今天在使用sqlplus / as sysdba登陸時，竟然報錯：ora-01031 insufficient privileges。當時我直接就納悶掉了，平時等的時候都好好的啊，怎麼現在就不行了。

這時我想，我這樣是屬於作業系統認證的登陸方法啊，而且使用者也是oracle使用者啊。

[[email protected] ~]$ sqlplus / as sysdba
SQL*Plus: Release 11.2.0.3.0 Production on Sun Sep 7 21:54:21 2014
Copyright (c) 1982, 2011, Oracle.  All rights reserved.
ERROR:
ORA-01031: insufficient privileges

[
 
[email protected] ~]$ id
uid=54321(oracle) gid=54321(oinstall) groups=54321(oinstall),54322(dba),54323(vboxsf)

這時，鬱悶的時候我隨便又試了一下用其他賬戶登竟然可以登陸，這真是太神奇了：

[[email protected] ~]$ sqlplus chenhao/oracle
SQL*Plus: Release 11.2.0.3.0 Production on Sun Sep 7 21:57:45 2014
Copyright (c) 1982, 2011, Oracle.  All rights reserved.
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options

SQL>
 

在我抓狂的時候，想了下是不是在哪裡有設定啊，能設定使用sqlplus登陸相關檔案也就只用tnsnames.ora、listener.ora、sqlnet.ora。應該和tnsnames.ora、listener.ora沒有很大的關係吧。於是就去看了一下sqlnet.ora其中有SQLNET.AUTHENTICATION_SERVICES選項：

SQLNET.AUTHENTICATION_SERVICES

Purpose

To enable one or more authentication services. If authentication has been installed, then it is recommended that this parameter be set to either none

 or to one of the authentication methods.

Default

None

Note:

When installing the database with Database Configuration Assistant (DBCA), this parameter may be set to nts in thesqlnet.ora file.

Values

• Authentication Methods Available with Oracle Net Services:

  • none for no authentication methods, including Microsoft Windows native operating system authentication. When SQLNET.AUTHENTICATION_SERVICESis set to none, a valid user name and password can be used to access the database.

  • all for all authentication methods.

  • nts for Microsoft Windows native operating system authentication.

• Authentication Methods Available with Oracle Advanced Security:

  • kerberos5 for Kerberos authentication.

  • radius for RADIUS authentication.

  • tcps for SSL authentication.

根據官方推薦的使用預設值none，於是我就設定為none：

[[email protected] admin]$ cat sqlnet.ora 
SQLNET.AUTHENTICATION_SERVICES= (NONE) 
NAMES.DIRECTORY_PATH= (TNSNAMES,HOSTNAME) 

再次使用sqlplus / as sysdba登陸成功：

[[email protected] ~]$ sqlplus / as sysdba
SQL*Plus: Release 11.2.0.3.0 Production on Sun Sep 7 21:57:45 2014
Copyright (c) 1982, 2011, Oracle.  All rights reserved.
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options

SQL>

提示：如設定none不行那就直接把SQLNET.AUTHENTICATION_SERVICES個刪了；