SSL and X.509: browser doesn't prompt for a certificate

Hello!
I am trying to configure my NW ABAP to work with certificates. I have followed the instructions in SAP help for <a href="http://help.sap.com/saphelp_nw04/helpdata/en/65/6a563cef658a06e10000000a11405a/content.htm">Configuring the SAP Web AS for Supporting SSL</a> and <a href="http://help.sap.com/saphelp_nw70/helpdata/en/a8/d9d53a9aa9e933e10000000a114084/content.htm">Configuring the System for Using X.509 Client Certificates</a>. I configured the PSEs, set the profile parameters, imported certificates into my browser from service.sap.com, set values in USREXTID table.
Now I can use the services from SICF via HTTPS with no problem by providing username and password when prompted by web browser. However, I can't make the browser prompt me for a certificate. I tried to play with service parameters in SICF. No matter what I do, my browser never asks me for a certificate. What am I missing?
Thanks for your hints!
Regards,
Igor
Here are my profile parameters:
[code]ssf/name = SAPSECULIB
ssf/ssfapi_lib = $(DIR_CT_RUN)\sapcrypto.dll
sec/libsapsecu = $(DIR_CT_RUN)\sapcrypto.dll
ssl/ssl_lib = $(DIR_CT_RUN)\sapcrypto.dll
icm/server_port_0 = PROT=HTTPS, PORT=443, TIMEOUT=10
icm/server_port_1 = PROT=HTTP, PORT=8000, TIMEOUT=10
icm/HTTPS/verify_client = 1
snc/extid_login_diag = 1
snc/extid_login_rfc = 1
login/create_sso2_ticket = 2
login/accept_sso2_ticket = 1
login/ticket_only_to_host = 1[/code]

I am trying to implement SSO thru Web Based Gui and using Digital Certificate for the user authentication. I have done the followings
1- I have configured my SAP ECC AS ABAP Server for SSO / HTTPS.
2- My server is signed with SAP AG test root Server certificate.
3- I am using x.509 free generator to generate Client certificate
4- I have mapped this client certificate in table USREXTID
5- I have also installed the above client certificate in my browser.
Now, when I am accessing the Server thru HTTPS web link, I am getting this Windows:
See the screenshot from the link.
http://www.zshare.net/image/812282264b4e0cc2/
Itu2019s accepted as SAP Service / TCS certificate is not a known CA for the world.
On clicking Continue, the System asks for the User ID and Password:
See the screenshot from the link.
http://www.zshare.net/image/81228268eda10f1c/
I believe it shouldnu2019t ask for the user ID and password I as have installed the digital certificate and have maintained it under VUSREXTID
Some part of my SMICM is below:
[Thr 5920] CONNECTION (id=2/11092):
 used: 1, type: 1, role: 1, stateful: 0
 NI_HDL: 52, protocol: HTTPS(2)
 local host: 172.16.0.56:1443 ()
 remote host: 172.19.65.2:52123 ()
 status: NOP
 connect time: 08.10.2010 08:52:32
 MPI request: <0> MPI response: <0>
 request_buf_size: 0 response_buf_size: 0
 request_buf_used: 0 response_buf_used: 0
 request_buf_offset: 0 response_buf_offset: 0
[Thr 5920] MPI:6 create pipe 0000000004A00AE0 1
[Thr 5920] MPI<1749>6#1 Open( ANONYMOUS 6 1 ) -> 6
[Thr 5920] MPI<1749>6#2 Open( ANONYMOUS 6 0 ) -> 6
[Thr 5920] MPI:9 create pipe 0000000004A00F60 1
[Thr 5920] MPI<174a>9#1 Open( ANONYMOUS 9 0 ) -> 9
[Thr 5920] MPI<174a>9#2 Open( ANONYMOUS 9 1 ) -> 9
[Thr 5920] <<- SapSSLSessionInit()==SAP_O_K
[Thr 5920] in: args = "role=2 (SERVER), auth_type=1 (ASK_CLIENT_CERT)"
[Thr 5920] out: sssl_hdl = 0000000009E15130
[Thr 5920] NiIBlockMode: set blockmode for hdl 52 TRUE
[Thr 5920] SSL NI-sock: local=172.16.0.56:1443 peer=172.19.65.2:52123
[Thr 5920] <<- SapSSLSetNiHdl(sssl_hdl=0000000009E15130, ni_hdl=52)==SAP_O_K
[Thr 5920] <<- SapSSLSessionStart(sssl_hdl=0000000009E15130)==SAP_O_K
[Thr 5920] status = "new SSL session, NO client cert"
[Thr 5920] IcmPlCheckRetVal: Next status: READ_REQUEST(1)
[Thr 5920] IcmReadFromConn(id=2/11092): request new MPI (0/0)
[Thr 5920] MPI<1749>6#3 GetOutbuf -1 1771d0 65536 (0) -> 0000000004B77240 0
[Thr 5920] <<- SapSSLReadPending(sssl_hdl=0000000009E15130)==SAP_O_K
[Thr 5920] out: pendlen = 0
[Thr 5920] <<- SapSSLRead(sssl_hdl=0000000009E15130)==SAP_O_K
[Thr 5920] result = "max=65463, received=430"
[Thr 5920] IcmReadFromConn(id=2/11092): read 430 bytes(timeout 500)
[Thr 5920] BINDUMP of content denied
[Thr 5920] PlugInHandleNetData(rqid=2/11092/1): role: 1, status: 1
#content-length: 0/0, buf_len: 430, buf_offset: 0, buf_status: 0

