DATABASE_LINK with CURRENT_USER for user identified externally

Hi,
My database is in standard edition 10.2.0.5 on windows.
I have a user OPS$xxx identified externally.
the connection with this user "sqlplus /@service_name" is ok.
A database link has been created with these options :
select * from dba_db_links;
OWNER DB_LINK USERNAME HOST CREATED
OPS$xxx TEST_DB CURRENT_USER SERVICE_NAME 19/10/11
This database link references the same database
( it is an external application which has created it).
if we test with sqlplus, we have :
sqlplus /@service_nameSQL*Plus: Release 10.2.0.5.0 Production on Fri. Oct. 21 09:58:40 201
Copyright (c) 1982, 2010, Oracle. All rights reserved.
Connected to :
SQLPLUS> select count(*) from user_tables@TEST_DB;
ORA-1017: invalid username/password; logon denied
So is it possible to use this type of database link ? And if it is, how can you do that ?
Or only "user identified globally " can use database links with current_user...
Thank you in advance for your help.
Best regards
Marie

A connected user link should work per the reference:
The ability to use a connected user database link depends on several factors, chief among them whether the
user is authenticated by the database using a password, or externally authenticated by the operating system or
a network authentication  service. If the user is externally  authenticated, then the ability to use a connected user link
also depends on whether the remote database accepts remote authentication of users, which is set by the
REMOTE_OS_AUTHENT initialization parameter.HTH -- Mark D Powell --
insert line breaks to try to limit width
Edited by: Mark D Powell on Oct 21, 2011 9:17 AM
Edited by: Mark D Powell on Oct 21, 2011 9:18 AM

Similar Messages

  • SSO and Form 10g, Setting RAD of OID for DB users identified externally

    Please Help!
    Current environment:
    - All users were created with identified externally in Database (OPS$)
    - SSO was setup correctly according to OID admin guide Ch 43 and SSO admin guide ch 8 for App10g. (user login orasso without seeing basic auth/sso login form)
    - DB parameters:
    remote_os_authent=TRUE
    os_authent_prefix=' '
    issues:
    - set ssoDynamicResourceCreate = true
    When user hit the form link, i.e. http://host:port/forms90/f90servlet?config=test&form=appwelcome
    it redirects to http://host:7777/oiddas/ui/oracle/ldap/das/mypage/AppCreateResourceInfo?...
    where it shows Resource Name TEST and prompts username/password/database
    when user inputs window logon /password/database value (same as in form6i)
    it returns ORA-01017: invalid username/password; logon denied.
    - set ssoDynamicResourceCreate = false
    manually set RAD for the end user (I am not sure if I am doing this correctly):
    Name = test
    TYPE = oracledb
    username = (blank)
    password = (blank)
    datebase = prod
    When enduser hits the form link, it returns ORA-01017.... same errors.
    Any ideas how to trouble shoot and configure RAD for users with OPS$ auth?
    thank you in advance!
    Kan

    Thank you for your input!
    This is how our current production is setup that users use os authent (OPS$) to access forms/reports 6i. I'm just trying to migrate it to app10g environment.
    I did configure SSO with WNA, it works fine. Any users can access NON-DB connected forms/reports. Only when forms/reports require DB conn, users who
    have db password can access them with one click. But users identified externally will keep seeing Oracle Logon and Ora-01017 after authent into MidTier.
    Setup RAI with one real db user account is not ideal since there are 1000+ OS authent users who have different database roles. Turn off the OPS$ and setup dummy password for 1000+ users may be the last solution.
    v/r
    Kan

  • Connecting with java2 1.4 & user identified externally

    Hi,
    I try to connect to the Oracle DB 8.1.7. in my java-program (url : <
    jdbc:oracle:oci8:@ >) with a user that is identified externally (OS-unix
    SUN) . The version of java2 is 1.4
    My java-connection work correctly with the Oracle jdbc-driver
    "classes12.zip" in my CLASSPATH.
    But is NOT work with the last jdbc driver of Oracle "ojdbc14.jar" in my
    CLASSPATH. I assume that I have to install also the OCI shared
    libraries. But which version of the OCI libraries : 9.2.0.1 or 9.0.1 or
    8.1.7 ? Can I use the OCI libraries 9.* for a connection to Oracle
    Database 8.1.7?
    Other question: is it possible to connect with a user identified
    externally with the thin driver?
    Kind regards,
    Kristoffel DE GEEST

