Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: Proxy Login on NT Problem

Re: Proxy Login on NT Problem

From: Robert Edgar <robedgar_at_hkstar.com>
Date: 1997/11/29
Message-ID: <65o2jn$6bt1@news.hk.linkage.net>#1/1

Additionaly you need to create a share on your dbserver (say "ORCL" or whatever).

This should be to an empty bottom level directory for security sake.

Then grant access to that share to a domain group and add users to that domain group that you want to have access to oracle......

The login will then work
Of course the still need and "identified externally" account in Oracle with the same name.

Points to note:
1) Remeber to relogin the client to NT after assigning to the group. A NT user only "reads" its group memberships at startup. 2) If you have a BDC on your domian there will be a timelag (15-20 mins?) for changes in group memberships to be replicated out from the PDC to all BDC's.
3) OS authentication and OS Roles both seem to wrk slightly different between 7.3.3 and 7.3.2 in some undefinable way <vbg> but seems more reliable (ie its easier to get working) under 7.3.3

Rob

Ed Jennings wrote in message <347A2C0E.E43_at_mindspring.com>...
>I'm trying to use proxy login in an NT environment and have been having
>problems getting it to work. I set the following variables in my
>init.ora file:
>
> OS_AUTHENT_PREFIX=""
> REMOTE_OS_AUTHENT=TRUE
>
>I can successfully login to the database from the NT server where I am
>running the database. However, all attempts to come in from a remote NT
>client have failed with the standard "ORA_01017 invalid
>username/password; logon denied". I've been digging into the books but
>thus far haven't come up with anything other than the above parameters
>to set. When I reset the accounts to use a password, they work fine.
>Does anyone know what I may have missed.
>
>I know this is not recommended because of the security implications.
>But my network is in a secure LAN environment with no outside
>connectivity.
>
>Ed Jennings
>Database Administrator
>Domain Technologies, Inc.
>--
>~~~~~~~~~~~~~~~~~~~~~~~~~
>jenningse_at_mindspring.com
>
>"The opinions expressed here are my own, not those of DOMAIN
>technologies"
Received on Sat Nov 29 1997 - 00:00:00 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US