Similar Messages

Crystal Report doesn't prompt for SAP credentials / errors out on refresh

2 Environments tested with same results:

BOE XI 3.1 SP2 & BOE XI 3.1 SP2 FP2.5 
SAP Intg Kit on mirrored SP/FP levels in each environment.

We've been successfully creating Crystal Reports against BEx queries in BW for months now as well as ECC master data. We've also built universes and have WebI reports actively working against similar BEx queries in the same. However, we're getting some curious behavior when we refresh the Crystal Reports against BEx queries in BW. Verified all necessary transports and authorizations have been provided for both authoring, as well as refreshing/viewing on demand, etc.

We've setup all the Crystal Reports we're testing to:

a) Use custom database logon information specified here. 
b) Specify a custom driver, leveraging the crdb_bwmdx driver 
c) Prompt the user for database login

We have not enabled SNC as of yet.

1) When we refresh a WebI report hitting a BEx query with security applied, it doesn't prompt for the credentials, but we confirmed through tracing on the SAP side that if the user hits a paramater it has access to, the data comes through and when we hit a paramater they do not have access to, we can clearly see SAP reject it and it spits out a logical error on the BO side in InfoView and in the WebI logs on the BO server.

2) When we refresh a Crystal Report hitting ECC data, we are prompted for the SAP credentials and everything works as expected

However:

3) When we refresh a Crystal Report hitting a BEx query in BW, we are not promtped for SAP credentials. We immediately get the "LOV" prompts. Now, if we use a test user in SAP that has NO SECURITY restrictions at all and open access to the query, the data comes through. However, as soon as any security is applied to the query level, even if it is SAP ALL, we cannot retrieve the data. Tracing is also strange, as we can see on the SAP side it buffer the selected paramaters, but unlike with the WebI reports, it never shows it reaching the point where it checks each paramater against what the role has access to. An error is then spit back. We run the same queries with the same users within SAP and get normal behavior. It's as though as soon as we apply security to the query the mdx driver doesn't like it. Dependant on the type of InfoView viewer we use, the errors we consistently get on the BO side are:

Interactive Viewer: "Error in File %reportname%: Encapsulating Page Failed" 
Java Viewer: "Error in File %reportname%: Database Connection Error"

Nothing glaring in the event logs on the BO servers or in the Crystal logs that I can see, however just because it isn't spitting a specific error in the crystal logs doesn't mean I'm not missing something because I don't know what to look for behavior wise. To reduce the liklihood that it has to do with the way the report was built, we've tried against the same query by building a report using standard methods, as well as the SAP Toolbar using a very plain jane report. Same behavior.

