Home » RDBMS Server » Security » OS authentication (10.2.0 , oel 4)
OS authentication [message #573724] Wed, 02 January 2013 15:50 Go to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
Hi to all ;

I need some clarity regarding OS pasword authentication.
I red many articles still i need some clarity some clarity.

Testing From User A

# useradd -m -g oinstall a 
# passwd a

Changing password for user a.

New UNIX password:

BAD PASSWORD: it's WAY too short

Retype new UNIX password:

passwd: all authentication tokens updated successfully.

su - a

[a@testorcl ~]$ export ORACLE_HOME=/u01/app/oracle/product/10.2.0/db_1

$ export PATH=$PATH:$ORACLE_HOME/bin

$ export ORACLE_SID=testdb

$ sqlplus /nolog

SQL*Plus: Release 10.2.0.1.0 - Production on Thu Jan 3 01:33:49 2013

Copyright (c) 1982, 2005, Oracle.  All rights reserved.


Testing From user B :

# useradd -m -g dba b

# passwd b

Changing password for user b.

New UNIX password:

BAD PASSWORD: it's WAY too short

Retype new UNIX password:

passwd: all authentication tokens updated successfully.

su - b

Password:

$ export ORACLE_HOME=/u01/app/oracle/product/10.2.0/db_1

$ export PATH=$PATH:$ORACLE_HOME/bin

$ export ORACLE_SID=testdb

$ sqlplus /nolog

sqlplus: error while loading shared libraries: libsqlplus.so: cannot open shared object file: No such file or directory

[b@testorcl ~]$ 


I need one more clarification ..
Mostly all docs saying In UNIX platform, the special user group is called the DBA group,
but i see user a belongs with oinstall and "user b belongs with dba So user b could n't login."
Which one group is authorized to authenticate "conn /as sysdba"



[Updated on: Wed, 02 January 2013 15:52]

Report message to a moderator

Re: OS authentication [message #573728 is a reply to message #573724] Wed, 02 January 2013 17:29 Go to previous messageGo to next message
BlackSwan
Messages: 21949
Registered: January 2009
Senior Member
I suspect that the Oracle file which reside in & under ORACLE_HOME are owned by OS user "oracle" & have groupid of "oinstall"
post results from follow OS command

ls -ltr $ORACLE_HOME
Re: OS authentication [message #573731 is a reply to message #573728] Wed, 02 January 2013 18:37 Go to previous messageGo to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
Hi;

I tried to set OS authentication for local database. I have some confusions so
i was testing with user a and user b. One more question also still this parameter is
not enabled in "sqlnet.ora"

should i update SQLNET.AUTHENTICATION_SERVICES ?

SQL> !

