Non Admin System User in Oracle Linux

When installing OL 6-3 I am asked to specify the root user and at the end of the installation a non admin system user.
I am slightly confused as to the purpose of this non admin system user.
Q1. What is if for / not for and how does it differ from root ?
Q2. Is is really just the Desktop Admin user ( whereas root is the superuser for the server as a whole ) ?
Q3. Now that I have specified this non admin user - how do I change this role to another user I have created ( I made a poor choice of username in the first place ! ) i.e. does this non system admin user have any specially designated roles or privileges at Linux level, which I need to enable on the other user that I now wish to be the non admin system user ?
Advice greatly appreciated,
Jim

Jimbo wrote:
When installing OL 6-3 I am asked to specify the root user and at the end of the installation a non admin system user.
I am slightly confused as to the purpose of this non admin system user.
Q1. What is if for / not for and how does it differ from root ?The viewpoint on modern *nix is that:
- Logging in remtoely directly as root is often a bad thing to be discouraged, and may pose a security threat.
- Generally logging in as root is a bad thing; best practice is to acquire superuser privileges only when needed.
This is so much so that some (most?) distributions are preventing a direct login by root at all, and then need a
>
Q2. Is is really just the Desktop Admin userNo really, essentially each user can maintain (administer) his own desktop ... though I expect there are ways of restricting this.
( whereas root is the superuser for the server as a whole ) ?This is essentially true.
>
Q3. Now that I have specified this non admin user - how do I change this role to another user I have created ( I made a poor choice of username in the first place ! ) i.e. does this non system admin user have any specially designated roles or privileges at Linux level, which I need to enable on the other user that I now wish to be the non admin system user ?most gui tools running on root will realise root privileges are needed and ask for it.
From a terminal window:
To change to the root user use:
su -
to check to another user you may:
su - otheruser
...... However this user may have trouble running a graphical program ...
( The alternative ssh -X otheruser@localhost .... is a simple way round this)
>
Advice greatly appreciated,
JimJust as I finished preparing this I noticed Dude has already answered. I think we're saying essentially the same thing. I've fleshed things out a little more. Please be aware I could be had up for technical/conceptual inaccuracies in my reply; so please take as a general direction.

Similar Messages

Installation rights to non-admin domain users

I am looking for a GPO which will allow non-admin domain users to install specific software updates...mainly Anti-virus, adobe or java updates.
Please suggest!!

Hi,
Sorry, it seems that we can’t do this.
However, we can consider to use Software Installation Group Policy or WSUS to centrally update these software.
Regarding this topic, the following threads can be referred to for more information.
Allow non-admin users to install software updates of specific program
http://social.technet.microsoft.com/Forums/en-US/bb19a938-edae-459f-b2e1-b0ef2c836824/allow-nonadmin-users-to-install-software-updates-of-specific-program?forum=winserverGP
How to allow non-admin users to install software updates of Java, FLASH and Adobe Reader?
http://social.technet.microsoft.com/Forums/en-US/6a939857-6ec9-4100-8333-cddc27c3f58e/how-to-allow-nonadmin-users-to-install-software-updates-of-java-flash-and-adobe-reader?forum=winserverGP
Best regards,
Frank Shen

Unable to create new user when logged as SYS or SYSTEM user. Oracle 11g

Hello I installed oracle 11g databse. The installation went OK.
But when I tried to create a new user or alter an existing I always got "ORA-01031: insufficient privileges".
However I was able to alter SYS user when I was loged in as SYS or SYSTEM user when I was loged in as SYSTEM.
I am also able to create new tables, drop tables, query tables, create and drop synonyms and all other things except manipulate with users;
Can anybody tell me where could be the problem?
Thanks a lot in advance.
Message was edited by:
user609545

I have checked the roles DBA, RESOURCE..(I am sorry byt I dont know what is role CREATE). SYS user has all these roles with admin option and default checked.
I am using oracle Enterprise manager, but I dont know where should I click on the red mark? Where can I find it?

