User identified externally

I downloaded and installed Oracle Ex on Windows XP Professional SP 2 taking all of the defaults and all when swimmingly. Then I used sqlplus to create an externally identified user. The user was created. However if I enter "sqlplus /" to connect as the user I get
ORA-01017: invalid username/password; logon denied
This same procedure works under Linux. How do I get it to work under Windows?
Thanks,
john

Creating External users in Oracle
For example, consider the following user definition:
CREATE USER OPS$SCOTT IDENTIFIED BY TIGER;
Assuming that Scott has logged onto the operating system, Scott could enter SQL*Plus with or without a password:
sqlplus /
sqlplus scott/tiger
You can also create the user with the "identified externally" clause:
CREATE USER OPS$SCOTT IDENTIFIED EXTERNALLY;
Create Oracle External users in Windows
External users are easy to create in Linux because you need only create the user in /etc/passwd. It's a bit trickier in Windows:
1. Create the Windows user:
start --> settings --> control panel --> administrative tools --> computer management --> user
2. Add the new user to the Oracle group:
start --> settings --> control panel --> administrative tools --> computer management --> groups
3. Add user to OS Database Administrator:
start --> programs --> oracle home --> configuration and migration tools --> administration for windows NT --> OS database administrator
4. Add user to OS Database Operators:
start --> programs --> oracle home --> configuration and migration tools --> administration for windows NT --> OS database operators
5. Add user to OS Administrator:
start --> programs --> oracle home --> configuration and migration tools --> administration for windows NT --> OS administrator
6. Add user to OS Operators:
start --> programs --> oracle home --> configuration and migration tools --> administration for windows NT --> OS operators
7. Add os_authent_prefix=OPS$ to your initialization parameters (pfile or spfile) and bounce Oracle database, if necessary.
Ref: http://www.dba-oracle.com/t_windows_external_user_authentication.htm

Similar Messages

  • SSO and Form 10g, Setting RAD of OID for DB users identified externally

    Please Help!
    Current environment:
    - All users were created with identified externally in Database (OPS$)
    - SSO was setup correctly according to OID admin guide Ch 43 and SSO admin guide ch 8 for App10g. (user login orasso without seeing basic auth/sso login form)
    - DB parameters:
    remote_os_authent=TRUE
    os_authent_prefix=' '
    issues:
    - set ssoDynamicResourceCreate = true
    When user hit the form link, i.e. http://host:port/forms90/f90servlet?config=test&form=appwelcome
    it redirects to http://host:7777/oiddas/ui/oracle/ldap/das/mypage/AppCreateResourceInfo?...
    where it shows Resource Name TEST and prompts username/password/database
    when user inputs window logon /password/database value (same as in form6i)
    it returns ORA-01017: invalid username/password; logon denied.
    - set ssoDynamicResourceCreate = false
    manually set RAD for the end user (I am not sure if I am doing this correctly):
    Name = test
    TYPE = oracledb
    username = (blank)
    password = (blank)
    datebase = prod
    When enduser hits the form link, it returns ORA-01017.... same errors.
    Any ideas how to trouble shoot and configure RAD for users with OPS$ auth?
    thank you in advance!
    Kan

    Thank you for your input!
    This is how our current production is setup that users use os authent (OPS$) to access forms/reports 6i. I'm just trying to migrate it to app10g environment.
    I did configure SSO with WNA, it works fine. Any users can access NON-DB connected forms/reports. Only when forms/reports require DB conn, users who
    have db password can access them with one click. But users identified externally will keep seeing Oracle Logon and Ora-01017 after authent into MidTier.
    Setup RAI with one real db user account is not ideal since there are 1000+ OS authent users who have different database roles. Turn off the OPS$ and setup dummy password for 1000+ users may be the last solution.
    v/r
    Kan

  • Connecting with java2 1.4 & user identified externally

    Hi,
    I try to connect to the Oracle DB 8.1.7. in my java-program (url : <
    jdbc:oracle:oci8:@ >) with a user that is identified externally (OS-unix
    SUN) . The version of java2 is 1.4
    My java-connection work correctly with the Oracle jdbc-driver
    "classes12.zip" in my CLASSPATH.
    But is NOT work with the last jdbc driver of Oracle "ojdbc14.jar" in my
    CLASSPATH. I assume that I have to install also the OCI shared
    libraries. But which version of the OCI libraries : 9.2.0.1 or 9.0.1 or
    8.1.7 ? Can I use the OCI libraries 9.* for a connection to Oracle
    Database 8.1.7?
    Other question: is it possible to connect with a user identified
    externally with the thin driver?
    Kind regards,
    Kristoffel DE GEEST

