Operating System authentication

Hi,
I have a question about Operating System authentication:
How can I find out the OSDBA and OSOPER groups after I installed Oracle?
Is there any data dictionary view to find out this groups.
I run Oracle 9.2 on Sun Solaris and want to change from password file authentication to operating system authentication.
Thanks for your help
Bernahdr

If they exist they will be in the file /etc/groups. If not, they need to be created by your sys admin.

Similar Messages

Operating System Authentication in Windows

Hi gururs,
How to turn on Operating System Authentication in NQSConfig.ini file?
I could not find it in the documentation.
Thanks
Laszlo

Hi John,
Thanks the link.
However, I want to use OS authentication (I mean Windows) and I guess I can do it without SSO authentication.
Simply, what about if I don't have SSO environment?
Regards
Laszlo

Operating System Authentication (OBIEE 10g)

I am trying to find out how to enable operating system authentication, but cannot figure which AUTHENTICATION_TYPE to enable in NQSConfig.INI:
#AUTHENTICATION_TYPE = NQS; // optional and default
#AUTHENTICATION_TYPE = DATABASE;
#AUTHENTICATION_TYPE = BYPASS_NQS;
When operating system authentication is enabled, user connecting to BI server should not type a user ID or password at the logon prompt. If a user enters a user ID and (optionally) a password at the logon prompt, that user ID and password overrides the operating system authentication and Oracle BI Server performs the authentication.
Appreciate any help on this!
Edited by: user9213142 on Dec 2, 2010 7:03 AM
Edited by: user9213142 on Dec 2, 2010 7:10 AM

What you want is possible but not trivial. You are obviously completely lost as the settings you refer to have nothing to do with that. Start by reading this thread:
OBIEE SSO on Windows desktop.

Operating System authenticated Oracle account

Hi all,
Can i use the oracle built-in account "APPS" as the Operating System authenticated Oracle account? If I have an UNIX account "apps", then can i just alter user apps and set it to externally? Or I will need to create a new OPS$apps database account? Will there any conflict between the account apps and OPS$apps?
Thank you!

Can i use the oracle built-in account "APPS" as the Operating System authenticated Oracle account?
Yes
If I have an UNIX account "apps", then can i just alter user apps and set it to externally?
Yes.
I will need to create a new OPS$apps database account?
Yes, if your initialization parameter 'OS_AUTHENT_PREFIX' is set to 'OPS$'. Note that this parameter could be set to null. Also note that the text of the 'OS_AUTHENT_PREFIX' parameter is case sensitive on some operating systems.
Will there any conflict between the account apps and OPS$apps?
If the initialization parameter 'OS_AUTHENT_PREFIX' is set to 'OPS$', there are now two different Oracle users.
They are 'APPS' and 'OPS$APPS'. The following link will provide you a lot of information on authentication.
http://otn.oracle.com/pls/db10g/db10g.drilldown?remark=&word=AUTHENTICATION&book=&preference=
If I were you, I would try it on a development/test
system before implementing it in production.

Connection from jdbc or sqlj using operating system authentication

Is it possible to use the operating system authentication to connect to oracle which is on the same box from jdbc or sqlj??
Any help is appreciated

You can logon using external credentials with the oci driver by passing in null's as username and password.

Jdbc operating system authentication

Is it only possible to use operating system authentication for jdbc connections (thin/oci) with an oracle11g database ?
Is it possible to use operating system authentication for jdbc connections with earlier versions of oracle ?
Thanks, Seb

Seb,
As far as I am aware, you cannot use operating system authentication for JDBC connections in all versions up to and including 10g.
I have not used Oracle 11g, so I don't know about that version.
Good Luck,
Avi.

Configuring operating system authentication

hi.
i need to verify if operating system authentication has been enabled on a database. can that be verified through oracle enterprise manager or is there an initialization parameter for it in the init.ora file. can someone plz explain. thanks

Check here...OS Authentication.

