RE: Oracle Client not passing Windows Domain portion of connect info ?
Date: Thu, 18 Feb 2010 13:38:34 -0500
Message-ID: <0B8FBC0B2DC0BF48A614FB38DA27014D185F75A878_at_BAEXMBX01.admin.georgianc.on.ca>
I've always considered that client version a bit suspect. Have you tried an 11g client?
From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Taylor, Chris David
Sent: Thursday, February 18, 2010 1:34 PM
To: 'Jared Still'
Cc: 'oracle-l-freelists'
Subject: RE: Oracle Client not passing Windows Domain portion of connect info ?
1.) Well, the crux of the issue is that "Domain" isn't being passed to the Oracle database from the client. The Oracle connect info is constructed of the following (when using OS Authentication): OS_AUTHENT_PREFIX, Domain/Machine Name, Username. Our db server does not have OS_AUTHENT_PREFIX set, yet my coworker beside me connects fine and his audited connection shows DOMAIN\Username. My INITIAL connection (1st attempt) fails, and shows Username only (instead of DOMAIN\Username).
2.) This is a Windows AD network. Relevant to those who might have experienced similar issues on an AD network.
3.) The INITIAL connect means, I can type SQL> connect /_at_db_name and it fails, and then type SQL> connect /_at_db_name again and it works. Strange.
HTH
Chris Taylor
Sr. Oracle DBA
Ingram Barge Company
Nashville, TN 37205
Office: 615-517-3355
Cell: 615-354-4799
Email: chris.taylor_at_ingrambarge.com<mailto:chris.taylor_at_ingrambarge.com>
CONFIDENTIALITY NOTICE: This e-mail and any attachments are confidential and may also be privileged. If you are not the named recipient, please notify the sender immediately and delete the contents of this message without disclosing the contents to anyone, using them for any purpose, or storing or copying the information on any medium.
From: Jared Still [mailto:jkstill_at_gmail.com]
Sent: Thursday, February 18, 2010 11:34 AM
To: Taylor, Chris David
Cc: oracle-l-freelists
Subject: Re: Oracle Client not passing Windows Domain portion of connect info ?
On Thu, Feb 18, 2010 at 9:20 AM, Taylor, Chris David <ChrisDavid.Taylor_at_ingrambarge.com<mailto:ChrisDavid.Taylor_at_ingrambarge.com>> wrote: Anyone know how the Oracle Client (10.2) passes the DOMAIN portion of the client info to the remote DB server? It appears that my Oracle 10.2.0.1 client (nor 10.2.0.4) are passing the DOMAIN portion. I'm on an AD network. I've turned on auditing and verified that the username passed in is "TAYLORCD" without the domain portion and receives ORA-01017 invalid username/password. Only the initial connect attempt experiences this behavior.
There really isn't enough information here to work with.
You mention AD for instance. How is that relevant? Is the Oracle account using OS authentication?
What does "Only the initial connect attempt experiences this behavior" actually mean. I can immediately think of at least two interpretations of this.
Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist
Oracle Blog: http://jkstill.blogspot.com
Home Page: http://jaredstill.com
--
This message was scanned by the Georgian College ESVA and is believed to be clean.
--
http://www.freelists.org/webpage/oracle-l
Received on Thu Feb 18 2010 - 12:38:34 CST