    Ralph_CC wrote:
    If I want to connect to a user of this sort, can anyone tell me what I put in the
    setPassword( passwd ); method for OracleDataSource getConnection please.
    I cannot see any clue in the java API doc. (Using 11g & Java 1.6.30)You connect as a user,
    you provide the password for the user using setPassword(),
    as in this example;
    http://www.rgagnon.com/javadetails/java-0545.html
    which connects as user 'scott' using password 'tiger'.

  • DATABASE_LINK with CURRENT_USER for user identified externally

    Hi,
    My database is in standard edition 10.2.0.5 on windows.
    I have a user OPS$xxx identified externally.
    the connection with this user "sqlplus /@service_name" is ok.
    A database link has been created with these options :
    select * from dba_db_links;
    OWNER DB_LINK USERNAME HOST CREATED
    OPS$xxx TEST_DB CURRENT_USER SERVICE_NAME 19/10/11
    This database link references the same database
    ( it is an external application which has created it).
    if we test with sqlplus, we have :
    sqlplus /@service_nameSQL*Plus: Release 10.2.0.5.0 Production on Fri. Oct. 21 09:58:40 201
    Copyright (c) 1982, 2010, Oracle. All rights reserved.
    Connected to :
    SQLPLUS> select count(*) from user_tables@TEST_DB;
    ORA-1017: invalid username/password; logon denied
    So is it possible to use this type of database link ? And if it is, how can you do that ?
    Or only "user identified globally " can use database links with current_user...
    Thank you in advance for your help.
    Best regards
    Marie

    A connected user link should work per the reference:
    The ability to use a connected user database link depends on several factors, chief among them whether the
    user is authenticated by the database using a password, or externally authenticated by the operating system or
    a network authentication  service. If the user is externally  authenticated, then the ability to use a connected user link
    also depends on whether the remote database accepts remote authentication of users, which is set by the
    REMOTE_OS_AUTHENT initialization parameter.HTH -- Mark D Powell --
    insert line breaks to try to limit width
    Edited by: Mark D Powell on Oct 21, 2011 9:17 AM
    Edited by: Mark D Powell on Oct 21, 2011 9:18 AM

  • Cannot edit views when logged with user identified externally (OPS$...)

    Hi,
    In our organization we have enabled the OS authentication and even having the DBA role is not possible edit views using SQL Developer.
    Anybody knows if is there any workarround to enable this feature ?
    Thanks in advance.
    Edited by: user12099033 on Jul 15, 2010 9:44 PM
    Edited by: user12099033 on Jul 15, 2010 9:45 PM

    Thanks for getting back to me so quick!
    You were correct to assume that I was referring to a View. All of our users have been added to a standard user role that providers that basic functionalities that they need. This particular user's access is exactly the same as the other users in his department,
    yet he is the only one who has experienced this problem. All of the user roles that we have added this user to contain at least 10 other users who have not reported any issue like this.
    I am wodering how this problem could only apply to this one user even after changing devices. I should also mention that with each of the devices that this user has worked on, there was a period of time when he was able to work in SCSM without
    any issues. What could have changed that caused this error to arrise on two separate occasions for just one user? 
    The biggest issue is the fact that he is unable to edit activities. Am I correct to assume that these two issues are connected?
    I hope this message helps to clarify the problem we are experiencing.
    Thanks,
    Nick

  • Connect as user identified globally/externally?

    Greetings! :)
    I have an old app where fat SWING client app connects to the DB with Oracle DB user/pass. I would like to change this. I believe "user identified globally/externally" is the right choice. Is there any (Java) example of login as global/external user? I have read that for global/external users tokens are acquired, but I don't know how to acquire tokens?
    Example: I have Java fat client which shows a dialog asking user for its user/pass. Then I send this user/pass to another Java web app, which check user/pass and asks DB (how?) for token. Then I send this token from my web app to the fat Java client app and it connects (how?) with DB.
    So:
    1. How to get token for external/global user?
    2. Where to put token in DB connection string when connecting with DB (instead of password?)?
    I have already asked this question in Oralce DB security and Java security forums without any results.
    P.S. Is there any other way for app to connect to DB without giving password? I would'n like to use Kerberos or LDAP or some tools. I would like to make my own solution with JDBC.
    Thank you in advance :)

