Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: No access to instances after adding to Active Directory-Domain

Re: No access to instances after adding to Active Directory-Domain

From: Thomas Wenzl <twenzl_at_web.de>
Date: Thu, 28 Feb 2002 10:40:22 +0100
Message-ID: <a5ktsh$82b90$1@ID-91550.news.dfncis.de>


Hello Edzard,

first of all, thank you for your answer!

Edzard wrote:
> The issue with the ip-addresses is not clear, the difference in the
> third component should make no difference if the subnet maks is
> something like 255.255.0.0.

You're right, but the subnet mask is 255.255.255.0.

> Internal connect should work if the user is indirectly member of the
> local dba group on your database server.

The user connecting to the database, for example with SQL Worksheet, must be an member of the dba group?

>I think the name of this
> local group is ora_dba (with an underscore). Do you have that group in
> the local domain?

Yes, I think there is such a group. It was created due to the oracle setup, wasn't it?

>Then, again in the local domain of the DB server,
> the user from the network domain must be a member of the ora_dba
> group, directly or indirectly. For example, if your Oracle server is
> called DBSERV and if your network domain is MYCOMPANY, and if your
> user is a member of the group //MYCOMPANY/EDPDEPT then the group
> //MYCOMPANY.EDPDEPT must be a member of //DBSERV/ORA_DBA (to be
> locally defined on the database server).

I'll check this out.

> Further it may be needed to change the Startup properties of the
> Oracle services, to run under a account in the network domain.

Why? The oracle services do run unter the "Local System" account, don't they?

If there is an user "USER" on the DBSERV, which does have the same password as the user "USER" on the machine running SQL worksheet, this sould work, shuldn't it?
In this case, it isn't important whether the user USER is in the Active Directory domain
or anything else, is it? The user USER on the DBSERV must be a member of ora_dba,
but nothing else...?

Thanks in advance!

Best regards,

Thomas Received on Thu Feb 28 2002 - 03:40:22 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US