审计导致select * 报ORA-01435: user does not exist


今天接到客户自己的测试环境，从源数据库导致一个表到目标数据库，select * from tabname报ORA-01435: user does not exist，select count(*) from tabname正常，原来只了解细粒度审计，但是在环境中还没有真真的见过，所以整个过程分析用了一点时间。

下面是整个过程：

  1. scott@EM10G> selectcount(*) from EMPLOYEES;
  2. COUNT(*)
  3. ----------
  4. 107
  5. scott@EM10G> select * from EMPLOYEES;
  6. select * from EMPLOYEES
  7. *
  8. ERROR at line 1:
  9. ORA-01435: user does not exist

下面是10046的过程

  1. [Oracle@RAC2 ~]$ sqlplus / as sysdba
  2. SQL*Plus: Release 10.2.0.1.0 - Production on Fri Mar 22 17:03:50 2013
  3. Copyright (c) 1982, 2005, Oracle. All rights reserved.
  4. Connected to:
  5. Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
  6. With the Partitioning, OLAP and Data Mining options
  7. sys@EM10G> select spid from v$process where addr=(select paddr from v$session where username='SCOTT');
  8. SPID
  9. ------------
  10. 30255
  11. sys@EM10G> oradebug setospid 30255
  12. Oracle pid: 22, Unix process pid: 30255, image: oracle@RAC2 (TNS V1-V3)
  13. sys@EM10G> oradebug event 10046 trace name context forever ,level 12;
  14. Statement processed.
  15. sys@EM10G> oradebug tracefile_name
  16. /u01/app/oracle/admin/em10g/udump/em10g_ora_30255.trc
  17. sys@EM10G> !vi /u01/app/oracle/admin/em10g/udump/em10g_ora_30255.trc
  18. Dump file /u01/app/oracle/admin/em10g/udump/em10g_ora_30255.trc
  19. Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
  20. With the Partitioning, OLAP and Data Mining options
  21. ORACLE_HOME = /u01/app/oracle
  22. System name: Linux
  23. Node name: RAC2
  24. Release: 2.6.9-89.0.0.0.1.ELsmp
  25. Version: #1 SMP Tue May 19 04:23:49 EDT 2009
  26. Machine: i686
  27. Instance name: em10g
  28. Redo thread mounted by this instance: 1
  29. Oracle process number: 22
  30. Unix process pid: 30255, image: oracle@RAC2 (TNS V1-V3)
  31. *** ACTIONNAME:() 2013-03-22 17:02:24.565
  32. *** MODULE NAME:(SQL*Plus) 2013-03-22 17:02:24.565
  33. *** SERVICE NAME:(SYS$USERS) 2013-03-22 17:02:24.565
  34. *** SESSION ID:(312.17658) 2013-03-22 17:02:24.565
  35. -----------------------------------
  36. Error during execution of handler in Fine Grained Auditing
  37. Audit handler : begin SEC.LOG_EMPS_SALARY(:sn, :on, :pl); end;
  38. Error Number 1 : 1435
  39. Logon user : SCOTT
  40. Object Schema: SCOTT, Object Name: EMPLOYEES, Policy Name: AUDIT_EMPS_SALARY
  41. *** 2013-03-22 17:04:36.852
  42. Received ORADEBUG command 'event 10046 trace name context forever ,level 12'from process Unix process pid: 30298, image:
  43. WAIT #0: nam='SQL*Net message from client' ela= 110477763 driver id=1650815232 #bytes=1 p3=0 obj#=-1 tim=1331975666205121
  44. =====================
  45. PARSING INCURSOR #1 len=23 dep=0 uid=27 oct=3 lid=27 tim=1331975666206838 hv=1609818433 ad='58ce67f0'
  46. select * from EMPLOYEES
  47. ENDOF STMT
  48. PARSE #1:c=1000,e=1593,p=0,cr=0,cu=0,mis=1,r=0,dep=0,og=1,tim=1331975666206830
  49. BINDS #1:
  50. =====================
  51. PARSING INCURSOR #2 len=382 dep=1 uid=0 oct=2 lid=0 tim=1331975666208989 hv=1818756823 ad='58f2cf18'