Thoughts?
Edited by: Jay Riddle on Mar 1, 2010 8:55 PM

Hi,
1) When we refresh a WebI report hitting a BEx query with security applied, it doesn't prompt for the credentials, but we confirmed through tracing on the SAP side that if the user hits a paramater it has access to, the data comes through and when we hit a paramater they do not have access to, we can clearly see SAP reject it and it spits out a logical error on the BO side in InfoView and in the WebI logs on the BO server.
>> Which authentication are you using to logon to InfoView ? Whats the configuration in the Universe Connection for Authentication ?
2) When we refresh a Crystal Report hitting ECC data, we are prompted for the SAP credentials and everything works as expected
>> The user is using which authentication ? and against which system does he log on ?
However:
3) When we refresh a Crystal Report hitting a BEx query in BW, we are not promtped for SAP credentials. We immediately get the "LOV" prompts. Now, if we use a test user in SAP that has NO SECURITY restrictions at all and open access to the query, the data comes through. However, as soon as any security is applied to the query level, even if it is SAP ALL, we cannot retrieve the data. Tracing is also strange, as we can see on the SAP side it buffer the selected paramaters, but unlike with the WebI reports, it never shows it reaching the point where it checks each paramater against what the role has access to. An error is then spit back. We run the same queries with the same users within SAP and get normal behavior. It's as though as soon as we apply security to the query the mdx driver doesn't like it. Dependant on the type of InfoView viewer we use, the errors we consistently get on the BO side are:
>> The user is using which authentication ? and against which system does he log on ?
>> You mentioned security restrictions and I assume we talk about BI authorizations in form of data level security. If so - does the BW query include the authorization variables ?
Ingo

[SOLVED] Encryption hook doesn't prompt for key

I'm trying to dual boot an encrypted arch (64bit luks encryption without lvm) and windows 8 on uefi. Everything installs pretty smoothly until it tries to decrypt the root partition, it doesn't prompt for the passphrase. Using a g55vw laptop, there's a wiki page for it apparently which I've been trying to follow. When I search for related problems most people solve it by moving the encrypt hook around but I've found that doesn't help
(yes I run mkinitpio -p linux).
My output when grub loads arch:
:: running early hook [udev]
:: running hook [udev]
:: Triggering uevents...
:: running hook [keymap]
:: loading keymap . . . done
:: running hook [encrypt]
Waiting 10 seconds for device /dev/mapper/root ...
Waiting 10 seconds for device /dev/mapper/root ...
ERROR: device '/dev/mapper/root' not found. Skipping fsck
ERROR: Unable to find root device '/dev/mapper/root'
You are being dropped to a recovery shell
Type 'exit' to try and continue booting
sh: can't access tty: job control turned off
/etc/default/grub
GRUB_CMDLINE_LINUX_DEFAULT="quiet"
GRUB_CMDLINE_LINUX="cryptsetup=/dev/sda2:root"
GRUB_DISABLE_LINUX_UUID=true
/etc/mkinitcpio.conf
MODULES=""
BINARIES=""
FILES=""
HOOKS="base udev autodetec modconf block keymap keyboard encrypt filesystems fsck"
Last edited by DakotaTheGiraffe (2014-09-29 04:31:21)

wow I tried that last install and it didn't work but it solved it this time. Thanks for your quick response

I want to use wifi for Apple TV, but it doesn't prompt for a password, so never connects. What am I missing? Can I only use it via a non-password-protected wifi connection?

I want to use wifi for Apple TV, but it doesn't prompt for a password, so never connects. What am I missing? Can I only use it via a non-password-protected wifi connection?

Hi - you might want to post this question on the Apple TV area - you would probably get a quicker response - if you have a specific question relating to Apple routers then post back here

No prompt for the certificate

HI,
I follow all the steps to get a signed application working but I can't get the prompt for the certificate and JWS hangs with 99% cpu!!!! Anyone knows why????

Take a look at my Thread from Jun, 10. 2001. (http://forum.java.sun.com/thread.jsp?forum=38&thread=71660)
I mail Sun a workaround and also the solution how to fix the bug in the code.... but we are still waiting more than 2 week for a solution from Sun :-(
Here is the detailed bug-report:
Problem:
JavaWS1.0.1 will not launch a signed application if the OS is
German, French or Italian. (Spain & English work)
If found the problem JWS 1.0.1 not working with the following
Countries: Germany,
France and Italy (Spain works):
You have problems with your resource files (javaws-i10n.jar) and
therefor perhaps
problems with the class java.util.PropertyResourceBundle:
Here the description of the bug:
Take a look at the resource-file in in the jar-package
javaws-i10n.jar:
Here you find the following files in the directory
com/sun/javaws/resources
string.properties -> work fine
string_es.properties -> work fine
string_de.properties -> failed (also it and fr)
The problem is the entry (key): 'certs.verify.msg'
1.) English value:
This {0} is requesting unrestricted access to your local machine
and network.
Do you want to install and run: {1}
Signed and distributed by: {2}
2.) German value:
{0} fordert unbeschr?nkten Zugriff auf Ihren lokalen Rechner und
Ihr Netzwerk.
M?chten Sie das Programm installieren und ausf?hren: {1}
Signiert und in Umlauf gebracht von: {2}
THE SOLUTION:
The problem is: If the value starts with {x} (in this case {0})
it will not be
displayed and WebStart will hang (produce an error).
I hope this is a WebStart error an no Error in the class
java.util.PropertyResourceBundle!?
I tested to add the text 'Die' in front of the value (Die {0}
forderte...) and
WebStart worked fine and started!!!!
Hope this will help to fix the error a soon as possible because
we use JavaWS in
production and 1.0.1 is still a great solution for us!
Thanks and hope I could help u.
At this time you also could also remove the javaws-l10n.jar from JavaWebStart folder to grant JavaWebStart will be launched in English.
Wolfgang
EDI Organisation KEG

