Orignally posted in Sep 2009
---
Oracle Performs redo shipping and authentication services between the primary and the standby using Password files and if your security protocols dictate a sys password change you will start having issues with stopped log shipping with errors like .
Error 1017 received logging on to the standby
------------------------------------------------------------
Check that the primary and standby are using a password file
and remote_login_passwordfile is set to SHARED or EXCLUSIVE,
and that the SYS password is same in the password files.
returning error ORA-16191
------------------------------------------------------------
The solution to fixing thiscan be
1. Open the physical Standby read only and change the sys password.
2. Use orapwd to create anew password file.
3. ship/sftp the password file from the primary.
11g Brings a new twist to options 1 and 2 .
SEC_CASE_SENSITIVE_LOGON=TRUE by default in Oracle 11g which means the option 1 and 2 will generate different hash when done on different systems
Metalink note #462219.1 provides an explanation and the solution to this problem. The solution includes a new option in the orapwd utility which allows you to ignorecase.
$ORAPWD FILE=filename [ENTRIES=numusers] [FORCE={Y|N}] [IGNORECASE={Y|N}] [NOSYSDBA={Y|N}
The other solution includes changing case sensitivity by changing SEC_CASE_SENSITIVE_LOGON=FALSE . This is a dynamic parameter.
Please evaluate and implement all solutions based on your company security practice.
