CONFIGURING OS AUTHENTICATION(OPS$ ACCOUNT) ON NT

제품 : ORACLE SERVER
작성날짜 : 1997-11-27
CONFIGURING OS AUTHENTICATION(OPS$ ACCOUNT) ON NT
=================================================
PURPOSE
다음은 Windows NT나 Windows 95 client에서 Windows NT server에
OS Authentication을 사용하는 방법에 대해 알아 본다.
Explanation
먼저, User Account는 Windows NT client와 Windows NT server에서 동일한
이름을 필요로 한다.
1. Oracle database가 있는 Windows NT server에 User Account를 생성한다.
1) Window의 '시작' -> '프로그램' -> '관리 도구' -> '사용자 관리자'
2) Menu의 '사용자' -> 'New User'
3) Windows NT Client에서 사용할 Username과 Password를 생성한다.
2. OPS$ Account를 생성한다.
1) startup된 db에서 sqlplus나 sqldba로 connect하여 user를 다음과 같이
생성한다.
CREATE USER OPS$<name> IDENTIFIED EXTERNALLY;
GRANT CONNECT TO OPS$<name>;
2) User에 대해 quotas와 더불어 default tablespace,temporary tablespace
를 지정할 경우는 다음과 같이 alter command로 setting한다.
ALTER USER OPS$<name>
DEFAULT TABLESPACE <tablespace1>
TEMPORARY TABLESPACE <tablespace2>
QUOTA 10M ON <tablespace1>
QUOTA 10M on <tablespace2>;
3) User생성에 대한 자세한 정보는 Server Administrator Guide를 참조한다.
3. Oracle database가 있는 Windows NT server에 Directory를 공유한다.
단, SQLNET Named Pipe를 사용한다면 Directory를 공유할 필요는 없다.
공유 parameter box에 공유 이름을 지정하고, 사용자 최대한 허용한다.
만약 사용자를 제한하고자 한다면 제한 버튼을 선택하여 지정한다.
4. 새로운 OS Authentication Account를 test한다.
단, SQL*NET 2.2 Named Pipe에 대해서는 아래의 1)단계를 할 필요 없음.
1) 공유된 NT server를 Network Drive 연결한다.
만약, 공유된 Directory를 선택하여 Password 확인하는 Message가 뜬다면
Client에 Logging한 Password와 User Password가 다르므로 재확인한다.
2) 마지막으로 Client에서 SQLPLUS를 실행하여 Database에 Logging 한다.
즉, username, password 를 입력하지 않고 '/@SQLNET2_DB_ALIAS'로서
OS Authentication Account connect를 사용하여 Database에 Connect할
수 있다.
Example
Reference Document
------------------

I can't think of a reason why transactions would affect this wait stat. I tried to repro your observations under SQL 2012 and SQL2014 without success.  Could there be other activity against the instance during the test, such as SQL Server Agent or SSRS
background noise?  As far as TRUSTWORTHY is concerned, are the Are the databases owned by the same login?  Are the database owners Windows or SQL logins?  What version of SQL Server? 
PREEMPTIVE_OS_AUTHENTICATION_OPS is one of those wait stats I don't pay much attention to unless I suspect a problem related to Windows authentication.  It is the times rather than the counts that are significant. 
For example, I've seen high PREEMPTIVE_OS_AUTHENTICATION_OPS times as
a symptom of authentication traffic inadvertently routed to a DC in another data center, resulting in long connection times.
Dan Guzman, SQL Server MVP, http://www.dbdelta.com

Similar Messages

  • OPS$ Account Authentication in OC4J

    Hi,
    We have an existing database which uses OPS$ account authentication in Oracle Forms 6i. Fine.
    But, I need to access the same database from a JSP Application deployed to OC4J. Does OC4J and JDBC support OPS$ authentication in any way?
    Thanks,
    Jeremy

    HI,
    Thanks for the response. Actually, I want all users to log in individually, rather than share a JDBC connection username and password. The users currently use Oracle Forms 6i and log in with the "/" username (which then uses remote authentication on the database).
    The issue is that they I'm not able to use this kind of authentication via JDBC as, as far as I understand it, this is a feature of SQL*Net (which JDBC does not "use").
    The workaround is that the users were created as "create user x identified by y" and not "create user x identified externally" so that they're able to log in both ways. I'm only able to do this because we're using the "OPS$" prefix.
    1) using remote authentication
    2) Explicitly specifying username and password.
    Cheers,
    Jeremy