Enable Commenting Toolbar in Browser (doesn't work for IE / FF)

I've seen a lot of chatter about this scenario but nothing seems to be working for me. What I want to do is this:
Create a .pdf.
Attach to the enterprise wiki software Confluence.
Check-out in Confluence.
Have the Commenting / Annotation toolbar available in IE / Firefox.
Make changes.
Save the .pdf.
Check back into Confluence.
This isn't working for me. What I've been doing is this.
Create a .pdf in FrameMaker 10.
Open in Acrobat 9 Pro.
Navigate to Advanced > Document Processing > Document Javascripts
Create a Script (I called mine 'Commenting').
Click Add....
Used this JavaScript:
function Commenting()
{Collab.showAnnotToolsWhenNoCollab = true;
Click OK.
Click Close.
Save.
Click Comments > Enable for Commenting and Analysis in Acrobat Reader.
Save.
Attach the .pdf to Confluence.
When I Checkout the file from Confluence in IE 8, the document appears but toolbar doesn't appear. When I Checkout the file in Firefox, the document doesn't appear at all.
I'd really appreciate a clear response on how to get this work. While I'd prefer to use the Acrobat Commenting from within Acrobat Pro for peer document review, I've been asked to research using Confluence as the primary nexus for peer review. I'm not having any luck thus far.
Thanks in advance,
John Cook
Technical Writer
Merge Healthcare

Clicking the link to the .PDF launches the file in a browser (same gimped toolbar for both IE 8 and Firefox). When I right-click the .PDF toolbar in-browser, I have access to the following toolbars:
File
Find
Page Display
Page Navigation
Select and Zoom
Tasks
I don't see anything for Commenting / Annotation.

Acrobat 7 Creating PDF, doesn't prompt for filename

Hi!
I'm having a strange issue with Acrobat 7. I just installed it on a new computer, and when I print a file as PDF, it doesn't prompt me for a filename. I've check the option and it is set to ask for a filename.
How can I solve it?
Thanks
Christ

Well, I just found something very strange.
When we use our application to send a files to print in Adobe PDF, it doesn't work (doesn't ask for filename, but it save the file).
If I do it from notepad, it does work fine...
If I do it from an old computer that has Acrobat 6, it does works... I'm the only one who has Acrobat 7 (Since there was no more license, and that we still had a license for version 7).
I tried it on another computer (fresh install), it does the same thing..
I have no idea right now :S

NetworkManager applet doesn't prompt for VPN secret for non-root user

I'm using NetworkManager in GNOME DE. When logged in as non-root user, I'm unable to connect to a vpnc profile.
* As non-root, I am able to add/remove/alter/connect to WiFi network profiles with no trouble.
* As non-root, I am also able to add/remove/alter vpnc profiles.
* However, the VPN group key and VPN user password do not appear to store properly when adding/editing the profile as non-root. I can enter them, but when I bring the dialog back up, they are always blank. Even so, I can see an entry for vpnc in the Gnome keyring.
* When I slide the on/off switch to try to connect with the vpn profile, there is no prompt for the VPN group key or password. The switch just slides back to Off immediately and I can see the text 'authentication required' flash briefly where it shows the connection status. After that flashes, the connection status is back to 'Not connected'. No error message displays.
* If I sign in as root, there are no problems. The VPN 'secrets' will save properly in the dialog, and also if I leave them blank, I'm prompted for them when I activate the connection.
* Creating the connection as 'root' is not an option, as this doesn't appear in profile list when signing on as non-root.
Any ideas on where to look or what to check? As mentioned above, non-root can maintain WiFi connections through NetworkManager just fine, so the problem appears localized to VPN 'secrets'. Also other applications (i.e. Evolution) have no trouble in dealing with authentication.
I do have polkit installed:
extra/polkit 0.110-2 [installed]
Application development toolkit for controlling system-wide privileges
extra/polkit-kde 0.99.0-2
Daemon providing a polkit authentication UI for KDE
extra/polkit-qt 0.103.0-2
A library that allows developers to access PolicyKit API with a nice Qt-style API
community/polkit-gnome 0.105-1 [installed]
PolicyKit integration for the GNOME desktop

