Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: OS authentication with Oracle8i on Windows 2000 Professional

Re: OS authentication with Oracle8i on Windows 2000 Professional

From: timkarnold <timkarnold_at_home.com>
Date: Fri, 01 Feb 2002 12:49:24 GMT
Message-ID: <o9w68.21707$8d1.7831979@news1.rdc1.md.home.com>


I believe it is a question of convenience vs security. . Connections from Windows 95 clients would not be considered secure since each user can manually control/set their passwords locally.

If your clients are NT workstations, this does not aply.

"Keith Boulton" <kboulton_at_ntlworld.com> wrote in message news:b%i68.4686$sU.692003_at_news6-win.server.ntlworld.com...
> I thought I'd read in the documentation that you were strongly recommended
> not to do this?
>
> timkarnold <timkarnold_at_home.com> wrote in message
> news:pUb68.18300$8d1.6859720_at_news1.rdc1.md.home.com...
> > However, there is a registry setting - something like
OSAUTH_DOMAIN_PREFIX
> > (?)
> > that can be set to 'false' in which case the domain is not checked.
> >
> >
> > "Keith Boulton" <kboulton_at_ntlworld.com> wrote in message
> > news:gS768.686$IY1.177275_at_news2-win.server.ntlworld.com...
> > > Had a similar experience with NT. In that case the account had to
> include
> > > the domain name e.g. user fred in domain test had to be created as
> > >
> > > create user "TEST\FRED" identified externally.
> > >
> > > I found the id to use by logging on as the NT account I wanted to use,
> > > logging in as e.g. system and looking at one of the fields of
v$session
> > > (client_user?) which gives the OS account in use.
> > >
> > > F C <future_canadian_at_hotmail.com> wrote in message
> > > news:9fd389d6.0201301210.2d7d5302_at_posting.google.com...
> > > > I have problems performing OS authentication with Windows 2000
> > > > Professional. Oracle Server is installed on the same
> > > >
> > > > computer.
> > > >
> > > > Here are the steps I performed :
> > > >
> > > > Step 1 - logon Win2000 as 'administrator' and create a new user
named
> > > > 'eddie'.
> > > >
> > > > Step 2 - check that my init.ora file has the following parameter
> > > > os_authent_prefix = "". (My sqlnet.ora file has the
> > > >
> > > > following parameter SQLNET.AUTHENTICATION_SERVICES= (NTS), but I
> > > > don'think it is relevant to my problem)
> > > >
> > > > Step 3 - connect as system/manager and create a new user :
> > > >
> > > > SQL> create user eddie
> > > > 2 identified externally
> > > > 3 default tablespace system
> > > > 4 quota 10 m on system
> > > > 5 /
> > > >
> > > > Utilisateur créé.
> > > >
> > > > SQL> grant create session, connect to eddie;
> > > >
> > > > Autorisation de privilèges (GRANT) acceptée.
> > > >
> > > > SQL>
> > > >
> > > > Step 4 - exit sqlplus
> > > >
> > > > Step 5 - restart windows 2000 and logon as 'eddie' (I also tried
with
> > > > logging off administrator and logging on as eddie,
> > > >
> > > > without restarting Windows, the result was the same)
> > > >
> > > > Step 6 - at the command prompt
> > > >
> > > > D:\>sqlplus /
> > > >
> > > > SQL*Plus: Release 8.1.6.0.0 - Production on Me Jan 30 11:48:10 2002
> > > >
> > > > (c) Copyright 1999 Oracle Corporation. All rights reserved.
> > > >
> > > > ERROR:
> > > > ORA-01017: invalid username/password; logon denied
> > > >
> > > > Entrez le nom utilisateur : eddie
> > > > Entrez le mot de passe :
> > > >
> > > > If OS authentification was activated, I understand that I should not
> > > > be required to enter a username. However, when I
> > > >
> > > > enter the username, I am asked to enter a password that does not
even
> > > > exist.
> > > >
> > > > Step 7 and + :
> > > >
> > > > I also tried : - the sqlplus command without the slash;
> > > > - the ops$ prefix with an ops$eddie username for Oracle and eddie
> > > > username for Windows
> > > > - the same process on another computer (also Windows 2000).
> > > >
> > > > Conclusion : it looks like Oracle does not recognize the Windows
> > > > username, unless I missed one or more steps.
> > > >
> > > > Has anyone encountered the same problem before? And most important,
> > > > how did you fix it?
> > > >
> > > > Thanks for your comments.
> > > >
> > > > Eddie J
> > >
> > >
> >
> >
>
>
Received on Fri Feb 01 2002 - 06:49:24 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US