  • Configure SAP authentication for BusinessObjects

    Hi,
    I am configuring SAP authentication for BusinessObjects. I created a user account for BusinessObjects Enterprise on SAP with Authorization object, field, Value as "BusinessObjects XI Integration for SAP Solution Installation Guide". After add an SAP entitlement system to BusinessObjects Enterprise, I checked that an entitlement system. It show "User CRYSTAL has no RFC authorization for function group SYST." with CRYSTAL is user of SAP.
    Please, help me!!!
    Thanks
    Duypm

    Hi,
    My CRYSTAL_ENTITLEMENT Role as below:
    CRYSTAL_ENTITLEMENT
    |
    |--Manually     Cross-application Authorization Objects
    |     |_Manually      Authoriaztion Check for RFC Access
    |       |_ Manually      Authorization Check for RFC Access
    |       |______Activity                    All activities
    |       |______Name of RFC to be protected          *
    |       |______Type of RFC objects to protected      All value     
    |     
    __Manually     Basic: Administration
    __Manually     Authorization for file acccess
    ___Manually      Authorization for file access
    __Activity                     Read, Write
    __Physical file name               *
    __Program Name with Search Help     *
    __Manually      User Master Maintenace: User Groups
    __manually      User Master Maintenance: User Groups
                 |___Activity                Change, Display
                 |___User group in user master main     *
    I login CRYSTAL user directly on your SAP BW server using SAPGUI. It is ok.I don't get any error messages there.
    My SAP entitlement system to BOE as below:
    System is: PTS
    Client: 100
    Application
        Application server: sap-vpmn (with sap-vpmn is hostname BO server)
       System number : 00 (this is value of central instance number)
       Username: crystal
       Password : pythis
    Thanks & Regards
    Duypm

  • Using ops$ accounts with Database Access Descriptors

    Hi, I have installed and configured the Photo Album demo under 9i on Windows 2000 with no problems. I wish to use the operating system via oracle ops$ accounts to provide access to the Db through the Database Access Descriptor using the Gateway Database Access Descriptor Configuration tool. While the ops$ accounts I have configured work as expected under sqlplus, i.e. I am able to login to the Db without manually supplying a username and password e.g. sqlplus / , there does not seem to be a way of configuring the DAD to accept ops$ accounts for access to the photo album demo. Please can anyone confirm this to be the case and/ or provide an alternative solution. Kind regards.

    I am pretty sure if you specify a DB username and password in dads.conf, you will not need to log in. Also, there is a tool to encrypt the password so it is not in clear text in the config file.
    From the dads.README For 10:
    - One or more mod_plsql specific directives. For example:
    PlsqlDatabaseUsername scott
    PlsqlDatabasePassword tiger
    PlsqlDatabaseConnectString orcl
    PlsqlAuthenticationMode Basic
    I am on 10 now, so I don't personally know if it the same on 9. I don't use the DADs tool either, but you should be able to set a username/password for the dad so that there is not a need to login.
    It would be best to ask in the HTMLDB forum, they would know better.
    Larry

  • Ops$ account - cant login

    Hello reader,
    I have the next question about ops$ account.
    When I login in with sqlplus
    connect / @database it works
    If I sqldeveloper (version 3.0.40) using it will not work
    Connection
    Connection name: Connectiondatabasename
    Username: blank
    Password : blank
    Connection Type: basic
    <Got parameters from tnsping>
    OS Authentication: on

    First you can try to change the connection type from basic to TNS and then select your desired database from the drop down list, this should get all the connection information from the same TNSNAMES.ORA file that is being used by SQLPlus.
    If this does not work you can try checking the preference
    Tools -> Database -> Advanced -> Use OCI/Thick Driverto force SQLDeveloper to use your local Oracle Client (should be an 11g client).
    If you still have problems paste here the contents of the TNSNAMES.ORA file you are using (if you can) and the version of the database you want to connect, so we can try to give you a more detailed explanation.

  • BB Z10 not able to configure my office Outlook account

    Salam, Hi: when i 1st bought BB Z10 it seemed wonderful with the price tag. Every thing worked well, i bought it as a smart and look wise catchy alternative to the expensive likes of Note 3. I configured my office Outlook account which worked fine for a month. It stopped working 3 weeks back. I deleted my account and created again but got authentication error "user credentials cannot be verified, please check if enterprise activation code is present".
    On contacting IT department i got to know that APN which is used by BB is defualt, now i have to use some other APN. I did that but had same issue.
    To rule out all possibilities i did following:
    Upgrade OS----No outcome, same error
    Installed Maildroid---as an android platform, this should have worked but got same error
    Tried creating other office fellow account-----got same issue
    Contacted IT who disabled my internet package and settings & restored again-----got same issue
    2 other persons using same model Outlook is working fine
    I have configured my outlook account on another device Sony Xperia, account was configured successfuly
    Afore mentioned prooved: nothing wrong with my account/Model in specific has no issue
    Is my device has some fault or more precisely stuck in some authentication thread???
    People encourage me to "wipe all data", which i am reluctant... Can you plz enlighten me on this issue.
    Thanks in advance

    Talk to your IT department.

