ºÝºÝߣ

ºÝºÝߣShare a Scribd company logo
O/S Authentication on Windows                                                    Networking Tips




How can I get Oracle on Windows to accept my Windows login
credentials?

The real question here is this: you make sure you¡¯re a member of the ORA_DBA local group
on your Windows server. That gives you the right to connect to the database as a
privileged User (one who is able to perform the 5 privileged actions ¨Cstartup, shutdown,
backup, recover and create) using Operating System authentication. You fire up server
manager (or SQL*Plus) and type the usual O/S authentication connect string:

Connect / as sysdba


Whereupon you get an ORA-01031: insufficient privileges error message!

What is going on? Surely, membership of the ORA_DBA group (or the ORA_<sid>_DBA
equivalent) should be sufficient to allow O/S authentication connections?

Unfortunately not, and it¡¯s all to do with the pesky sqlnet.ora file. For Windows
installations, it may include the following line:

SQLNET.AUTHENTICATION_SERVICES= (NTS)


That value NTS may also be set to NONE. Or the line may be missing entirely. Whatever,
the problem is that unless it does exist, and unless it is set to NTS, then Operating System
authentication won¡¯t work, even if you are member of the ORA_DBA group.

As proof, I offer the following small demonstration:

D:oracleora91networkadmin>type sqlnet.ora
SQLNET.AUTHENTICATION_SERVICES= (NONE)
NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME)

D:oracleora91networkadmin>sqlplus "/ as sysdba"
SQL*Plus: Release 9.0.1.0.1 - Production on Tue Mar 19 06:06:18 2002
(c) Copyright 2001 Oracle Corporation. All rights reserved.
ERROR:
ORA-01031: insufficient privileges

D:oracleora91networkadmin>type sqlnet.ora
                                                <==note the missing line!
NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME)

D:oracleora91networkadmin>sqlplus "/ as sysdba"
SQL*Plus: Release 9.0.1.0.1 - Production on Tue Mar 19 06:06:42 2002
(c) Copyright 2001 Oracle Corporation. All rights reserved.
ERROR:
ORA-01031: insufficient privileges




Copyright ? Howard Rogers 2002            19/03/2002                                   Page 1 of 2
O/S Authentication on Windows                                                   Networking Tips

D:oracleora91networkadmin>type sqlnet.ora
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME)

D:oracleora91networkadmin>sqlplus "/ as sysdba"
SQL*Plus: Release 9.0.1.0.1 - Production on Tue Mar 19 06:07:03 2002
(c) Copyright 2001 Oracle Corporation. All rights reserved.

Connected to:
Oracle9i Enterprise Edition Release 9.0.1.1.1 - Production
With the Partitioning option
JServer Release 9.0.1.1.1 ¨C Production


Here the three cases are demonstrated one after the other. In the first, the sqlnet.ora
parameter is set to NONE. The request to connect ¡®AS SYSDBA¡¯ using O/S authentication
fails. In the second, the relevant parameter is missing entirely; again the connection
attempt fails. Only in the third, when the parameter is set to NTS does the connection
succeed.

This isn¡¯t an issue on Unix. There, membership of the dba group in /etc/groups is
sufficient in and of itself to switch on O/S authentication. It¡¯s purely a Windows problem.




Copyright ? Howard Rogers 2002           19/03/2002                                   Page 2 of 2

More Related Content

Viewers also liked (8)

Beginbackup
BeginbackupBeginbackup
Beginbackup
oracle documents
?
Rollbackshrinks
RollbackshrinksRollbackshrinks
Rollbackshrinks
oracle documents
?
Rollback1555s
Rollback1555sRollback1555s
Rollback1555s
oracle documents
?
Database architectureby howard
Database architectureby howardDatabase architectureby howard
Database architectureby howard
oracle documents
?
Sql scripting sorcerypresentation
Sql scripting sorcerypresentationSql scripting sorcerypresentation
Sql scripting sorcerypresentation
oracle documents
?
Userpasswrd
UserpasswrdUserpasswrd
Userpasswrd
oracle documents
?
Rollbacksizes
RollbacksizesRollbacksizes
Rollbacksizes
oracle documents
?
Applyinga blockcentricapproachtotuning
Applyinga blockcentricapproachtotuningApplyinga blockcentricapproachtotuning
Applyinga blockcentricapproachtotuning
oracle documents
?

