在知识库中专注阅读，并随时返回相关工具与课程
大家好，这里是公众号 DBA学习之路，致力于分享数据库领域相关知识。 @TOC目录 今天初八，开工大吉！祝大家新年快乐，发大财！ 一大早就有个客户找，说有个 Oracle 数据库，修改了 sys 密码，怎么都无法登录，一直报错： bash SQL alter user sys identified by oracle; User altered. oracle@lucifer admin$ sql
系统学习 Oracle DBA
开通会员 ¥128/月起
查看完整课程大家好，这里是公众号 DBA学习之路，致力于分享数据库领域相关知识。
本章目标：掌握本章核心知识点 前置要求：完成前序章节学习 预计时长：60 分钟
今天初八，开工大吉！祝大家新年快乐，发大财！
一大早就有个客户找，说有个 Oracle 数据库，修改了 sys 密码，怎么都无法登录，一直报错：
1## 修改 sys 密码成功2SQL> alter user sys identified by oracle;34User altered.56## 登录报错7[oracle@lucifer admin]$ sqlplus sys/oracle@lucifer as sysdba89SQL*Plus: Release 11.2.0.4.0 Production on Wed Feb 5 10:19:22 20251011Copyright (c) 1982, 2013, Oracle. All rights reserved.1213ERROR:14ORA-01017: invalid username/password; logon denied使用客户端工具连接报错：
这个问题看起来十分诡异，怎么会修改不了 sys 密码呢？
检查一下监听，监听状态是正常的：
1[oracle@lucifer admin]$ lsnrctl stat23LSNRCTL for Linux: Version 11.2.0.4.0 - Production on 05-FEB-2025 09:54:2545Copyright (c) 1991, 2013, Oracle. All rights reserved.67Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1521)))8STATUS of the LISTENER9------------------------10Alias LISTENER11Version TNSLSNR for Linux: Version 11.2.0.4.0 - Production12Start Date 05-FEB-2025 09:54:0713Uptime 0 days 0 hr. 0 min. 17 sec14Trace Level off15Security ON: Local OS Authentication16SNMP OFF17Listener Parameter File /u01/app/oracle/product/11.2.0/db/network/admin/listener.ora18Listener Log File /u01/app/oracle/diag/tnslsnr/lucifer/listener/alert/log.xml19Listening Endpoints Summary...20 (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC1521)))21 (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=lucifer)(PORT=1521)))22Services Summary...23Service "lucifer" has 1 instance(s).24 Instance "lucifer", status READY, has 1 handler(s) for this service...25Service "luciferXDB" has 1 instance(s).26 Instance "lucifer", status READY, has 1 handler(s) for this service...27The command completed successfully检查一下 sqlnet 配置，没问题：
1[oracle@lucifer admin]$ cat sqlnet.ora 2# sqlnet.ora Network Configuration File: /u01/app/oracle/product/11.2.0/db/network/admin/sqlnet.ora3# Generated by Oracle configuration tools.45NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)67ADR_BASE = /u01/app/oracle尝试了一下 tnsping，报错了：
1[oracle@lucifer admin]$ tnsping lucifer23TNS Ping Utility for Linux: Version 11.2.0.4.0 - Production on 05-FEB-2025 09:55:3745Copyright (c) 1997, 2013, Oracle. All rights reserved.67Used parameter files:8/u01/app/oracle/product/11.2.0/db/network/admin/sqlnet.ora910TNS-03505: Failed to resolve name怀疑有可能是 TNS 配置有问题，所以看了下配置：
1LUCIFER =2 (DESCRIPTION =3 (ADDRESS = (PROTOCOL = TCP)(HOST = lucifer)(PORT = 1521))4 (CONNECT_DATA =5 (SERVER = DEDICATED)6 (SERVICE_NAME = lucifer)7 )8 )没道理啊，再一看，滑天下之大稽，原来是 TNS 文件名写错了 tnsname.ora：
1[oracle@lucifer admin]$ ls2listener.ora samples shrept.lst sqlnet.ora tnsname.ora这里应该是 tnsnames.ora，少了个 s：
1[oracle@lucifer admin]$ mv tnsname.ora tnsnames.ora心想，这下总该好了吧：