    Ralph_CC wrote:
    If I want to connect to a user of this sort, can anyone tell me what I put in the
    setPassword( passwd ); method for OracleDataSource getConnection please.
    I cannot see any clue in the java API doc. (Using 11g & Java 1.6.30)You connect as a user,
    you provide the password for the user using setPassword(),
    as in this example;
    http://www.rgagnon.com/javadetails/java-0545.html
    which connects as user 'scott' using password 'tiger'.

  • Hi all, i'm new and facing a problem while creating a new file for Xcode. I can't select the box "with XIB for user interface" if the subclass is "UIViewController".this problem happen after i upgrade Xcode to 4.6 version.Appreciate for any help rendered.

    Hi all, i'm new to Mac book & Xcode. I'm learning and facing problems while creating a new file for Xcode. Before i upgrade the software, i have no issue to create simple steps in apps. After upgrade Xcode to 4.6 version, i'm facing lot's of issue eg.
    1) "the identity "iphone developer" doesn't match any valid certificate/ private key pair",
    2) can't select the box "with XIB for user interface" if the subclass is "UIViewController"..
    Appreciate for any help rendered.

    Mikko777 wrote:So what is the best?
    I wouldn't judge. I've been to Arch for a week, you know? But as said, it's VERY close to it.
    What I dislike after a week is makepkg not handling dependencies automatically (which would be overhead, so probably not appropriate).
    Mikko777 wrote:Also theres KDEmod for modular kde, dunno if its for 64 bits tho.
    Don't actually need that as said ... I see no real benefit of having that other than not beeing a KDE user or having Gentoos useflags.
    Mikko777 wrote:PS:You produce a lot of text and welcome smile
    Yeah. Wonder why I'm still employed? So do I ...

  • "With Xib for user interface" option Disabled

    I was able to use the "With Xib for user interface" a couple of days ago but now when I try to create new object-c file with xib interface, I cant use the checkbox. It is disabled. What may be the problem? How can I create a file with xib again?

    Does the following Stack Overflow question help you?
    How to create new View Controllers in XCode 4.3
    If not, you're going to have provide more information for anyone to help you. What version of Xcode are you using? What type of Objective-C file are you creating? What type of project are you adding the file to?

  • User identified externally

    I downloaded and installed Oracle Ex on Windows XP Professional SP 2 taking all of the defaults and all when swimmingly. Then I used sqlplus to create an externally identified user. The user was created. However if I enter "sqlplus /" to connect as the user I get
    ORA-01017: invalid username/password; logon denied
    This same procedure works under Linux. How do I get it to work under Windows?
    Thanks,
    john

    Creating External users in Oracle
    For example, consider the following user definition:
    CREATE USER OPS$SCOTT IDENTIFIED BY TIGER;
    Assuming that Scott has logged onto the operating system, Scott could enter SQL*Plus with or without a password:
    sqlplus /
    sqlplus scott/tiger
    You can also create the user with the "identified externally" clause:
    CREATE USER OPS$SCOTT IDENTIFIED EXTERNALLY;
    Create Oracle External users in Windows
    External users are easy to create in Linux because you need only create the user in /etc/passwd. It's a bit trickier in Windows:
    1. Create the Windows user:
    start --> settings --> control panel --> administrative tools --> computer management --> user
    2. Add the new user to the Oracle group:
    start --> settings --> control panel --> administrative tools --> computer management --> groups
    3. Add user to OS Database Administrator:
    start --> programs --> oracle home --> configuration and migration tools --> administration for windows NT --> OS database administrator
    4. Add user to OS Database Operators:
    start --> programs --> oracle home --> configuration and migration tools --> administration for windows NT --> OS database operators
    5. Add user to OS Administrator:
    start --> programs --> oracle home --> configuration and migration tools --> administration for windows NT --> OS administrator
    6. Add user to OS Operators:
    start --> programs --> oracle home --> configuration and migration tools --> administration for windows NT --> OS operators
    7. Add os_authent_prefix=OPS$ to your initialization parameters (pfile or spfile) and bounce Oracle database, if necessary.
    Ref: http://www.dba-oracle.com/t_windows_external_user_authentication.htm