  • HT1277 I can not configure my major mail account at Mac Mфail - other accounts such as Hotmail and Gmail are working great. Also, I am using that major account at iPhone and iPad with no problem

    hello. I can not configure my major mail account at Mac Mфail - other accounts such as Hotmail and Gmail are working great. Also, I am using that major account at iPhone and iPad with no problem. I had contacted mail provider - we had followed step by step all the settings,, they are correct, and I was suggested to use another mail program. Why, for God's sake I should use different programs for different mail accounts? Anyone, had the same problem?

    it says - IMAP - Trying to log into this IMAP account is failed - Verify that username and password are correct
    same for SMTP
    in details -
    WROTE Mar 03 00:31:16.375 [kCFStreamSocketSecurityLevelNone] -- host:gator3018.hostgator.com -- port:143 -- socket:0x6080002da240 -- thread:0x600000a76a00
    2.180 AUTHENTICATE PLAIN  (*** 60 bytes hidden ***)
    READ Mar 03 00:31:26.667 [kCFStreamSocketSecurityLevelNone] -- host:gator3018.hostgator.com -- port:143 -- socket:0x6080002da240 -- thread:0x600000a77400
    2.180 NO [AUTHENTICATIONFAILED] Authentication failed.
    WROTE Mar 03 00:31:26.669 [kCFStreamSocketSecurityLevelNone] -- host:gator3018.hostgator.com -- port:143 -- socket:0x6080002da240 -- thread:0x600000a77400
    3.180 AUTHENTICATE PLAIN  (*** 36 bytes hidden ***)

  • How to configure management authentication on IAP using Tacacs Server?

    Requirement:
    Instant access points come with default username and password i.e  admin/admin.  This does not go long way, as the IAP start finding their place in campus and corporate networks.
    With many administrators managing and monitoring the clustered IAP networks, TACACS or Active Directory based authentication is more useful.
    Solution:
    Keep this in view, IAP development teams have integrated TACACS and Radius based management authentication. 
    Configuration:
    Follow the below steps to configure radius authentication in IAP:
    Login to IAP web interface
    Select "System" from the main menu and then click on "Admin" tab
    Under local authentication, select as "Authentication Server"
    Under the "Auth Server 1" Select "New Server"
    Filling the name, IP address and shared key for Tacacs server and click OK.
    Verification
    Logout of the IAP web interface and try logging in using the username and password on TACACS server.

    I was having troubles with this as well when a customer had an older Aruba Controller and 2 Access Points. We went with a couple IAP-205s and needed LDAP integration. Using the above configuration there were some additional items needed. I found that I needed the DISPLAY NAME of the admin for the Admin-DN. I had created a user with the first name Aruba and the last name LDAP. This made the DISPLAY NAME "Aruba LDAP". This is what needs to be in the CN= for the Admin-DN.I also found there is a difference in using the CN= and OU=Currently our admin account is in the Users group which is a “Container”. Our actual user accounts are stored in an Orginizational Unit with sub OUs as well. So the Admin-DN needed the CN=Users and the Base-DN needed the OU=MyUserOU.For the windows machines I had to download and install the Aruba GTC Shim because the customer was previously using GTC and they were not going to a RADIUS server at the moment. My Android phone and IPHONE did not need any additional addins for the authentication.  The windows laptop I am using I needed to manually create a wireless profile with… Security Tab >“Choose a network authentication method:”Microsoft: Protected EAP (PEAP)Settings >Select “Trusted Root Certification Authorities”GeoTrust Global CASelect Authentication Method:EAP-Token (This is the Aruba GTC Shim) This allowed me to use my domain login credentialsUsernamePasswordDomain (This is blank because the Base-DN already has this, if anything is put in here the authentication fails)

  • Operating System authenticated Oracle account

    Hi all,
    Can i use the oracle built-in account "APPS" as the Operating System authenticated Oracle account? If I have an UNIX account "apps", then can i just alter user apps and set it to externally? Or I will need to create a new OPS$apps database account? Will there any conflict between the account apps and OPS$apps?
    Thank you!