[oracle@testorcl ~]$ ls -ltr $ORACLE_HOME
total 456
-rwxr-xr-x   1 oracle oinstall      0 Jun  7  2005 root.sh.old
-rw-r--r--   1 oracle oinstall     63 Dec 24 03:26 oraInst.loc
drwxr-x---   3 oracle oinstall   4096 Dec 24 03:26 wwg
drwxr-x---   4 oracle oinstall   4096 Dec 24 03:26 uix
drwxr-x---   3 oracle oinstall   4096 Dec 24 03:26 sqlj
drwxr-x---   3 oracle oinstall   4096 Dec 24 03:26 slax
drwxr-x---   7 oracle oinstall   4096 Dec 24 03:26 precomp
drwxr-x---   6 oracle oinstall   4096 Dec 24 03:26 perl
drwxr-x---   4 oracle oinstall   4096 Dec 24 03:26 owm
drwxr-x---   8 oracle oinstall   4096 Dec 24 03:26 ord
drwxr-x---   4 oracle oinstall   4096 Dec 24 03:26 oracore
drwxr-x---   5 oracle oinstall   4096 Dec 24 03:26 olap
drwxr-x---   6 oracle oinstall   4096 Dec 24 03:26 odbc
drwxr-x---   6 oracle oinstall   4096 Dec 24 03:26 nls
drwxr-x---   6 oracle oinstall   4096 Dec 24 03:26 md
drwxr-x---   3 oracle oinstall   4096 Dec 24 03:26 jre
drwxr-x---   7 oracle oinstall   4096 Dec 24 03:26 javavm
-rw-r-----   1 oracle oinstall     37 Dec 24 03:26 install.platform
drwxr-x---   3 oracle oinstall   4096 Dec 24 03:26 has
drwxr-x---   3 oracle oinstall   4096 Dec 24 03:26 diagnostics
drwxr-x---   3 oracle oinstall   4096 Dec 24 03:26 demo
drwxr-x---   6 oracle oinstall   4096 Dec 24 03:26 crs
drwxr-x---   4 oracle oinstall   4096 Dec 24 03:26 clone
drwxr-x---   7 oracle oinstall   4096 Dec 24 03:26 assistants
drwxr-x---   7 oracle oinstall   4096 Dec 24 03:26 plsql
drwxr-x---   2 oracle oinstall   4096 Dec 24 03:27 mesg
drwxr-x---   6 oracle oinstall   4096 Dec 24 03:27 xdk
drwxr-x---   4 oracle oinstall   4096 Dec 24 03:27 jdbc
drwxr-x---   4 oracle oinstall   4096 Dec 24 03:27 relnotes
drwxr-x---   7 oracle oinstall   4096 Dec 24 03:28 jdk
drwxr-x---   7 oracle oinstall   4096 Dec 24 03:28 oui
drwxr-x---   4 oracle oinstall   4096 Dec 24 03:28 OPatch
drwxr-x---   7 oracle oinstall   4096 Dec 24 03:28 mgw
drwxr-x---   7 oracle oinstall   4096 Dec 24 03:28 opmn
drwxr-x---   9 oracle oinstall   4096 Dec 24 03:28 sqlplus
drwxr-x---   2 oracle oinstall   4096 Dec 24 03:28 jlib
drwxr-x---   7 oracle oinstall   4096 Dec 24 03:28 css
drwxr-x---   3 oracle oinstall   4096 Dec 24 03:28 cdata
drwxr-x---  12 oracle oinstall   4096 Dec 24 03:28 srvm
drwxr-x---   7 oracle oinstall   4096 Dec 24 03:28 racg
drwxr-x---  13 oracle oinstall   4096 Dec 24 03:28 ldap
drwxr-x---  10 oracle oinstall   4096 Dec 24 03:28 ctx
drwxr-x---   2 oracle oinstall   4096 Dec 24 03:28 config
drwxr-x---  12 oracle oinstall   4096 Dec 24 03:28 sysman
drwxr-x---  11 oracle oinstall   4096 Dec 24 03:29 network
drwxr-x---   3 oracle oinstall  12288 Dec 24 03:29 lib
-rwxr-xr-x   1 oracle oinstall   9522 Dec 24 03:29 root.sh
drwxr-x---  13 oracle oinstall   4096 Dec 24 03:29 rdbms
drwxr-x---   6 oracle oinstall   4096 Dec 24 03:29 hs
drwxr-xr-x   2 oracle oinstall  12288 Dec 24 03:29 bin
drwxr-x---  15 oracle oinstall   4096 Dec 24 03:29 oc4j
drwxr-x---  12 oracle oinstall   4096 Dec 24 03:29 inventory
drwxr-x--T   3 oracle oinstall   4096 Dec 24 04:01 log
drwxr-----   3 oracle oinstall   4096 Dec 24 04:01 testorcl_testdb
drwxr-x---   5 oracle oinstall   4096 Dec 24 04:02 install
-rw-r-----   1 oracle oinstall 206486 Dec 28 23:22 sqlnet.log
drwxr-x---   7 oracle oinstall   4096 Jan  2 17:20 cfgtoollogs
drwxr-x---   2 oracle oinstall   4096 Jan  2 18:56 dbs


Re: OS authentication [message #573732 is a reply to message #573731] Wed, 02 January 2013 18:48 Go to previous messageGo to next message
BlackSwan
Messages: 21949
Registered: January 2009
Senior Member
regardless of internal Oracle permissions, OS user b lacks OS permission to invoke sqlplus

>should i update SQLNET.AUTHENTICATION_SERVICES ?
since you have NOT posted any activity involving SQL*Net, the question above is moot, irrelevant & immaterial
Re: OS authentication [message #573747 is a reply to message #573732] Wed, 02 January 2013 23:24 Go to previous messageGo to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
Thanks to your reply.