  • Dropdown list (predefined list) along with provision for user to enter text

    Hi,
    Is there any provision in J2ME to have
    " a drop-down list , which contains predefined variables. if the user does not want to use those predefined variables, then a provision for user to enter text."
    thanks in advance

    Append Method
    I would create a box / div in Animate then when you publish it and put it on your page just append a form with an email input ( <input type="email></input>" ) and submit button.
    <form action="url">
      <input type="email" name="usremail">
      <input type="submit">
    </form>
    This page provides a lot of information on how to use Edge Animate and how to do more advanced things.
    http://www.adobe.com/devnet-docs/edgeanimate/api/current/index.html

  • Cannot edit views when logged with user identified externally (OPS$...)

    Hi,
    In our organization we have enabled the OS authentication and even having the DBA role is not possible edit views using SQL Developer.
    Anybody knows if is there any workarround to enable this feature ?
    Thanks in advance.
    Edited by: user12099033 on Jul 15, 2010 9:44 PM
    Edited by: user12099033 on Jul 15, 2010 9:45 PM

    Thanks for getting back to me so quick!
    You were correct to assume that I was referring to a View. All of our users have been added to a standard user role that providers that basic functionalities that they need. This particular user's access is exactly the same as the other users in his department,
    yet he is the only one who has experienced this problem. All of the user roles that we have added this user to contain at least 10 other users who have not reported any issue like this.
    I am wodering how this problem could only apply to this one user even after changing devices. I should also mention that with each of the devices that this user has worked on, there was a period of time when he was able to work in SCSM without
    any issues. What could have changed that caused this error to arrise on two separate occasions for just one user? 
    The biggest issue is the fact that he is unable to edit activities. Am I correct to assume that these two issues are connected?
    I hope this message helps to clarify the problem we are experiencing.
    Thanks,
    Nick

  • Best way to pre-populate material variable with values for users

    Hi,  I have a requirement to prepopulate a material variable with about 5 materials and that is the materials that will default when the query is called.  The users would also need the ability to change those values.
    My thought is to create a User-exit variable that derives the values from a user maintained table (infoobject). 
    Does anyone else have any suggestions or ideas on the best way to handle this?

    I don't know if there is a best solution...
    Infoobject
    With this option you have to create a new infoobject (ZMATERIAL) without attribute (you need only a list material codes) and then to set the authorization profile for the user in order to manage the content.
    The creation of an infoobject corresponds to a table creation, but you don't need any other specific options that belong to the infooject (as technical object)...
    Table
    With this option you have to create a Z table with only one field and then to allow the maintenance of the table by SM30....
    In the ending, if you want to be a purist use the table, otherwise use an infoobject (but there are no significant differences !
    Bye,
    Roberto

  • Assistance with prompting for users and then adding them to a command in PowerShell

    I'm trying to create a very simple script to add members to a Distribution Group. I want to do something like I added below. I would like to prompt for user1, user2, user3, etc.. until I have no more users to add instead of manually typing out
    the command below. Each time there will be a different number of users to be added. I do not want to do a csv import since it creates extra work when sometimes I only need to add 2-3 users. I find using a csv works great but takes too long when
    I only have a few to add. I would like a way to just keep typing user aliases until I have no more and then hit enter and have it take my entries and enter them into the command below or some other similar command. I would like everything embedded
    in the ps1 file with no other files to deal with. Any help will be appreciated. Thank you in advance. 
    $DLName = Read-Host "Enter the name of the DL that members will be added to."
    "user1","user2","user3" | Add-DistributionGroupMember -Identity $DLName

