DBA Tips: Is your SYSMAN Account Locked??

 Author: Hans Heremans

Page: 1 2

The default super administrator SYSMAN account is created with the password specified by you when you install Enterprise Manager. Many database administrators like me must have faced the scenario when they are unable to connect to database engine because instead of a normal login screen they get an error message “Enterprise Manager is not able to connect to database instance. The state of the components are listed below……”

Everything is up and running but still your Enterprise Manager can not connect to the database instance. How frustrating it is, right?

In this article I will discuss how to troubleshoot the problem if one day or another you are unable to connect to the database instance as a result of error like this.

Check Enterprise Manager Log File:

In the first step we will check the enterprise manager log file as follows.

[oracle@myserver log]$ pwd

/opt/oracle/product/11.1.0/db/myserver.mydomain_DWHD
/sysman/log
[oracle@ myserver log]$ tail -50 emoms.log
.
.
.
2008-02-11 23:12:04,968 [ApplicationServerThread-11]
ERROR app.SessionObjectManager sessionDestroyed.128 -
java.sql.SQLException: ORA-28000: the account is locked
java.sql.SQLException: ORA-28000: the account is locked
.
.
.

We can see that the log file contains ORA-28000 error (ORA-28000: the account is locked). Generally we get ORA-28000 error if the user has consequently entered wrong password for maximum number of times specified by the user profile parameter FAILED_LOGIN_ATTEMPTS or the account is locked by DBA.

Check Database Users:

Now we will check database users.

SYSTEM> select username, account_status from dba_users;

     USERNAME       ACCOUNT_STATUS
   -------------------     -------------------------------
     MGMT_VIEW                    OPEN
     SYS                                    OPEN
     SYSTEM                            OPEN
     DBSNMP                           OPEN
     SYSMAN                   LOCKED(TIMED)

Here we can see that the all other accounts are working fine but the SYSMAN account is locked.

Stop Database Console:

Now we will stop the Database Console

[oracle@myserver dbascripts]$ emctl stop dbconsole
Oracle Enterprise Manager 11g Database Control Release 11.1.0.6.0
Copyright (c) 1996, 2007 Oracle Corporation. All rights reserved.

https://myserver.mydomain:1158/em/console/aboutApplication

Stopping Oracle Enterprise Manager 11g Database Control ...
... Stopped.

[oracle@myserver dbascripts]$ Continued...

Page: 1 2

 More Oracle Articles, Database Articles and DBA Tips
   Database Security: Step by step guideline
   Is your Data Warehouse Protected??
   SQL - Best Practices to improve Performance
   SQL in Action I - Single Table Queries
   DBA Tips for Listener Logging Problems!!