Similar to Windowsosauthent (20)

SQL Server 2000 Installation Rollout Backout Plan
SQL Server 2000 Installation Rollout Backout PlanSQL Server 2000 Installation Rollout Backout Plan
SQL Server 2000 Installation Rollout Backout Plan
? Supreme Mandal ?
?
Ora12154
Ora12154Ora12154
Ora12154
oracle documents
?
patchVantage Cloud Starter Pack
patchVantage Cloud Starter Pack patchVantage Cloud Starter Pack
patchVantage Cloud Starter Pack
David McNish
?
Advanced Programming Using Visual Basic. NET
Advanced Programming Using Visual Basic. NETAdvanced Programming Using Visual Basic. NET
Advanced Programming Using Visual Basic. NET
Tony Lisko
?
Introduction to Threading in .Net
Introduction to Threading in .NetIntroduction to Threading in .Net
Introduction to Threading in .Net
webhostingguy
?
Oracle Database: Checklist Connection Issues
Oracle Database: Checklist Connection IssuesOracle Database: Checklist Connection Issues
Oracle Database: Checklist Connection Issues
Markus Flechtner
?
Dr3150012012202 1.getting started
Dr3150012012202 1.getting startedDr3150012012202 1.getting started
Dr3150012012202 1.getting started
Namgu Jeong
?
Dell open manage essentials install
Dell open manage essentials installDell open manage essentials install
Dell open manage essentials install
Svetlana Kachintseva
?
Data recovery consistency with check db
Data recovery consistency with check dbData recovery consistency with check db
Data recovery consistency with check db
guesta1b3b39
?
oracle dba
oracle dbaoracle dba
oracle dba
uday jampani
?
Windows Attacks AT is the new black
Windows Attacks   AT is the new blackWindows Attacks   AT is the new black
Windows Attacks AT is the new black
Rob Fuller
?
Windows attacks - AT is the new black
Windows attacks - AT is the new blackWindows attacks - AT is the new black
Windows attacks - AT is the new black
Chris Gates
?
SAP Ecc 5.0 installation
SAP Ecc 5.0 installationSAP Ecc 5.0 installation
SAP Ecc 5.0 installation
Bharath Battula
?
Steps for upgrading the database to 10g release 2
Steps for upgrading the database to 10g release 2Steps for upgrading the database to 10g release 2
Steps for upgrading the database to 10g release 2
nesmaddy
?
Crs issue commands
Crs issue commandsCrs issue commands
Crs issue commands
raviranchi02
?
ÄãËù²»ÖªµÀµÄ°¿°ù²¹³¦±ô±ðºǫ́½ø³Ì³§³¾´Ç²Ô¹¦ÄÜ
ÄãËù²»ÖªµÀµÄ°¿°ù²¹³¦±ô±ðºǫ́½ø³Ì³§³¾´Ç²Ô¹¦ÄÜÄãËù²»ÖªµÀµÄ°¿°ù²¹³¦±ô±ðºǫ́½ø³Ì³§³¾´Ç²Ô¹¦ÄÜ
ÄãËù²»ÖªµÀµÄ°¿°ù²¹³¦±ô±ðºǫ́½ø³Ì³§³¾´Ç²Ô¹¦ÄÜ
maclean liu
?
Sql basics 2
Sql basics   2Sql basics   2
Sql basics 2
Raghu nath
?
Ibm db2 case study
Ibm db2 case studyIbm db2 case study
Ibm db2 case study
Ishvitha Badhri
?
Uploading certificate with oracle wallet manager and orapki utilities
Uploading certificate with oracle wallet manager and orapki utilitiesUploading certificate with oracle wallet manager and orapki utilities
Uploading certificate with oracle wallet manager and orapki utilities
?zg¨¹r Umut Vurgun
?
Blind sql injection
Blind sql injectionBlind sql injection
Blind sql injection
Kagi Adrian Zinelli
?
SQL Server 2000 Installation Rollout Backout Plan
SQL Server 2000 Installation Rollout Backout PlanSQL Server 2000 Installation Rollout Backout Plan
SQL Server 2000 Installation Rollout Backout Plan
? Supreme Mandal ?
?
patchVantage Cloud Starter Pack
patchVantage Cloud Starter Pack patchVantage Cloud Starter Pack
patchVantage Cloud Starter Pack
David McNish
?
Advanced Programming Using Visual Basic. NET
Advanced Programming Using Visual Basic. NETAdvanced Programming Using Visual Basic. NET
Advanced Programming Using Visual Basic. NET
Tony Lisko
?
Introduction to Threading in .Net
Introduction to Threading in .NetIntroduction to Threading in .Net
Introduction to Threading in .Net
webhostingguy
?
Oracle Database: Checklist Connection Issues
Oracle Database: Checklist Connection IssuesOracle Database: Checklist Connection Issues
Oracle Database: Checklist Connection Issues
Markus Flechtner
?
Dr3150012012202 1.getting started
Dr3150012012202 1.getting startedDr3150012012202 1.getting started
Dr3150012012202 1.getting started
Namgu Jeong
?
Data recovery consistency with check db
Data recovery consistency with check dbData recovery consistency with check db
Data recovery consistency with check db
guesta1b3b39
?
Windows Attacks AT is the new black
Windows Attacks   AT is the new blackWindows Attacks   AT is the new black
Windows Attacks AT is the new black
Rob Fuller
?
Windows attacks - AT is the new black
Windows attacks - AT is the new blackWindows attacks - AT is the new black
Windows attacks - AT is the new black
Chris Gates
?
Steps for upgrading the database to 10g release 2
Steps for upgrading the database to 10g release 2Steps for upgrading the database to 10g release 2
Steps for upgrading the database to 10g release 2
nesmaddy
?
ÄãËù²»ÖªµÀµÄ°¿°ù²¹³¦±ô±ðºǫ́½ø³Ì³§³¾´Ç²Ô¹¦ÄÜ
ÄãËù²»ÖªµÀµÄ°¿°ù²¹³¦±ô±ðºǫ́½ø³Ì³§³¾´Ç²Ô¹¦ÄÜÄãËù²»ÖªµÀµÄ°¿°ù²¹³¦±ô±ðºǫ́½ø³Ì³§³¾´Ç²Ô¹¦ÄÜ
ÄãËù²»ÖªµÀµÄ°¿°ù²¹³¦±ô±ðºǫ́½ø³Ì³§³¾´Ç²Ô¹¦ÄÜ
maclean liu
?
Uploading certificate with oracle wallet manager and orapki utilities
Uploading certificate with oracle wallet manager and orapki utilitiesUploading certificate with oracle wallet manager and orapki utilities
Uploading certificate with oracle wallet manager and orapki utilities
?zg¨¹r Umut Vurgun
?