Operating System Authentication on Winnt 4.0

Dear Is any body here to solve the problem?
I wana setup Operating Sytem authentication on Winnt 4.0 server
on Oracle 8.0.5 Ent. Help me please with ull instructions
Regards

Hi ,
For Installing LMS 4.0 on windows 2008 R2 ,you have to installed the below Patch:
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.0/install/guide/instl.html#wp1616783
I hope this will help
Thanks
afroj

Oracle.ManagedDataAccess.Client Operating System Authentication

Hi.
I am trying to get OSA to work with Oracle.ManagedDataAccess.Client, is this not supported?
I get the following Error: ORA-01017: invalid username/password; logon denied
Here are some of the variations of connection string, I have been testing with.
Data Source=BLA.BLA.COM;
Data Source=BLA.BLA.COM;User Id=/;
Data Source=BLA.BLA.COM;Integraded Security=SSPI;
Data Source=BLA.BLA.COM;Trusted Connection=True;
Data Source=BLA.BLA.COM;User Id=/;Integraded Security=SSPI;
Data Source=BLA.BLA.COM;User Id=/;Trusted Connection=True;
Integrated Security and Trusted Connection gives me, unknown or illegal connection string attribute errors.
My first assumption would be that my Operating System Account doesn't have access to the Oracle Database I am trying to log on to.
But I am fully capable of connecting to the database with OSA with sqlplus, sqldeveloper and toad.
Can somebody explain to me why this isn't working? And what I may do to fix it?
It may be worth mentioning that I am trying to use the 12c x86 ODP.NET Managed Provider, against 11g/11.2 Oracle Databases.

That's correct. Kerberos is not currently supported by managed ODP.NET. We are working to support this feature, but don't have an ETA on when it will be available.
What company or organization is requesting this feature?
I believe there's an open feature request for Kerberos support in the Oracle .NET Feature Request Tool. Fee free to add your vote to this request.

JAAS - operating system authentification

Hi everyone,
I'm developing a web application with Oracle database. The security of the application is managed thru database accounts. So if I have an account on database I can login in my web application. I use for to this the DBSystemLoginModule.
Now some users have a account managed by the system authentification. My question is.. it's possible to login to the database with a OS account ? How ?
Thx

I have some questions about operating system
authentification.The word is authentication :-)
Now some users have a account managed by the system
authentification. My question is.. it's possible to
login to the database with a OS account ? How ?What's special about these users?
There is a short overview here in the Concepts guide. Then you may want to read about External Authentication, one of the methods of user (identity) authentication mentioned for example in the Security Guide.
The term 'operating system authentication' is somewhat confused; sometimes this refers to the special case of using os groups to assign the "extreme" sysdba/sysoper rights.
Message was edited by:
orafad

Operating system level authentication

Access to my application's functions and data is based upon the privelages granted to the role(s) in which my user performs. Users go in and out of my application all day long and it is not acceptable to have them login to my application every time they enter. Nor is it acceptable to leave the application open on the desktop all day. Therefore, I need to base security on their login ID to the Operating System.
How, in Java, do I access a user's login ID to Unix or Windows? Is there and object.method somewhere that does this?
Thanks.
Jim

it's platform specific, so you are not going to find it in plain java. You'll need some native interface solution to handle this problem.

