Host user credential fails in 10g OEM

Using Windows Server 2003 and Oracle 10g:
I have a client who is unable to set the host user credentials in OEM (fails when testing credentials with “Connection to host as user failed”) using a local administrative account (also the account used to install Oracle). We have been through the forums and made sure that:
1. The local user is both an administrator and a member of the ora_dba group.
2. Both the ora_dba user group and local administrative user have been explicitly granted the following privileges:
a. log on as a batch job
b. log on as a service
c. act as part of the operating system
d. allow log on locally
e. adjust memory quotas for a process
f. replace a process level token
3. We have also verified that this user and group have not explicitly been denied the log on privileges in:
a. deny log on as a batch job
b. deny log on as a service
4. Additionally, we have also tried setting the console service to run as the local user we want to set as the host user credentials (originally set to run as the local system account).
I have been unable to verify yet that the user or the admin or ora_dba groups have been granted privileges under the create global object policy, but I have only found one post in the forums suggesting this and am unclear if this is a requirement or not.
I have also seen it recommended to input the host user name as <domain_name>.<name_of_computer>\<user_name>. However, I saw one post that recommended this only if the server was also running AD. I have never installed on the same server as AD and I normally only need to define my host credentials as <domain>\<user>, so I am assuming that this is the case. I'm I correct here?
I have never had a problem setting these credentials on Windows Server 2008 with Oracle at 11g using the common suggestions listed above, on the forums, and in the installation guide. Any ideas where I can look next or what I have missed? Are there any other policies that might be being pushed to this server that I should look for? Thanks.

AilD, Thanks. That's pretty much where we started other than our user was a local user rather than a domain user. From what I understand, the formatting of the user name really shouldn't matter, unless you have a domain user you wish to use that happens to have the same name as a local user, where Oracle will assume that you are referencing the local user if you fail to include the domain. No big deal for us since we are using a local user, there shouldn't be any issues with using just the user name to identify the user. Perhaps I am focusing too much on the way the user is identified in OEM.
Does anyone have experience configuring Oracle in abnormally secure environments? In this case, the onsite DBA is segregated from IT and unsure of what policies are being pushed to his servers. Perhaps there are other polices I haven't already listed that may be causing havoc in setting the host user credentials?

Similar Messages

Insertion of user name failing in 10g--very very urgent

Hi
I have this insert statement:
INSERT INTO tHistory(Client_ID,Table_Ref,Table_ID,Entry_Type,Subject,User_Name
,Parent_ID,content)
VALUES( 'D5555555','tClient','D555555','edit','Edit By '||user,user,0,'test');
all fields are non nullable.
However when I run it it does accept the user for user name column and throws an error saying user cant b blank.
This same stmnt works fine in 9i but fails in 10g.
Could anyone please help.
Thanks in Advance

are you running this from some other environment or as string from some program.
here is the test case.
Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
With the Partitioning, OLAP and Data Mining options
SQL> create table test_table(n varchar2(200))
2 /
Table created.
SQL> insert into test_table values('Hello '||user)
2 /
1 row created.
SQL>
SQL> select * from test_table
2 /
N
Hello SCOTT
SQL>
SQL> show user
USER is "SCOTT"

Connection to host as user administartor failed

hi all
i am not an oracle DBA but have to perform some task on oracle server.
Dear all,
I have a problem when using host credential (operating system login
credentials) for utility like backup, recovery setting.
When I entered the username and password then occured like "Connection
to host as user "username" failed: ERROR: Wrong password for user"
The username and password is true, I used it for login to windows (my
window is Windows XP Professional )

yes i am an ora_dba user
and i am tryong to perform this in EM.
Below is the contents of sqlnet.ora file
# sqlnet.ora Network Configuration File: D:\oracle\product\10.2.0\db_1\network\admin\sqlnet.ora
# Generated by Oracle configuration tools.
# This file is actually generated by netca. But if customers choose to
# install "Software Only", this file wont exist and without the native
# authentication, they will not be able to connect to the database on NT.
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
reards
imran

