b) The OUTLN(OUTLiNes) users is automatically created duringinstallation of Oracle8i and Oracle9i.OUTLN is the schema of StoredOutlines.

The package OUTLN_PKG is used to manage stored outlines andcategories.OUTLN is the owner of tables OL$,OL$HINTS(Oracle8i) aswell as OL$NODES(Oracle9i) used to store hints for storedoutlines.

You can change the password for the OUTLN schema just as for theSYS and SYSTEM schemas.

c) The DBSNMP user can be dropped by running the catnsnmp.sqlscript.If you need to re-create it,run the catsnmp.sqlscript.Ensure that there are no jobs running or schedualed inOracle Enterprise Manager before you run the script.

MGMT_VIEW is part of the DB Control Repository,it is created byrunning the script $OH/sysman/admin/emdrep/bin/RepManger,thepassword is autogenerated(it does not have a fixed or defaultvalue).

SYSMAN belongs to the same feature(see Note:270510.1 fordetails):it is the schema of the Grid OMS repository of the LOGEnterprise Manager Grid.

d) The TRACESVR user is created by$ORACLE_HOME/otrace/admin/otrcsvr.sql during the installation ofOEM.

If you change the TRACESVR user’s password,you will not be ableto do OTrace connections.This user is only used with 7.x Databasewhere stored procedures are used by OTrace to start and stop datacollections.The TRACESVR stored procedure mechanism is no longerused to control OTrace collections starting with Oracle 8.xDatabase.Therefore in this case you can change the password(or dropthat user)

e) The three JSERV accounts (AURORA$JIS$UTILITY$,AURORA$ORB$UNAUTHENTICATED and OSE$HTTP$ADMIN) are used internallyby Enterprise Java Beans and CORBA Tools and created withrandomly-generated passwords 'INVALID_ENCRYPTED_PASSWORD'.

-> jisorb.sql creates user AURORA$ORB$UNAUTHENTICATED.

-> jisbgn.sql creates user AURORA$JIS$UTILITY$

-> jishausr.sql creates user OSE$HTTP$ADMIN

These 3 scripts are launched by init_jis.sql script to installthe Oracle Servlet Engine (OSE)

Changing their passwords would prevent the ORB from working.

This is supposed to change in a future version so that you canchange their

password.

f) MDSYS, MDDATA, ORDSYS, CTXSYS, ORDPLUGINS andSI_INFORMTN_SCHEMA are created to support Oracle Intermedia. Thedefault password for the ORDSYS and SI_INFORMTN_SCHEMA users duringautomatic installation is 'ORDSYS', and for ORDPLUGINS is'ORDPLUGINS'.The schema MDDATA is used by Oracle Spatial forstoring Geocoder and router data Geocoding is the process ofconverting tables of address data into standardized address,location, and possibly other data.

g) WKSYS is a privileged Oracle user who owns the Ultra Searchdata dictionary and internal objects. Ultra Search uses the WKSYSuser for storing Ultra Search packages and metadata. WKUSER(9i)/WK_TEST (10g) is a test user.

h) REPADMIN user: it is usual to have a separate user for thereplication administrator to protect master groups from beingmanaged by snapshot administrators.This user configures thereplicated environment and performs administration of allreplicated schemas / groups.

i) LBACSYS user: the Oracle Label Security administratorusername.

j) DVSYS schema stores the database objects needed to processOracle data for Oracle Database Vault. This schema contains theroles, views, accounts, functions, and other database objects thatOracle Database Vault uses.

k) The DVF schema contains public functions to retrieve (at runtime) the factor values set in the Oracle Database Vault accesscontrol configuration.

l) ODM user: who performs data mining operations. In 10g, a usercan be created with a chosen name.

m) ODM_MTR user: the account associated with the data repositoryfor data mining sample programs.

In 10g, DMSYS is the schema for the data repository.

n) OLAPSYS user: identity used to create OLAP metadatastructures.

o) WMSYS user: used to store all the metadata information forOracle Workspace Manager.

p) ANONYMOUS user: allows HTTP access to Oracle XML DB.

q) XDB user: Used for storing Oracle XML DB data andmetadata.

r) EXFSYS is the Expression Filter Feature repository (seeNote:258618.1): the user is created with the script exfsys.sql thatasks for a password.

s) DIP is created in rdbms/admin/catdip.sql (password is DIP):for provisioning event processing

t) TSMSYS is created in rdbms/admin/cattsm.sql for TransparentSession Migration

u) The Oracle9i Sample Schemas provides installed schemas meantto be used for demonstration purposes only:

-> HR: Human Resources schema The Human Resources divisiontracks information on the company's employees and facilities.

-> OE: Order Entry schema requires "Oracle Spatial" option.The Order Entry division tracks product inventories and sales ofthe company?s products through various channels.

-> PM: Product Media schema requires "Oracle JVM" and "OracleIntermedia" options.The Product Media division maintainsdescriptions and detailed information on each product sold by thecompany.

-> SH: Sales History schema requires "Oracle OLAP" set up.The Sales History division tracks business statistics to facilitatebusiness decisions.

-> QS: Queued Shipping schema The Shipping division managesthe shipping of products to customer.The sample company has decidedto test the use of messaging to manage its proposed B2Bapplications.

-> QS_ES (Eastern Shipping)

-> QS_WS (Western Shipping)

-> QS_OS (Overseas Shipping)

-> QS_CB (Customer Billing)

-> QS_CS (Customer Service)

-> QS_ADM (Administration)

-> QS_CBADM (Customer Billing Administration)

If any of the user accounts is locked and expired uponinstallation and needs to be activated, unlock and assign a newmeaningful password to that user account:

SQL> ALTER USER "schema_name" IDENTIFIED BY "newpass" ACCOUNTUNLOCK;

资料文档：Oracle Created Database Users: Password, Usage and FilesReferences [ID 160861.1]