Apply Operating System Failed

Environment: SCCM 2012 R2 CU3
Background:
Prestaged image was applied to machine. The prestaged image was created based on our old TS which only contains winpe boot image and the windows 7 operating system. WINPE v4.0 was still used in this prestaged image. We recently updated our TS with WINPE
v5.1(we did not create a new prestage image) in order to accommodate the installation of SCCM client R2 CU3 during the build.
Build Process:
Powered on the machine and boot to the hard disk(since prestaged image was already applied to the machine). After selecting our TS, it starts to download the WINPE v5.1 and then asks for a reboot. After the reboot, it starts to apply the operating
system but will fail afterwards. Snippet of the error in smsts.log can be found below.
What we have noticed:
If we don't change the boot image of the TS to WINPE v5.1 and still use WINPE v4.0, we don't encounter the error. The only time we encounter the error is when we change the boot image of the TS to WINPE v5.1. Note that I can ping the FQDN of the Primary
server and the dp when using WINPE v5.1
Snippet of the Error:
DownloadOnDemand flag is true. Attempting to download content locally for Package ABC003CA. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Locations: Multicast = 0, HTTP = 1, SMB = 1. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Package Flags: 0x08000081 ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Trying http://sccm01.contoso.net/SMS_DP_SMSPKG$/ABC003CA. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
GetDirectoryListing() entered ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
No credential information in environment. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Initializing HTTP transport. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Setting URL = http://sccm01.contoso.net/SMS_DP_SMSPKG$/ABC003CA. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Address=http://sccm01.contoso.net, Scheme=http, Object=/SMS_DP_SMSPKG$/ABC003CA, Port=80. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Setting Authenticator. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Set authenticator in transport ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
CLibSMSMessageWinHttpTransport::Send: URL: sccm01.contoso.net:80 PROPFIND /SMS_DP_SMSPKG$/ABC003CA ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
401 - Unsuccessful with anonymous access. Retrying with context credentials. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Using thread token for request ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
401 - Unsuccessful with context credentials. Retrying with supplied credentials. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Network access account credentials not supplied. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
401 - Unsuccessful on all retries. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
SendResourceRequest() failed. 80190191 ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
SendResourceRequest(), HRESULT=80190191 (e:\qfe\nts\sms\framework\tscore\downloadcontent.cpp,516) ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
oDavRequest.GetDirectoryListing (setDirs, setFiles), HRESULT=80190191 (e:\qfe\nts\sms\framework\tscore\resolvesource.cpp,2516) ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Download() failed. 80190191. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Trying \\sccm01.contoso.net\PACKAGES\UNATTEND-ENG-B2\. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
nPos != CCM::Utility::String::npos, HRESULT=80004005 (e:\qfe\nts\sms\framework\tscore\resolvesource.cpp,238) ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Creating a connection to
\\sccm01.contoso.net\PACKAGES\UNATTEND-ENG-B2\ with default account ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Connection request for "\\sccm01.contoso.net\PACKAGES\UNATTEND-ENG-B2" ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
No credentials available for connecting to "\\sccm01.contoso.net\PACKAGES\UNATTEND-ENG-B2". See whether the share has already been connected. ApplyOperatingSystem 1/28/2015
11:17:21 AM 1936 (0x0790)
Connecting to "sccm01.contoso.net\PACKAGES\UNATTEND-ENG-B2" ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Unsuccessful in connecting to
\\sccm01.contoso.net\PACKAGES\UNATTEND-ENG-B2. Invalid username or password. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
reconnect(), HRESULT=80070005 (e:\qfe\nts\sms\framework\tscore\tsconnection.cpp,129) ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
connect(pszPath, pszAccount, pszPassword, L"", uFlags), HRESULT=80070005 (e:\qfe\nts\sms\framework\tscore\tsconnection.cpp,148) ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Unsuccessful in connecting to or accessing
\\sccm01.contoso.net\PACKAGES\UNATTEND-ENG-B2\ with default account. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
No credential information in environment. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Creating a connection to the share
\\sccm01.contoso.net\PACKAGES\UNATTEND-ENG-B2\ with network access account ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Failed to access the share
\\sccm01.contoso.net\PACKAGES\UNATTEND-ENG-B2\ with network access account ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
DownloadContentAndVerifyHash() failed. 80070002. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
DownloadContentAndVerifyHash ( pszPackageID, L"SMSPackage", saHttpContentSources, saSMBContentSources, saMulticastContentSources, sDestination, dwFlags, L"", 0, dwPackageFlags, mapNetworkAccess ), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\resolvesource.cpp,3052) ApplyOperatingSystem 1/28/2015
11:17:21 AM 1936 (0x0790)
DownloadContentLocally (pszSource, sSourceDirectory, dwFlags, hUserToken, mapNetworkAccess), HRESULT=80070002 (e:\qfe\nts\sms\framework\tscore\resolvesource.cpp,3273) ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
TS::Utility::ResolveSource(configPackageID, packagePath), HRESULT=80070002 (e:\nts_sccm_release\sms\client\osdeployment\applyos\installcommon.cpp,958) ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Failed to resolve source for configuration file package ABC003CA (80070002) ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
ReleaseSource() for C:\_SMSTaskSequence\Packages\ABC003CA. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
The user tries to release a source directory C:\_SMSTaskSequence\Packages\ABC003CA that is either already released or we have not connected to it. ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
CopyConfigFile( this->configPackageID, this->configFileName, this->configFilePath ), HRESULT=80070002 (e:\nts_sccm_release\sms\client\osdeployment\applyos\installimage.cpp,874) ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
InitConfigFile(), HRESULT=80070002 (e:\nts_sccm_release\sms\client\osdeployment\applyos\installimage.cpp,1852) ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Configure(), HRESULT=80070002 (e:\nts_sccm_release\sms\client\osdeployment\applyos\installimage.cpp,2028) ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
Installation of prestaged media image failed to complete..
The system cannot find the file specified. (Error: 80070002; Source: Windows) ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
installer.install(), HRESULT=80070002 (e:\nts_sccm_release\sms\client\osdeployment\applyos\installimage.cpp,2094) ApplyOperatingSystem 1/28/2015 11:17:21 AM 1936 (0x0790)
InstallImage( g_InstallPackageID, g_ImageIndex, targetVolume, ImageType_OS, g_ConfigPackageID, g_ConfigFileName, bOEMMedia, g_RunFromNet ), HRESULT=80070002 (e:\nts_sccm_release\sms\client\osdeployment\applyos\applyos.cpp,509) ApplyOperatingSystem 1/28/2015
11:17:21 AM 1936 (0x0790)
Process completed with exit code 2147942402 TSManager 1/28/2015 11:17:21 AM 1840 (0x0730)

