6.5. Managing Default User Accounts
The SYS and SYSTEM user accounts are always created with an Oracle 10g database. Additionally, the SYSMAN and DBSNMP accounts are created together with a database via the Database Configuration Assistant (DBCA).
Other special accounts may be created to support installed products, such as RMAN (Recovery Manager) or XMLDB. When created via the DBCA, these special accounts are locked and expired, leaving only SYS, SYSTEM, SYSMAN, and DBSNMP open. The SYS and SYSTEM accounts are the data dictionary owner and an administrative account, respectively. SYSMAN and DBSNMP are used by Enterprise Manager.
If your database is created via any means other than DBCA, ensure that the accounts are locked and expired, and that the default passwords are changed. You expire and lock an account using the ALTER USER statement like this:
ALTER USER mdsys PASSWORD EXPIRE ACCOUNT LOCK;
Depending on the functionality installed in your Oracle 10g database, you may need to lock and expire several default user accounts. Your database-created user accounts may include the following:
| csmig | odm | sysman |
| ctxsys | odm_mtr | system |
| dbsnmp | olapsys | tracesvr |
| demo | ordplugins | websys |
| dip | ordsys | wkproxy |
| dmsys | outln | wksys |
| exfsys | perfstat | wk_test |
| lbacsys | rman | wmsys |
| mddata | scott | xdb |
| mdsys | si_informtn_schema | xdm |
| oas_public | sys |