More from oracle documents (20)

Whatistnsnames
WhatistnsnamesWhatistnsnames
Whatistnsnames
oracle documents
?
Whatisadatabaselink
WhatisadatabaselinkWhatisadatabaselink
Whatisadatabaselink
oracle documents
?
Varraysandnestedtables
VarraysandnestedtablesVarraysandnestedtables
Varraysandnestedtables
oracle documents
?
Usertracing
UsertracingUsertracing
Usertracing
oracle documents
?
Userlimit
UserlimitUserlimit
Userlimit
oracle documents
?
Undo internalspresentation
Undo internalspresentationUndo internalspresentation
Undo internalspresentation
oracle documents
?
Undo internals paper
Undo internals paperUndo internals paper
Undo internals paper
oracle documents
?
Tablespacelmt
TablespacelmtTablespacelmt
Tablespacelmt
oracle documents
?
Tablerename
TablerenameTablerename
Tablerename
oracle documents
?
Sql scripting sorcerypaper
Sql scripting sorcerypaperSql scripting sorcerypaper
Sql scripting sorcerypaper
oracle documents
?
Sql for dbaspresentation
Sql for dbaspresentationSql for dbaspresentation
Sql for dbaspresentation
oracle documents
?
Sequencereset
SequenceresetSequencereset
Sequencereset
oracle documents
?
Rollbacklmt
RollbacklmtRollbacklmt
Rollbacklmt
oracle documents
?
Rollbackblocking
RollbackblockingRollbackblocking
Rollbackblocking
oracle documents
?
Redosize
RedosizeRedosize
Redosize
oracle documents
?
Real liferecoverypresentation
Real liferecoverypresentationReal liferecoverypresentation
Real liferecoverypresentation
oracle documents
?
Real liferecoverypaper
Real liferecoverypaperReal liferecoverypaper
Real liferecoverypaper
oracle documents
?
Perfstats
PerfstatsPerfstats
Perfstats
oracle documents
?
Oracledates
OracledatesOracledates
Oracledates
oracle documents
?
Nologging
NologgingNologging
Nologging
oracle documents
?