How do I allow access to non admin network users to disk volume?

I would like to allow access to a specific volume (disk) on one of our networked macs (Mac1) to all users. I've set user accounts on Mac 1 for all network users. These users are "regular" users, not admin. They can access this disk (and all others on Mac1) if I log in as Admin set Users to Admin. If I do this, then users have access to ALL data on all disks. If I do not, leaving them as "regular" users, when they log in they only see public folders. How can I allow access to the one disk volume without making network users admin? I tried changing various settings for the volume in Finder Info (everone else=read/write; ignore permissions) with no luck.
Thanks
iMac, ibooks, G5, Tibook Mac OS X (10.4.4)

Your observations are correct - by default, an "admin" user connecting over AFP can choose from available "volumes" (default) or "shares", whereas a non-admin user can only mount "shares".
By default, the only "shares" on an OS X client machine are the users' "Public" folders, and unlike pre-OS X Macs, it isn't easy to configure your own share points. Apple's official statement is that users wanting this functionality should buy OS X Server.
However, it is possible to create an arbitrary share point using 3rd party software called "SharePoints" (donationware). I have never used it, but it seems to be well regarded. Alternatively, you can do it manually following the instructions in this hint & comments (especially apw8's):
http://www.macosxhints.com/article.php?story=20011108161839416
Once the external drive (or folder on the external drive) is configured as a share point, it should be possible for non-admin users to select and mount it once they connect over AFP.

Sending special characters to non-unicode non-sap system: user exit

Hello All,
We are sending data from a SAP unicode system to a non-sap non-unicode system via IDOC. The idoc is standard idoc GLMAST which contains gl account information.
Some text fields contained in this idoc can contain special Polish characters. If they are sent unchanged to the non-unicode system, they give problems in the destination system.
What we would like to do is to build a user exit to convert these special characters, for example : 'é' becomes 'e', ....
We used enhancement object ALE00001, function EXIT_SAPLBD11_001 and implemented it, but it seems this exit is not called. Can this user exit be used for this functionality?
We also tried to change in SM59 the type of system of the destination to non-unicode, so that SAP replaces those special characters by #. But, than the error 02. Codepage not found is given in the idoc. Note: the link to the external system is not set up yet, so no actual connection is possible. Is this why we receive this error, and will this functionality work in the end with a non-sap system?
Thanks for helping.
Kind Regards,
Bart Pelsmaekers

I faced this problem in many project i implement below logic.
DATA: c_splchar(2) VALUE '90',
        c_defaultchar(1) type c VALUE '#'.
You have to move one by one character to this function module
          CALL FUNCTION 'URL_ASCII_CODE_GET'
               EXPORTING
                    trans_char = spl_char
               IMPORTING
                    char_code = spl_code.
All non unicode(Better you check) are always greater than 90.
         if spl_code is gt c_splchar.
            move c_defaultchar to c_splchar.
         endif.
"Reward points if usefull"
Thanks,
Narayan

Fusion middleware system requirements for oracle Linux 7

Hello,
I'm currently studying document E54272-01 (Oracle® Fusion Middleware System Requirements and Specifications
12c (12.1.3) September 2014) in order to install Fusion Middleware 12c products on a Oracle Linux 7 server.
The "Linux Operating System Requirements" section doesn't include Oracle Linux 7 system requirements, does it mean Fusion Middleware 12c products are not yet certified for OL7?
PS : I'm unable to find a pdf version of E54272-01 document, if anybody has the URL, I'll appreciate.
Daniel

Daniel,
The compatibility matrix for 12.1.3 can be found here:
http://www.oracle.com/technetwork/middleware/fusion-middleware/documentation/fmw-1213certmatrix-2226694.xls
As you will see, for now only Oracle Linux 5 and 6 are compatible.
Thanks,
Parisi

OBIEE administartion Login is failing for Non Admin Group User.