  52. insertinto sys.fga_log$ (sessionid, ntimestamp#, dbuid, osuid, obj$schema, obj$name, policyname, scn, oshst, clientid, extid, lsqltext, proxy$sid,user$guid, instance#, process#, xid, statement, entryid, stmt_type, lsqlbind, auditid) values( :1, SYS_EXTRACT_UTC(SYSTIMESTAMP), :2, :3, :4, :5, :6, :7, :8, :9, :10, :11, :12, :13, :14, :15, :16, :17, :18, :19, :20, :21 )
  53. ENDOF STMT
  54. PARSE #2:c=1000,e=975,p=0,cr=0,cu=0,mis=1,r=0,dep=1,og=4,tim=1331975666208982
  55. BINDS #2:
  56. kkscoacd
  57. Bind#0
  58. oacdty=02 mxl=22(22) mxlc=00 mal=00 scl=00 pre=00
  59. oacflg=00 fl2=0001 frm=00 csi=00 siz=24 off=0
  60. kxsbbbfp=b72b8a94 bln=22 avl=04 flg=05
  61. value=273276
  62. Bind#1
  63. oacdty=01 mxl=32(05) mxlc=00 mal=00 scl=00 pre=00
  64. oacflg=10 fl2=0001 frm=01 csi=01 siz=32 off=0
  65. kxsbbbfp=bfffb9de bln=32 avl=05 flg=09
  66. value="SCOTT"
  67. Bind#2
  68. oacdty=01 mxl=32(06) mxlc=00 mal=00 scl=00 pre=00
  69. oacflg=11 fl2=0001 frm=01 csi=01 siz=32 off=0
  70. kxsbbbfp=bfffba02 bln=32 avl=06 flg=09
  71. value="oracle"
  72. Bind#3
  73. oacdty=01 mxl=32(05) mxlc=00 mal=00 scl=00 pre=00
  74. oacflg=10 fl2=0001 frm=01 csi=01 siz=32 off=0
  75. kxsbbbfp=bfffba22 bln=32 avl=05 flg=09
  76. value="SCOTT"
  77. Bind#4
  78. oacdty=01 mxl=32(09) mxlc=00 mal=00 scl=00 pre=00
  79. oacflg=10 fl2=0001 frm=01 csi=01 siz=32 off=0
  80. kxsbbbfp=bfffba42 bln=32 avl=09 flg=09
  81. value="EMPLOYEES"
  82. Bind#5
  83. oacdty=01 mxl=32(17) mxlc=00 mal=00 scl=00 pre=00
  84. oacflg=10 fl2=0001 frm=01 csi=01 siz=32 off=0
  85. kxsbbbfp=bfffba62 bln=32 avl=17 flg=09
  86. value="AUDIT_EMPS_SALARY"
  87. Bind#6
  88. oacdty=02 mxl=22(05) mxlc=00 mal=00 scl=00 pre=00
  89. oacflg=10 fl2=0001 frm=00 csi=00 siz=24 off=0
  90. kxsbbbfp=bfffba80 bln=22 avl=05 flg=09
  91. value=76930924
  92. Bind#7
  93. oacdty=01 mxl=32(04) mxlc=00 mal=00 scl=00 pre=00
  94. oacflg=11 fl2=0001 frm=01 csi=01 siz=32 off=0
  95. kxsbbbfp=bfffba9e bln=32 avl=04 flg=09
  96. value="RAC2"
  97. Bind#8
  98. oacdty=01 mxl=32(00) mxlc=00 mal=00 scl=00 pre=00
  99. oacflg=11 fl2=0001 frm=01 csi=01 siz=32 off=0
  100. kxsbbbfp=00000000 bln=32 avl=00 flg=09
  101. Bind#9
  102. oacdty=01 mxl=32(06) mxlc=00 mal=00 scl=00 pre=00
  103. oacflg=11 fl2=0001 frm=01 csi=01 siz=32 off=0
  104. kxsbbbfp=bfffbb68 bln=32 avl=06 flg=09
  105. value="oracle"
  106. Bind#10
  107. oacdty=112 mxl=4000(4000) mxlc=00 mal=00 scl=00 pre=00
  108. oacflg=01 fl2=0001 frm=01 csi=00 siz=4000 off=0
  109. kxsbbbfp=b72b7700 bln=4000 avl=4000 flg=05
  110. value=
  111. Dump of memory from 0xB72B7700 to 0xB72B86A0
  112. B72B7700 01002600 03000802 00000100 013844FA [.&...........D8.]
  113. B72B7710 02000000 16000100 01000000 00000000 [................]
  114. B72B7720 D36EF96C 4EE43585 00000000 00000000 [l.n..5.N........]
  115. B72B7730 00000000 00000000 00000000 00000000 [................]
  116. Repeat 246 times
  117. Bind#11
  118. oacdty=02 mxl=22(22) mxlc=00 mal=00 scl=00 pre=00
  119. oacflg=01 fl2=0001 frm=00 csi=00 siz=24 off=0
  120. kxsbbbfp=b72b8a70 bln=22 avl=00 flg=05
  121. Bind#12
  122. oacdty=01 mxl=32(00) mxlc=00 mal=00 scl=00 pre=00
  123. oacflg=11 fl2=0001 frm=01 csi=01 siz=32 off=0
  124. kxsbbbfp=00000000 bln=32 avl=00 flg=09
  125. Bind#13
  126. oacdty=02 mxl=22(22) mxlc=00 mal=00 scl=00 pre=00
  127. oacflg=00 fl2=0001 frm=00 csi=00 siz=24 off=0
