ORA-65096: 公用用户名或角色名无效引发的思考

解决方式：

alter session set "_ORACLE_SCRIPT"=true;
alter session set container=PDBORCL;

原因：

查官方文档得知“试图创建一个通用用户，必需要用C##或者c##开头”，这时候心里会有疑问，什么是common user？不管先建成功了再说

create C##user test identifed by test;

创建成功

CDB和PDB是ORACLE 12C一个很亮的新特性,由于他们的引入导致传统的ORACLE数据库管理理念不少发生了改变,这里列举了部分最基本的cdb和pdb管理方式
cdb和pdb关系图

ORACLE 12C版本

  SQL> select  * from  v$version;
 BANNER                                                                               CON_ID
 -------------------------------------------------------------------------------- ----------
 Oracle Database  12c Enterprise Edition Release 12.1.0.1.0 - 64bit Production              0
 PL/SQL Release 12.1.0.1.0 - Production                                                    0
 CORE    12.1.0.1.0      Production                                                        0
 TNS for  Linux: Version 12.1.0.1.0 - Production                                            0
 NLSRTL Version 12.1.0.1.0 - Production                                                    0
 

启动关闭pdb

  SQL> startup
 ORACLE instance started.
 Total System Global  Area  597098496 bytes
 Fixed Size                   2291072 bytes
 Variable Size              272632448 bytes
 Database  Buffers          314572800 bytes
 Redo Buffers                7602176 bytes
 Database  mounted.
 Database  opened.
 SQL> select  con_id,dbid,NAME,OPEN_MODE from  v$pdbs;
     CON_ID       DBID NAME                            OPEN_MODE
 ---------- ---------- ------------------------------ ----------
          2 4048821679 PDB$SEED                       READ  ONLY
          3 3313918585 PDB1                           MOUNTED
          4 3872456618 PDB2                           MOUNTED
 SQL> alter  PLUGGABLE database  pdb1 open;
 Pluggable database  altered.
 SQL> select  con_id,dbid,NAME,OPEN_MODE from  v$pdbs;
     CON_ID       DBID NAME                            OPEN_MODE
 ---------- ---------- ------------------------------ ----------
          2 4048821679 PDB$SEED                       READ  ONLY
          3 3313918585 PDB1                           READ  WRITE
          4 3872456618 PDB2                           MOUNTED
 SQL> alter  PLUGGABLE database  pdb1 close;
 Pluggable database  altered.
 SQL> select  con_id,dbid,NAME,OPEN_MODE from  v$pdbs;
     CON_ID       DBID NAME                            OPEN_MODE
 ---------- ---------- ------------------------------ ----------
          2 4048821679 PDB$SEED                       READ  ONLY
          3 3313918585 PDB1                           MOUNTED
          4 3872456618 PDB2                           MOUNTED
 SQL> alter  PLUGGABLE database  all  open;
 Pluggable database  altered.
 SQL> select  con_id,dbid,NAME,OPEN_MODE from  v$pdbs;
     CON_ID       DBID NAME                            OPEN_MODE
 ---------- ---------- ------------------------------ ----------
          2 4048821679 PDB$SEED                       READ  ONLY
          3 3313918585 PDB1                           READ  WRITE
          4 3872456618 PDB2                           READ  WRITE
 SQL> alter  PLUGGABLE database  all  close;
 Pluggable database  altered.
 SQL> select  con_id,dbid,NAME,OPEN_MODE from  v$pdbs;
     CON_ID       DBID NAME                            OPEN_MODE
 ---------- ---------- ------------------------------ ----------
          2 4048821679 PDB$SEED                       READ  ONLY
          3 3313918585 PDB1                           MOUNTED
          4 3872456618 PDB2                           MOUNTED
 SQL> alter  session set  container=pdb1;
 Session altered.
 SQL> startup
 Pluggable Database  opened.
 SQL>  select  con_id,dbid,NAME,OPEN_MODE from  v$pdbs;
     CON_ID       DBID NAME                            OPEN_MODE
 ---------- ---------- ------------------------------ ----------
          3 3313918585 PDB1                           READ  WRITE
 

