Your SlideShare is downloading. ×

Windowsosauthent

270

Published on

oracle foreign key primary key constraints performance tuning MTS IOT 9i block size backup rman corrupted column drop rename recovery controlfile backup clone architecture database archives export …

oracle foreign key primary key constraints performance tuning MTS IOT 9i block size backup rman corrupted column drop rename recovery controlfile backup clone architecture database archives export dump dmp duplicate rows extents segments fragmentation hot cold blobs migration tablespace locally managed redo undo new features rollback ora-1555 shrink free space user password link TNS tnsnames.ora listener java shutdown sequence

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total Views
270
On Slideshare
0
From Embeds
0
Number of Embeds
0
Actions
Shares
0
Downloads
2
Comments
0
Likes
0
Embeds 0
No embeds

Report content
Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
No notes for slide

Transcript

  • 1. O/S Authentication on Windows Networking TipsHow can I get Oracle on Windows to accept my Windows logincredentials?The real question here is this: you make sure you’re a member of the ORA_DBA local groupon your Windows server. That gives you the right to connect to the database as aprivileged User (one who is able to perform the 5 privileged actions –startup, shutdown,backup, recover and create) using Operating System authentication. You fire up servermanager (or SQL*Plus) and type the usual O/S authentication connect string:Connect / as sysdbaWhereupon you get an ORA-01031: insufficient privileges error message!What is going on? Surely, membership of the ORA_DBA group (or the ORA_<sid>_DBAequivalent) should be sufficient to allow O/S authentication connections?Unfortunately not, and it’s all to do with the pesky sqlnet.ora file. For Windowsinstallations, it may include the following line:SQLNET.AUTHENTICATION_SERVICES= (NTS)That value NTS may also be set to NONE. Or the line may be missing entirely. Whatever,the problem is that unless it does exist, and unless it is set to NTS, then Operating Systemauthentication won’t work, even if you are member of the ORA_DBA group.As proof, I offer the following small demonstration:D:oracleora91networkadmin>type sqlnet.oraSQLNET.AUTHENTICATION_SERVICES= (NONE)NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME)D:oracleora91networkadmin>sqlplus "/ as sysdba"SQL*Plus: Release 9.0.1.0.1 - Production on Tue Mar 19 06:06:18 2002(c) Copyright 2001 Oracle Corporation. All rights reserved.ERROR:ORA-01031: insufficient privilegesD:oracleora91networkadmin>type sqlnet.ora <==note the missing line!NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME)D:oracleora91networkadmin>sqlplus "/ as sysdba"SQL*Plus: Release 9.0.1.0.1 - Production on Tue Mar 19 06:06:42 2002(c) Copyright 2001 Oracle Corporation. All rights reserved.ERROR:ORA-01031: insufficient privilegesCopyright © Howard Rogers 2002 19/03/2002 Page 1 of 2
  • 2. O/S Authentication on Windows Networking TipsD:oracleora91networkadmin>type sqlnet.oraSQLNET.AUTHENTICATION_SERVICES= (NTS)NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME)D:oracleora91networkadmin>sqlplus "/ as sysdba"SQL*Plus: Release 9.0.1.0.1 - Production on Tue Mar 19 06:07:03 2002(c) Copyright 2001 Oracle Corporation. All rights reserved.Connected to:Oracle9i Enterprise Edition Release 9.0.1.1.1 - ProductionWith the Partitioning optionJServer Release 9.0.1.1.1 – ProductionHere the three cases are demonstrated one after the other. In the first, the sqlnet.oraparameter is set to NONE. The request to connect ‘AS SYSDBA’ using O/S authenticationfails. In the second, the relevant parameter is missing entirely; again the connectionattempt fails. Only in the third, when the parameter is set to NTS does the connectionsucceed.This isn’t an issue on Unix. There, membership of the dba group in /etc/groups issufficient in and of itself to switch on O/S authentication. It’s purely a Windows problem.Copyright © Howard Rogers 2002 19/03/2002 Page 2 of 2

×