{"id":8043,"date":"2016-05-21T17:46:18","date_gmt":"2016-05-21T15:46:18","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/"},"modified":"2016-05-21T17:46:18","modified_gmt":"2016-05-21T15:46:18","slug":"sys-password-on-oracle-cloud-service-managed-database","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/","title":{"rendered":"SYS password on Oracle Cloud Service managed database"},"content":{"rendered":"

By Franck Pachot<\/h2>\n

.
\nWhen you create a DBaaS on the Oracle Cloud services you have to provide an administration password in the database configuration form. You do not need a password to connect to the VM. You use SSH key for it: on creation you provide the public key that will allow you to connect as the oracle user or the opc user (which can ‘sudo su’). But for the database you need to provide a password which will be the password for SYS and SYSTEM. This password can be used by yourself, or by the DBaaS management. Let’s see how it is stored and how to change it.
\n
\nI’m talking about managed DBaaS here, not virtual image, because in virtual image you create and administrate the database yourself.<\/p>\n

\"CapturePass0\"<\/a><\/p>\n

You have to define the ‘administrator password’ which will be used for SYS ans SYSTEM (the -sysPassword and -systemPassword parameters of DBCA). This password must obey the <\/p>\n

\"CapturePass1\"<\/a><\/p>\n

Where is the password?<\/h3>\n

When I provide a password, I don’t want it to be exposed, even within the system that is protected by this password. I may use the same password, or same pattern, for different systems and I don’t want any user to see my password in clear. In the database, the password is not stored. It is immediately hashed and password verification is done with the hashed value. In the orapw file, it is encrypted. If it has to be used by some programs, I expect to use a wallet.<\/p>\n

I want to be sure that the password I’ve provided is not stored anywhere, let’s check:<\/p>\n