  128. kxsbbbfp=b72b8a4c bln=22 avl=01 flg=05
  129. value=0
  130. Bind#14
  131. oacdty=01 mxl=32(05) mxlc=00 mal=00 scl=00 pre=00
  132. oacflg=11 fl2=0001 frm=01 csi=01 siz=32 off=0
  133. kxsbbbfp=bfffbf94 bln=32 avl=05 flg=09
  134. value="30255"
  135. Bind#15
  136. oacdty=23 mxl=32(00) mxlc=00 mal=00 scl=00 pre=00
  137. oacflg=11 fl2=0001 frm=00 csi=00 siz=32 off=0
  138. kxsbbbfp=00000000 bln=32 avl=00 flg=09
  139. Bind#16
  140. oacdty=02 mxl=22(22) mxlc=00 mal=00 scl=00 pre=00
  141. oacflg=00 fl2=0001 frm=00 csi=00 siz=72 off=0
  142. kxsbbbfp=b72b89f8 bln=22 avl=02 flg=05
  143. value=9
  144. Bind#17
  145. oacdty=02 mxl=22(22) mxlc=00 mal=00 scl=00 pre=00
  146. oacflg=00 fl2=0001 frm=00 csi=00 siz=0 off=24
  147. kxsbbbfp=b72b8a10 bln=22 avl=02 flg=01
  148. value=2
  149. Bind#18
  150. oacdty=02 mxl=22(22) mxlc=00 mal=00 scl=00 pre=00
  151. oacflg=00 fl2=0001 frm=00 csi=00 siz=0 off=48
  152. kxsbbbfp=b72b8a28 bln=22 avl=02 flg=01
  153. value=1
  154. Bind#19
  155. oacdty=112 mxl=4000(4000) mxlc=00 mal=00 scl=00 pre=00
  156. oacflg=01 fl2=0001 frm=01 csi=00 siz=4000 off=0
  157. kxsbbbfp=b72b6740 bln=4000 avl=00 flg=05
  158. Bind#20
  159. oacdty=01 mxl=32(00) mxlc=00 mal=00 scl=00 pre=00
  160. oacflg=11 fl2=0001 frm=01 csi=01 siz=32 off=0
  161. kxsbbbfp=00000000 bln=32 avl=00 flg=09
  162. Begin cleaning out block ...
  163. Found allcommitted transactions
  164. Block cleanout record, scn: 0xffff.ffffffff ver: 0x01 opt: 0x02, entries follow...
  165. itli: 1 flg: 2 scn: 0x0000.0495ddcb
  166. itli: 2 flg: 2 scn: 0x0000.0495df3e
  167. Block cleanout under the cache...
  168. Block cleanout record, scn: 0x0000.0495df6c ver: 0x01 opt: 0x02, entries follow...
  169. itli: 1 flg: 2 scn: 0x0000.0495ddcb
  170. itli: 2 flg: 2 scn: 0x0000.0495df3e
  171. ... clean out dump complete.
  172. EXEC #2:c=2000,e=1974,p=0,cr=2,cu=2,mis=1,r=1,dep=1,og=4,tim=1331975666211048
  173. -----------------------------------
  174. Error during execution of handler in Fine Grained Auditing
  175. Audit handler : begin SEC.LOG_EMPS_SALARY(:sn, :on, :pl); end;
  176. Error Number 1 : 1435
  177. Logon user : SCOTT
  178. Object Schema: SCOTT, Object Name: EMPLOYEES, Policy Name: AUDIT_EMPS_SALARY
  179. WAIT #1: nam='log file sync' ela= 30974 buffer#=1013 p2=0 p3=0 obj#=-1 tim=1331975666243042
  180. WAIT #1: nam='SQL*Net break/reset to client' ela= 4 driver id=1650815232 break?=1 p3=0 obj#=-1 tim=1331975666244102
  181. WAIT #1: nam='SQL*Net break/reset to client' ela= 85 driver id=1650815232 break?=0 p3=0 obj#=-1 tim=1331975666244210
  182. WAIT #1: nam='SQL*Net message to client' ela= 2 driver id=1650815232 #bytes=1 p3=0 obj#=-1 tim=1331975666244236
  183. WAIT #1: nam='SQL*Net message from client' ela= 0 driver id=1650815232 #bytes=1 p3=0 obj#=-1 tim=1331975666244269
  184. STAT #1 id=1 cnt=0 pid=0 pos=1 obj=21358 op='TABLE ACCESS FULL EMPLOYEES (cr=0 pr=0 pw=0 time=784 us)'
  185. WAIT #0: nam='SQL*Net message to client' ela= 3 driver id=1650815232 #bytes=1 p3=0 obj#=-1 tim=1331975666245227
  186. *** 2013-03-22 17:04:48.216
  187. Received ORADEBUG command 'tracefile_name'from process Unix process pid: 30298, image:
  • 1
  • 2
  • 下一页

相关内容