Re: RMAN v Control Files

Noons wrote:
> Following up on Holger Baer, 18 Feb 2003:
>

[..]

>
> I understand that, but what are the "preferred credentials" in
> terms of Windows userid? I know where to change them, but I don't
> know where to check the contents of the default one. And is it used
> by RMAN itself, or Enterprise Manager, or the Management server or the
> Agent? Or all?

The preferred credentials are the account information that is used to authenticate against the server you're connecting to. With that information the Agent (which is typically running as localsystem) will get an security information record (token) that allows it to act as that account. So Enterprise Manager/Management server store the preferred credentials (in the simplest case administrator) and when starting the job send them to the Agent which is allready running and uses the credentials to get the same rights as if the user logs on locally.

As for the default one, I assume you mean the <DEFAULT> entry in the list of the preferred credentials in Enterprise Manager. This is used whenever there is no specific entry for the node.

What happens when there is nothing in for <Default>? I've got to admit that I don't know.

>
> The problem is that this is a highly secure environment
> and the default accounts in Windows have been modified
> extensively to tighten the darn thing up. Need I say the group
> who does that understands nothing about Oracle?

Wouldn't be too much a problem if they can explain to you what they did, and as well if you can tell them exactly what you need.

Although I'm sure you know that yourself here's a few things worth checking:

• who installed the oracle software (I've had quite a few problems on a inherited system until I realised that the installation was completely bogus...)
• what userid is running the intelligent agent (localsystem by default)
• have you set the preferred credentials specifically for the node in EM
• can you do sqlplus "/ as sysdba" as that user when connected locally
• is that user a domain user / local user (domain user can be a pain sometimes): with a domain user you might need to prefix the windows domain: my_domain\my_admin_user
• can you run a simple select through EM on that node

... and so on

> It's caused me so many problems I really wish I was running
> Unix!!!
>

Having nearly NULL experience with Linux, I can't comment on this. But having read about Howard's transformation from Saul to Paul, I think I've got to broaden my experience....   :-)

I've got a suspended project with Enterprise Manager at work which might be worth resuming if you're really stuck and check up what else could be necessary in your case.

But this won't happen before tomorrow...

Regards,

Holger Received on Tue Feb 18 2003 - 07:06:35 CST