Oracle startup in restricted mode
admin
2023-04-16 01:02:00
0
关于OCP的小知识点,实例受限启动,实例启动的知识点很多,也是OCP学习的重点,需要多看官方文档和多做测试。
Restricting Access to an Instance at Startup 
--实例启动限制

You can start an instance, and optionally mount and open a database, in restricted mode so that the instance is available only to administrative personnel (not general database users).
Use this mode of instance startup when you must accomplish one of the following tasks:
--实例启动限制模式适用的场景,一定是我们不希望其他连接访问数据,对数据库数据进行改动,数据备份,loader,临时阻止已经升级迁移会常常使用到。

•Perform an export or import of data
•Perform a data load (with SQL*Loader)
•Temporarily prevent typical users from using data
•Perform certain migration or upgrade operations

Typically, all users with the CREATE SESSION system privilege can connect to an open database. Opening a database in restricted mode allows database access only to users with both the CREATE SESSION and RESTRICTED SESSION system privilege. Only database administrators should have the RESTRICTED SESSION system privilege. Further, when the instance is in restricted mode, a database administrator cannot access the instance remotely through an Oracle Net listener, but can only access the instance locally from the system that the instance is running on. 

The following command starts an instance (and mounts and opens the database) in restricted mode:

小实验:
[root@11g-ocp ~]# su - oracle
<11g-ocp:orcl:/home/oracle>$sqlplus / as sysdba

SQL*Plus: Release 11.2.0.4.0 Production on Wed Dec 12 18:12:11 2018

Copyright (c) 1982, 2013, Oracle.  All rights reserved.

Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production
With the Partitioning, Automatic Storage Management, OLAP and Real Application Testing options

SQL> startup restrict force 
ORACLE instance started.
--限制模式启动

Total System Global Area 1870647296 bytes
Fixed Size                  2254304 bytes
Variable Size             503319072 bytes
Database Buffers         1358954496 bytes
Redo Buffers                6119424 bytes
Database mounted.
Database opened.
SQL> drop user roidba;
--删除测试用户

User dropped.

SQL> create user roidba identified by roidba;
--创建测试用户

User created.

SQL> grant connect,resource to roidba;
--授权访问

Grant succeeded.

SQL> conn roidba/roidba;
ERROR:
ORA-01035: ORACLE only available to users with RESTRICTED SESSION privilege
--登陆报错,缺少系统权限restricted session 

Warning: You are no longer connected to ORACLE.
SQL> conn / as sysdba
Connected.
SQL> grant restricted session to roidba;

Grant succeeded.
--授予系统权限restricted session 

SQL> conn roidba/roidba
Connected.
--使用roidba连接数据库,成功

SQL> conn / as sysdba
Connected.
SQL> revoke restricted session from roidba;
--收回权限

Revoke succeeded.

SQL> alter system disable restricted session;
--取消限制

System altered.

SQL> conn roidba/roidba;
--收回权限和取消限制抵消,可以继续登陆
Connected.
SQL> 

这些都是OCP的小知识点,大家有时间多做测试。一定要多动手,多看文档,多思考。

相关内容

热门资讯

美防长称美伊停火协议依然有效 △赫格塞思(资料图)当地时间5月12日,美国国防部长赫格塞思表示,他们针对伊朗问题的所有情况都制定了...
特朗普二度来华,五大博弈看点,... 就在5月11日,外交部官宣了一则重磅消息:应中国邀请,美国总统特朗普将于5月13日至15日开启访华行...
科学家预测:“哥斯拉级”厄尔尼... 科学家近日发出警告,太平洋上空正在形成一种被称为“哥斯拉”级的罕见厄尔尼诺气候模式。有科学家预测,这...
200亿美金估值的可灵,值母公... 文 | 影子备忘录 要说今年科技圈最火的赛道,AI短剧绝对排得上号。一部AI仿真人短剧,3人团队、...
多名中国公民在越南乘机遗失财物... 近日,多名中国公民反映在越乘机过程中财物遗失,中国驻胡志明市总领馆提醒中国公民注意:一、强化防范意识...
电视机尺寸一览表70寸长宽 电视机尺寸一览表70寸长宽:一般液晶电视显示屏都是16比9,70寸就是说客它对角线长70寸是106....
东莞一社区推出生育奖励方案,二... 极目新闻记者 柳之萌近日,广东东莞万江街道谷涌社区出台生育奖励方案,对符合条件的二孩家庭一次性奖励1...
80寸液晶电视尺寸长宽多少厘米 80寸液晶电视尺寸长宽多少厘米:80寸的液晶电视大概为181x111厘米,即长度大概在181厘米,宽...
石膏线一般用多久会掉 大家在装修客厅吊顶的时候,一般都会用石膏线来装。石膏线的施工非常方便,而且装修价格也比较便宜,所以很...
10公分石膏线下挂尺寸 10公分石膏线下挂,大概在8公分左右,这样排出来的石膏线才会比较好看,而且边缘也会比较整齐一些,如果...