PASSWORD FILE MANAGEMENT- PRIVS

[oracle@DB12c ~]$ id
uid=54321(oracle) gid=54321(oinstall) groups=54321(oinstall),54322(dba)
context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023

[oracle@DB12c ~]$ sqlplus / as sysbackup

SQL*Plus: Release 12.1.0.1.0 Production on Sun Jun 15 12:38:31 2014
Copyright (c) 1982, 2013, Oracle. All rights reserved.
Connected to:
Oracle Database 12c Enterprise Edition Release 12.1.0.1.0 - 64bit
Production
With the Partitioning, OLAP, Advanced Analytics and Real Application
Testing options

SQL> show user

USER is "SYSBACKUP"

SQL> select * from session_privs;

PRIVILEGE
----------------------------------------
SYSBACKUP
SELECT ANY TRANSACTION
SELECT ANY DICTIONARY
RESUMABLE
CREATE ANY DIRECTORY
ALTER DATABASE
AUDIT ANY
CREATE ANY CLUSTER
CREATE ANY TABLE
UNLIMITED TABLESPACE
DROP TABLESPACE
PRIVILEGE
----------------------------------------
ALTER TABLESPACE
ALTER SESSION
ALTER SYSTEM
14 rows selected.

SQL> conn / as sysdba

Connected.
SQL> show user
USER is "SYS"

SQL> select * from session_privs;

PRIVILEGE
----------------------------------------
ALTER ANY CUBE BUILD PROCESS
SELECT ANY CUBE BUILD PROCESS
ALTER ANY MEASURE FOLDER
SELECT ANY MEASURE FOLDER
EXEMPT DDL REDACTION POLICY
.....
.....

SQL> select * from v$pwfile_users;

USERNAME SYSDB SYSOP SYSAS SYSBA SYSDG SYSKM CON_ID
------------------------------ ----- ----- ----- ----- ----- ----- ------
----
SYS TRUE TRUE FALSE FALSE FALSE FALSE 0
SYSDG FALSE FALSE FALSE FALSE TRUE FALSE 0
SYSBACKUP FALSE FALSE FALSE TRUE FALSE FALSE 0
SYSKM FALSE FALSE FALSE FALSE FALSE TRUE 0

SQL> alter user sysbackup account unlock;

User altered.

SQL> alter user sysbackup identified by oracle_4U;

User altered.

SQL> exit

[oracle@DB12c ~]$ lsnrctl start

LSNRCTL for Linux: Version 12.1.0.1.0 - Production on 15-JUN-2014
12:42:52
Copyright (c) 1991, 2013, Oracle. All rights reserved.
Starting /u02/app/oracle/product/12.1.0/dbhome_1/bin/tnslsnr: please
wait...
.....
.....
[oracle@DB12c ~]$ sqlplus sysbackup/oracle_4U
SQL*Plus: Release 12.1.0.1.0 Production on Sun Jun 15 12:47:07 2014
Copyright (c) 1982, 2013, Oracle. All rights reserved.
ERROR:
ORA-28012: connection as SYSBACKUP should use AS SYSBACKUP

[oracle@DB12c ~]$ sqlplus sysbackup/oracle_4U@orcl as sysbackup

SQL*Plus: Release 12.1.0.1.0 Production on Sun Jun 15 12:47:13 2014
Copyright (c) 1982, 2013, Oracle. All rights reserved.
Connected to:
Oracle Database 12c Enterprise Edition Release 12.1.0.1.0 - 64bit
Production
With the Partitioning, OLAP, Advanced Analytics and Real Application
Testing options

SQL> show user

USER is "SYSBACKUP"

SQL> exit

[oracle@DB12c ~]$ sqlplus / as sysdba

SQL*Plus: Release 12.1.0.1.0 Production on Sun Jun 15 12:48:24 2014
Copyright (c) 1982, 2013, Oracle. All rights reserved.
Connected to:
Oracle Database 12c Enterprise Edition Release 12.1.0.1.0 - 64bit
Production
With the Partitioning, OLAP, Advanced Analytics and Real Application
Testing options
SQL>

[oracle@DB12c ~]$ sqlplus / as sysdba

SQL*Plus: Release 12.1.0.1.0 Production on Sun Jun 15 12:48:24 2014
Copyright (c) 1982, 2013, Oracle. All rights reserved.
Connected to:
Oracle Database 12c Enterprise Edition Release 12.1.0.1.0 - 64bit
Production
With the Partitioning, OLAP, Advanced Analytics and Real Application
Testing options

SQL> CREATE USER john IDENTIFIED BY oracle_4U;

User created.
SQL> grant create session, SYSBACKUP to john;
Grant succeeded.

SQL> select * from v$pwfile_users;

USERNAME SYSDB SYSOP SYSAS SYSBA SYSDG SYSKM CON_ID
------------------------------ ----- ----- ----- ----- ----- ----- ------
----
SYS TRUE TRUE FALSE FALSE FALSE FALSE 0
SYSDG FALSE FALSE FALSE FALSE TRUE FALSE 0
SYSBACKUP FALSE FALSE FALSE TRUE FALSE FALSE 0
SYSKM FALSE FALSE FALSE FALSE FALSE TRUE 0
JOHN FALSE FALSE FALSE TRUE FALSE FALSE 0

SQL> connect john/oracle_4U@orcl as SYSBACKUP

Connected.

SQL> exit

[oracle@DB12c ~]$ rman target john/oracle_4U@orcl

Recovery Manager: Release 12.1.0.1.0 - Production on Sun Jun 15 12:50:06
2014
Copyright (c) 1982, 2013, Oracle and/or its affiliates. All rights
reserved.
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-00554: initialization of internal recovery manager package failed
RMAN-04005: error from target database:
ORA-01031: insufficient privileges

[oracle@DB12c ~]$ rman target '"john/oracle_4U@orcl AS SYSBACKUP"'

Recovery Manager: Release 12.1.0.1.0 - Production on Sun Jun 15 12:50:16
2014
Copyright (c) 1982, 2013, Oracle and/or its affiliates. All rights
reserved.
connected to target database: ORCL (DBID=1377967195)

RMAN> select user from dual;

using target database control file instead of recovery catalog
USER
------------------------------
SYSBACKUP