无法连接到数据库实例: ORA-01035: ORACLE only available to users with RESTRICTED SESSION privilege (D...

无法连接到数据库实例: ORA-01035: ORACLE only available to users with RESTRICTED SESSION privilege (D...

启动数据库实例的限制模式(restrict mode)的方法
===========================================================
作者: cnhtm(http://cnhtm.itpub.net)
发表于:2010.03.03 15:45
分类: 笔记
出处：http://cnhtm.itpub.net/post/39970/497230
---------------------------------------------------------------

(b14231 第123页)

可以启动数据库实例到限制模式（restrict mode），这时只有管理员和具有restricted session权限的用户可以登录数据库。下面演示打开和关闭限制模式的方法：

启动数据库到限制模式

ora_test@oracle[/home/oracle]> sqlplus / as sysdba

SQL*Plus: Release 10.2.0.1.0 - Production on Sun Mar 7 15:26:01 2010

Copyright (c) 1982, 2005, Oracle. All rights reserved.

Connected to an idle instance.

idle> startup restrict
ORACLE instance started.

Total System Global Area 209715200 bytes
Fixed Size 1218532 bytes
Variable Size 113248284 bytes
Database Buffers 88080384 bytes
Redo Buffers 7168000 bytes
Database mounted.
Database opened.

数据库已经启动到限制模式，我用scott用户登录数据库
首先检查scott用户，确认其没有restricted session权限

sys@CNHTM> select grantee,granted_role from dba_role_privs where grantee='SCOTT'
2 union
3 select grantee,privilege from dba_sys_privs where grantee='SCOTT'
4 ;

GRANTEE GRANTED_ROLE
------------------------------ ----------------------------------------
SCOTT CONNECT
SCOTT RESOURCE
SCOTT UNLIMITED TABLESPACE

登录数据库失败，因为其没有restricted session权限

idle> conn scott/tiger
ERROR:
ORA-01035: ORACLE only available to users with RESTRICTED SESSION privilege

Warning: You are no longer connected to ORACLE.

为用户scott授予restricted session权限，再次登录数据库，可以登录

idle> grant restricted session to scott;
SP2-0640: Not connected
idle> conn / as sysdba
Connected.
sys@CNHTM> grant restricted session to scott;

Grant succeeded.

sys@CNHTM> conn scott/tiger
Connected.

将数据库修改为正常模式（即退出限制模式）

scott@CNHTM> conn / as sysdba
Connected.
sys@CNHTM> alter system disable restricted session;

System altered.

由正常模式切换到限制模式的方法

sys@CNHTM> alter system enable restricted session;

System altered.

sys@CNHTM>

--end--