Can default database accounts still active in the system be renamed to increase security?

    Requires Free Membership to View

    Login

To increase security in your Oracle database, any default database accounts that are created, but not used, should be locked after the password has been changed. Never leave default accounts with the default passwords as these are very well-known. Technically, accounts cannot really be renamed in Oracle although they can be dropped. I would not recommend dropping any default accounts, such as OUTLN, DBSNMP, etc., as this may cause problems during a subsequent upgrade or patch application. Simply changing the default password to a strong password (one that uses special characters, capital letters and is not a dictionary word) and locking the account is good database practice.

This was first published in June 2006

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.
    Back to top