1[oracle@lucifer admin]$ tnsping lucifer23TNS Ping Utility for Linux: Version 11.2.0.4.0 - Production on 05-FEB-2025 10:12:4645Copyright (c) 1997, 2013, Oracle. All rights reserved.67Used parameter files:8/u01/app/oracle/product/11.2.0/db/network/admin/sqlnet.ora91011Used TNSNAMES adapter to resolve the alias12Attempting to contact (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST = lucifer)(PORT = 1521)) (CONNECT_DATA = (SERVER = DEDICATED) (SERVICE_NAME = lucifer)))13OK (0 msec)确实 tnsping 没问题了，再次尝试下连接 sys 用户：
1[oracle@lucifer admin]$ sqlplus sys/oracle@lucifer as sysdba23SQL*Plus: Release 11.2.0.4.0 Production on Wed Feb 5 10:12:59 202545Copyright (c) 1982, 2013, Oracle. All rights reserved.67ERROR:8ORA-01017: invalid username/password; logon denied好家伙，还是报错，这么夸张吗？手动再次修改 sys 密码：
1SQL> alter user sys identified by oracle;23User altered.45SQL> alter user system identified by oracle;67User altered.再次尝试连接：
1[oracle@lucifer admin]$ sqlplus sys/oracle@lucifer as sysdba23SQL*Plus: Release 11.2.0.4.0 Production on Wed Feb 5 10:13:25 202545Copyright (c) 1982, 2013, Oracle. All rights reserved.67ERROR:8ORA-01017: invalid username/password; logon denied擦，依然报错，试一下 system 用户连接：
1[oracle@lucifer admin]$ sqlplus system/oracle@lucifer23SQL*Plus: Release 11.2.0.4.0 Production on Wed Feb 5 10:18:53 202545Copyright (c) 1982, 2013, Oracle. All rights reserved.678Connected to:9Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production10With the Partitioning, OLAP, Data Mining and Real Application Testing options1112SQL> 13SQL>啊，那看来就是 sys 用户本身有问题了，再看一下 sys 用户的状态：
1SQL> set lines222 pages1000 2col username for a25 3col account_status for a20 4col default_tablespace for a20 5col temporary_tablespace for a20 6col profile for a207SELECT username,8 account_status,9 default_tablespace,10 temporary_tablespace,11 created,12 profile13 FROM dba_users14 WHERE account_status = 'OPEN'15 ORDER BY created;1617USERNAME ACCOUNT_STATUS DEFAULT_TABLESPACE TEMPORARY_TABLESPACE CREATED PROFILE18------------------------- -------------------- -------------------- -------------------- ------------------ --------------------19SYSTEM OPEN SYSTEM TEMP 24-AUG-13 DEFAULT20SYS OPEN SYSTEM TEMP 24-AUG-13 DEFAULT这也没问题啊，那怎么回事呢？看一下是不是密码文件有问题啊？不看不知道，一看吓一跳：
1[oracle@lucifer dbs]$ ll2total 163-rw-rw---- 1 oracle oinstall 1544 Jun 29 2023 hc_lucifer.dat4-rw-r--r--. 1 oracle oinstall 2851 May 15 2009 init.ora5-rw-r----- 1 oracle oinstall 24 Oct 15 2021 lkLUCIFER6-rw-r----- 1 oracle oinstall 3584 Jun 29 2023 spfilelucifer.ora好家伙，没有密码文件，好吧，怪不得怎么改都没用，手动新建一个密码文件：
1[oracle@lucifer dbs]$ orapwd file=orapwlucifer password=oracle再次尝试连接 sys 用户：
1[oracle@lucifer dbs]$ sqlplus sys/oracle@lucifer as sysdba23SQL*Plus: Release 11.2.0.4.0 Production on Wed Feb 5 10:23:17 202545Copyright (c) 1982, 2013, Oracle. All rights reserved.678Connected to:9Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production10With the Partitioning, OLAP, Data Mining and Real Application Testing options1112SQL> 13SQL>bingo，可以连了，真坑啊！！！结束。
这个问题解决过程虽然比较简单，但是涉及基础知识点也不少，记录分享，以作参考。