Hi,
I have created one user for testing and assigned given access to some groups other than Administrators. When i am trying to login in Administration tool getting error message as "Logon Failed". I am able to access the Presentation using the same login and also able to create answers.
When i assign the administrators group to same user the login happened successfully.
I am just wondering, in order to access the Administration tool, the user should be part of administrators group or i am missing some steps.
Thanks

As the name suggests Administration tool is for administrators.So if you trust a user to access the Admin tool then you supply the user with the Admin Password.

How to disable access to Server Preferences to non-admin local users

My apologies if this has been covered in other discussions. I am new to Mac OS X Server. I have just set it up on an iMac. I have set up a Standard user account as well as the Administrator user account. If I log in as the Standard user, I can still open Server Preferences and make changes to all the server settings (as if I had Administrator access). Is there any way to disable access to Server Preferences (and other Server Utilities) for Standard users?
Many thanks.
Greg

Hi ,
Please have a look in to this .
EAC is now a web-based management console, you’ll need to use the ECP virtual directory URL to access the console from your web browser. In most cases the EAC’s URL will look similar to the following:
Internal URL: https://<CASServerName>/ecp The internal URL is used to access the EAC from within your organization’s firewall.
External URL: https://mail.contoso.com/ecp The external URL is used to access the EAC from outside of your organization’s firewall.
Note : There is no virtual directory for EAC .If you want to use EAC internally or externally ,you need to use the ecp virtual directory to gain the access.
Please reply me if you have any queries .
Regards
S.Nithyanandham
Thanks S.Nithyanandham

A Solution for Enabling Sandbox activation by non admin users for testing (OIM 11gr2 PS2)

I just wanted to post what i came up with as a solution the the problem of not being able to Test the effects of sandbox changes for non admin level users prior to their publication. We are constantly making changes to the UI through sandboxes, the problem is rolling a sandbox back isn't easy, and we cannot be sure of the effects they will have on non administrative users until they are published, since the out of the box sandbox link isn't available to non Sysadmin level users.
To allow these non admin user accounts to test the effects of sandbox changes in our development environment, I did the following (as always, follow at your own risk):
Create and activate a new sandbox.
Close all open tabs (including the Home and Sandbox tabs) and click the "Customize" link.
Click the view -> source drop down in the upper left.
After the source is visible, click the Accessibility or Sandbox link to find the area that you will add the new "UserSandboxTest" (call it whatever you want) link.
Add a new commandImageLink directly in the panelGroupLayout: horizontal item before the "switcher" item (see the UserSandboxLink in my screen shot below):
Edit the Link you just inserted, Entering whatever you want the link to display as in your browser in the "Text" field.
Export the sandbox.
Unzip the exported sandbox and navigate to the IdmShellV2.jspx.xml (path should be: \templates\mdssys\cust\site\site).
Edit the IdmShellV2.jspx.xml file and find the new item you added in step 5.
Add the following to the commandImageLink xml item: actionListener="#{pageFlowScope.uiShell.context.launchSandboxes}" rendered="#{oimcontext.currentUser.roles['SANDBOX_USER'] != null}". Note: I used a new custom enterprise role, SANDBOX_USER, to control the display of the new link, You should substitute whatever EL conditions you need in the rendered property.
Save your IdmShellV2.jspx.xml file and zip the contents back up, just like you would for any other customization.
Import your newly edited sandbox back into the target environment.
Publish the sandbox.
This seems to work great for allowing us to test other sandbox changes effects on different types of users.

On step 10, adding the check to determine if the user should have access to the role ended up breaking access to the unauthenticated pages like the self registration page and the forgot userid/user login pages. Non-authenticated users cannot execute the method to return the role, so that fails which leaves the page not loading. To correct this I changed the rendered property to rendered="#{securityContext.authenticated}". This prevents the link from displaying on non authenticated pages, but displays for anyone else who's logged on. We only plan on using this in our development environment where no one but developers and system admins have access anyway, so it's not an issue that everyone will see the link. I wouldn't recommend putting this in an environment where end users will be logging in and testing without developing a method (or finding another way to limit the display) that can be called by unauthenticated users to prevent them from seeing the link.

