Sunday, February 13, 2011

Physical Dataguard Password Change

 Orignally posted in Sep 2009
Oracle Performs redo shipping and authentication services between the primary and the standby using Password files and if your security protocols dictate a sys password change  you will start having issues with stopped log shipping with errors like .
Error 1017 received logging on to the standby
Check that the primary and standby are using a password file
and remote_login_passwordfile is set to SHARED or EXCLUSIVE,
and that the SYS password is same in the password files.
returning error ORA-16191
The solution to fixing thiscan be
1. Open the physical Standby  read only  and change the sys password.
2. Use orapwd to create anew password file.
3. ship/sftp the password file from the primary.
11g Brings  a new twist to options 1 and 2 .
SEC_CASE_SENSITIVE_LOGON=TRUE by default in Oracle 11g which means the option 1 and 2 will generate different hash when done on different systems
Metalink note #462219.1 provides an explanation and the solution to this problem. The solution includes a new option in the orapwd utility which allows you to ignorecase.

The other solution includes  changing case sensitivity by changing SEC_CASE_SENSITIVE_LOGON=FALSE . This is a dynamic parameter.
Please evaluate and implement all solutions based on your company security practice.

Google Search