\n[oracle@CDB-dg01 ~]$ grep -R Ach1z0 \/var\/opt\/oracle 2>\/dev\/null\n\/var\/opt\/oracle\/dg\/observer.sh:connect sys\/Ach1z0#d\n\/var\/opt\/oracle\/ocde\/assistants\/dg\/tmp\/18267.odgda.json:{\"Standby\":[{\"dg\":{\"fsfo_enabled\":null,\"vmpresent\":\"yes\",\"spfile\":{\"db_unique_name\":\"CDB_02\"},\"protection_mode\":null},\"dborch\":{\"db_sid\":\"CDB\",\"vm_sshkeys\":\"\/home\/oracle\/.ssh\/id_rsa\",\"vm_name\":\"CDB-dg02-nat\"}}],\"Primary\":{\"dg\":{\"fsfo_enabled\":null,\"vmpresent\":\"yes\",\"spfile\":{\"db_unique_name\":\"CDB_01\"},\"protection_mode\":null},\"dborch\":{\"db_version\":\"12102\",\"db_sid\":\"CDB\",\"vm_sshkeys\":\"\/home\/oracle\/.ssh\/id_rsa\",\"vm_name\":\"CDB-dg01-nat\",\"db_passwd\":\"Ach1z0#d\"}},\"tool_defaults\":{\"octl_cmd\":\"\",\"tmpdir\":\"\/var\/opt\/oracle\/ocde\/assistants\/dg\/tmp\/\",\"dborch_cmd\":\"\",\"tools_dir\":\"..\"}}\n\/var\/opt\/oracle\/log\/dgcc\/dgcc.log:                                       'db_passwd' => 'Ach1z0#d',\n\/var\/opt\/oracle\/log\/dgcc\/dgcc_2016-05-20_06:49:28.log:                                       'db_passwd' => 'Ach1z0#d',\n\/var\/opt\/oracle\/log\/ocde\/ocde-cmd.log:                                       'db_passwd' => 'Ach1z0#d',\n\/var\/opt\/oracle\/log\/ocde\/ocde_2016-05-20_06:31:45.log:                                       'db_passwd' => 'Ach1z0#d',\n\/var\/opt\/oracle\/log\/ocde\/ocde.log:                                       'db_passwd' => 'Ach1z0#d',\n\/var\/opt\/oracle\/log\/ocde\/ocde-cmd_2016-05-20_06:31:45.log:                                       'db_passwd' => 'Ach1z0#d',\n\/var\/opt\/oracle\/log\/creg\/creg.ini.CDB-dg02-nat:passwd=Ach1z0#d\n\/var\/opt\/oracle\/creg.ini:passwd=Ach1z0#d\n<\/code><\/pre>\n
SYS password is exposed to everybody on the server!<\/h3>\n
That’s bad. Really bad. The most important database password is exposed in configuration files, script files and log files, and some of them are readable by everybody:<\/p>\n
\n[oracle@CDB-dg01 ~]$ ls -l $(grep -lR Ach1z \/var\/opt\/oracle 2>\/dev\/null)\n-rw------- 1 oracle oinstall   2381 May 20 21:35 \/var\/opt\/oracle\/creg.ini\n-rwxr-xr-- 1 oracle oinstall    139 May 20 07:03 \/var\/opt\/oracle\/dg\/observer.sh\n-rw------- 1 oracle oinstall   2353 May 20 06:49 \/var\/opt\/oracle\/log\/creg\/creg.ini.CDB-dg02-nat\n-rw-r--r-- 1 oracle oinstall   3395 May 20 07:07 \/var\/opt\/oracle\/log\/dgcc\/dgcc_2016-05-20_06:49:28.log\nlrwxrwxrwx 1 oracle oinstall     53 May 20 06:49 \/var\/opt\/oracle\/log\/dgcc\/dgcc.log -> \/var\/opt\/oracle\/log\/dgcc\/dgcc_2016-05-20_06:49:28.log\n-rw-r--r-- 1 oracle oinstall 152448 May 20 07:11 \/var\/opt\/oracle\/log\/ocde\/ocde_2016-05-20_06:31:45.log\n-rw-r--r-- 1 oracle oinstall  82856 May 20 07:11 \/var\/opt\/oracle\/log\/ocde\/ocde-cmd_2016-05-20_06:31:45.log\nlrwxrwxrwx 1 oracle oinstall     57 May 20 06:34 \/var\/opt\/oracle\/log\/ocde\/ocde-cmd.log -> \/var\/opt\/oracle\/log\/ocde\/ocde-cmd_2016-05-20_06:31:45.log\nlrwxrwxrwx 1 oracle oinstall     53 May 20 06:31 \/var\/opt\/oracle\/log\/ocde\/ocde.log -> \/var\/opt\/oracle\/log\/ocde\/ocde_2016-05-20_06:31:45.log\n-rw-r--r-- 1 oracle oinstall    581 May 20 06:49 \/var\/opt\/oracle\/ocde\/assistants\/dg\/tmp\/18267.odgda.json\n<\/code><\/pre>\n
The scripts and logs used at creation can be removed. The script that starts observer should use a wallet. But more worrying is that creg.ini because this is where are all our service attributes. And if we change or remove the password there, the service is broken. Here is an example when I initiate a switchover from the CLOUD My Services interface after having removed the password there: <\/p>\n
\"CapturePass2\"<\/a><\/p>\n
Of course, you can still do a switchover from DGMGRL command line, but this defeats the whole purpose of a managed service.<\/p>\n
Changing SYS password<\/h3>\n
When you want to change the SYS password, you must use the DBaaS tool. You must run ‘dbaascli database changepassword’. In Data Guard, you must run it from the primary site and it takes care of everything, including the copy of orapw file, because in 12.1 (not talking about Next Generation of Oracle Database here) you have to do it manually.<\/p>\n
\n[oracle@CDB-dg02 ~]$ dbaascli database changepassword\nDBAAS CLI version 1.0.0\nExecuting command database changepassword\nEnter username whose password change is required: SYS\nEnter new  password:\nRe-enter new password:\nUnable to change password for sys\n<\/code><\/pre>\n
Humm.. let’s try with SYS in lowercase…<\/p>\n
\n[oracle@CDB-dg02 ~]$ dbaascli database changepassword\nDBAAS CLI version 1.0.0\nExecuting command database changepassword\nEnter username whose password change is required: sys\nEnter new  password:\nRe-enter new password:\nDataguard is enabled\nWarning: Permanently added 'cdb-dg02-nat,140.86.4.51' (RSA) to the list of known hosts.\nDataguard is enabled\nDataguard is enabled\nDataguard is enabled\nSuccessfully changed the password for user sys\/system\n<\/code><\/pre>\n
Okay, users must be lower case here… Good to know… And from the message SYS and SYSTEM have been changed…<\/p>\n
Wallet<\/h3>\n
You wonder why the password is in clear text in the configuration file? So do I. I would expect the use of external password file here. But wait… there is one:<\/p>\n
