Database Users (SAP Library - Database Administration (Oracle) with SAPDBA)

Database Users

You can display information about the current operating system and database users using the menu option User and Security.

As a security warning, the system informs you if the database user passwords are still set to the default values.

You can also display the roles of the default users SYS , SYSTEM , OPS$ORAC11 and SAPR3 . The users SAPR3 and OPS$ORAC11 must not have a DBA role while SYS and SYSTEM must have the DBA role.

Changing the Password of the Database User

Use the following SAPDBA command to change and encrypt the password of the database user SAPR3 .

sapdba -sapr3 <sapr3_password>

The official SAP encryption routine is used to encrypt the password.

The option -sapr3 <sapr3_password> does the following:

The SAPR3 password is changed as specified. If the database user SAPR3 does not yet exist, it is created with this password in the database.

The new SAPR3 password is entered in the table OPS$<SID>ADM.SAPUSER.

If the previous entry in this table was not encrypted, then the new password is also entered without being encrypted.
If the previous entry was encrypted, then the new password is also encrypted when it is entered.
If the previous entry was both encrypted and not encrypted, then the new password is also entered in this way.
If no password exists, then the new password is encrypted when it is entered.

You can also change the password of the database user SAPR3 or other database users interactively in SAPDBA. If you change the passwords of database users other than SAPR3 , then the new password is not entered in the table OPS$<SID>ADM.SAPUSER. To change the password of a database user interactively, proceed as follows:

Start SAPDBA using the command
sapdba [-u system/<system_password>]

In the main menu, choose m(User and security) ® p(Change password) .

a(Password entering mode: invisible/visible)

b(User [default user is SAPR3])

c(Change password)

When you change the password interactively, you can enter the new password hidden, as long as it is no longer than eight characters (default setting).