Connection to host as user oracle9i failed

Examine and correct the following errors, then retry the operation:
Error - Connection to host as user oracle9i failed: Received unexpected response text : <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD> <meta http-equiv="Content-Type" content="text/html; charset=windows-1251"> <TITLE>��: �� </TITLE> <STYLE type="text/css"></STYLE> </HEAD><BODY> <H1>��</H1> <H2> �� </H2> <HR noshade size="1px"> <P> �� : http://rx4640:1830/emd/main? <P> �� : <BLOCKQUOTE> �� IP �� <I>rx4640</I> </BLOCKQUOTE> <UL> <LI> <P> �� : <BLOCKQUOTE> Name Error: The domain name does not exist. </BLOCKQUOTE> </UL> <P> �� , ��: <PRE> �� , �� . ��

user5616408 wrote:
1.Which domain - db domain or network domain.
2.How to correct the error?It would seem that you are supplying a URL - this then returns an HTML error response. This response says "+domain name does not exist+".
As you provide no info on how you are making this HTTP call, and the fact that you are not getting a HTTP response code error, but a response page... the assumption is:
a) you are reaching the web server as specified in the URL
b) the web server is returning the error page
c) the error related to the web server not being satisfied with the data supplied (or obtained) via that HTTP command it received - for example the query string may fail validation (hostname without a domain name), the command itself may not have a valid referring domain, etc.
Also as the error response include "+http://rx4640:1830/emd/main?+" (one of the few text strings that are readable on my browser from that error response you have posted), it would seem that the web server expects fully qualified hostnames. I.e. hostnames need to include a domain name. And this URL refers to host "+rx4640+" and does not include a domain qualifier.

In OWB the repository user installation failed.

I have installed oracle 10g for oracle warehouse builder and installed owb.
after installation Im trying to create a reposity using uid: auroora pw:auroora
and i have entered all the connection fields at last it is showing an eroor as follows.
the reposity user installation failed on users
java.lang.exception
java.lang.Nullpointer.exception.
I will be thankful to u if u help me in this regard. waiting for u reply.
thnx in advance
regards
srinivas

I have same problem (java.lang.exception java.lang.Nullpointer.exception.) when I try to add reporsitory user by Repository Assistant. When I fill all pages from that wizard and press Finish, then I get java exception error alert with exception mentioned above. Oracle Database 10g Enterprise Edition Release 10.2.0.3.0 - 64bit Production With the Partitioning, OLAP and Data Mining options and OWB client10.2.0.3.0/repository10.2.0.3.33. This happened since we have migrated from 32b to 64b version. Any workarounds???

How to update host username/password in RMAN - 10g Enterprise manager bkp

Hi,
We have RMAN - 10g Enterprise manager scheduled.
Last week we changed OS - Oracle password.
Now backups are failing.
Please let me know where to update Host username/password details in 10g Enterprise manager...

it is showing sys credentials only.
I see the following tips in Enterprise manager.
"Normal credentials are used by Enterprise Manager functions that need operating system access but do not require administrator privileges. Privileged credentials are used by functions that do need administrator privileges. Database functions and jobs that require host credentials do not use the credentials set on this page; they instead use database-specific host credentials set on the Database Preferred Credentials page."
Please let me know where can i set database-specific host credentials ?
Message was edited by:
user589334

How to solve the issue "CUV check user equivalence failed" ?