WINPE v5.1 is not supported and does not work, are you sure you are using it and not PE 5.0? Note that the ADK for Win 8.1 Update does *not* create WinPE 5.1 boot images, it creates WinPE 5.0 boot image that you can then modify to be WinPE 5.1 by injecting
the appropriate updates.
The above log file clearly shows authentication issues and calls out the fact that no Network Access Account is set.
Jason | http://blog.configmgrftw.com | @jasonsandys

T61p Client Security Solutions + Password Manager + Two Operating Systems

Greetings.
I am running both XP and VISTA on my T61p. I use the client security solutions password manager feature for websites and network shares. Since my model has the biometric scanner instead of entering the user ID and password I just swipe my finger. The issue is that when I first setup client security solutions it creates some system key that I assume is tied to the security chip hardware. Once I have it setup and working under one operating system it fails to authenticate me under the other operating system. It brings up a windows that says, "Verify Identity" / "reason for authentication: system key recovery" Why am I not able to use this feature under both operating systems?
Thanks for your time.
XSYLUS

Thanks for the reply.
I was using an older version of RnR, however, after the attempt to re-install, I upgraded to the latest version. It still errors out.
As to your second guess, I was hopefull this was the fix, I had forgotten to go through the registry. I deleted an empty CSS folder in the Common Files folder. And found several registry entries which have now been deleted. I don't believe I missed any. But unfortunately no luck. I cleared the chip again as well.
If it adds any clues, the system update was not working either. But the language fix posted on the forums resolved it. If I remember correctly the first time I tried to reinstall CSS it did ask a question/comment about language not matching. I could be wrong, however, there have been alot of attempts.
I spoke with tech support on the phone with the only suggestion being a clean restore of the laptop which I would like to avoid.
Thanks again.

Operating system userid

Does anyone know how to pass the client operating system user id through an asp.net webserver to an Oracle database
so that it be tracking using the FGA tables?
Thanks

Not sure if this is in the same realm but investigate "Proxy Authentication", I used this for DB user impersonation (from non-oracle credentials, not OS user ID but I think that OS user ID can be used as well).
See:
http://oraclesvca2.oracle.com/docs/cd/B10501_01/server.920/a96521/users.htm#17433

Operating System Calls from APEX with Java and PL/SQL

Question about operating system calls from apex.
I created a java file which is wrapped with pl/sql like
create or replace java source named "ExternalCall" as
import java.io.*;
I do the steps from this web page http://www.oracle.com/global/de/community/tipps/oscalls/index.html
The page is in german, but for experienced users the code on this page says everything.
In apex i have an application which calls this function with the "move" command in a sql-report region.
Let's say move c:\work1\file.txt c:\work2\file.txt
Everything works fine on one host(pc) but if i want to transfer the file from my host to another one then
i get the messgage "no access" although i have read, write access on the other host.
By the way, on both hosts i have admin rights.
Why can't i transfer the file over a network ?
Thanks in advance for any kind of help.
Regards
Stefan

I guess you are working on a Windows host. In this case Oracle processes are running as Windows services with a build-in MS system account. This account has no access to network ressources. You have two ways to get out of your windows box:
Assign Oracle services a network enabled account, e.g. domain user with local administrator privileges. (I never tried this and I don't like to recommend it.)
Use a command script for copying files and use explicite authentication within this script:-
net use \\myserver\ipc$ tiger /user:scott
copy c:\temp\xxx1 \\myserver\share\temp
copy c:\temp\xxx2 \\myserver\share\temp
Michael

Operating System authentication

Similar Messages

Maybe you are looking for