Home » RDBMS Server » Security » OS AUTHENTICATION SETUP PROBLEM
icon4.gif  OS AUTHENTICATION SETUP PROBLEM [message #281801] Mon, 19 November 2007 06:20 Go to next message
pankajkmeena
Messages: 46
Registered: September 2007
Member
i want to use os authentication for user pankajk

for this i use below procedure

alter system set OS_AUTHENT_PREFIX=" ";
(not taking null string)
alter system set remote_os_authent=true;

so final parameter setting is

NAME TYPE VALUE
=========================================================
remote_login_passwordfile string EXCLUSIVE
os_authent_prefix string
remote_os_authent boolean TRUE
remote_os_roles boolean FALSE
os_roles boolean FALSE
==========================================================
CREATE USER "pankajk" IDENTIFIED EXTERNALLY;
grant connect,resource to pankajk;

but when i try to connect as

sqlplus /nolog
connect /
it gives me error
ora-01017: invalid user name /password

this user pankajk is not in ORA_DBA group of WIN-XP OS
Re: OS AUTHENTICATION SETUP PROBLEM [message #281805 is a reply to message #281801] Mon, 19 November 2007 06:32 Go to previous messageGo to next message
Michel Cadot
Messages: 64103
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Quote:

alter system set OS_AUTHENT_PREFIX=" ";
(not taking null string)

Wrong empty string is allowed.

Quote:

CREATE USER "pankajk" IDENTIFIED EXTERNALLY

Username does not begin with OS_AUTHENT_PREFIX

Posting OS name and Oracle version is not an option.

Regards
Michel
Re: OS AUTHENTICATION SETUP PROBLEM [message #281807 is a reply to message #281805] Mon, 19 November 2007 06:35 Go to previous messageGo to next message
pankajkmeena
Messages: 46
Registered: September 2007
Member
but when i am trying to set paramete OS_AUTHENT_PREFIX with null string it is giving error

SQL> alter system set OS_AUTHENT_PREFIX="";
alter system set OS_AUTHENT_PREFIX=""
*
ERROR at line 1:
ORA-01741: illegal zero-length identifier
Re: OS AUTHENTICATION SETUP PROBLEM [message #281810 is a reply to message #281807] Mon, 19 November 2007 06:41 Go to previous messageGo to next message
Michel Cadot
Messages: 64103
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
You must give a string not an identifier.

Regards
Michel
Re: OS AUTHENTICATION SETUP PROBLEM [message #281813 is a reply to message #281810] Mon, 19 November 2007 06:45 Go to previous messageGo to next message
pankajkmeena
Messages: 46
Registered: September 2007
Member
thankx
so if i give prefix as "OP$" then
then i have to create user in oracle as OP$pankajk

and login as
sqlplus /
Re: OS AUTHENTICATION SETUP PROBLEM [message #281819 is a reply to message #281813] Mon, 19 November 2007 07:14 Go to previous messageGo to next message
Michel Cadot
Messages: 64103
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Try it.

Regards
Michel
Re: OS AUTHENTICATION SETUP PROBLEM [message #281911 is a reply to message #281819] Mon, 19 November 2007 23:56 Go to previous messageGo to next message
pankajkmeena
Messages: 46
Registered: September 2007
Member
I tried but unable to login
Can u plz tell me where i am wrong

SQL> select * from all_users;
USERNAME
------------------------------
SYS
SYSTEM
OUTLN
DBSNMP
WMSYS
RMAN
OP$pankajk

SQL> show parameter OS_AUTHENT_PREFIX

NAME TYPE VALUE
------------------------------------ ----------- ------
os_authent_prefix string OP$

i am trying to login as

sqlplus /

but same error
  • Attachment: osuser.JPG
    (Size: 49.84KB, Downloaded 307 times)
Re: OS AUTHENTICATION SETUP PROBLEM [message #281924 is a reply to message #281911] Tue, 20 November 2007 00:57 Go to previous messageGo to next message
Michel Cadot
Messages: 64103
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
You still not gave the requested information: OS and Oracle version.

See the usernames you displayed.
Don't you see something weird?

Regards
Michel
Re: OS AUTHENTICATION SETUP PROBLEM [message #281941 is a reply to message #281924] Tue, 20 November 2007 02:07 Go to previous messageGo to next message
pankajkmeena
Messages: 46
Registered: September 2007
Member
OS- WINDOWX-XP
VER-ORACLE9i


Oracle user name is in lowercae after prefix because i created it in putting double quotes because username in OS is in lowercase

i am correct or wrong

create user "OP$pankajk" identifed externally


os username is pankajk
oracle user name OP$pankajk
as OS_AUTH_PREFIX is OP$

what is wrong ????? Sad

[Updated on: Tue, 20 November 2007 02:53]

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281956 is a reply to message #281941] Tue, 20 November 2007 03:04 Go to previous messageGo to next message
Michel Cadot
Messages: 64103
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
OPS$ username should be in upper case as the other ones.