Folks,
Hello. I am installing Oracle 11gR2 RAC using 2 VMs (rac1 and rac2) whose OS are Oracle Linux 5.6 in VMPlayer according to the website http://appsdbaworkshop.blogspot.com/2011/10/11gr2-rac-on-linux-56-using-vmware.html
In order to install Grid Infrastructure, we need to run Cluster Utility Verification (CUV) at first by running the cammand below:
[ora11g@rac1 grid]$ ./runcluvfy.sh stage -pre crsinst -n rac1,rac2 -verbose
Its output:
Performing pre-checks for cluster services setup
Check: User equivalence for user “ora11g”
Node Comment
rac1 failed
rac2 failed
Result: PRVF-4007 : User equivalence check failed for user “ora11g”
ERROR:
User equivalence unavailable on all the specified nodes
Verification cannot proceed
Pre-check for cluster services setup was unsuccessful on all the nodes.
As you see above, check user equivalence failed. I have run the 4 commands to fix this error as below:
[ora11g@rac1 /]$ ssh-keygen
Its output:
Generating public/private rsa key pair.
Enter file in which to save the key (/home/grid/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/grid/.ssh/id_rsa.
Your public key has been saved in /home/grid/.ssh/id_rsa.pub.
The key fingerprint is:
0c:10:6c:3b:ae:21:63:64:f8:0d:0e:d8:f0:41:32:ff [email protected]
[ora11g@rac1 .ssh]$ cat *pub >>authorized_keys
[ora11g@rac1 .ssh]$ ssh rac1
Its output:
The authenticity of host ‘rac1 (127.0.0.1)’ can’t be established.
RSA key fingerprint is 9d:ae:51:7c:72:81:07:37:31:92:f1:c8:90:bc:52:55.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added ‘rac1′ (RSA) to the list of known hosts.
Write failed: Broken pipe.
[ora11g@rac1 .ssh]$ ssh rac1-priv
Its output:
The authenticity of host ‘rac1-priv (192.168.137.35)’ can’t be established.
RSA key fingerprint is 9d:ae:51:7c:72:81:07:37:31:92:f1:c8:90:bc:52:55.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added ‘rac1-priv,192.168.137.35′ (RSA) to the list of known hosts.
Write failed: Broken pipe.
After run the 4 commands above, I run the command below again:
[ora11g@rac1 grid]$ ./runcluvfy.sh stage -pre crsinst -n rac1,rac2 -verbose
Its output is the same:
PRVF-4007 : User equivalence check failed for user “ora11g”
ERROR:
User equivalence unavailable on all the specified nodes
Verification cannot proceed
I think the problem is "Broken pipe" and ssh cannot write authorized_keys to the machines.
My question is:
Do any folk understand how to solve the issue CUV "check user equivalence failed" for 2 VMs ?
Thanks.

Folks,
Hello. Thanks a lot for replying.
I have installed Grid Infrastructure a few times. Each time, on step 7 of 9, the installer fixes and checks 2 machines correctly. The entire installation has 3 parts as below:
1) Install Grid Infrastructure for a Cluster
2) Execute Root Scripts for Install Grid Infrastructure for a Cluster (script is root.sh)
3) Configure Oracle Grid Infrastructure for a Cluster that includes NCA, ASMCA, PICA and CVU.
Each time, on step 8 of 9, the Installer installs Grid Infrastructure for a Cluster successfully that includes "Prepare, Copy files, Link binaries, Setup files and Perform remote operations".
But when the Installer get to part 3 CVU, it fails and then the Database cannot be installed.
Deinstall Grid is a very complicated process to do. Because of this reason, we need to run CVU at first to make sure everything is correct for 2 machines before install Grid.
Even we ignore "user equivalence (ssh)", we don't know whether other items can be passed or not because CVU cannot proceed to check the machines.
My question is:
How to have the script "runcluvfy.sh" continue to check the machines while confronting "user equivalence failed" ?

User Authentication Failed via http BUT not with Visual Administrator !!?

OS : Win 2k3 Server UK * DB : SQL Server 2005
SAP Netweaver 2004s Application Java
Hi All,
Since a couple of days, I have a problem concerning authentication to the java apllication on a SAP Netweaver 2004s.
Using the user Administrator, I CAN logon the Visual Administrator tool, with the same user I tried to logon via http://host:port/nwa without success.
At the beginning, I was thinking about a problem of password then I enabled the emergency user SAP*, the problem was the same. Ok with Visual Administrator but not via http.
Here is two logs found in folder : D:\usr\sap\SID\JC02\j2ee\cluster\server0\log\system\
     security.3.log
     <i>#1.5#001871E5EA3A00550000006D0000172800043B836D838427#1191335570983#/System/Security/Audit#sap.com/com.sap.security.core.admin#com.sap.security.core.util.SecurityAudit#Guest#0####5aac137070f411dcc513001871e5ea3a#SAPEngine_Application_Thread[impl:3]_11##0#0#Warning#1#com.sap.security.core.util.SecurityAudit#Plain###Guest     | LOGIN.ERROR     | null     |      | Login Method=[default], UserID=[Administrator], IP Address=[192.168.10.125], Reason=[Authentication did not succeed.]#</i>
     server.0.log
     <i>#1.5#001871E5EA3A0052000000130000172800043B835E3661D1#1191335314249#/System/Server/SLDService##com.sap.sldserv.SldServerFrame######c1a349a070f311dcaa68001871e5ea3a#SAPEngine_System_Thread[impl:5]_71##0#0#Warning#1#com.sap.sldserv.SldServerFrame#Plain###Failed to collect SLD data. Failed to send HTTP data: 401 : Unauthorized. Please check if the target SLD system is available and the SLD bridge is started there.#</i>
 I tried to connect http://host:port/sld same problem User Authentication Failed
<b>Do you have an idea for me? Why a user can connect via Visual Administrator and not via the http interface?</b>
Thanks in advance
Yves