    Here's another option:
    $DLName = Read-Host 'Enter the name of the DL that members will be added to.'
    ((Read-Host 'Member List, separated by commas').Split(',')) | ForEach { Add-DistributionGroupMember -Identity $DLName -Member $_.Trim() }
    Don't retire TechNet! -
    (Don't give up yet - 13,085+ strong and growing)

  • Populate CL_GUI_TEXTEDIT editor with text for user to modify

    Hi, What method of class CL_GUI_TEXTEDIT can I use to prepopulate the onscreen editor for someone to modify?  Also, an example would be greatly appreciated!
    Thanks
    I am using this program to maintain a string field URL in a table.  If you have a better way it would be greatly appreciated!
    REPORT  ZDW_1ST_RX_LINK_MAINT.
    DATA: DOCKINGLEFT TYPE REF TO CL_GUI_DOCKING_CONTAINER.
    DATA: TEXT_EDITOR TYPE REF TO CL_GUI_TEXTEDIT.
    DATA: REPID       TYPE SYREPID.
    DATA: TEXTLINES   TYPE TABLE OF TLINE-TDLINE.
    DATA: WA_TEXT     TYPE TLINE-TDLINE.
    DATA: REPORT_URL  TYPE STRING.
    DATA: TEXT_ITAB   TYPE TABLE OF SOLISTI1.
    DATA: TEXT_ITAB2  LIKE LINE OF TEXT_ITAB.
    PARAMETERS: P_REPGRP TYPE ZDWRPTGRP.         " Report
    PARAMETERS: P_SFORCE TYPE /BIC/OIZDWSFORCE.  " Report Qualifier
    PARAMETERS: P_REPDES TYPE C LENGTH 60.
    PARAMETERS: P_ACTION TYPE C.                 " Action
    AT SELECTION-SCREEN OUTPUT.
      REPID = SY-REPID.
      CREATE OBJECT DOCKINGLEFT
         EXPORTING REPID = REPID
         DYNNR           = SY-DYNNR
         SIDE            = DOCKINGLEFT->DOCK_AT_BOTTOM
         EXTENSION       = 280.
      CREATE OBJECT TEXT_EDITOR
         EXPORTING PARENT     = DOCKINGLEFT.
    START-OF-SELECTION.
      CALL METHOD TEXT_EDITOR->GET_TEXT_AS_STREAM
        IMPORTING
          TEXT   = TEXT_ITAB
        EXCEPTIONS
          OTHERS = 1.
      LOOP AT TEXT_ITAB INTO TEXT_ITAB2.
        CONCATENATE REPORT_URL TEXT_ITAB2-LINE INTO REPORT_URL.
      ENDLOOP.
      DATA: S_SFURL TYPE ZDW_SFURL.
      S_SFURL-REPORT_GROUP = P_REPGRP.
      S_SFURL-SALES_FORCE  = P_SFORCE.
      S_SFURL-REPORT_URL   = REPORT_URL.
      CASE P_ACTION.
        WHEN 'I'.
          INSERT ZDW_SFURL FROM S_SFURL.
        WHEN 'D'.
          DELETE FROM ZDW_SFURL
             WHERE REPORT_GROUP = P_REPGRP
               AND SALES_FORCE  = P_SFORCE.
        WHEN 'U'.
          UPDATE ZDW_SFURL FROM S_SFURL.
      ENDCASE.

    Or you can use the methods in this example.
    report zrich_0001 .
    data:
          dockingleft  type ref to cl_gui_docking_container,
          text_editor    type ref to cl_gui_textedit,
          repid type syrepid.
    data: itext type table of tline-tdline,
          xtext type tline-tdline.
    parameters: p_check.
    at selection-screen output.
      repid = sy-repid.
      create object dockingleft
                  exporting repid     = repid
                            dynnr     = sy-dynnr
                            side      = dockingleft->dock_at_left
                            extension = 1070.
      create object text_editor
                  exporting
                       parent     = dockingleft.
      xtext = 'http:\www.sap.com'.
      append xtext to itext.
      call method text_editor->set_text_as_r3table
         exporting
               table              = itext
         exceptions
               others             = 1.
    start-of-selection.
      call method text_editor->get_text_as_r3table
         importing
               table              = itext
         exceptions
               others             = 1.
      loop at itext into xtext.
        write:/ xtext.
      endloop.
    Regards,
    RIch Heilman

  • Connect as user identified globally/externally?