Windowsosauthent

  • 1. O/S Authentication on Windows Networking Tips How can I get Oracle on Windows to accept my Windows login credentials? The real question here is this: you make sure you¡¯re a member of the ORA_DBA local group on your Windows server. That gives you the right to connect to the database as a privileged User (one who is able to perform the 5 privileged actions ¨Cstartup, shutdown, backup, recover and create) using Operating System authentication. You fire up server manager (or SQL*Plus) and type the usual O/S authentication connect string: Connect / as sysdba Whereupon you get an ORA-01031: insufficient privileges error message! What is going on? Surely, membership of the ORA_DBA group (or the ORA_<sid>_DBA equivalent) should be sufficient to allow O/S authentication connections? Unfortunately not, and it¡¯s all to do with the pesky sqlnet.ora file. For Windows installations, it may include the following line: SQLNET.AUTHENTICATION_SERVICES= (NTS) That value NTS may also be set to NONE. Or the line may be missing entirely. Whatever, the problem is that unless it does exist, and unless it is set to NTS, then Operating System authentication won¡¯t work, even if you are member of the ORA_DBA group. As proof, I offer the following small demonstration: D:oracleora91networkadmin>type sqlnet.ora SQLNET.AUTHENTICATION_SERVICES= (NONE) NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME) D:oracleora91networkadmin>sqlplus "/ as sysdba" SQL*Plus: Release 9.0.1.0.1 - Production on Tue Mar 19 06:06:18 2002 (c) Copyright 2001 Oracle Corporation. All rights reserved. ERROR: ORA-01031: insufficient privileges D:oracleora91networkadmin>type sqlnet.ora <==note the missing line! NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME) D:oracleora91networkadmin>sqlplus "/ as sysdba" SQL*Plus: Release 9.0.1.0.1 - Production on Tue Mar 19 06:06:42 2002 (c) Copyright 2001 Oracle Corporation. All rights reserved. ERROR: ORA-01031: insufficient privileges Copyright ? Howard Rogers 2002 19/03/2002 Page 1 of 2
  • 2. O/S Authentication on Windows Networking Tips D:oracleora91networkadmin>type sqlnet.ora SQLNET.AUTHENTICATION_SERVICES= (NTS) NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME) D:oracleora91networkadmin>sqlplus "/ as sysdba" SQL*Plus: Release 9.0.1.0.1 - Production on Tue Mar 19 06:07:03 2002 (c) Copyright 2001 Oracle Corporation. All rights reserved. Connected to: Oracle9i Enterprise Edition Release 9.0.1.1.1 - Production With the Partitioning option JServer Release 9.0.1.1.1 ¨C Production Here the three cases are demonstrated one after the other. In the first, the sqlnet.ora parameter is set to NONE. The request to connect ¡®AS SYSDBA¡¯ using O/S authentication fails. In the second, the relevant parameter is missing entirely; again the connection attempt fails. Only in the third, when the parameter is set to NTS does the connection succeed. This isn¡¯t an issue on Unix. There, membership of the dba group in /etc/groups is sufficient in and of itself to switch on O/S authentication. It¡¯s purely a Windows problem. Copyright ? Howard Rogers 2002 19/03/2002 Page 2 of 2