Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: OS_AUTHENT + LDAP

Re: OS_AUTHENT + LDAP

From: Sybrand Bakker <gooiditweg_at_sybrandb.demon.nl>
Date: Wed, 23 Jul 2003 22:21:47 +0200
Message-ID: <3hrthv4ph0bqhvn46vsu2u3l29rv290o7r@4ax.com>


On Wed, 23 Jul 2003 18:23:25 +0200, Markus Schmidt <markus_at_the-schmidts.de> wrote:

>Hi,
>
>I have a problem using external user authentification/roles.
>
>I created users in my Oracle 9iR2 on Linux (SLES-8) - all of them
>"identified externally".
>Then I created some roles.
>I set the init-parameters:
>OS_AUTHENT_PREFIX=""
>REMOTE_OS_AUTHENT=true
>OS_ROLES=true
>REMOTE_OS_ROLES=true
>(yes - I restarted the database)
>
>The users are managed in OpenLDAP. The roles were also created (like
>"ORA_SID_MYROLE_D").
>All users on my Linux-box (and additionally on every Windows-Box over
>Samba) are able to connect to the OS, they are authenticated against
>LDAP, there are no entries in /etc/passwd or /etc/group for these
>LDAP-managed-users.
>"whoami" and "groups" show the correct entries (identical to those in
>LDAP) after the users log in.
>But now the problem:
>If I connect to the database I get an ORA-3113. I tried 8i-clients and
>9i-clients, the result is always the same.
>If I turn off OS_ROLE/REMOTE_OS_ROLES the User can log in.
>
>Has anyone an idea?
>
>Thanks,
>
>Markus

Looks like your problem is in the
sqlnet.authentication_services line
in sqlnet.ora.
Probably it has been set to none. No idea what it should be, but likely it is documented

Sybrand Bakker, Senior Oracle DBA

To reply remove -verwijderdit from my e-mail address Received on Wed Jul 23 2003 - 15:21:47 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US