Re: Problems with OS Users / Full Ex/Im-port to New Instance, NT

Subject: NT Users as ORACLE OS Authentication users - '.' problem Posted on: 02-Dec-1997 02:44:36

RDBMS Version: V7.3.3.3 + Patch V7.3.3.4 Error Number (if applicable):
Operating System and Version: NT V4
Tool (i.e. SQL*Loader, Import, etc.): All Tool Version:

The character '.' (dot/period) is a valid NT username character, it does not appear to be a valid Oracle username character. We are deploying a large customer system on Oracle D2000/V7.3.3.4. on NT/SE (Security Enhanced). NT/SE provides MAC (Mandatory Access Control - a mechanism for restricting access to data on a security basis). NT/SE alters the username when the user is running at a different MAC(security) level. It does this by appending ".x" to the NT username. This in turn means that the NT username presented to Oracle has a '.' in it. This means that OS authentication cannot be used as the OS name is not valid.

Are there any workrounds, e.g. name character mapping, name aliasing that would enable OS authentication to work.
Alternatively (as all the applications are written to assume OS autentication) is there a quick fix to modify all the applications/turn OS into DB automatically.

From: David Hunter
Subject: Re : NT Users as ORACLE OS Authentication users - '.' problem Posted on: 03-Dec-1997 06:36:48
Steve,

I'm looking into this. I'll give you answer soonest.

Dave Hunter
Workgroup Technologies Support
Oracle Corp

From: Steve Timperley
Subject: Re : Re : NT Users as ORACLE OS Authentication users - '.' problem Posted on: 17-Dec-1997 00:45:37
Can I chase you along on this asI'd appreciate info on what is likely to be the best
solution/compromise.

Cheers. Gus.

From: David Hunter
Subject: Re : Re : Re : NT Users as ORACLE OS Authentication users - '.' problem
Posted on: 17-Dec-1997 08:42:24
Hi Steve,

Try creating the username in the database surrounding by quotes. I.E.

"dogbert.x"

A username must begin with a letter, consist only of alphanumeric characters and the special characters $, _, and #, and be less than or equal to 30 characters. If it contains other characters, it must be enclosed in double quotation marks. It also may not be a reserved word.

Dave Hunter
Oracle Support

From: Lars Bo Vanting
Subject: Re : Re : Re : Re : NT Users as ORACLE OS Authentication users - '.' problem
Posted on: 18-Dec-1997 00:24:40
Right, but then you must ALWAYS enclose the username with ", when referencing to it, e.g. as SELECT * FROM "user.x".SOMETABLE; This can of course have heavy impact on an existing application...

From: David Hunter
Subject: Re : Re : Re : Re : Re : NT Users as ORACLE OS Authentication users - '.' problem
Posted on: 18-Dec-1997 09:48:04
Right, Lars, but I can think of no other way they may be able to accomplish this at this point in time.

Dave Hunter
Oracle support

begin 666 Yassir Khogaly.vcf
M0D5'24XZ5D-!4D0-"E9%4E-)3TXZ,BXQ#0I..DMH;V=A;'D[66%S<VER#0I& M3CI987-S:7(@2VAO9V%L>0T*3U)'.D%%154-"E1)5$Q%.E-E;FEO<B!/<F%C M;&4_at_1$)!#0I414P[2$]-13M63TE#13HK-#0H,"DQ.#$@-#8P-# T,@T*5$5, M.T-%3$P[5D])0T4Z*S0T-#$Q.3 V-S<V#0I!1%([2$]-13M%3D-/1$E.1SU1 M54]4140M4%))3E1!0DQ%.CL[1FQA=" Y/3!$/3!!,3D_at_4V]U=&AL86YD)W,@ M1W)O=F4],$0],$$[0FEC:VQE>3M+96YT.T)2,2 R1$$[16YG;&%N9 T*3$%" M14P[2$]-13M%3D-/1$E.1SU154]4140M4%))3E1!0DQ%.D9L870@.3TP1#TP M03$Y(%-O=71H;&%N9"=S($=R;W9E/3!$/3!!/3!$/3!!0FEC:VQE>2P_at_2V5N M="!"4C$@,D1!/3!$/3!!16YG;&$]#0IN9 T*55),.FAT=' Z+R]W=W<N:VAO M9V%L>2YF<F5E<V5R=F4N8V\N=6L-"E523#IH='1P.B\O=W=W+F%E974N;W)G M+G5K#0I%34%)3#M04D5&.TE.5$523D54.GEA<W-I<D!K:&]G86QY+F9R965S M97)V92YC;RYU:PT*4D56.C$Y.3_at_Q,#$R5# V-3DT-%H-"D5.1#I60T%21 T* `
end Received on Mon Oct 12 1998 - 01:59:44 CDT