Re: Authentication differences between Oracle 8i and 9i

"Satinath Sarkar" <ssarkar_at_orion-gis.com> a écrit dans le message de news:a722f987.0402130707.484f1b66_at_posting.google.com...
> Here is a strange difference between Oracle 8i and 9i. Any explanation
> or workaround will be much appreciated.
>
> I have two instances of Oracle on server GISORA. Oracle 8.1.7 and
> Oracle 9.2.0. All remote o/s authentication parameters are same. Each
> instance has two test users "OPS$FRED" and "DUMMY". OPS$FRED is
> authenticated externally. DUMMY has password authentication with
> password DUMMY.
>
> I am logged into windows as FRED. Please review the following SQLPLUS
> session....
>
> c:\Documents and Settings\FRED>set
> ...
> USERDOMAIN=GISORA
> USERNAME=FRED
> ...
>
> C:\Documents and Settings\FRED>sqlplus /nolog
>
> SQL*Plus: Release 9.2.0.1.0 - Production on Thu Feb 12 09:21:09 2004
>
> Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
>
> SQL> connect dummy/""@gisora817
> Connected.
> SQL> show user
> USER is "OPS$FRED"
> SQL>
> SQL> connect dummy/""@gisora920
> ERROR:
> ORA-01017: invalid username/password; logon denied
>
>
> Warning: You are no longer connected to ORACLE.
> SQL>
>
>
> I do not understand why the exact same syntax on Oracle 8 logs me in
> as OPS$FRED and gives invalid user in Oracle 9. I have a dire need to
> login to Oracle as the current Windows user without using the standard
> syntax of SQLPLUS / or connect /. Any explanation of this mystery will
> be great and a workaround other than connect / will be icing on the
> cake....
>
> Thank you
> Satinath
> Orion Technology Inc. http://www.orion-gis.com

Add the following value:
OSAUTH_PREFIX_DOMAIN=FALSE
in your registry in the
HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE\HOME<n> key for the 9i oracle home.

This value is false by default in 8i and true in 9i. It tells if the domain name must be include or not in the user name for the external identification. The value of true is certainly most secure as it allows only the user in the specified domain to connect without a password.

Regards
Michel Cadot Received on Sat Feb 14 2004 - 09:59:47 CST