Oracle startup in restricted mode
admin
2023-04-16 01:02:00
0次
关于OCP的小知识点,实例受限启动,实例启动的知识点很多,也是OCP学习的重点,需要多看官方文档和多做测试。
Restricting Access to an Instance at Startup 
--实例启动限制

You can start an instance, and optionally mount and open a database, in restricted mode so that the instance is available only to administrative personnel (not general database users).
Use this mode of instance startup when you must accomplish one of the following tasks:
--实例启动限制模式适用的场景,一定是我们不希望其他连接访问数据,对数据库数据进行改动,数据备份,loader,临时阻止已经升级迁移会常常使用到。

•Perform an export or import of data
•Perform a data load (with SQL*Loader)
•Temporarily prevent typical users from using data
•Perform certain migration or upgrade operations

Typically, all users with the CREATE SESSION system privilege can connect to an open database. Opening a database in restricted mode allows database access only to users with both the CREATE SESSION and RESTRICTED SESSION system privilege. Only database administrators should have the RESTRICTED SESSION system privilege. Further, when the instance is in restricted mode, a database administrator cannot access the instance remotely through an Oracle Net listener, but can only access the instance locally from the system that the instance is running on. 

The following command starts an instance (and mounts and opens the database) in restricted mode:

小实验:
[root@11g-ocp ~]# su - oracle
<11g-ocp:orcl:/home/oracle>$sqlplus / as sysdba

SQL*Plus: Release 11.2.0.4.0 Production on Wed Dec 12 18:12:11 2018

Copyright (c) 1982, 2013, Oracle.  All rights reserved.

Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production
With the Partitioning, Automatic Storage Management, OLAP and Real Application Testing options

SQL> startup restrict force 
ORACLE instance started.
--限制模式启动

Total System Global Area 1870647296 bytes
Fixed Size                  2254304 bytes
Variable Size             503319072 bytes
Database Buffers         1358954496 bytes
Redo Buffers                6119424 bytes
Database mounted.
Database opened.
SQL> drop user roidba;
--删除测试用户

User dropped.

SQL> create user roidba identified by roidba;
--创建测试用户

User created.

SQL> grant connect,resource to roidba;
--授权访问

Grant succeeded.

SQL> conn roidba/roidba;
ERROR:
ORA-01035: ORACLE only available to users with RESTRICTED SESSION privilege
--登陆报错,缺少系统权限restricted session 

Warning: You are no longer connected to ORACLE.
SQL> conn / as sysdba
Connected.
SQL> grant restricted session to roidba;

Grant succeeded.
--授予系统权限restricted session 

SQL> conn roidba/roidba
Connected.
--使用roidba连接数据库,成功

SQL> conn / as sysdba
Connected.
SQL> revoke restricted session from roidba;
--收回权限

Revoke succeeded.

SQL> alter system disable restricted session;
--取消限制

System altered.

SQL> conn roidba/roidba;
--收回权限和取消限制抵消,可以继续登陆
Connected.
SQL> 

这些都是OCP的小知识点,大家有时间多做测试。一定要多动手,多看文档,多思考。

相关内容

热门资讯

空调连续工作多久需要停机休息 空调连续工作的时间取决于多个因素,包括空调的型号、功率、使用环境和维护情况等。一般来说,空调可以连续...
空调哪个符号是除湿的 空调除湿功能通常用一个水滴形状的符号表示。不同品牌和型号的空调遥控器可能会有所差异,但一般来说,除湿...
格力空调多长时间加一次氟利昂 1、一般情况下,空调对氟利昂的使用量是非常小的,所以在空调使用了四年左右的时候再考虑加也没问题。2、...
空调用多长时间需要加氟一次 一般情况下是五年。当出现以下这几种情况时,空调才需要加氟。1、空调的室内机和室外机各有两个接口,当接...
格调生活·C标思享荟:卡萨帝在... 9月12日的郑州龙湖金融岛,夜风轻拂,灯光璀璨。“C标时刻共传奇——卡萨帝思享荟暨20周年品牌盛典郑...
品牌价值破千亿、高端份额持续领... 9月12日,“C标时刻共传奇——卡萨帝思享荟暨20周年品牌盛典郑州站”在郑州龙湖金融岛举办。2026...
空调主板坏了修800还是换新的 空调主板坏了是修还是换新,需要考虑多个因素,以下是一些建议:1. 维修成本:如果维修费用较低,比如 ...
空调开多久需要休息多长时间 问题:空调开多久需要休息多长时间回答:1、在使用空调的过程中,一般空调开7~8个小时左右需要休息2~...
中央空调多长时间清洗一次 1、一般空调开机前清洗一次即可,空调开机中间时段再清洗一次,空调关机时清洗一次,这样比较合理。2、空...
中央空调氟利昂多久加一次 看空调制热和制冷程度,很多人的观点认为氟利昂必须一年放一次,其实这个观点是错误的,理解上面有点偏差,...