Hi,
I found the solution this last week-end.
This behavior let's thinking to a problem of authentication.
But the problem was in SQL, an index was missing in table J2EE_CONFIG, called J2EE_CONFIG_I3
Cheers
Yves

10g OEM dissapointment

I don't know bout anyone else but I am disappointed with 10g OEM. With 9i OEM it was a Java application that gave a handy tree structure that made it easy to zip through to get to appropriate areas of control etc.
Now with a web interface to OEM I have to laboriously drill down and make multiple selections to get to the areas of control that I want or need.
For example I had to drop a table from my schema. That is simple enough. I then had to purge it from the recycle bin. I was logged in as the schema owner and when trying to list the recycle bin contents it defaults to the sys schema. I have to specifically select the schema name to list the recycle bin contents. Shouldn't it just give me the listing of the current schema objects for the user and not sys?
Also OEM seems to hang or crash a little too often. It takes quite a while for the pages to recompile after OEM is restarted.
I hope Oracle are considering creating a Java applet of similar look feel and functionality to 9i OEM that uses a highly workable tree structure.

I've only been using it a couple of weeks, but I have to say I can't complain at the moment.
Of course, this is just a small server I'm using it with, but mostly things haven't been a problem.
To this point, the only issues I've had/seen are:
1) I'm running standard edition and there doesn't appear to be a way to change the datapump so that it doesn't try to do parallel. (At least not that I can see anyway) That leaves me with the command-line option.
2) I decided to test the database restore so I dropped all of my tables and set up a job to restore back to 12 noon. I sat and waited for a few minutes and figured the page must be hung so I hit stop and then hit the submit button again. Oops! Must be the job is actually running at that point. Though, unlike in other areas (such as the backup itself), it tells you what it's doing or is going to do. Now this actually crashed the restore which really made me need media recovery. :) Again, I set up a job which worked successfully this time, only it applied the logs up to the point just before it crashed instead of restoring up until noon. I'm not convinced I didn't miss a checkbox or something here however.
Chad

-24950 ERR_USRFAIL: User authorization failed

Hello All,
I installed mini Sap in my system.
I have two entries in my host file.
1.) 127.0.0.1 localhost
2.) 10.10.0.10 computername
When i open SAP MMC and enter the user name and password in the database below the NSP with the computer name,
the error comes as -24950 ERR_USRFAIL: User authorization failed
i tried with all sorts of usr name and password please help me.

Hi Sundar,
excuse the question, but does this have anything to do with SAP NetWeaver Enterprise Search? Iwould think it does not.
All,
please post to appropriate forums!
Thanks,
Karsten

Host Preferred Credentials failed

I have installed grid 10.2.0.4. on Aix box(64-bit). And I am trying to install Sql server plugins.
For that I installed 10.2.0.4 gird Agent Windows XP(32-bit). Agent insttalled successfully. But When I am trying to configure Host Preferred Credentials at that time I am getting error. Connection to 'windowsserver name' as user 'username' failed.
below is emoms.trc
2008-10-30 12:55:48,758 [EMUI_12_55_48_/console/pref/setCredentials$targetType=host] ERROR creds.Set
PrefCreds java.? - SetPrefCreds.testCreds(): CredsException: Connection to 'windowservername' as user
'username' failed.
Thanks in advance

Set the window local securiry policy as below and check again
1)Control Panel, Administrative Tools.
2. Click on Local Security Policy.
3. Local Policies, User Rights Assignment.
4. Double click, 'Log on as a batch job'.
5) provide username along with domain <co.uk>/<foo>

How to monitor various databases using 10g OEM

I have Oracle 9i and Oracle 10g Databases. How can I configure Oracle 10g OEM to monitor all these databases. In Oracle 9i OEM it was easy. But I didn't find the method to add it in 10g OEM? Can we access the 10g OEM only through browser?
Regards

If you are installing Database and you choose to use Database Control, it is a different thing from Grid Control. Database Control comes with its one agent which is different from Grid Control's management agent.
If you install a database on different host and you do not have Grid control, you can use the database control for that database for that host. If you have grid control, then you can install the Management Agent separately on that new host to manage the new database as a Grid Control target.

