RAC 下Oracle default 用户全部可以locked，包括sysrac

The following error occur while trying to change the password for SYSRAC or while trying to lock/unlock in BETA:DB23C.

/home/oracle >sqlplus / as sysdba

SQL*Plus: Release 23.0.0.0.0 - Beta on Do Dec 15 09:06:24 2022
Version 23.1.0.0.0

Copyright (c) 1982, 2022, Oracle. All rights reserved.
Oracle Database 23c Enterprise Edition Release 23.0.0.0.0 - Beta
Version 23.1.0.0.0

SQL> alter user SYSRAC identified by Passw0rd;
alter user SYSRAC identified by Passw0rd
*
ERROR at line 1:
ORA-28222: may not modify reserved user


SQL> alter user SYSRAC account lock;
alter user SYSRAC account lock
*
ERROR at line 1:
ORA-28222: may not modify reserved user


SQL> alter user SYSRAC password expire account lock;
alter user SYSRAC password expire account lock
*
ERROR at line 1:
ORA-28222: may not modify reserved user

- The same error occur in version 21.3 

/refresh/home> sqlplus / as sysdba

SQL*Plus: Release 21.0.0.0.0 - Production on Thu Dec 15 13:54:44 2022
Version 21.3.0.0.0
Copyright (c) 1982, 2021, Oracle. All rights reserved.

Connected to:
Oracle Database 21c Enterprise Edition Release 21.0.0.0.0 - Production
Version 21.3.0.0.0

SQL> set pages 500
SQL> set line 300
SQL> col username for a30
SQL> select username,account_status,authentication_type from dba_users where username='SYSRAC';

USERNAME         ACCOUNT_STATUS      AUTHENTI
--------------   --------------     ------------
SYSRAC           OPEN                NONE

SQL> alter user SYSRAC account lock;
alter user SYSRAC account lock
*
ERROR at line 1:
ORA-28222: may not modify reserved user

SQL> alter user SYSRAC identified by Passw0rd;
alter user SYSRAC identified by Passw0rd
*
ERROR at line 1:
ORA-28222: may not modify reserved user

SOLUTION

It's not allowed to lock (and unlock) SYSRAC and the authentication type cannot be changed, ONLY is allowed OS Authentication for SYSRAC.

According to the following Manual,after Upgrade to 19.3, account will be set to NO AUTHENTICATION. How to check it?

https://docs.oracle.com/en/database/oracle/oracle-database/19/upgrd/schema-only-accounts-upgraded-expired-password-accounts.html#GUID-D2C22951-2BBA-4A18-85C2-F0DF38839EF8

  During upgrades to Oracle Database 19c, default Oracle accounts that have not had their passwords reset before upgrade (and are set to EXPIRED status),

  and that are also set to LOCKED status, are set to NO AUTHENTICATION after the upgrade is complete.

SOLUTION

The authentication type is listed as NONE in the DBA_USERS view.
 

Before Upgrade (11.2.0.4)

SQL> SELECT username,
  2         account_status,
  3         authentication_type
  4  FROM   dba_users
  5  WHERE ROWNUM < 10;

USERNAME                       ACCOUNT_STATUS       AUTHENTI
------------------------------ -------------------- --------
SYSTEM                         OPEN                 PASSWORD
SYS                            OPEN                 PASSWORD
SYSBACKUP                      EXPIRED & LOCKED     PASSWORD
SYSRAC                         EXPIRED & LOCKED     PASSWORD
OJVMSYS                        EXPIRED & LOCKED     PASSWORD
SYSKM                          EXPIRED & LOCKED     PASSWORD
OUTLN                          EXPIRED & LOCKED     PASSWORD
SYS$UMF                        EXPIRED & LOCKED     PASSWORD
SYSDG                          EXPIRED & LOCKED     PASSWORD

9 rows selected.

SQL>

After Upgrade (19.3.0.0)

SQL> SELECT username,
  2         account_status,
  3         authentication_type
  4  FROM   dba_users
  5  WHERE ROWNUM < 10;

USERNAME                       ACCOUNT_STATUS       AUTHENTI
------------------------------ -------------------- --------
SYSTEM                         OPEN                 PASSWORD
SYS                            OPEN                 PASSWORD
SYSBACKUP                      LOCKED               NONE
SYSRAC                         LOCKED               NONE
OJVMSYS                        LOCKED               NONE
SYSKM                          LOCKED               NONE
OUTLN                          LOCKED               NONE
SYS$UMF                        LOCKED               NONE
SYSDG                          LOCKED               NONE

9 rows selected.

SQL>