Majority of reports missing for non admin users

I have followed the instructions here (SCCM 2012–Reporting in console for non-admins (Reporting User Role) v2) to allow non admin users the ability to view
reports in the console. So far, so good. However, when viewing the reports with the non admin user, only about 100 of the 400+ reports appear.
Am I missing something here?

The custom reporting one in the link I provided, and also modified versions of the following:
OS Deployment manager (removed rights to All driver related items (drivers and driver packages), Boot image packages (except read access), Operating system installation packages).
Application Administrator (removed Application>Approve; Distribition Point>Set Security Scope; Distribution Point Group>Set Security Scope; Global Condition>Set Security Scope)
The reports missing we care about primarily are Software ones (companies and products and files).

FYI: Oracle Linux and devfs

This message is for users of Oracle Linux who may be thinking of running Richarg Gooch's devfs (part of the 2.4 kernels and available as a patch to the 2.2 kernels).
Oracle cannot be installed, successfully, on a system running devfs most likely because the Oracle Installer cannot correctly calculate the available file space due to changes in the naming of the file systems.
devfs CAN be run once Oracle is installed.
Sean McLinden
Outcome Technology Associates, Inc.
null

3113 - end of communciation file
means that you Oracle Database can't allocate the initial resource to startup, like semaphores or shared memory.
Check with Oracle Install Instruction for linux and the parameters of your kernel.
For example Mandrake 7.2 kernel-workstation mode was compiled with sufficients resources, in the other hand Mandrake 7.2-secure kernel doesn't have enough semaphores or shared memory to run Oracle DB.
Look at /usr/src/linux directory to check these parameters and re-compile the kernel.
Best regards, Marcelo.

How to install oracle 11g on oracle linux 6.1.

Hello everyone here at oracle forum.!
I'm new on using the linux and i badly need to learn it including the Oracle Database for making PHP website.
Because of this i downloaded all the packages of Oracle Linux Release 6 Update 1 Media Pack for x86 (32 bit) at E-Delivery.
Now i was having a hard time figuring out how to install all the 4 ISO images. the only one that worked was was the boot.iso that installed the Oracle Linux 6 without the DB.
So what would i do to use the 3 updates?
I burnt them all one by one on different DVD but it wont look for the other packages.
So please guys bare with me and help me figure out how to use the other 3 packages for i know it has the Oracle Database.
Oracle Linux Release 6 Update 1 source DVD 1 V26570-01
Oracle Linux Release 6 Update 1 source DVD 2 V26571-01
Oracle Linux Release 6 Update 1 Boot iso image for x86 (32 bit) V26573-01

Oracle Linux does not install any Oracle Database. You don't need the source and boot.iso DVD. You can boot and install the system from the Oracle Linux 6.1 installation DVD. The boot.iso is useful for a network install and the source DVD if you want to compile everything yourself.
As far as I know, Oracle Database has not been certified for Oracle Linux 6 yet. That does not necessarily mean you cannot install Oracle Database on Oracle Linux 6 yet, but you will run into problems with software requirements, package dependencies and perhaps incompatibilities, i.e. ext4 file system.
I think your best option is to install Oracle Linux 5 and certainly use Oracle VirtualBox. If you are new to Linux you probably cannot use Linux as your primary OS yet, and VirtualBox will allow you to install and re-install without jeopardizing your primary host OS. You can also download pre-build virtual machines for Virtualbox from http://www.oracle.com/technetwork/community/developer-vm/index.html which might have everything you need installed and ready to use.

Oracle-Linux 11g Install error

Hi guys,
After starting Ora installer on Linux I'm getting this error:
Invalid source path '../stage/Components/oracle.jdk/1.5.0.17.0/1/DataFiles' specified for unzip. Unzip command failed. Please check oraparam.ini and specify a valid source path.
: No such file or directory
I downloaded 11g twice thinking that maybe the files are corrupt but both times got the same error as above directory does not exist when I unzip Oracle 11g db files... ???
Please help.
I downloaded 11g twice thinking that maybe the file is corrupt but both times got the same error as above directory does not exist when I unzip Oracle db files...
Please help.
Thank you very much.
Art.