Yes you are right user b lacks to invoke sqlplus. so that i set env for both users

$ export ORACLE_HOME=/u01/app/oracle/product/10.2.0/db_1
$ export PATH=$PATH:$ORACLE_HOME/bin
$ export ORACLE_SID=testdb

Given information is not irrelevant & immaterial.
i don't know , what do you expect from me ?

Please see how both users added

Quote:
user A with oinstall
user B with dba


my straight ques is
which group is authorized to provide os authentication to os users except oracle user ?

Note : Oracle docs saying who belongs dba group (local DB connctivity)
without username/password verification can login as (connect /as sysdba)
but i checked it provide -ve result (dba group). So that i am asking.

Regards
Sham .G


[Updated on: Wed, 02 January 2013 23:32]

Report message to a moderator

Re: OS authentication [message #573851 is a reply to message #573747] Thu, 03 January 2013 11:03 Go to previous messageGo to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
May i know about the answer for my question ?

[Updated on: Thu, 03 January 2013 11:03]

Report message to a moderator

Re: OS authentication [message #573863 is a reply to message #573851] Thu, 03 January 2013 12:28 Go to previous messageGo to next message
BlackSwan
Messages: 21949
Registered: January 2009
Senior Member
>Yes you are right user b lacks to invoke sqlplus. so that i set env for both users
setting some environmental variables does NOT change the lack of OS permission by OS user b
OS user b does not have sufficient permission to even start sqlplus to attempt to log into the DB.

a necessary condition does NOT imply that it is 100% sufficient to produce desired results.
Re: OS authentication [message #573864 is a reply to message #573863] Thu, 03 January 2013 13:03 Go to previous messageGo to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
Hai Blackswan ;

Thanks for your reply. To connect as sysdba using OS Authentication ;

>> UNIX OS user must be a part of OSDBA (DBA) group. Once the user is part of OSDBA group >>

Shall we ignore ? why i am asking this .. Oracle docs saying what i above mentioned.
So i am getting confused .. Please reply for my question !

Expecting reply !



Re: OS authentication [message #573866 is a reply to message #573864] Thu, 03 January 2013 13:22 Go to previous messageGo to next message
Michel Cadot
Messages: 57612
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
You seem to want to ignore the FIRST condition which is not in Oracle documentation because it is implicit for any system and product/program: you must FIRST be able to use the program that is you must FIRST have the privileges at OS level to execute the program and any of the libraries it requires.

Your error has nothing to do with Oracle itself, it is the privileges on oracle binaries and libraries at OS level.

So back to your first error: what are the privileges on "libsqlplus.so"?

Regards
Michel

[Updated on: Thu, 03 January 2013 13:22]