Regards
Michel
Re: OS AUTHENTICATION SETUP PROBLEM [message #281958 is a reply to message #281956] Tue, 20 November 2007 03:06 Go to previous messageGo to next message
pankajkmeena
Messages: 46
Registered: September 2007
Member
thankx i try it Razz
icon8.gif  Re: OS AUTHENTICATION SETUP PROBLEM [message #281963 is a reply to message #281958] Tue, 20 November 2007 03:13 Go to previous messageGo to next message
pankajkmeena
Messages: 46
Registered: September 2007
Member

Embarassed sorry still no solution

SQL> CREATE USER op$pankajk IDENTIFIED EXTERNALLY;
SQL> grant connect,resource to opP$pankajk;

SQL> select * from all_users;

USERNAME USER_ID CREATED
------------------------------ ---------- ---------
SYS 0 29-OCT-07
SYSTEM 5 29-OCT-07
OUTLN 11 29-OCT-07
DBSNMP 19 29-OCT-07
WMSYS 21 29-OCT-07
RMAN 23 29-OCT-07
OP$PANKAJK 27 20-NOV-07

again same error ORA-01017 Sad
Re: OS AUTHENTICATION SETUP PROBLEM [message #281965 is a reply to message #281963] Tue, 20 November 2007 03:15 Go to previous messageGo to next message
Michel Cadot
Messages: 64103
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Connect as a known user and execute:
select sys_context('userenv','os_user') from dual;

What do you see?

Regards
Michel
Re: OS AUTHENTICATION SETUP PROBLEM [message #281966 is a reply to message #281965] Tue, 20 November 2007 03:20 Go to previous messageGo to next message
pankajkmeena
Messages: 46
Registered: September 2007
Member
SQL> select sys_context('userenv','os_user') from dual;

SYS_CONTEXT('USERENV','OS_USER')
--------------------------------------------------------

SBIN-CDC-ORCL\pankajk

Also have a look of my computer property page
  • Attachment: mycomp.JPG
    (Size: 67.81KB, Downloaded 342 times)

[Updated on: Tue, 20 November 2007 03:24]

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281969 is a reply to message #281966] Tue, 20 November 2007 03:33 Go to previous messageGo to next message
Michel Cadot
Messages: 64103
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Either add the domain to your username as it is.
Or execute regedit and add the value OSAUTH_PREFIX_DOMAIN=FALSE to the key HKLM\Software\ORACLE\<your Oracle home name>.

Regards
Michel

icon5.gif  Re: OS AUTHENTICATION SETUP PROBLEM [message #281974 is a reply to message #281969] Tue, 20 November 2007 03:50 Go to previous messageGo to next message
pankajkmeena
Messages: 46
Registered: September 2007
Member
Thankx but
That registry entry does not exist (OSAUTH_PREFIX_DOMAIN)
(FILE ATTACHED)
will i create that entry ???

Also i created user as

USERNAME USER_ID CREATED
------------------------------ ---------- ---------
OP$SBIN-CDC-ORCLPANKAJK 30 20-NOV-07

but still same error Sad
Sad
  • Attachment: myreg.JPG
    (Size: 134.96KB, Downloaded 411 times)

[Updated on: Tue, 20 November 2007 03:53]

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281980 is a reply to message #281974] Tue, 20 November 2007 04:21 Go to previous messageGo to next message
Michel Cadot
Messages: 64103
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
1/ Yes, you have to create the entry
2/ 'OP$SBIN-CDC-ORCLPANKAJK' <> OPS$||upper('SBIN-CDC-ORCL\pankajk')

Regards
Michel
icon14.gif  Re: OS AUTHENTICATION SETUP PROBLEM [message #281983 is a reply to message #281980] Tue, 20 November 2007 04:28 Go to previous message
pankajkmeena
Messages: 46
Registered: September 2007
Member
Razz
thankx very much
Cool it works i create user as prefix||uppercase(domainname/username)

earlier i was omitting slash /

thankx for your help

Previous Topic: Fine grained access control
Next Topic: Table auditing disabling
Goto Forum:
  


Current Time: Sun Dec 04 12:46:06 CST 2016

Total time taken to generate the page: 0.10774 seconds