I already closed the session... I started Oracle Installer as a super user in Oracle-Linux:
...@localhost database]$ ./runInstaller
Starting Oracle Universal Installer...
Checking Temp space: must be greater than 120 MB. Actual 21968 MB Passed
Checking swap space: must be greater than 150 MB. Actual 3999 MB Passed
Checking monitor: must be configured to display at least 256 colors. Actual 16777216 Passed
Preparing to launch Oracle Universal Installer from /tmp/OraInstall2011-02-13_08-24-59PM. Please wait ...
Invalid source path '../stage/Components/oracle.jdk/1.5.0.17.0/1/DataFiles' specified for unzip. Unzip command failed. Please check oraparam.ini and specify a valid source path.
The problem I think is that directory '.../oracle.jdk/...' does not exist.
Thank you very much.
Art.
Edited by: user6248369 on Feb 13, 2011 6:24 PM

How do you recompile the kernel for oracle linux 6.3

Hello,
I have installed Oracle linux 6.3 default settings on x86_64 bit pc
I have some questions:
1. What public yum repositories contain the oracle linux 6.3 kernel source code ?
2. Is the oracle linux 6.3 kernel source code on OracleLinux-R6-U3-src-dvd1.iso or OracleLinux-R6-U3-src-dvd2.iso , can I use this to recompile a new kernel ?
3. Do you have the steps/commands needed to set options and compile a installable kernel[rpm] on oracle linux 6.3 x86_64.
4. What gui tools are available in the desktop to manage settings e.g sound/volume or to install additional gui utilities.
5. Is there some documentation help on using the oracle linux desktop ?. If so where is it located .
Thankyou
Glenn

Glenn D. wrote:
1. What public yum repositories contain the oracle linux 6.3 kernel source code ?None of them. The Oracle Linux kernel source code can be found here:
https://oss.oracle.com/ol6/SRPMS/
https://oss.oracle.com/ol6/SRPMS-updates/
And our git repositories are here:
https://oss.oracle.com/git/
The default kernel in OL6.3 is here:
https://oss.oracle.com/git/?p=linux-uek-2.6.39.git;a=summary
2. Is the oracle linux 6.3 kernel source code on OracleLinux-R6-U3-src-dvd1.iso or OracleLinux-R6-U3-src-dvd2.iso , can I use this to recompile a new kernel ?Actually, I have no idea which DVD the source code is on.
3. Do you have the steps/commands needed to set options and compile a installable kernel[rpm] on oracle linux 6.3 x86_64.No, you'd need to decide that for yourself. The kernel source is complex and can be very tricky to recompile.
4. What gui tools are available in the desktop to manage settings e.g sound/volume or to install additional gui utilities.Wow, topic shift. GNOME Control Center manages settings and installing new utilities is done by Pirut.
5. Is there some documentation help on using the oracle linux desktop ?. If so where is it located .Oracle Linux isn't intended to be used as a desktop. All the documentation is here:
https://linux.oracle.com/documentation/
http://docs.oracle.com/cd/E37670_01/index.html

Profiles apply to SYS and SYSTEM users

dear all.
is possible configure the security policies (profiles), i mean password length, history, failed login attempts for SYS and SYSTEM users in oracle 10g.
What will happen if both users blocked ?? the service would be affected ???
what would you recommend me ?
thanks for your answers and apologize my english, is not very well.

Check here:
SYS account cannot be locked out by setting the failed_login_attempts limit in the profile.
is it possible to lock out SYS using FAILED_LOGIN_ATTEMPTS in a profile
http://www.petefinnigan.com/ramblings/failed_login_attempts.htm
-Anantha

Non Admin System User in Oracle Linux

Similar Messages

Maybe you are looking for