pdb的管理可以在cdb中进行也可以在pdb中进行,如果是cdb中进行,需要PLUGGABLE关键字,如果是pdb中直接和普通数据库一样

登录pdb

  [oracle@xifenfei ~]$ lsnrctl status
 LSNRCTL for  Linux: Version 12.1.0.1.0 - Production on  12-MAY-2013 08:07:02
 Copyright (c) 1991, 2013, Oracle.  All  rights reserved.
 Connecting to  (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=xifenfei)(PORT=1521)))
 STATUS of  the LISTENER
 ------------------------
 Alias                     LISTENER
 Version                   TNSLSNR for  Linux: Version 12.1.0.1.0 - Production
 Start Date                 11-MAY-2013 18:30:54
 Uptime                    0 days 13 hr. 36 min. 8 sec
 Trace Level                off
 Security                  ON: Local  OS Authentication
 SNMP                      OFF
 Listener Parameter File   /u01/app/grid/product/12.1/network/admin/listener.ora
 Listener Log File         /u01/app/grid/diag/tnslsnr/xifenfei/listener/alert/log.xml
 Listening Endpoints Summary...
   (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC1521)))
   (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=xifenfei)(PORT=1521)))
   (DESCRIPTION=(ADDRESS=(PROTOCOL=tcps)(HOST=xifenfei)(PORT=5500))
 (Security=(my_wallet_directory=/u01/oracle/12.1/db_1/admin/cdb/xdb_wallet))(Presentation=HTTP)(Session=RAW))
 Services Summary...
 Service "+ASM"  has 1 instance(s).
   Instance "+ASM", status READY, has 1 handler(s) for  this service...
 Service "cdb"  has 1 instance(s).
   Instance "cdb", status READY, has 1 handler(s) for  this service...
 Service "cdbXDB"  has 1 instance(s).
   Instance "cdb", status READY, has 1 handler(s) for  this service...
 Service "pdb1"  has 1 instance(s).
   Instance "cdb", status READY, has 1 handler(s) for  this service...
 Service "pdb2"  has 1 instance(s).
   Instance "cdb", status READY, has 1 handler(s) for  this service...
 The command completed successfully
 [oracle@xifenfei ~]$ tnsping pdb1
 TNS Ping Utility for  Linux: Version 12.1.0.1.0 - Production on  12-MAY-2013 08:07:09
 Copyright (c) 1997, 2013, Oracle.  All  rights reserved.
 Used parameter files:
 Used TNSNAMES adapter to  resolve the alias
 Attempting to  contact (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST = xifenfei)
 (PORT = 1521)) (CONNECT_DATA = (SERVER = DEDICATED) (SERVICE_NAME = pdb1)))
 OK (20 msec)
 [oracle@xifenfei ~]$ sqlplus sys/xifenfei@pdb1 as  sysdba
 SQL*Plus: Release 12.1.0.1.0 Production on  Sun May 12 08:08:02 2013
 Copyright (c) 1982, 2013, Oracle.  All  rights reserved.
 Connected to:
 Oracle Database  12c Enterprise Edition Release 12.1.0.1.0 - 64bit Production
 With  the Partitioning, Automatic Storage Management, OLAP, Advanced Analytics
 and  Real  Application Testing options
 SQL> show con_name;
 CON_NAME
 ------------------------------
 PDB1
 [oracle@xifenfei ~]$ sqlplus / as  sysdba
 SQL*Plus: Release 12.1.0.1.0 Production on  Sun May 12 08:09:14 2013
 Copyright (c) 1982, 2013, Oracle.  All  rights reserved.
 Connected to:
 Oracle Database  12c Enterprise Edition Release 12.1.0.1.0 - 64bit Production
 With  the Partitioning, Automatic Storage Management, OLAP, Advanced Analytics
 and  Real  Application Testing options
 SQL> alter  session set  container=pdb1;
 Session altered.
 SQL> show con_name;
 CON_NAME
 ------------------------------
 PDB1
 

