Re: OS authentication with Oracle8i on Windows 2000 Professional

From: timkarnold <timkarnold_at_home.com>
Date: Fri, 01 Feb 2002 12:45:20 GMT
Message-ID: <A5w68.21705$8d1.7829236_at_news1.rdc1.md.home.com>


From Metalink

Microsoft Servers and Utilities Technical Forum

Displayed below are the messages of the selected thread.

Thread Status: Closed

From: Mangesh Deshpande 10-May-00 22:55
Subject: OS Authentication on NT 4.0 oracle 8.1.6

RDBMS Version: Oracle 8.1.6
Operating System and Version: NT 4.0
Error Number (if applicable): ora-01017
Product (i.e. SQL*Loader, Import, etc.): Product Version:

OS Authentication on NT 4.0 oracle 8.1.6

Hi

I have Oracle 8.1.6 on NT 4.0.
I created a test user. Added test to os_dba and administrator group. c:\>set ORACLE_SID=test
c:\>set ORACLE_HOME=d:\orant
svrmgrl>create user test identified externally; svrmgrl>grant dba to test;
c:\>sqlplus /
SQL*Plus: Release 8.1.6.0.0 - Production on Wed May 10 17:49:25 2000 (c) Copyright 1999 Oracle Corporation. All rights reserved. ERROR:
ORA-01017: invalid username/password; logon denied Enter user-name:

I updated the sqlnet.ora

SQLNET.AUTHENTICATION_SERVICES=(NTS) I see USERNAME environment variable as test also. I do this all the time on Solaris. Is there something else i need to do on NT. I don't know why it is not working. Any thoughts????????

Mangesh



From: Oracle, Melissa Holman 12-May-00 00:02 Subject: Re : OS Authentication on NT 4.0 oracle 8.1.6

I am not sure if you are using domain authentication but the default for OSAUTH_PREFIX_DOMAIN=TRUE starting with release 8.1.5.

  1. For the username use the format "DOMAIN\USERNAME" or "HOSTNAME\USERNAME" if it concerns a local OS user or set the parameter OSAUTH_PREFIX_DOMAIN to FALSE in the correct OracleHome. (HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE\HOMEx)
  2. use UPPERCASE and "" for the create user statement ex: svrmgrl>create user "MYDOMAIN\MY_OS_USER" identified externally;

Melissa Holman
Oracle Support





 Copyright (c) 1995,2000 Oracle Corporation. All Rights Reserved. Legal Notices and Terms of Use.

"F C" <future_canadian_at_hotmail.com> wrote in message news:9fd389d6.0201311949.58375665_at_posting.google.com...
> Thanks for your comments.
>
> I logged on Win 2000 as eddie and connected as sytem/manager on
> Oracle. I queried the v$session view and found ordipapa\eddie in the
> OSUSER column. Actually, ordipapa is the name of the computer and not
> the domain name.
>
> I created a new user as CREATE USER "ordipapa\eddie" IDENTIFIED
> EXTERNALLY and granted CONNECT and CREATE SESSION privileges to that
> user. No problem.
>
> I logged off and on again as eddie and entered 'sqlplus /' at the
> command prompt.
>
> I got the same message prompting for a username and then a password.
>
> I previously checked the oracle_sid parameter.
>
> I also tried to find the registry setting that disables the domain
> check. I assume it is a Win2000 setting. Can you tell me where to find
> it?
>
> Eddie J
>
> "Keith Boulton" <kboulton_at_ntlworld.com> wrote in message
 news:<b%i68.4686$sU.692003_at_news6-win.server.ntlworld.com>...
> > I thought I'd read in the documentation that you were strongly
 recommended
> > not to do this?
> >
> > timkarnold <timkarnold_at_home.com> wrote in message
> > news:pUb68.18300$8d1.6859720_at_news1.rdc1.md.home.com...
> > > However, there is a registry setting - something like
 OSAUTH_DOMAIN_PREFIX
> > > (?)
> > > that can be set to 'false' in which case the domain is not checked.
> > >
> > >
> > > "Keith Boulton" <kboulton_at_ntlworld.com> wrote in message
> > > news:gS768.686$IY1.177275_at_news2-win.server.ntlworld.com...
> > > > Had a similar experience with NT. In that case the account had to
 include
> > > > the domain name e.g. user fred in domain test had to be created as
> > > >
> > > > create user "TEST\FRED" identified externally.
> > > >
> > > > I found the id to use by logging on as the NT account I wanted to
 use,
> > > > logging in as e.g. system and looking at one of the fields of
 v$session
> > > > (client_user?) which gives the OS account in use.
> > > >
Received on Fri Feb 01 2002 - 13:45:20 CET

Original text of this message