\n[oracle@CDB-dg01 ~]$ grep WALLET $ORACLE_HOME\/network\/admin\/sqlnet.ora\nENCRYPTION_WALLET_LOCATION = (SOURCE=(METHOD=FILE)(METHOD_DATA=(DIRECTORY=\/u01\/app\/oracle\/admin\/CDB\/tde_wallet)))\nSQLNET.WALLET_OVERRIDE = FALSE\nWALLET_LOCATION = (SOURCE=(METHOD_DATA=(DIRECTORY=\/u01\/app\/oracle\/admin\/CDB\/db_wallet))(METHOD=FILE))\n<\/code><\/pre>\n
and this wallet has credentials for SYS:<\/p>\n
\n[oracle@CDB-dg01 db_wallet]$ mkstore -wrl \/u01\/app\/oracle\/admin\/CDB\/db_wallet -listCredential\nOracle Secret Store Tool : Version 12.1.0.2\nCopyright (c) 2004, 2014, Oracle and\/or its affiliates. All rights reserved.\n \nList credential (index: connect_string username)\n3: CDB_02 sys\n2: CDB_01 sys\n1: CDB sys\n<\/code><\/pre>\n
and those are entries to connect as SYS to each site:<\/p>\n
\n[oracle@CDB-dg01 db_wallet]$ for i in CDB CDB_01 CDB_02 ; do tnsping $i ; done | grep DESC\nAttempting to contact (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP) (HOST = CDB-dg01) (PORT = 1521)) (CONNECT_DATA = (SERVER = DEDICATED) (SERVICE_NAME = CDB.may.oraclecloud.internal)))\nAttempting to contact (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP) (HOST = CDB-dg01-nat) (PORT = 1521)) (CONNECT_DATA = (SERVER = DEDICATED) (SID = CDB)))\nAttempting to contact (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP) (HOST = CDB-dg02-nat) (PORT = 1521)) (CONNECT_DATA = (SERVER = DEDICATED) (SID = CDB)))\n<\/code><\/pre>\n
So this is a nice way to connect without providing the password, and without the password being visible… or is it?<\/p>\n
\n[oracle@CDB-dg01 db_wallet]$ mkstore -wrl \/u01\/app\/oracle\/admin\/CDB\/db_wallet -viewEntry oracle.security.client.password1\nOracle Secret Store Tool : Version 12.1.0.2\nCopyright (c) 2004, 2014, Oracle and\/or its affiliates. All rights reserved.\n \noracle.security.client.password1 = Ach1z0#d\n[oracle@CDB-dg01 db_wallet]$ mkstore -wrl \/u01\/app\/oracle\/admin\/CDB\/db_wallet -viewEntry oracle.security.client.password2\nOracle Secret Store Tool : Version 12.1.0.2\nCopyright (c) 2004, 2014, Oracle and\/or its affiliates. All rights reserved.\n \noracle.security.client.password2 = Ach1z0#d\n<\/code><\/pre>\n
Arghhh… password plain visible here from the oracle user.
\nWhen I create a wallet, I provide a password. And without the password we can use the credential but not display it. But here it seems that the wallet was created as ‘auto login’ with the ‘-createALO’ option. Want to know more about that option? You can see it in online help:<\/p>\n
\n[oracle@CDB-dg01 db_wallet]$ mkstore\nOracle Secret Store Tool : Version 12.1.0.2\nCopyright (c) 2004, 2014, Oracle and\/or its affiliates. All rights reserved.\n \nmkstore [-wrl wrl] [-create] [-createSSO] [-createLSSO] [-createALO] [-delete] [-deleteSSO] [-list] [-createEntry alias secret] [-viewEntry alias] [-modifyEntry alias secret] [-deleteEntry alias] [-createCredential connect_string username password] [-listCredential] [-modifyCredential connect_string username password] [-deleteCredential connect_string] [-help] [-nologo]\n<\/code><\/pre>\n
But if you want more information about -createALO you have to check documentation. Well, is it documented?
\nYou need to wait that Bug 21152979 : PROVIDE EXPLANATION FOR EACH OPTION OF MKSTORE UTILITY<\/a> is fixed…<\/p>\n
Conclusion<\/h3>\n
Ok, better to stop here. Lot of interesting things here about automation, but it is still far from what we did with the dbi services Database Management Kit<\/a> for years. <\/p>\n
With DBaaS it is easy to configure a database in Data Guard configuration with a few click. No doubt. But what is done here is very far from the best practices we follow when we setup a Data Guard configuration. Very good for a lab or test where security is not that important.<\/p>\n
Do not put sensible passwords for the DBaaS configuration because they are exposed to everybody that can read files on the VM created. You may be tempted to open the database to developers, giving them high privileges because it’s an isolated environment in the Cloud, so no risk. But then you expose the SYS password, which may give some clue about the passwords patterns you use elsewhere.<\/p>\n","protected":false},"excerpt":{"rendered":"
By Franck Pachot . When you create a DBaaS on the Oracle Cloud services you have to provide an administration password in the database configuration form. You do not need a password to connect to the VM. You use SSH key for it: on creation you provide the public key that will allow you to […]<\/p>\n","protected":false},"author":27,"featured_media":8047,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[229],"tags":[135,221,96,25],"type_dbi":[],"class_list":["post-8043","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-database-administration-monitoring","tag-cloud","tag-data-guard","tag-oracle","tag-security"],"acf":[],"yoast_head":"\nSYS password on Oracle Cloud Service managed database - dbi Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SYS password on Oracle Cloud Service managed database\" \/>\n<meta property=\"og:description\" content=\"By Franck Pachot . When you create a DBaaS on the Oracle Cloud services you have to provide