OraFAQ Forum: Security » OS AUTHENTICATION SETUP PROBLEM

Home » RDBMS Server » Security » OS AUTHENTICATION SETUP PROBLEM

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

OS AUTHENTICATION SETUP PROBLEM [message #281801]

Mon, 19 November 2007 06:20

pankajkmeena
Messages: 46
Registered: September 2007

Member

i want to use os authentication for user pankajk

for this i use below procedure

alter system set OS_AUTHENT_PREFIX=" ";
(not taking null string)
alter system set remote_os_authent=true;

so final parameter setting is

NAME TYPE VALUE
=========================================================
remote_login_passwordfile string EXCLUSIVE
os_authent_prefix string
remote_os_authent boolean TRUE
remote_os_roles boolean FALSE
os_roles boolean FALSE
==========================================================
CREATE USER "pankajk" IDENTIFIED EXTERNALLY;
grant connect,resource to pankajk;

but when i try to connect as

sqlplus /nolog
connect /
it gives me error
ora-01017: invalid user name /password

this user pankajk is not in ORA_DBA group of WIN-XP OS

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281805 is a reply to message #281801]

Mon, 19 November 2007 06:32

Michel Cadot
Messages: 68756
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

Quote:

alter system set OS_AUTHENT_PREFIX=" ";
(not taking null string)

Wrong empty string is allowed.

Quote:

CREATE USER "pankajk" IDENTIFIED EXTERNALLY

Username does not begin with OS_AUTHENT_PREFIX

Posting OS name and Oracle version is not an option.

Regards
Michel

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281807 is a reply to message #281805]

Mon, 19 November 2007 06:35

pankajkmeena
Messages: 46
Registered: September 2007

Member

but when i am trying to set paramete OS_AUTHENT_PREFIX with null string it is giving error

SQL> alter system set OS_AUTHENT_PREFIX="";
alter system set OS_AUTHENT_PREFIX=""
*
ERROR at line 1:
ORA-01741: illegal zero-length identifier

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281810 is a reply to message #281807]

Mon, 19 November 2007 06:41

Michel Cadot
Messages: 68756
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

You must give a string not an identifier.

Regards
Michel

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281813 is a reply to message #281810]

Mon, 19 November 2007 06:45

pankajkmeena
Messages: 46
Registered: September 2007

Member

thankx
so if i give prefix as "OP$" then
then i have to create user in oracle as OP$pankajk

and login as
sqlplus /

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281819 is a reply to message #281813]

Mon, 19 November 2007 07:14

Michel Cadot
Messages: 68756
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

Try it.

Regards
Michel

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281911 is a reply to message #281819]

Mon, 19 November 2007 23:56

pankajkmeena
Messages: 46
Registered: September 2007

Member

I tried but unable to login
Can u plz tell me where i am wrong

SQL> select * from all_users;
USERNAME
------------------------------
SYS
SYSTEM
OUTLN
DBSNMP
WMSYS
RMAN
OP$pankajk

SQL> show parameter OS_AUTHENT_PREFIX

NAME TYPE VALUE
------------------------------------ ----------- ------
os_authent_prefix string OP$

i am trying to login as

sqlplus /

but same error

Attachment: osuser.JPG
(Size: 49.84KB, Downloaded 1547 times)

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281924 is a reply to message #281911]

Tue, 20 November 2007 00:57

Michel Cadot
Messages: 68756
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

You still not gave the requested information: OS and Oracle version.

See the usernames you displayed.
Don't you see something weird?

Regards
Michel

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281941 is a reply to message #281924]

Tue, 20 November 2007 02:07

pankajkmeena
Messages: 46
Registered: September 2007

Member

OS- WINDOWX-XP
VER-ORACLE9i

Oracle user name is in lowercae after prefix because i created it in putting double quotes because username in OS is in lowercase

i am correct or wrong

create user "OP$pankajk" identifed externally

os username is pankajk
oracle user name OP$pankajk
as OS_AUTH_PREFIX is OP$

what is wrong ????? Sad

Sad

[Updated on: Tue, 20 November 2007 02:53]

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281956 is a reply to message #281941]

Tue, 20 November 2007 03:04

Michel Cadot
Messages: 68756
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

OPS$ username should be in upper case as the other ones.

