6 Replies Latest reply: Feb 6, 2013 12:21 AM by brunors RSS

    How user could connect SysDBA?

    988305
      Hello :)

      We Start Oracle AUDIT and Onlogon Procedure Auditing on our Database.
      We Confused, What SysDBA could connect to System. Is SysDBA Oracle User?
      In SQL*Plus has a command for this acction?

      Our On Logon PL/SQL code
      MWMWMWMWMWMWMWMWMWMWMWMWMWMWMWMWMWMWMWMW
      CREATE OR REPLACE TRIGGER logon_audit_trigger AFTER LOGON ON DATABASE
      ...
      insert into logon_log
      (user_id ,
      session_id ,
      sid ,
      serial# ,
      host ,
      ip_address ,
      last_action ,
      last_module ,
      logon_day ,
      logon_time ,
      logoff_day ,
      logoff_time ,
      elapsed_minutes,
      elapsed_seconds)
      values(
      user,
      sys_context('USERENV','SESSIONID'),
      sys_context('USERENV','SID'),
      dbms_debug_jdwp.current_session_serial,
      sys_context('USERENV','HOST'),
      sys_context('USERENV','IP_ADDRESS'),
      action_name,
      module_name,
      lo_dt,
      to_char(lo_dt, 'hh24:mi:ss'),
      null,
      null,
      null,
      null
      );

      MWMWMWMWMWMWMWMWMWMWMWMWMWMWMWMWMWMWMWMW
      Select * From logon_log
      MWMWMWMWMWMWMWMWMWMWMWMWMWMWMWMWMWMWMWMW
      USER_ID SESSION_ID SID SERIAL# HOST IP_ADDRESS LAST_MODULE LOGON_DAY
      JOHN 393900 282 1186 ERO\APPS 192.168.1.103 frmweb.exe 1/31/2013 9:27:49 AM
      JOHN 393903 189 1005 ERO\SECC 192.168.1.110 SQL*Plus 1/31/2013 9:28:12 AM
      JOHN 393929 167 288 ERO\SECC 192.168.1.110 plsqldev.exe 1/31/2013 9:38:37 AM
      JOHN 393930 198 858 ERO\SECC 192.168.1.110 plsqldev.exe 1/31/2013 9:38:37 AM
      JOHN 393983 179 6066 ERO\SECC 192.168.1.110 frmbld.exe 1/31/2013 9:58:21 AM
      JOHN 393987 182 231 ERO\SECC 192.168.1.110 frmbld.exe 1/31/2013 9:59:17 AM
      JOHN 393941 278 1429 ERO\SECC 192.168.1.110 plsqldev.exe 1/31/2013 9:42:26 AM
      JOHN 394060 305 1337 ERO\SECC 192.168.1.110 plsqldev.exe 1/31/2013 10:36:34 AM
      JOHN 394129 261 5236 ERO\SECC 192.168.1.110 plsqldev.exe 1/31/2013 11:16:40 AM
      JOHN 394196 269 783 ERO\SECC 192.168.1.110 SQL*Plus 1/31/2013 11:58:20 AM
      JOHN 394199 309 701 ERO\APPS 192.168.1.103 frmweb.exe 1/31/2013 12:00:04 PM
      JOHN 394240 196 578 ERO\SECC 192.168.1.110 SQL*Plus 1/31/2013 12:28:53 PM
      JPHN 394243 248 702 ERO\SECC 192.168.1.110 frmbld.exe 1/31/2013 12:30:56 PM
      SysDBA 394249 196 580 ERO\SECC 192.168.1.110 1/31/2013 12:31:56 PM
      JOHN 394252 248 704 ERO\SECC 192.168.1.110 frmbld.exe 1/31/2013 12:32:57 PM
      JOHN 394259 248 706 ERO\SECC 192.168.1.110 frmbld.exe 1/31/2013 12:35:29 PM
      JOHN 394263 196 587 ERO\SECC 192.168.1.110 SQL*Plus 1/31/2013 12:36:49 PM
      SysDBA 394264 196 589 ERO\SECC 192.168.1.110 1/31/2013 12:37:07 PM

      Why UserID is SysDBA?

      Edited by: user4282362 on Jan 31, 2013 2:17 AM