Re: VNI-2015 LInux server / winNT station / Linux server

Joe/Kim,
It *is* a security risk. See Note 167001.1 on MetaLink. HTH
Srini Chavali
Oracle DBA
Cummins Inc

Joe Testa <teci_at_the-testas.net>@fatcity.com on 12/21/2001 07:00:17 PM

Please respond to ORACLE-L_at_fatcity.com

Sent by: root_at_fatcity.com

To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com> cc:

well if it is owned by oracle then only oracle type jobs can be executed by the (un)intelligent agent), if you needed to run a job that needed privileges outside of oracle, it wont run, hence the reason it needed to be owned and setuid of root.

is it a security risk, no doubt, would i run it on my prod machines, probably not but for development, i would.

joe

Kimberly Smith wrote:

> Well, if root is suppose to own it then how come
> when it was changed it to oracle it worked? I must
> say, I never looked but I installed the 9i OEM and
> did not run root.sh after and it still worked. Since
> I don't have root access I don't see how it could be
> owned by root. That was on HP. Just confused.
>
> -----Original Message-----
> Sent: Friday, December 21, 2001 1:35 PM
> To: Multiple recipients of list ORACLE-L
>
>
> because root is supposed to own it.
>
> root.sh sets it, last i checked,
>
> joe
>
> Kimberly Smith wrote:
>
>
>>How did root end up owning it???
>>
>>-----Original Message-----
>>Sent: Friday, December 21, 2001 10:20 AM
>>To: Multiple recipients of list ORACLE-L
>>
>>
>>Guys!!!
>>
>>I found the problem, you just needed to change the ownership of the
dbsnmp
>>file from root to oracle, after that everything is working!!!
>>
>>thanks to the people who took of their time on this one.
>>
>>Jose
>>
>>
>>
>>At 06:05 AM 12/21/01 -0800, you wrote:
>>
>>
>>>Joe;
>>>
>>>I already tried that, I went to my linux server, I installed the OMS,
it's
>>>up and working, I discovered the node and the database, the agent dsnmp
is
>>>working, I am logon as oracle, I created an account under the same name,
>>>with all the rights and roles available, I have the credentials set to
>>>this accounts for linux and oracle database user, and I am still getting
>>>the same thing!!!!
>>>
>>>And about the article from Mr. Raube (thanks for your time on this one),
I
>>>have already tried that, I was login in as a local user, I set that
>>>account with all the rights from the windows user manager, and still the
>>>same problem. I am getting desperate with this problem, because I
haven't
>>>backup my database and I don't want any unsuspected problems, please any
>>>other help would be greatly appreciate it.
>>>
>>>thanks in advance for your time and comments!!
>>>
>>>At 03:25 PM 12/20/01 -0800, you wrote:
>>>
>>>
>>>>leave windows and go to unix.
>>>>
>>>>joe
>>>>
>>>>
>>>>Joe Raube wrote:
>>>>
>>>>
>>>>
>>>>>I searched OTN and found this:
>>>>>http://otn.oracle.com/docs/products/oracle8i/doc_library/817_doc/em.817/