Report message to a moderator

Re: OS authentication [message #573867 is a reply to message #573864] Thu, 03 January 2013 13:23 Go to previous messageGo to next message
BlackSwan
Messages: 21949
Registered: January 2009
Senior Member
[bcm@localhost ~]$ id
uid=503(bcm) gid=500(oracle) groups=500(oracle)
[bcm@localhost ~]$ ls -l $ORACLE_HOME
total 360
drwxr-xr-x  2 oracle oracle 12288 Feb 23  2011 bin
drwxr-xr-x  7 oracle oracle  4096 Oct  2  2010 ccr
drwxr-xr-x  3 oracle oracle  4096 Oct  2  2010 cdata
drwx------  4 oracle oracle  4096 Oct  2  2010 cfgtoollogs
drwxr-xr-x  4 oracle oracle  4096 Oct  2  2010 clone
drwxr-xr-x  2 oracle oracle  4096 Oct  2  2010 config
drwxr-xr-x  6 oracle oracle  4096 Oct  2  2010 crs
drwxr-xr-x  3 oracle oracle  4096 Oct  2  2010 csmig
drwxr-xr-x  6 oracle oracle  4096 Oct  2  2010 css
drwxr-xr-x 10 oracle oracle  4096 Oct  2  2010 ctx
drwxr-xr-x  7 oracle oracle  4096 Oct  2  2010 cv
drwxr-xr-x  3 oracle oracle  4096 Oct  2  2010 cvutl
drwxr-xr-x  2 oracle oracle  4096 Dec 22 11:44 dbs
drwxr-xr-x  2 oracle oracle  4096 Oct  2  2010 dc_ocm
drwxr-xr-x  4 oracle oracle  4096 Oct  2  2010 deinstall
drwxr-xr-x  3 oracle oracle  4096 Oct  2  2010 demo
drwxr-xr-x  3 oracle oracle  4096 Oct  2  2010 diagnostics
drwxr-xr-x  4 oracle oracle  4096 Oct  2  2010 dv
drwxr-xr-x  3 oracle oracle  4096 Oct  2  2010 emcli
drwxr-xr-x  3 oracle oracle  4096 Oct  2  2010 EMStage
drwxr-xr-x  3 oracle oracle  4096 Oct  2  2010 has
drwxr-xr-x  5 oracle oracle  4096 Oct  2  2010 hs
drwxr-xr-x  8 oracle oracle  4096 Oct  2  2010 ide
drwxr-xr-x  7 oracle oracle  4096 Oct  2  2010 install
-rw-r--r--  1 oracle oracle    37 Oct  2  2010 install.platform
drwxr-xr-x  2 oracle oracle  4096 Oct  2  2010 instantclient
drwxrwx--- 11 oracle oracle  4096 Feb  3  2011 inventory
drwxr-xr-x  4 oracle oracle  4096 Oct  2  2010 j2ee
drwxr-xr-x  8 oracle oracle  4096 Oct  2  2010 javavm
drwxr-xr-x  3 oracle oracle  4096 Oct  2  2010 jdbc
drwxr-xr-x  4 oracle oracle  4096 Oct  2  2010 jdev
lrwxrwxrwx  1 oracle oracle    16 Feb 23  2011 jdk -> /usr/java/latest
drwxr-xr-x  2 oracle oracle  4096 Oct  2  2010 jlib
drwxr-xr-x 12 oracle oracle  4096 Oct  2  2010 ldap
drwxr-xr-x  4 oracle oracle 12288 Oct  2  2010 lib
drwxr-----  3 oracle oracle  4096 Nov 24 20:28 localhost.localdomain_orcl
drwxr-xr-x  6 oracle oracle  4096 Feb  2  2012 log
drwxr-xr-x  6 oracle oracle  4096 Oct  2  2010 md
drwxr-xr-x  2 oracle oracle  4096 Oct  2  2010 mesg
drwxr-xr-x  6 oracle oracle  4096 Oct  2  2010 mgw
drwxr-xr-x 11 oracle oracle  4096 Oct  2  2010 network
drwxr-xr-x  6 oracle oracle  4096 Oct  2  2010 nls
drwxr-xr-x 17 oracle oracle  4096 Oct  2  2010 oc4j
drwxr-xr-x  6 oracle oracle  4096 Oct  2  2010 odbc
drwxr-xr-x  5 oracle oracle  4096 Oct  2  2010 olap
drwxr-xr-x  8 oracle oracle  4096 Oct  2  2010 OPatch
drwxr-xr-x  7 oracle oracle  4096 Oct  2  2010 opmn
drwxr-xr-x  4 oracle oracle  4096 Oct  2  2010 oracore
-rw-r-----  1 oracle oracle    62 Oct 29  2009 oraInst.loc
drwxr-xr-x  8 oracle oracle  4096 Oct  2  2010 ord
drwxr-xr-x  7 oracle oracle  4096 Oct  2  2010 oui
drwxr-xr-x  4 oracle oracle  4096 Oct  2  2010 owm
drwxr-xr-x  5 oracle oracle  4096 Oct  2  2010 perl
drwxr-xr-x  6 oracle oracle  4096 Oct  2  2010 plsql
drwxr-xr-x  7 oracle oracle  4096 Oct  2  2010 precomp
drwxr-xr-x  7 oracle oracle  4096 Oct  2  2010 racg
drwxr-xr-x 13 oracle oracle  4096 Oct  2  2010 rdbms
drwxr-xr-x  4 oracle oracle  4096 Oct  2  2010 relnotes
-rwxr-x---  1 oracle oracle   566 Oct  2  2010 root.sh
drwxr-xr-x  4 oracle oracle  4096 Oct  2  2010 scheduler
drwxr-xr-x  3 oracle oracle  4096 Oct  2  2010 slax
drwxr-xr-x  3 oracle oracle  4096 Oct  2  2010 sqlj
drwxr-xr-x  7 oracle oracle  4096 Oct  2  2010 sqlplus
drwxr-xr-x  9 oracle oracle  4096 Oct  2  2010 srvm
-rw-rw-r--  1 oracle oracle 55193 Dec 22 11:45 startup.log
drwxr-xr-x 15 oracle oracle  4096 Oct  2  2010 sysman
drwxr-xr-x  2 oracle oracle  4096 Oct  2  2010 timingframework
drwxr-xr-x  3 oracle oracle  4096 Oct  2  2010 ucp
drwxr-xr-x  4 oracle oracle  4096 Oct  2  2010 uix
drwxr-xr-x  3 oracle oracle  4096 Oct  2  2010 usm
drwxr-xr-x  2 oracle oracle  4096 Oct  2  2010 utl
drwxr-xr-x  3 oracle oracle  4096 Oct  2  2010 wwg
drwxr-xr-x  7 oracle oracle  4096 Oct  2  2010 xdk
[bcm@localhost ~]$ sqlplus / as sysdba