pdb可以通过alter session container进入也可以直接通过tns方式登录

创建用户

  SQL> show con_name;
 CON_NAME
 ------------------------------
 CDB$ROOT
 SQL> select  con_id,dbid,NAME,OPEN_MODE from  v$pdbs;
     CON_ID       DBID NAME                            OPEN_MODE
 ---------- ---------- ------------------------------ ----------
          2 4048821679 PDB$SEED                       READ  ONLY
          3 3313918585 PDB1                           READ  WRITE
          4 3872456618 PDB2                           MOUNTED
 SQL> create  user  xff identified by  xifenfei;
 create  user  xff identified by  xifenfei
             *
 ERROR at  line 1:
 ORA-65096: invalid common user  or  role name
 SQL> !oerr ora 65096
 65096, 00000, "invalid common user or role name"
 // *Cause:  An attempt was made to  create  a common user  or  role with  a name
 //          that wass not  valid for  common users or  roles.  In  addition to
 //          the usual rules for  user  and  role names, common user  and  role 
 //          names must start with  C## or  c## and  consist only  of  ASCII 
 //          characters.
 // *Action: Specify a valid common user  or  role name.
 //
 SQL> create  user  c##xff identified by  xifenfei;
 User  created.
 SQL> SELECT  USERNAME,CON_ID,USER_ID FROM  CDB_USERS WHERE  USERNAME='C##XFF';
 USERNAME       CON_ID    USER_ID
 ---------- ---------- ----------
 C##XFF              1        103
 C##XFF              3        104
 SQL> alter  session set  container=pdb1;
 Session altered.
 SQL> show con_name
 CON_NAME
 ------------------------------
 PDB1
 SQL> create  user  xff identified by  xifenfei;
 User  created.
 SQL> create  user  c##abc identified by  xifenfei;
 create  user  c##abc identified by  xifenfei
             *
 ERROR at  line 1:
 ORA-65094: invalid local  user  or  role name
 

创建用户默认的是container=all,在cdb中只能创建全局用户(c##开头),会在cdb和所有的pdb中创建该用户(但是pdb中的全局用户需要另外授权才能够在pdb中访问)。在pdb中只能创建的用户为本地用户

用户授权

  SQL> grant  connect  to  c##xff;
 Grant  succeeded.
 SQL> select  GRANTEE,con_id from  cdb_ROLE_PRIVS where  GRANTED_ROLE='CONNECT'  AND  GRANTEE='C##XFF';
 GRANTEE                            CON_ID
 ------------------------------ ----------
 C##XFF                                  1
 SQL> grant  resource to  c##xff container=all;
 Grant  succeeded.
 SQL>  select  GRANTEE,con_id from  cdb_ROLE_PRIVS where  GRANTED_ROLE='RESOURCE'  AND   GRANTEE='C##XFF';
 GRANTEE                            CON_ID
 ------------------------------ ----------
 C##XFF                                  1
 C##XFF                                  3
 

用户授权默认情况下是只会给当前container,在cdb中也可以指定container=all,对所有open的pdb且存在该用户都进行授权

修改参数

  SQL> alter  system set  open_cursors=500 container=all;
 System altered.
 SQL> conn sys/xifenfei@pdb1 as  sysdba
 Connected.
 SQL> show parameter open_cursors;
 NAME                                  TYPE        VALUE
 ------------------------------------ ----------- ------------------------------
 open_cursors                         integer      500
 SQL>  alter  system set  open_cursors=100;
  alter  system set  open_cursors=100
 *
 ERROR at  line 1:
 ORA-01219: database  or  pluggable database  not  open: queries allowed on  fixed
 tables or  views only
 SQL> alter  database  open;
 Database  altered.
 SQL> alter  system set  open_cursors=100;
 System altered.
 SQL>  show parameter open_cursors;
 NAME                                  TYPE        VALUE
 ------------------------------------ ----------- ------------------------------
 open_cursors                         integer      100
 SQL> conn / as  sysdba
 Connected.
 SQL> show parameter open_cursors;
 NAME                                  TYPE        VALUE
 ------------------------------------ ----------- ------------------------------
 open_cursors                         integer      500
 