Regards
Michel

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281958 is a reply to message #281956]

Tue, 20 November 2007 03:06

pankajkmeena
Messages: 46
Registered: September 2007

Member

thankx i try it Razz

Razz

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281963 is a reply to message #281958]

Tue, 20 November 2007 03:13

pankajkmeena
Messages: 46
Registered: September 2007

Member

Embarassed

sorry still no solution

SQL> CREATE USER op$pankajk IDENTIFIED EXTERNALLY;
SQL> grant connect,resource to opP$pankajk;

SQL> select * from all_users;

USERNAME USER_ID CREATED
------------------------------ ---------- ---------
SYS 0 29-OCT-07
SYSTEM 5 29-OCT-07
OUTLN 11 29-OCT-07
DBSNMP 19 29-OCT-07
WMSYS 21 29-OCT-07
RMAN 23 29-OCT-07
OP$PANKAJK 27 20-NOV-07

again same error ORA-01017 Sad

Sad

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281965 is a reply to message #281963]

Tue, 20 November 2007 03:15

Michel Cadot
Messages: 68756
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

Connect as a known user and execute:
select sys_context('userenv','os_user') from dual;

What do you see?

Regards
Michel

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281966 is a reply to message #281965]

Tue, 20 November 2007 03:20

pankajkmeena
Messages: 46
Registered: September 2007

Member

SQL> select sys_context('userenv','os_user') from dual;

SYS_CONTEXT('USERENV','OS_USER')
--------------------------------------------------------

SBIN-CDC-ORCL\pankajk

Also have a look of my computer property page

Attachment: mycomp.JPG
(Size: 67.81KB, Downloaded 1466 times)

[Updated on: Tue, 20 November 2007 03:24]

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281969 is a reply to message #281966]

Tue, 20 November 2007 03:33

Michel Cadot
Messages: 68756
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

Either add the domain to your username as it is.
Or execute regedit and add the value OSAUTH_PREFIX_DOMAIN=FALSE to the key HKLM\Software\ORACLE\<your Oracle home name>.

Regards
Michel

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281974 is a reply to message #281969]

Tue, 20 November 2007 03:50

pankajkmeena
Messages: 46
Registered: September 2007

Member

Thankx but
That registry entry does not exist (OSAUTH_PREFIX_DOMAIN)
(FILE ATTACHED)
will i create that entry ???

Also i created user as

USERNAME USER_ID CREATED
------------------------------ ---------- ---------
OP$SBIN-CDC-ORCLPANKAJK 30 20-NOV-07

but still same error Sad

Sad

Sad

Attachment: myreg.JPG
(Size: 134.96KB, Downloaded 1671 times)

[Updated on: Tue, 20 November 2007 03:53]

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281980 is a reply to message #281974]

Tue, 20 November 2007 04:21

Michel Cadot
Messages: 68756
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

1/ Yes, you have to create the entry
2/ 'OP$SBIN-CDC-ORCLPANKAJK' <> OPS$||upper('SBIN-CDC-ORCL\pankajk')

Regards
Michel

Report message to a moderator

Re: OS AUTHENTICATION SETUP PROBLEM [message #281983 is a reply to message #281980]

Tue, 20 November 2007 04:28

pankajkmeena
Messages: 46
Registered: September 2007

Member

Razz

thankx very much
Cool

Cool

it works i create user as prefix||uppercase(domainname/username)

earlier i was omitting slash /

thankx for your help

Report message to a moderator

Previous Topic:	Fine grained access control
Next Topic:	Table auditing disabling

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Thu Apr 17 01:55:20 CDT 2025