    Can i use the oracle built-in account "APPS" as the Operating System authenticated Oracle account?
    Yes
    If I have an UNIX account "apps", then can i just alter user apps and set it to externally?
    Yes.
    I will need to create a new OPS$apps database account?
    Yes, if your initialization parameter 'OS_AUTHENT_PREFIX' is set to 'OPS$'. Note that this parameter could be set to null. Also note that the text of the 'OS_AUTHENT_PREFIX' parameter is case sensitive on some operating systems.
    Will there any conflict between the account apps and OPS$apps?
    If the initialization parameter 'OS_AUTHENT_PREFIX' is set to 'OPS$', there are now two different Oracle users.
    They are 'APPS' and 'OPS$APPS'. The following link will provide you a lot of information on authentication.
    http://otn.oracle.com/pls/db10g/db10g.drilldown?remark=&word=AUTHENTICATION&book=&preference=
    If I were you, I would try it on a development/test
    system before implementing it in production.

  • Configuring the authentication scheme for a web application

    Hi all,
    We have a requirement to configure the authentication scheme for a web application where some set of users should access the application using basic LDAP (userid/password) authentication and some using digital certificate authentication.
    Since the deployment descriptor (web.xml) allows only one directive for auth-method in logic-config, we want to know if there is any other way to achieve this requirement. We are thinking of a custom login module approach. But we are not able to figure out how to configure the auth-method at runtime from the login servlet.
    Please let us know if there is any other approach to achieve this.
    I will be thankful if any body shares any specific solution to this issue.

    This forum is probably not the correct one to ask in. It's more related to the web container than Java Programming.
    Kaj

  • I have a problem with Mail on my Macbook Pro. It is configurated with a gmail account, and now I can't access the mail. Is it possible to reboot the account or..? Please help:)

    I have a problem with Mail on my Macbook Pro. It is configurated with a gmail account, and now I can't access the mail. Is it possible to reboot the account or..? Please help:)

    The question mark means the computer cannot find a bootable volumes so can;t do anything, That, combined with annoying sounds, strongly suggests a failed hard drive.
    You can ask a "genius" at an Apple Rtail Store to test it but I'm pretty sure the drive is kaput. I'm hoping you had your data backed up.

  • How do i send an email from an address that is not configured on my Mail accounts?

    Hi, i have an iPhone 4 (iOS 6.1.2) and first i want to describe the configuration of my email accounts on the server:
    I have lets say... 5 accounts (A,B,C,D and E), but i foward the B,C,D and E account to my A account and in my A account i can reply from the A,B,C,D and E account.
    I have configured in my Mac so i can do this without configuring the B,C,D and E accounts and only by splitting by commas (",") the email accounts that i want to use for reply on the A account settings.
    My problem is that i dont know if i can do the same on my iPhone with the Mail app.
    That can be possible? Have the A account configured to reply with the different accounts that i have without having to configure the B,C,D or E accounts on the phone?
    I want to add this information that maybe will be needed and is that the A,B,C and D accounts are GMail accounts and the E account its an outlook account.
    Right now on my phone i have the accounts A (mail, contacts, calendars, reminders), B (calendars), C (calendars), D (Calendars) and E (mail, calendars, reminders). All GMail are Exchange and the Outlook is a Hotmail account.
    Best regards,
    Gonzalo Calandria,
    Montevideo - Uruguay.

    When I set my email to use plain text any image I add to the email still displays in the body of the text. 
    However, one can Command (right) - click on the image and seleect Show as icon from the contextual menu.
    No matter what you do at your end, except for zipping the image, it's how the recipient has their email client setup that will determine if the image is shown as an attachment or in the body of the email. 
    To assure the photo doesn't display in the body zip/compress it before adding to the email. To do that you'll need to export the photo to the Desktop, Command (right) - click on it and select Compress XXXX.jpg from the contextual menu:
    The recipient will have to download the zipped file from the email  to their hard drive and unzip/uncompress it before viewing.
    OT

  • OracleXML with OPS$ Account

    Can anyone help with the following:
    A script is running code which makes a call to OracleXML's putXML method. It used to supply a hardcoded username and password and functioned correctly. However, security policy changes meant that using hardcoded username and password values was no longer acceptable.
    Instead, the script must now make use of an OPS$ account to gain access to the database.
    The script is run as the OPS$ verified user and the -user parameter passed to the oracleXML call is now set to "/".
    The problem is that the script now fails at this OracleXML call claiming:
    "java.sql.SQLException: ORA-01017: invalid username/password; logon denied."
    I have been unable to find documentation on using an OPS$ account with oracleXML, so any pointers would be much appreciated.
    Thanks!