SQL*Plus: Release 11.2.0.2.0 Production on Thu Jan 3 11:22:14 2013

Copyright (c) 1982, 2010, Oracle.  All rights reserved.


Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.2.0 - Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options

SQL> 

Re: OS authentication [message #573869 is a reply to message #573867] Thu, 03 January 2013 13:39 Go to previous messageGo to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
Hi Michel and Blackswan;

$ find / -name libsqlplus\* -ls 2>/dev/null

1378188 1296 -rw-r-----  1 oracle   oinstall  1319436 Jun 22  2005 /u01/app/oracle/product/10.2.0/db_1/lib/libsqlplus.a
1378193 1028  -rw-r----- 1 oracle   oinstall  1047293 Jun 22  2005  /u01/app/oracle/product/10.2.0/db_1/lib/libsqlplus.so


What's the need for this question ?
So that already i set env for a and b user. Please clarify this.

Re: OS authentication [message #573870 is a reply to message #573869] Thu, 03 January 2013 13:57 Go to previous messageGo to next message
BlackSwan
Messages: 21949
Registered: January 2009
Senior Member
setting some environmental variables does NOT change the lack of OS permission by OS user b
OS user b does not have sufficient permission to even start sqlplus to attempt to log into the DB.
Re: OS authentication [message #573871 is a reply to message #573870] Thu, 03 January 2013 14:08 Go to previous messageGo to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
Yes Blackswan now you repeat same answer ,
Here we have problem with dba group and oinstall group.

If i add again user b with oinstall group , user b can connect to sqlplus. (i.e. connect /as sysdba)
problem is oinstall vs dba group only.

Quote:

why OS user with oinstall can access DB ?
why OS user with dba can't access DB ?


How can i troubleshoot ?

[Updated on: Thu, 03 January 2013 14:11]

Report message to a moderator

Re: OS authentication [message #573872 is a reply to message #573871] Thu, 03 January 2013 14:26 Go to previous messageGo to next message
BlackSwan
Messages: 21949
Registered: January 2009
Senior Member
OS file permissions control which user can run what program & is 100% independent of Oracle.
This forum is the wrong place for you to learn OS basic operations.
Re: OS authentication [message #573873 is a reply to message #573871] Thu, 03 January 2013 14:36 Go to previous messageGo to next message
Michel Cadot
Messages: 57612
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Quote:
why OS user with dba can't access DB ?


Because dba has no access rigth on the file as your "ls" showed it.