an administration password in the database configuration form. You do not need a password to connect to the VM. You use SSH key for it: on creation you provide the public key that will allow you to […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2016-05-21T15:46:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/CapturePass2-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"886\" \/>\n\t<meta property=\"og:image:height\" content=\"291\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Oracle Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Oracle Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/\"},\"author\":{\"name\":\"Oracle Team\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\"},\"headline\":\"SYS password on Oracle Cloud Service managed database\",\"datePublished\":\"2016-05-21T15:46:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/\"},\"wordCount\":815,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/CapturePass2-1.png\",\"keywords\":[\"Cloud\",\"Data Guard\",\"Oracle\",\"Security\"],\"articleSection\":[\"Database Administration & Monitoring\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/\",\"name\":\"SYS password on Oracle Cloud Service managed database - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/CapturePass2-1.png\",\"datePublished\":\"2016-05-21T15:46:18+00:00\",\"author\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/#primaryimage\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/CapturePass2-1.png\",\"contentUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/CapturePass2-1.png\",\"width\":886,\"height\":291},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.dbi-services.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SYS password on Oracle Cloud Service managed database\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\",\"name\":\"Oracle Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"caption\":\"Oracle Team\"},\"url\":\"https:\/\/www.dbi-services.com\/blog\/author\/oracle-team\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SYS password on Oracle Cloud Service managed database - dbi Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/","og_locale":"en_US","og_type":"article","og_title":"SYS password on Oracle Cloud Service managed database","og_description":"By Franck Pachot . When you create a DBaaS on the Oracle Cloud services you have to provide an administration password in the database configuration form. You do not need a password to connect to the VM. You use SSH key for it: on creation you provide the public key that will allow you to […]","og_url":"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/","og_site_name":"dbi Blog","article_published_time":"2016-05-21T15:46:18+00:00","og_image":[{"width":886,"height":291,"url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/CapturePass2-1.png","type":"image\/png"}],"author":"Oracle Team","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Oracle Team","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/"},"author":{"name":"Oracle Team","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee"},"headline":"SYS password on Oracle Cloud Service managed database","datePublished":"2016-05-21T15:46:18+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/"},"wordCount":815,"commentCount":0,"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/CapturePass2-1.png","keywords":["Cloud","Data Guard","Oracle","Security"],"articleSection":["Database Administration & Monitoring"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/","url":"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/","name":"SYS password on Oracle Cloud Service managed database - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/#primaryimage"},"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/CapturePass2-1.png","datePublished":"2016-05-21T15:46:18+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee"},"breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/#primaryimage","url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/CapturePass2-1.png","contentUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/CapturePass2-1.png","width":886,"height":291},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/sys-password-on-oracle-cloud-service-managed-database\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"SYS password on Oracle Cloud Service managed database"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee","name":"Oracle Team","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","caption":"Oracle Team"},"url":"https:\/\/www.dbi-services.com\/blog\/author\/oracle-team\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/8043","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/27"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=8043"}],"version-history":[{"count":0,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/8043\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media\/8047"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=8043"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=8043"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=8043"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=8043"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}