A note on ODSCOMMON Schema

When connecting to the database schema, the OID executables, such as oidctl or oidldapd servers connect as the database user ODSCOMMON. The password for ODSCOMMON is ODSCOMMON, and that password cannot be changed. There is no security risk, as it has only CONNECT privilege. Once connected as ODSCOMMON, the executable will obtain the privileges it needs via the role ODS_SERVER, which is protected by the ODS password. The password is obtained by the executable from the SYSTEM.ODSINSTANCES table. This is the password encrypted and set by the oidpasswd utility.