There is a perm.sh or permission.sh or the like in Oracle Home that allows you to set appropriate permissions; search for it and read the header before running it.

Regards
Michel
Re: OS authentication [message #573874 is a reply to message #573872] Thu, 03 January 2013 14:37 Go to previous messageGo to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
Hi Blackswan;

I am not learning oracle. I am trying to find real things ...
Still i am learning oracle each and every part. Thanks !

Re: OS authentication [message #573875 is a reply to message #573874] Thu, 03 January 2013 14:50 Go to previous messageGo to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
Hi Mike ;

I tried very much. No way to find answer ?
If you don't mind , could you please say some suggestions to resolve this ?
Re: OS authentication [message #573876 is a reply to message #573875] Thu, 03 January 2013 14:56 Go to previous messageGo to next message
BlackSwan
Messages: 21949
Registered: January 2009
Senior Member
>could you please say some suggestions to resolve this ?
Problem Exists Between Keyboard And Chair.

>why OS user with oinstall can access DB ?
>why OS user with dba can't access DB ?

my posted & working example showed that neither oinstall nor dba is required or contains any magic powers; since "oracle" was my groupid.
Re: OS authentication [message #573878 is a reply to message #573876] Thu, 03 January 2013 15:12 Go to previous messageGo to next message
Michel Cadot
Messages: 57612
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Quote:
If you don't mind , could you please say some suggestions to resolve this ?


Quote:
There is a perm.sh or permission.sh or the like in Oracle Home that allows you to set appropriate permissions;


I have not Linux, so don't know where it is and what is its actual name but I bet with "find" you can find it, for instance:
find $ORACLE_HOME -name 'perm*sh' -ls


Regards
Michel
Re: OS authentication [message #573880 is a reply to message #573878] Thu, 03 January 2013 15:25 Go to previous messageGo to next message
Michel Cadot
Messages: 57612
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
I found it, it is changePerm.sh and it is located in $ORACLE_HOME/install.
See MOS note 438676.1

Regards
Michel
Re: OS authentication [message #573882 is a reply to message #573880] Thu, 03 January 2013 16:47 Go to previous messageGo to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
Hi Michel;

Thanks for your help Michel !

$ find $ORACLE_HOME -name 'perm*sh' -ls
no output here ..

$ cd install
[oracle@testorcl install]$ ls -l
total 240
-rw-r-----  1 oracle oinstall      0 Jun  7  2005 createseed1.sh
-rw-r-----  1 oracle oinstall      0 Jun  7  2005 createseed.sh
-rw-r-----  1 oracle oinstall    977 Dec 24 03:29 envVars.properties
drwxr-x---  2 oracle oinstall   4096 Dec 24 03:26 jlib
-rw-r-----  1 oracle oinstall 194849 Dec 24 03:29 make.log
-rwxr-xr-x  1 oracle oinstall      0 Dec 24 03:29 oratab
-rw-r-----  1 oracle oinstall    132 Dec 24 04:01 portlist.ini
-rw-r-----  1 oracle oinstall    221 Dec 24 04:02 readme.txt
-rwxr-xr-x  1 oracle oinstall    824 Dec 24 03:28 rootdeletenode.sh
-rw-r-----  1 oracle oinstall   9646 Dec 24 03:28 rootlocaladd
-rw-r-----  1 oracle oinstall      0 Jun  7  2005 seed.log
-rw-r-----  1 oracle oinstall   2800 Jun  7  2005 templocal
drwxr-x---  2 oracle oinstall   4096 Dec 24 03:29 unix
drwxr-x---  2 oracle oinstall   4096 Dec 24 03:28 utl


Related file not found here ..

[Updated on: Thu, 03 January 2013 16:48]

Report message to a moderator

Re: OS authentication [message #573885 is a reply to message #573882] Thu, 03 January 2013 18:18 Go to previous messageGo to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
Hi Mike ;

I hope you will say some useful suggestions to resolve this problem.
Now i am focusing this , still not find any idea regarding this.


