SlideShare ist ein Scribd-Unternehmen logo
1 von 2
Downloaden Sie, um offline zu lesen
O/S Authentication on Windows                                                    Networking Tips




How can I get Oracle on Windows to accept my Windows login
credentials?

The real question here is this: you make sure you’re a member of the ORA_DBA local group
on your Windows server. That gives you the right to connect to the database as a
privileged User (one who is able to perform the 5 privileged actions –startup, shutdown,
backup, recover and create) using Operating System authentication. You fire up server
manager (or SQL*Plus) and type the usual O/S authentication connect string:

Connect / as sysdba


Whereupon you get an ORA-01031: insufficient privileges error message!

What is going on? Surely, membership of the ORA_DBA group (or the ORA_<sid>_DBA
equivalent) should be sufficient to allow O/S authentication connections?

Unfortunately not, and it’s all to do with the pesky sqlnet.ora file. For Windows
installations, it may include the following line:

SQLNET.AUTHENTICATION_SERVICES= (NTS)


That value NTS may also be set to NONE. Or the line may be missing entirely. Whatever,
the problem is that unless it does exist, and unless it is set to NTS, then Operating System
authentication won’t work, even if you are member of the ORA_DBA group.

As proof, I offer the following small demonstration:

D:oracleora91networkadmin>type sqlnet.ora
SQLNET.AUTHENTICATION_SERVICES= (NONE)
NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME)

D:oracleora91networkadmin>sqlplus "/ as sysdba"
SQL*Plus: Release 9.0.1.0.1 - Production on Tue Mar 19 06:06:18 2002
(c) Copyright 2001 Oracle Corporation. All rights reserved.
ERROR:
ORA-01031: insufficient privileges

D:oracleora91networkadmin>type sqlnet.ora
                                                <==note the missing line!
NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME)

D:oracleora91networkadmin>sqlplus "/ as sysdba"
SQL*Plus: Release 9.0.1.0.1 - Production on Tue Mar 19 06:06:42 2002
(c) Copyright 2001 Oracle Corporation. All rights reserved.
ERROR:
ORA-01031: insufficient privileges




Copyright © Howard Rogers 2002            19/03/2002                                   Page 1 of 2
O/S Authentication on Windows                                                   Networking Tips

D:oracleora91networkadmin>type sqlnet.ora
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME)

D:oracleora91networkadmin>sqlplus "/ as sysdba"
SQL*Plus: Release 9.0.1.0.1 - Production on Tue Mar 19 06:07:03 2002
(c) Copyright 2001 Oracle Corporation. All rights reserved.

Connected to:
Oracle9i Enterprise Edition Release 9.0.1.1.1 - Production
With the Partitioning option
JServer Release 9.0.1.1.1 – Production


Here the three cases are demonstrated one after the other. In the first, the sqlnet.ora
parameter is set to NONE. The request to connect ‘AS SYSDBA’ using O/S authentication
fails. In the second, the relevant parameter is missing entirely; again the connection
attempt fails. Only in the third, when the parameter is set to NTS does the connection
succeed.

This isn’t an issue on Unix. There, membership of the dba group in /etc/groups is
sufficient in and of itself to switch on O/S authentication. It’s purely a Windows problem.




Copyright © Howard Rogers 2002           19/03/2002                                   Page 2 of 2

Weitere ähnliche Inhalte

Andere mochten auch

Andere mochten auch (8)

Beginbackup
BeginbackupBeginbackup
Beginbackup
 
Rollbackshrinks
RollbackshrinksRollbackshrinks
Rollbackshrinks
 
Rollback1555s
Rollback1555sRollback1555s
Rollback1555s
 
Database architectureby howard
Database architectureby howardDatabase architectureby howard
Database architectureby howard
 
Sql scripting sorcerypresentation
Sql scripting sorcerypresentationSql scripting sorcerypresentation
Sql scripting sorcerypresentation
 
Userpasswrd
UserpasswrdUserpasswrd
Userpasswrd
 
Rollbacksizes
RollbacksizesRollbacksizes
Rollbacksizes
 
Applyinga blockcentricapproachtotuning
Applyinga blockcentricapproachtotuningApplyinga blockcentricapproachtotuning
Applyinga blockcentricapproachtotuning
 

Ähnlich wie Windowsosauthent

SQL Server 2000 Installation Rollout Backout Plan
SQL Server 2000 Installation Rollout Backout PlanSQL Server 2000 Installation Rollout Backout Plan
SQL Server 2000 Installation Rollout Backout Plan
► Supreme Mandal ◄
 
