Re: Help Granting Roles thru NT

I set os_authent_prefix = ""
Since this user is a domain user the syntax is create "ISDASG\BSMITH" identifed externally;
This is done to identify a domain user. The domain being ISDASG.

Also I get an error ORA-1956 invalid command when OS_ROLES are being used, if

    I try and grant the user that role. Also this would defeat the purpose of granting roles to users thru NT.  I guess to answer your question is yes the user is creating and is working before I tried
 do this thing of granting roles to database users thru NT. I also did grant him the
role comm before I set OS_ROLES=TRUE. So after I did set OS_ROLES=TRUE I can't grant users roles because I get ORA-1956.

Hope this makes sense and helps clarify things.

Thanks in advance for any help.

ptran wrote:

> Did you create a user OS$BSMITH in Oracle and give him the role comm?
>
> Eric Mortensen wrote in message <366EDAD4.10F35BBA_at_harris.com>...
> >I have been trying to grant roles using NT using the following steps:
> >
> >On the server:
> > Set OS_ROLES = TRUE
> > In sqlnet.ora set SQLNET.AUTHENTICATION_SERVICES=(NTS)
> > create role comm identified externally;
> > grant resource to comm;
> > grant connect to comm;
> > shutdown and restart database
> >
> >I then created NT local group name ORA_DEV_COMM
> >Then added a user to that group.
> >
> >I then login as that user and ran sqlplus /@dev
> >
> >I get the folling error
> >
> >ORA-01045: user BSMITH lacks CREATE SESSION privilege; logon denied
> >
> >I am already using NT user authentication which works.
> >
> >Any help would be greatly appreciated.
> >
> >Eric Mortensen
> >emortens_at_harris.com
> >
Received on Thu Dec 10 1998 - 12:01:34 CST