Re: OS authentication [message #573897 is a reply to message #573885] Fri, 04 January 2013 00:09 Go to previous messageGo to next message
Littlefoot
Messages: 18833
Registered: June 2005
Location: Croatia, Europe
Senior Member
Account Moderator
I might be wrong, but: you searched for perm*sh, while Michel said that it is changePerm.sh. Would wildcard replacement do any good for your search efforts?
Re: OS authentication [message #573943 is a reply to message #573897] Fri, 04 January 2013 08:52 Go to previous messageGo to next message
BlackSwan
Messages: 21949
Registered: January 2009
Senior Member
http://www.lmgtfy.com/?q=unix+permissions
Re: OS authentication [message #573974 is a reply to message #573943] Fri, 04 January 2013 12:19 Go to previous messageGo to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
Hi Littlefoot ;

find $ORACLE_HOME -name changePerm.sh -ls

No more improvement !

Quote:
To connect as sysdba using OS Authentication ; UNIX user must be a part of OSDBA group. Once the user is part of OSDBA group ,
withouut verification of username/password successfully connect to sqlplus as SYS user as sysdba.


As per above statements ;
do you think really any permission problem missing here ?

Re: OS authentication [message #573976 is a reply to message #573974] Fri, 04 January 2013 12:32 Go to previous messageGo to next message
BlackSwan
Messages: 21949
Registered: January 2009
Senior Member
in some, many, most Production DB environments, only the DBA can actually log onto the DB server; any discussion about multiple OS users is moot.
When OS users are member of correct OS group, then OS permissions are not a problem.
The only problem you have is that you do not understand how OS permission actually work.
Re: OS authentication [message #573978 is a reply to message #573974] Fri, 04 January 2013 12:35 Go to previous messageGo to next message
Michel Cadot
Messages: 57612
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Michel Cadot wrote on Thu, 03 January 2013 22:25
I found it, it is changePerm.sh and it is located in $ORACLE_HOME/install.
See MOS note 438676.1

Regards
Michel

Re: OS authentication [message #573980 is a reply to message #573978] Fri, 04 January 2013 12:58 Go to previous messageGo to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
Hi Blackswan ;

Oh ! Myself , " don't understand how OS permission actually work."
then , try to provide correct solution to me.

Quote:
Why we are making these of conversations here ?


I tried to set os authentication to few users.
I wan't to Everything i mean "what i am doing presently"
See here .. what's my current goal ? and please ignore ops$ account.
Everything is here. I want to explain clearly

why os account without dba group i.e . why i am getting error.
I have responsibility what i did ? Simply i can't say to my XXXXXX
"Problem Exists Between Keyboard And Chair "

SQL> create user ops$sam identified  externally;
User created.

SQL> grant  connect  to ops$sam;
Grant  succeeded.

useradd   -m  -g oinstall  sam
# passwd  sam
Changing  password for user sam.
New  UNIX  password:
Retype new UNIX password:
passwd: all authentication tokens updated successfully. 

# su  - sam
$ export ORACLE_HOME=/u01/app/oracle/product/10.2.0/db_1
$ export PATH=$PATH:$ORACLE_HOME/bin
$ export ORACLE_SID=testdb

$ sqlplus /
SQL*Plus: Release 10.2.0.1.0 - Production on Tue Dec 25 03:38:52 2012
Copyright (c) 1982, 2005, Oracle.  All rights reserved.

SQL> show user;
USER is "OPS$SAM"


Without understanding concept of permissions i'm not doing this ..
Please provide useful information .. but you are criticizing me!

Thanks Blackswan !!

[Updated on: Fri, 04 January 2013 13:01]

Report message to a moderator

Re: OS authentication [message #573982 is a reply to message #573980] Fri, 04 January 2013 13:03 Go to previous messageGo to next message
BlackSwan
Messages: 21949
Registered: January 2009
Senior Member
http://www.oracle.com/pls/db112/portal.portal_db?selected=25
Re: OS authentication [message #573983 is a reply to message #573980] Fri, 04 January 2013 13:04 Go to previous messageGo to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
Hi Mike ;

Sorry Mike not found.