Update/more information on this...
My typical/preferred setup for my VPNs is to save the VPN group key, but to be prompted for my VPN user password on each connect. So, this is how I was trying to setup in the applet. Interestingly, I have found that if I save BOTH of the 'secrets' to the keyring, then I can connect!
The behavior is still as above in the dialog -- both secrets are blank if I edit the connection, although they are present in the Gnome keyring. As long as they are BOTH there, I can connect fine. But, if I have either of them set to 'Always Ask', then I am not prompted for them and the connection fails.
Although I can work with this, I would certainly still like to figure out what is going on and fix it, as it does bother me that it works that way:
* Why can't the dialog redisplay my secrets when I edit a connection as non-root?
* Why doesn't Always Ask work to prompt me for secrets when running as non-root?
Any ideas? I've used the Gnome/NetworkManager/vpnc combination on other desktops (this is my first Arch), and I have never seen anything like this.

Thunderbird doesn't prompt for a password

I have several email accounts in Thunderbird. Most are IMAP-types. I recently changed the password (using my webmail cPanel) for one of them. Since then, Thunderbird can't send or receive messages from this account. But it doesn't prompt me for a password.
I deleted the password in "Options -> Security for this email account, but no change. I still can't receive or send emails via Thunderbird. When I try and send an email, Thunderbird eventually pops up an error message saying "server timed out".
I can access the email account just fine via webmail.
Any suggestions?

Thank you very much for your time and trouble, Toad-Hall.
Problem solved.
For your information, I accessed Tools >options > Security > Passwords
and deleted ALL the passwords (both ingoing and outgoing) associated with the mail accounts for which I had changed the password directly via cPanel. (Because the 3 accounts are on the same domain, Thunderbird was unable to download or write to all 3 of them, as I had changed the passwords.)
I then closed Thunderbird and restarted my COMPUTER (merely closing and restarting Thunderbird was insufficient for Thunderbird to bring up the password prompt window).
Doing both those things solved the problem. I opened Thunderbird, selected each account in turn and clicked "Get mail". Pop-up window asking for the password came up, I input and was able to write and download messages. I repeated for the other 2 accounts, and now all works fine.
Thanks so much for your help.

After jumpstart host doesn't prompt for root password

Hiya gang,
I am migrating my jumpstart functionality to a new server and while it would appear that 100% of things are identical on both (as far as my /jumpstart tree is concerned), when I jumpstart a host (V240, in this case, but I've seen it on a SunBlade 150 too) everything appears to go well, but after the host reboots at the very end and I attempt to log in on console as root I am not even prompted for a password.
I've booted to single user over the net and on the disk that was just jumpstarted I see what would appear to be a normal Solaris system. There are no indications that I can find of why it wouldn't prompt for password at all, and I'm not well enough versed with the way the login functionality works to know why this is.
My new jumpstart server is running Solaris 10 (08/07), and I'm trying to jump a host with the same version. The very same jumpstart using my old jumpstart server works just fine.
Thanks in advance,
pb

Darren,
Thanks for your reply. It got me in the right frame of mind for troubleshooting :)
I set up pam debugging for pam_ldap and got the following messages in /var/adm/messages:
Aug 29 10:13:46 testfoo login: [ID 293258 auth.warning] libsldap: Status: 2 Mesg: Unable to load configuration '/var/ldap/ldap_client_file' ('').
Aug 29 10:13:46 testfoo login: [ID 562097 auth.alert] open_module: Owner of the module /usr/lib/security/pam_mkhomedir.so is not root
Aug 29 10:13:46 testfoo login: [ID 487707 auth.error] load_modules: can not open module /usr/lib/security/pam_mkhomedir.so
Aug 29 10:13:46 testfoo svc.startd[7]: [ID 694882 daemon.notice] instance svc:/system/console-login:default exited with status 1
Aug 29 10:56:51 testfoo su[3209]: [ID 105162 auth.alert] open_pam_conf: Owner of /etc/pam.conf is not root
Aug 29 10:57:49 testfoo login[1225]: [ID 105162 auth.alert] open_pam_conf: Owner of /etc/pam.conf is not root
...so, I checked them out and /etc/pam.conf and /usr/lib/security/pam_mkhomedir.so are both owned nobody:nobody, which smelled like an NFS issue since both of those files are copied over to the hosts as part of a JASS_FILES variable, but during the finish script execution (they're copied by install-templates.fin). So, I did some digging there and found another Sun forum thread that had info on it:
http://forums.sun.com/thread.jspa?forumID=841&threadID=5100999
...so I made the requisite change to /etc/default/nfs (setting the max version to 3) and the next jumpstart I tested worked perfectly, password prompt and all. All files that were previously owned nobody:nobody had the correct ownership this time around.
Crazy!
Thanks again Darren for your input!