    Greetings! :)
    I have an old app where fat SWING client app connects to the DB with Oracle DB user/pass. I would like to change this. I believe "user identified globally/externally" is the right choice. Is there any (Java) example of login as global/external user? I have read that for global/external users tokens are acquired, but I don't know how to acquire tokens?
    Example: I have Java fat client which shows a dialog asking user for its user/pass. Then I send this user/pass to another Java web app, which check user/pass and asks DB (how?) for token. Then I send this token from my web app to the fat Java client app and it connects (how?) with DB.
    So:
    1. How to get token for external/global user?
    2. Where to put token in DB connection string when connecting with DB (instead of password?)?
    I have already asked this question in Oralce DB security and Java security forums without any results.
    P.S. Is there any other way for app to connect to DB without giving password? I would'n like to use Kerberos or LDAP or some tools. I would like to make my own solution with JDBC.
    Thank you in advance :)

    >
    Is there any other way for app to connect to DB without giving password?
    >
    Maybe this doc has the info you are looking for.
    See chapter 3 Configuring Authentication in the Database Security doc
    http://oracle.su/docs/11g/network.112/e10574/authentication.htm#i1006269
    Configuring Global User Authentication and Authorization and Configuring an External Service to Authenticate Users and Passwords
    have the information.
    You can also see the 'Proxy from Users Identified Externally' and 'Establish a Proxy Session' references in this link
    http://books.google.com/books?id=BaRbj93G1XMC&pg=PA159&lpg=PA159&dq=oracle+java+identified+globally/externally+proxy&source=bl&ots=m75SfHNGe-&sig=LRhANCaoxVJ2Ovd8G8at3rp4wqI&hl=en&sa=X&ei=6y9zT6nCEaiYiAKN15yuCw&sqi=2&ved=0CDUQ6AEwAw#v=onepage&q=oracle%20java%20identified%20globally%2Fexternally%20proxy&f=false
    And this AskTom link has an approach - see Followup September 24, 2004 - 9am Central time zone:
    http://asktom.oracle.com/pls/apex/f?p=100:11:0::::P11_QUESTION_ID:21575905259251

  • Schema owner identified externally

    I have an oracle 11g, apex 3, OHS implement. The schema assigned to my workspace has owner, identified externally. I can find no workspace/schema relation administering Oracle-XE. Looks like the database username that logs in to the Administration Home is the schema to be parsed. My trouble is that I cannot login to the Administration Home with the user identified externally.
    Please advise.

    I've upgraded the version of Apex that was installed with Oracle-XE. I matched Apex version with that of the Oracle 11g environment; that is, version 3.1.2. So, now I can create developers and workspaces that reference schemas of the developers' choosing, than the one developer (database user) owning the schema it references.

  • How can I make (automatic) accounts for users of my adobe muse site?

    Adobe, google, facebook and more site haves accounts for his users, but how can I make a system with accounts for users of my adobe muse site?

    Hi,
    Try some suggestion given in this thread
    http://forums.adobe.com/message/5362643#5362643

  • Authorization for limited vendor for user in FBL1n

    Hi,
    I have certain user in my company, to whom, i want to give t-code FBL1N access. But for some vendors only.
    Please let me know, how it can be done.

    Hi Durga
    As far as I see I can suggest you 2 options:
    1. You can create a validation with sets for users and vendors. This way you can restrict to only the t-codes you want the restriction to apply
    2. You can co-ordinate with BASIS to restrict using authorization object F_BKPF_BEK. You have to assign authorization group to vendors and give authorization to users for specific authorization groups. In this case, you cannot restrict only to FBL1N. The restriction would be applicable to all the transaction codes for the users where vendors are impacted.
    Regards
    Sowmya

Maybe you are looking for