$ pwd
/u01/app/oracle/product/10.2.0/db_1/install

$ ls -l
total 240
-rw-r-----  1 oracle oinstall      0 Jun  7  2005 createseed1.sh
-rw-r-----  1 oracle oinstall      0 Jun  7  2005 createseed.sh
-rw-r-----  1 oracle oinstall    977 Dec 24 03:29 envVars.properties
drwxr-x---  2 oracle oinstall   4096 Dec 24 03:26 jlib
-rw-r-----  1 oracle oinstall 194849 Dec 24 03:29 make.log
-rwxr-xr-x  1 oracle oinstall      0 Dec 24 03:29 oratab
-rw-r-----  1 oracle oinstall    132 Dec 24 04:01 portlist.ini
-rw-r-----  1 oracle oinstall    221 Dec 24 04:02 readme.txt
-rwxr-xr-x  1 oracle oinstall    824 Dec 24 03:28 rootdeletenode.sh
-rw-r-----  1 oracle oinstall   9646 Dec 24 03:28 rootlocaladd
-rw-r-----  1 oracle oinstall      0 Jun  7  2005 seed.log
-rw-r-----  1 oracle oinstall   2800 Jun  7  2005 templocal
drwxr-x---  2 oracle oinstall   4096 Dec 24 03:29 unix
drwxr-x---  2 oracle oinstall   4096 Dec 24 03:28 utl
Re: OS authentication [message #574030 is a reply to message #573983] Sat, 05 January 2013 13:06 Go to previous messageGo to next message
Michel Cadot
Messages: 57612
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
1/ Are you sure you are in 10.2 and not in 11g?
2/ Did you install the server part or only the client part?

Regards
Michel

Re: OS authentication [message #574036 is a reply to message #573983] Sat, 05 January 2013 14:58 Go to previous messageGo to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
Hi Mike ;

This is not 11g.

I tried to find file location but getting error

$ locate changePerm.sh
warning: locate: could not open database: /var/lib/slocate/slocate.db: No such file or directory
warning: You need to run the 'updatedb' command (as root) to create the database.
Please have a look at /etc/updatedb.conf to enable the daily cron job.
Re: OS authentication [message #574037 is a reply to message #574036] Sat, 05 January 2013 15:04 Go to previous messageGo to next message
Michel Cadot
Messages: 57612
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
I don't know locate.
Please answer my second question.

Regards
Michel
Re: OS authentication [message #574039 is a reply to message #574036] Sat, 05 January 2013 15:09 Go to previous messageGo to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
Hi Mike ;

Quote:
I tried to set OS AUTHENTICATION for local database.

so i tested with user a and user b.
if problem is resolved , i need to implement few things to xxxxxxxxxx (biological) professionals. 



[Updated on: Sat, 05 January 2013 15:10]

Report message to a moderator

Re: OS authentication [message #574040 is a reply to message #574039] Sat, 05 January 2013 15:12 Go to previous messageGo to next message
Michel Cadot
Messages: 57612
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Question
Re: OS authentication [message #574059 is a reply to message #574040] Sun, 06 January 2013 07:12 Go to previous messageGo to next message
thiyagusham
Messages: 112
Registered: April 2012
Location: Chennai
Senior Member
That is long story please leave it. Server side.
Mike , try to understand i am at under pressure.

Our env path setting :

Step 5:
Create the new groups and users

# groupadd oinstall
# groupadd dba
# useradd -g oinstall -G dba oracle
# passwd oracle


Create the directories , Oracle software will be installed.

# mkdir  -p /u01/app/oracle/product/10.2.0/db_1
#  chown  -R oracle.oinstall /u01

#  xhost  +


Re: OS authentication [message #574062 is a reply to message #574059] Sun, 06 January 2013 08:06 Go to previous message
Michel Cadot
Messages: 57612
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
I don't understand what you want to show.
Once more, answer my second question.
I'm not under pressure, I can wait as long as long as you don't answer and don't explain what your posts mean.

Regards
Michel
Previous Topic: History of privileges changes done for a DB user.
Next Topic: Password file authentication
Goto Forum:
  


Current Time: Sat Apr 19 18:08:12 CDT 2014

Total time taken to generate the page: 0.07269 seconds