    Ok . i got it. and one more doubt also, Thanks  sybrand_b , sb  and all
    $ sqlplus  /
    SQL*Plus: Release 10.2.0.1.0 - Production on Sat Jun 22 19:47:32 2013
    Copyright (c) 1982, 2005, Oracle.  All rights reserved.
    Connected to:
    Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
    With the Partitioning, OLAP and Data Mining options
    SQL> show  user;
    USER  is  "OPS$RED"
    SQL> disconnect
    Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
    With the Partitioning, OLAP and Data Mining options
    SQL> !
    $ sqlplus  /nolog
    SQL*Plus: Release 10.2.0.1.0 - Production on Sat Jun 22 19:49:01 2013
    Copyright (c) 1982, 2005, Oracle.  All rights reserved.
    SQL> show user;
    USER is ""
    For ops$<user> account :  if  they use  SQL>sqlplus  /nolog  when  connecting to  the database
               oracle is ignoring to show username. any specific reason for this ?

  • Error while configuring SAP authentication in CMC adn Win XP PRO

    Hi,
    I am new to Business Objects and i was installing the Business Objects integartion Kit for SAP.
    I have already installed Crystal Server 2008 and copied the SAP Jco to the specified folders.But whiling trying to configure the SAP authenticatuion, I keep getting the TOMCAT error. I unistalled and reinstalled again. Still not working
    Note: My Operating System is Windows XP.
    Appreciate any suggestions
    Regards,
    Biju

    Hello All,
    I reinstalled it again based on the link BusinessObjects and SAP - Configure SAP Authentication from Ingo Hilgefort and all are working as expected.
    Now I have a different problem, My Company does not intent to go for a portal at this time, but is considering using formatted reports using crystal reports. What are the other options available for the users to access these reports? For instance all the bex users have Bex Analyser installed on each client machine, do we have anything similar for Crystal reports.
    Any help is greatly appreciated.
    Regards,
    Biju

  • Configure User Authentication on SOAP Receiver Adapter

    Hi,
    I am calling a WebService that is available over the internet.  We are on PI 7.1 and I am using a Soap Receiver Adapter.  The configuration was downloaded from SAP in a partner package.  The development in the package was done on XI3. 
    I need to call the WS with user authentication.  I've selected the "Configure User Authentication" radio button and entered the username and password.  The message fail with "HTTP 401 Unauthorized" and it is because the user details are not being send from the adapter.  If I copy the XML payload to a XML tool, like Stylus Studio, I can call the webservice successfully.  I've read through numerous blogs and messages on this Forum, including adding the adapter module (MessageTransformBean) and changing the Conversion Parameters without any luck. 
    Any suggestions please?
    Thanks

    I am calling a WebService that is available over the internet.
    I copy the XML payload to a XML tool, like Stylus Studio, I can call the webservice successfully.
    normally the webservices that we use (from internet) are freely available...meaning they dont require any username/ password.
    if no credentials are required then do not select Configure User Authentication...uncheck it....if user-details are provided by the Webservice, then use these details (not your XI/ PI user details) in the channel.
    Are you using any user-name/ password while testing from SOAP tools?
    Regards,
    Abhishek.

Maybe you are looking for

  • Computer will not boot up correctly in any mode.

    Hello, I have a Compaq Presario CQ62 with Windows 7 that will not boot up to my log in screen and it does not matter what mode I put it in..safe..etc. I have tried everything I know to do ...like system recovery in the recovery manager. I have no rec

  • Sound not functioning in Windows 7 after Arch install

    I installed Arch about a week ago, and since then, I have not had any sound output from my headphone jack in Windows. My speakers work perfectly fine. I have since reinstalled all sound drivers, and even ran a system restore to the time before I inst

  • Develop iPhone Web applications

    This is regarding the article "Develop iPhone Web applications with Eclipse" article posted on "http://www.ibm.com/developerworks/library/os-eclipse-iphone/". I have refer the article. It would be great if somebody will advise on the below : Problem

  • SM58: Queue to trigger WF

    Hi Gurus, I am having some problems in SM58, when WF-BATCH tries to trigger a WF via SAP Gui or SAP Web. In SM58 I have the error below Despite I have checked in SWPA the "Check Logic System" the problem persist. Any help would be usefull. Thanks in

  • Error with device performance report

    Hi all I had propblem with  Device performance report of LMS 4.0. You could see picture below about the problem. How do resolve it ? Thanks