Introduction to Threading in .Net
Introduction to Threading in .NetIntroduction to Threading in .Net
Introduction to Threading in .Net
webhostingguy
 
Dr3150012012202 1.getting started
Dr3150012012202 1.getting startedDr3150012012202 1.getting started
Dr3150012012202 1.getting started
Namgu Jeong
 
Dell open manage essentials install
Dell open manage essentials installDell open manage essentials install
Dell open manage essentials install
Svetlana Kachintseva
 
Steps for upgrading the database to 10g release 2
Steps for upgrading the database to 10g release 2Steps for upgrading the database to 10g release 2
Steps for upgrading the database to 10g release 2
nesmaddy
 
你所不知道的Oracle后台进程Smon功能
你所不知道的Oracle后台进程Smon功能你所不知道的Oracle后台进程Smon功能
你所不知道的Oracle后台进程Smon功能
maclean liu
 

Ähnlich wie Windowsosauthent (20)

SQL Server 2000 Installation Rollout Backout Plan
SQL Server 2000 Installation Rollout Backout PlanSQL Server 2000 Installation Rollout Backout Plan
SQL Server 2000 Installation Rollout Backout Plan
 
Ora12154
Ora12154Ora12154
Ora12154
 
patchVantage Cloud Starter Pack
patchVantage Cloud Starter Pack patchVantage Cloud Starter Pack
patchVantage Cloud Starter Pack
 
Advanced Programming Using Visual Basic. NET
Advanced Programming Using Visual Basic. NETAdvanced Programming Using Visual Basic. NET
Advanced Programming Using Visual Basic. NET
 
Introduction to Threading in .Net
Introduction to Threading in .NetIntroduction to Threading in .Net
Introduction to Threading in .Net
 
Oracle Database: Checklist Connection Issues
Oracle Database: Checklist Connection IssuesOracle Database: Checklist Connection Issues
Oracle Database: Checklist Connection Issues
 
Dr3150012012202 1.getting started
Dr3150012012202 1.getting startedDr3150012012202 1.getting started
Dr3150012012202 1.getting started
 
Dell open manage essentials install
Dell open manage essentials installDell open manage essentials install
Dell open manage essentials install
 
Data recovery consistency with check db
Data recovery consistency with check dbData recovery consistency with check db
Data recovery consistency with check db
 
oracle dba
oracle dbaoracle dba
oracle dba
 
Windows Attacks AT is the new black
Windows Attacks   AT is the new blackWindows Attacks   AT is the new black
Windows Attacks AT is the new black
 
Windows attacks - AT is the new black
Windows attacks - AT is the new blackWindows attacks - AT is the new black
Windows attacks - AT is the new black
 
SAP Ecc 5.0 installation
SAP Ecc 5.0 installationSAP Ecc 5.0 installation
SAP Ecc 5.0 installation
 
Steps for upgrading the database to 10g release 2
Steps for upgrading the database to 10g release 2Steps for upgrading the database to 10g release 2
Steps for upgrading the database to 10g release 2
 
Crs issue commands
Crs issue commandsCrs issue commands
Crs issue commands
 
你所不知道的Oracle后台进程Smon功能
你所不知道的Oracle后台进程Smon功能你所不知道的Oracle后台进程Smon功能
你所不知道的Oracle后台进程Smon功能
 
Sql basics 2
Sql basics   2Sql basics   2
Sql basics 2
 
Ibm db2 case study
Ibm db2 case studyIbm db2 case study
Ibm db2 case study
 
Uploading certificate with oracle wallet manager and orapki utilities
Uploading certificate with oracle wallet manager and orapki utilitiesUploading certificate with oracle wallet manager and orapki utilities
Uploading certificate with oracle wallet manager and orapki utilities
 
Blind sql injection
Blind sql injectionBlind sql injection
Blind sql injection
 

Mehr von oracle documents

Mehr von oracle documents (20)

Whatistnsnames
WhatistnsnamesWhatistnsnames
Whatistnsnames
 
Whatisadatabaselink
WhatisadatabaselinkWhatisadatabaselink
Whatisadatabaselink
 
Varraysandnestedtables
VarraysandnestedtablesVarraysandnestedtables
Varraysandnestedtables
 
Usertracing
UsertracingUsertracing
Usertracing
 
Userlimit
UserlimitUserlimit
Userlimit
 
Undo internalspresentation
Undo internalspresentationUndo internalspresentation
Undo internalspresentation
 
