Oracle startup in restricted mode
admin
2023-04-16 01:02:00
0
关于OCP的小知识点,实例受限启动,实例启动的知识点很多,也是OCP学习的重点,需要多看官方文档和多做测试。
Restricting Access to an Instance at Startup 
--实例启动限制

You can start an instance, and optionally mount and open a database, in restricted mode so that the instance is available only to administrative personnel (not general database users).
Use this mode of instance startup when you must accomplish one of the following tasks:
--实例启动限制模式适用的场景,一定是我们不希望其他连接访问数据,对数据库数据进行改动,数据备份,loader,临时阻止已经升级迁移会常常使用到。

•Perform an export or import of data
•Perform a data load (with SQL*Loader)
•Temporarily prevent typical users from using data
•Perform certain migration or upgrade operations

Typically, all users with the CREATE SESSION system privilege can connect to an open database. Opening a database in restricted mode allows database access only to users with both the CREATE SESSION and RESTRICTED SESSION system privilege. Only database administrators should have the RESTRICTED SESSION system privilege. Further, when the instance is in restricted mode, a database administrator cannot access the instance remotely through an Oracle Net listener, but can only access the instance locally from the system that the instance is running on. 

The following command starts an instance (and mounts and opens the database) in restricted mode:

小实验:
[root@11g-ocp ~]# su - oracle
<11g-ocp:orcl:/home/oracle>$sqlplus / as sysdba

SQL*Plus: Release 11.2.0.4.0 Production on Wed Dec 12 18:12:11 2018

Copyright (c) 1982, 2013, Oracle.  All rights reserved.

Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production
With the Partitioning, Automatic Storage Management, OLAP and Real Application Testing options

SQL> startup restrict force 
ORACLE instance started.
--限制模式启动

Total System Global Area 1870647296 bytes
Fixed Size                  2254304 bytes
Variable Size             503319072 bytes
Database Buffers         1358954496 bytes
Redo Buffers                6119424 bytes
Database mounted.
Database opened.
SQL> drop user roidba;
--删除测试用户

User dropped.

SQL> create user roidba identified by roidba;
--创建测试用户

User created.

SQL> grant connect,resource to roidba;
--授权访问

Grant succeeded.

SQL> conn roidba/roidba;
ERROR:
ORA-01035: ORACLE only available to users with RESTRICTED SESSION privilege
--登陆报错,缺少系统权限restricted session 

Warning: You are no longer connected to ORACLE.
SQL> conn / as sysdba
Connected.
SQL> grant restricted session to roidba;

Grant succeeded.
--授予系统权限restricted session 

SQL> conn roidba/roidba
Connected.
--使用roidba连接数据库,成功

SQL> conn / as sysdba
Connected.
SQL> revoke restricted session from roidba;
--收回权限

Revoke succeeded.

SQL> alter system disable restricted session;
--取消限制

System altered.

SQL> conn roidba/roidba;
--收回权限和取消限制抵消,可以继续登陆
Connected.
SQL> 

这些都是OCP的小知识点,大家有时间多做测试。一定要多动手,多看文档,多思考。

相关内容

热门资讯

徐巧芯剖析赖清德:最怕自己丢掉... 海峡导报综合报道 大罢免投票一周年纪念活动26日举行,台北市长蒋万安出席并怒轰,民进党一年过后仍没有...
中国红十字会总会紧急向广东调拨... 记者从中国红十字会总会了解到,针对台风“红霞”给广东造成的灾情,中国红十字会总会启动四级应急响应,紧...
这些少年,正被“毒蛋”围猎 李梦抽了几口电子烟,吐出了白色的烟雾,有一股浓烈的水果香味。随后,她看着自己握电子烟的手,跟身边人说...
蒋万安号召“倒阁”,卢秀燕认为... 海峡导报综合报道 台北市长蒋万安27日抛出震撼议题,表示多名民代向他提议推动“倒阁”,要求台行政机构...
特朗普将在白宫会见两位重要客人 俄乌战争仍未结束,美伊冲突又有升级风险。在此背景下,美国总统特朗普将在白宫接见乌克兰和以色列领导人。...
新租客打扫卧室柜子上掉落4万元... 近日,莲前西路某小区内,张倩签下一套房子的租赁合同。当天上午,她带着12岁的大女儿周馨怡和11岁的小...
六部门通告:禁止涉军队退役报废... 关于禁止涉军队退役报废装备销售活动的通告近年来,部分经营者在线上线下公开销售涉及我军退役报废装备(指...
九寨沟景区发生泥石流,部分道路... 7月26日,九寨沟风景名胜区管理局发布泥石流灾害通报:2026年7月26日15时50分,九寨沟景区局...
空调26度不凉是什么原因 从空调内部元器件来说,不凉的原因有可能是温度传感器出现故障了,也有可能是空调压缩机或者铜管出现问题,...
鲸鸿动能携手香港国际机场、鸿蒙...   2026 年 7 月 25 日,十余位鸿蒙车主组成的车队从珠海出发,经港珠澳大桥通关抵达香港国际...