How to get FireFox to access links I select in my macmail application. Click on link and FireFox opens, but doesn't search for link.

When Safari is selected as default browser, clicking on a link found in an email (macmail) prompts Safari to open the linked page/site. But FireFox merely opens, doesn't go to the URL selected. What do I do?

Does that also happen if you disable all extensions?
See:
* [[Troubleshooting extensions and themes]]

Can't log into iMessages and it tells me to go and check my internet connection after checking it and turning it on and off it still doesn't work for iMessage but when I go into safari and other apps it works please help!

Cant log into iMessage on myI ipad air and get the message " please check your internet connection and try again" and my internet is on and I can connect to it in other applications.

1. Make sure Date and Time is correctly set; Settings>General>Date and Time>Set Automatically>On
2. Make sure phone number or email address is correct
3. Restart iPad
4. Reset iPad. Hold the Sleep and Home button down (together) until you see the Apple Logo

FF 8 (and 8.0.1) doesn't ask for password until quit

Ever since version 8 FF only asks for the password after I click on "quit." Updating to 8.0.1 did not help. How do I reset it to ask for the password FIRST, before doing anything or going anywhere?

Superscore wrote:
I'm getting towards the end of a film project started on Logic 8.0.1, on a Mac Pro 3.0 with 5 meg of
ram. Getting ready to mix 45 cues I upgraded to Logic 8.0.2. It crashed on a regular basis, even
wouldn't open some cues at all. When it did open them, I frequently got the System Overload message,
even on cues that had only two audio and 5 midi tracks. I trashed the prefs, and went back to 8.0.1,
and the system runs fine.
I'm also on 8.02 and MacPro - but on Leopard - and I also work with various film projects, but don't have the problems you mention. Maybe it's a Tiger problem? Did you try the standard tricks like delete the undo list, reorganize memory?

IPhone 4 doesn't prompt me for update to ios 5 till now (07:30 PM PT)!!!!

Hi Everyone, my iPhone 4 is on iOS 4.3.3 now , I am currently in South Africa for 5 days visit , it is now 4:30 AM in Johannesburg or 7:30 PM Pacific Time and till now iTunes doesn't prompt me to upgrade to iOS 5 , it is just prompting me to upgrade to iOS 4.3.5 , I have iTunes 10.5 , and don't know what to do to upgrade my iPhone ?

You cannot upgrade the 3GS to iOS 6 - 5.1.1 is the latest compatible version of iOS made for your device.
You are in recovery mode and need to restore using itunes on your computer. Follow these instructions:
Backup & Restore
Restore iOS

Bypass user name and password prompt for sqlplus on Windows

Hi folks,
I had oracle 10g installed on my Windows XP SP2 system and everytime I use sqlplus, it prompts for user name and password. Some folks wrote some Unix shell scripts which invokes "sqlplus" without giving it user name and password, and these scripts are running fine on Solaris. So I would like to make these script to work on my Windows box as well. But obviously, it asks me user name and password every time. Since it is a shell script, sqlplus << EOT .... EOT will fail right away with : Fatal NI connect error 12560, blah blah blah...
So my question is how to make sqlplus bypass the user name and password questions.
Thanks,

No sqlplus /nolog does not connect you to the database, you still need to connect to the database.
c:\sql>sqlplus /nolog
SQL*Plus: Release 10.2.0.2.0 - Production on Wed Feb 21 15:19:16 2007
Copyright (c) 1982, 2005, Oracle. All Rights Reserved.
idle> select * from dual;
SP2-0640: Not connected
idle> connect test/test
Connected.
test@ORCL> select * from dual;
D
X
Elapsed: 00:00:00.01
test@ORCL>

SSL and X.509: browser doesn't prompt for a certificate

Similar Messages

Maybe you are looking for