>>>>>
> a
>
>>85247/ch6.htm
>>
>>
>>>>>"Note:
>>>>>The Windows NT or Windows 2000 Domain User works only if the machine
is
>>>>>a primary domain controller (PDC); otherwise, jobs will fail with
>>>>>VNI-2015 "authentication error." In all non-PDC environments the
account
>>>>>must be local to the machine. "
>>>>>-Joe
>>>>>At 01:31 PM 12/20/01 -0800, you wrote:
>>>>>
>>>>>
>>>>>
>>>>>>I have a Linux server running Oracle Standart 8I, I already setup the
>>>>>>init file with the exclusive value to accept backup jobs, I also
>>>>>>created a special account with sysdba, sysoper, and dba rights and a
>>>>>>linux account same name password and with all rights to sysoper,
sysdba
>>>>>>and root groups. On the nt side I have the same account local and in
>>>>>>the domain both with the log on as batch logs from the advance
rights,
>>>>>>same password, administrator rights for both, I also have the same
name
>>>>>>and password unde the OEM as a manager with superuser rights, and I
>>>>>>have set the preferences for default node and linux node with the
same
>>>>>>name, even the service for the database is the same as sysdba, and
>>>>>>still when I try to send a job, I get this VNI-2015 and the job
reports
>>>>>>failed, I even created a file with the orapwd with the same account
>>>>>>name and the password. So if somebody could give a couple of ideas,
out
>>>>>>of this, I will appreciate it, I have read all of the messages and I
>>>>>>tried all, I have no more ideas, I thanks for your help and time on
>>>>>>this one in advance. Jose
>>>>>>
>>>>>>--
>>>>>>Please see the official ORACLE-L FAQ: http://www.orafaq.com
>>>>>>--
>>>>>>Author: tomas
>>>>>>INET: jose_at_totaltravelmarketing.com
>>>>>>
>>>>>>Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
>>>>>>San Diego, California -- Public Internet access / Mailing
Lists
>>>>>>--------------------------------------------------------------------
>>>>>>To REMOVE yourself from this mailing list, send an E-Mail message
>>>>>>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>>>>>>the message BODY, include a line containing: UNSUB ORACLE-L
>>>>>>(or the name of mailing list you want to be removed from). You may
>>>>>>also send the HELP command for other information (like subscribing).
>>>>>>
>>>>>>
>>>>--
>>>>Joe Testa, Oracle DBA
>>>>Want to have a good time with a bunch of geeks? Check out:
>>>>http://www.geekcruises.com/standard_interface/future_cruises.html
>>>>I'm presenting, when registering drop my name :)
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>--
>>>>Please see the official ORACLE-L FAQ: http://www.orafaq.com
>>>>--
>>>>Author: Joe Testa
>>>>INET: teci_at_the-testas.net
>>>>
>>>>Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
>>>>San Diego, California -- Public Internet access / Mailing Lists
>>>>--------------------------------------------------------------------
>>>>To REMOVE yourself from this mailing list, send an E-Mail message
>>>>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>>>>the message BODY, include a line containing: UNSUB ORACLE-L
>>>>(or the name of mailing list you want to be removed from). You may
>>>>also send the HELP command for other information (like subscribing).
>>>>
>>>>
>>>--
>>>Please see the official ORACLE-L FAQ: http://www.orafaq.com
>>>--
>>>Author: tomas
>>>INET: jose_at_totaltravelmarketing.com
>>>
>>>Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
>>>San Diego, California -- Public Internet access / Mailing Lists
>>>--------------------------------------------------------------------
>>>To REMOVE yourself from this mailing list, send an E-Mail message
>>>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>>>the message BODY, include a line containing: UNSUB ORACLE-L
>>>(or the name of mailing list you want to be removed from). You may
>>>also send the HELP command for other information (like subscribing).
>>>
>>>
>>--
>>Please see the official ORACLE-L FAQ: http://www.orafaq.com
>>--
>>Author: tomas
>> INET: jose_at_totaltravelmarketing.com
>>
>>Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
>>San Diego, California -- Public Internet access / Mailing Lists
>>--------------------------------------------------------------------
>>To REMOVE yourself from this mailing list, send an E-Mail message
>>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>>the message BODY, include a line containing: UNSUB ORACLE-L
>>(or the name of mailing list you want to be removed from). You may
>>also send the HELP command for other information (like subscribing).
>>
>>
>>
>
>
> --
> Joe Testa, Oracle DBA
> Want to have a good time with a bunch of geeks? Check out:
> http://www.geekcruises.com/standard_interface/future_cruises.html
> I'm presenting, when registering drop my name :)
>
>
>
>
>
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Joe Testa
> INET: teci_at_the-testas.net
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>
>

--
Joe Testa, Oracle DBA
Want to have a good time with a bunch of geeks? Check out:
http://www.geekcruises.com/standard_interface/future_cruises.html
I'm presenting, when registering drop my name :)






--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Joe Testa
  INET: teci_at_the-testas.net

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).



-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: Srini.Chavali_at_Cummins.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).