User credential permissions

Added a ADDSForest using Powershell.
Trying to add a ADDSDomainController with Powershell but I get this error:
"Verification of user credential permissions failed."
There must have been something wrong with:
$Username = "Administrator"
$SecurePassword = ConvertTo-SecureString "$%PaSsWOrD" -Asplaintext -Force
$credentials = New-Object System.Management.Automation.PSCredential -arguments ($Username, $SecurePassword)
Import-Module ADDSDeployment
Install-ADDSDomainController `
-Credential $credentials `
because I had to enter my credentials manually as if I had "Get-Credentials".

Try this:
$UsernameUser = 'Administrator'
$PasswordUser = '$%PaSsWOrD'
$passUser = ConvertTo-SecureString -AsPlainText $PasswordUser -Force
$CredUser = New-Object System.Management.Automation.PSCredential -ArgumentList $UsernameUser,$passUser
It always work for me.
Of course, make sure that the credentials you enter are correct.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Users add in OVD 10g

Hi All,
could any one help me how to add the users to the Oracle Virtual Directory 10g. I was able to connect the OVD using 3rd part tools also like softerra, but whatever i have tried to create the users are failing like import from ldif file also.
Please tell me is this possible to use the OVD as ldap, as far as i know OVD can be used as the interface for the several ldaps in the networks.
Thanks,
Venkatesh Dandu

Hi Scott,
Within a relational OLAP environment performance of queries can be managed via two 'types' of summary tables. The first 'type' are used to manage access to dimensional structures. These flatten the relational structures into an embedded total dimension structure. Without these summary tables OLAP performance can be very slow. The OLAP database documentation explains how to create these additional summary tables.
There are also OLAP packages that help to manage the creation of summary tables based on dimension levels. Again this package is documented in the OLAP database doucmentation.
To help with tracing, there is an excellent article in the database section of OTN that will help you:
http://www.oracle.com/technology/oramag/oracle/04-sep/o54talking.html
Hope this helps
Business Intelligence Beans Product Management Team
Oracle Corporation

"User authentication failed" when connecting with Visual Administrator

Hello,
I am having trouble making a connection to my local J2EE Engine using the Visual Administrator (VA).
I open the VA interface and create a new connection. The default User Name is "Administrator". I put in "localhost" for host, "50004" for port and leave the Transport Layer selection to "Default".
When I try to connect this way I get the following message:
User authentication failed
Next I went into Start|Settings|Control Panel|Users and Passwords and saw that there were several ids created by the Developer Workplace (DW) installation. The ids that I see are: j2eadm,sapadmin,sapinstall and SAPServiceJ2E
I checked all of them to see what groups they're members of and they're all at least members of "Administrators" group.
There are also 3 new groups that must have been created by the DW installation: SAP_J2E_GlobalAdmin, SAP_J2E_LocalAdmin and SAP_LocalAdmin.
The j2eadm id belonged to all 3 new sap groups so I changed its password to something I'd remember and then changed the connection to use that login.
When I tried to connect thru VA using this id and the new password I still get the "User authentication failed" error message.
Can anyone please tell me what I'm doing wrong?
Thanks in advance for any help.
David.

Hi,
During the installation the SAPINST asks for a Administrator Password.. This password is very important.
We had kept same passwords for all userids to start with.
This helped reduce lot of confusion.
Warning: if you enter the wrong password 5 times, the userid 'Administrator' gets locked.
However there is an Emergency password recovery procedures.
Try this link
http://help.sap.com/saphelp_erp2004/helpdata/en/3a/4a0640d7b28f5ce10000000a155106/frameset.htm
Hope that helps
Regards,
Siddhesh

Host user credential fails in 10g OEM

Similar Messages

Maybe you are looking for