Undo internals paper
Undo internals paperUndo internals paper
Undo internals paper
 
Tablespacelmt
TablespacelmtTablespacelmt
Tablespacelmt
 
Tablerename
TablerenameTablerename
Tablerename
 
Sql scripting sorcerypaper
Sql scripting sorcerypaperSql scripting sorcerypaper
Sql scripting sorcerypaper
 
Sql for dbaspresentation
Sql for dbaspresentationSql for dbaspresentation
Sql for dbaspresentation
 
Sequencereset
SequenceresetSequencereset
Sequencereset
 
Rollbacklmt
RollbacklmtRollbacklmt
Rollbacklmt
 
Rollbackblocking
RollbackblockingRollbackblocking
Rollbackblocking
 
Redosize
RedosizeRedosize
Redosize
 
Real liferecoverypresentation
Real liferecoverypresentationReal liferecoverypresentation
Real liferecoverypresentation
 
Real liferecoverypaper
Real liferecoverypaperReal liferecoverypaper
Real liferecoverypaper
 
Perfstats
PerfstatsPerfstats
Perfstats
 
Oracledates
OracledatesOracledates
Oracledates
 
Nologging
NologgingNologging
Nologging
 

Windowsosauthent

  • 1. O/S Authentication on Windows Networking Tips How can I get Oracle on Windows to accept my Windows login credentials? The real question here is this: you make sure you’re a member of the ORA_DBA local group on your Windows server. That gives you the right to connect to the database as a privileged User (one who is able to perform the 5 privileged actions –startup, shutdown, backup, recover and create) using Operating System authentication. You fire up server manager (or SQL*Plus) and type the usual O/S authentication connect string: Connect / as sysdba Whereupon you get an ORA-01031: insufficient privileges error message! What is going on? Surely, membership of the ORA_DBA group (or the ORA_<sid>_DBA equivalent) should be sufficient to allow O/S authentication connections? Unfortunately not, and it’s all to do with the pesky sqlnet.ora file. For Windows installations, it may include the following line: SQLNET.AUTHENTICATION_SERVICES= (NTS) That value NTS may also be set to NONE. Or the line may be missing entirely. Whatever, the problem is that unless it does exist, and unless it is set to NTS, then Operating System authentication won’t work, even if you are member of the ORA_DBA group. As proof, I offer the following small demonstration: D:oracleora91networkadmin>type sqlnet.ora SQLNET.AUTHENTICATION_SERVICES= (NONE) NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME) D:oracleora91networkadmin>sqlplus "/ as sysdba" SQL*Plus: Release 9.0.1.0.1 - Production on Tue Mar 19 06:06:18 2002 (c) Copyright 2001 Oracle Corporation. All rights reserved. ERROR: ORA-01031: insufficient privileges D:oracleora91networkadmin>type sqlnet.ora <==note the missing line! NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME) D:oracleora91networkadmin>sqlplus "/ as sysdba" SQL*Plus: Release 9.0.1.0.1 - Production on Tue Mar 19 06:06:42 2002 (c) Copyright 2001 Oracle Corporation. All rights reserved. ERROR: ORA-01031: insufficient privileges Copyright © Howard Rogers 2002 19/03/2002 Page 1 of 2
  • 2. O/S Authentication on Windows Networking Tips D:oracleora91networkadmin>type sqlnet.ora SQLNET.AUTHENTICATION_SERVICES= (NTS) NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME) D:oracleora91networkadmin>sqlplus "/ as sysdba" SQL*Plus: Release 9.0.1.0.1 - Production on Tue Mar 19 06:07:03 2002 (c) Copyright 2001 Oracle Corporation. All rights reserved. Connected to: Oracle9i Enterprise Edition Release 9.0.1.1.1 - Production With the Partitioning option JServer Release 9.0.1.1.1 – Production Here the three cases are demonstrated one after the other. In the first, the sqlnet.ora parameter is set to NONE. The request to connect ‘AS SYSDBA’ using O/S authentication fails. In the second, the relevant parameter is missing entirely; again the connection attempt fails. Only in the third, when the parameter is set to NTS does the connection succeed. This isn’t an issue on Unix. There, membership of the dba group in /etc/groups is sufficient in and of itself to switch on O/S authentication. It’s purely a Windows problem. Copyright © Howard Rogers 2002 19/03/2002 Page 2 of 2