    >
    Is there any other way for app to connect to DB without giving password?
    >
    Maybe this doc has the info you are looking for.
    See chapter 3 Configuring Authentication in the Database Security doc
    http://oracle.su/docs/11g/network.112/e10574/authentication.htm#i1006269
    Configuring Global User Authentication and Authorization and Configuring an External Service to Authenticate Users and Passwords
    have the information.
    You can also see the 'Proxy from Users Identified Externally' and 'Establish a Proxy Session' references in this link
    http://books.google.com/books?id=BaRbj93G1XMC&pg=PA159&lpg=PA159&dq=oracle+java+identified+globally/externally+proxy&source=bl&ots=m75SfHNGe-&sig=LRhANCaoxVJ2Ovd8G8at3rp4wqI&hl=en&sa=X&ei=6y9zT6nCEaiYiAKN15yuCw&sqi=2&ved=0CDUQ6AEwAw#v=onepage&q=oracle%20java%20identified%20globally%2Fexternally%20proxy&f=false
    And this AskTom link has an approach - see Followup September 24, 2004 - 9am Central time zone:
    http://asktom.oracle.com/pls/apex/f?p=100:11:0::::P11_QUESTION_ID:21575905259251

  • Schema owner identified externally

    I have an oracle 11g, apex 3, OHS implement. The schema assigned to my workspace has owner, identified externally. I can find no workspace/schema relation administering Oracle-XE. Looks like the database username that logs in to the Administration Home is the schema to be parsed. My trouble is that I cannot login to the Administration Home with the user identified externally.
    Please advise.

    I've upgraded the version of Apex that was installed with Oracle-XE. I matched Apex version with that of the Oracle 11g environment; that is, version 3.1.2. So, now I can create developers and workspaces that reference schemas of the developers' choosing, than the one developer (database user) owning the schema it references.

  • How to access OS User created with "identified externally"

    I am able to
    SQL> create user ops$deskuser identified externally;
    while deskuser is one of my OS user.
    I believe it is a very easy question, however I just do not know how to access this user from sqlplus., please help
    Thanks in advance

    oracle@mini:~> sqlplus system
    SQL*Plus: Release 10.1.0.3.0 - Production on Sun Nov 13 21:11:47 2005
    Copyright (c) 1982, 2004, Oracle. All rights reserved.
    Enter password:
    Connected to:
    Oracle Database 10g Enterprise Edition Release 10.1.0.3.0 - Production
    With the Partitioning, OLAP and Data Mining options
    SQL> create user ops$pops identified externally;
    User created.
    SQL> grant connect to pops;
    Grant succeeded.
    SQL> exit
    Disconnected from Oracle Database 10g Enterprise Edition Release 10.1.0.3.0 - Production
    With the Partitioning, OLAP and Data Mining options
    oracle@mini:~> su - pops
    \Password:
    Illinois isn't exactly the land that God forgot -- it's more like the
    land He's trying to ignore.
    pops@mini:~> . oraenv
    ORACLE_SID = [pops] ? orcl
    pops@mini:~> sqlplus /
    SQL*Plus: Release 10.1.0.3.0 - Production on Sun Nov 13 21:16:59 2005
    Copyright (c) 1982, 2004, Oracle. All rights reserved.
    Connected to:
    Oracle Database 10g Enterprise Edition Release 10.1.0.3.0 - Production
    With the Partitioning, OLAP and Data Mining options
    SQL>

  • Question on IDENTIFIED EXTERNALLY clause

    Oracle Version      : 11.2.0.2
    Platform : Solaris 5.10
    Just going throug the basics of IDENTIFIED EXTERNALLY clause. If i create a user named app_user as shown below, how does this user connect to the DB and create a table in this schema. Do i have to create Unix user account for this DB user?
    create user app_user identified externally;
    grant create session to app_user;
    grant create table to app_user;
    SQL> show parameter authent
    NAME                                 TYPE        VALUE
    os_authent_prefix                    string      EXT$

    Hi;
    Pelase see usage of IDENTIFIED EXTERNALLY from below link wiht examples
    http://download.oracle.com/docs/cd/B28359_01/server.111/b28286/statements_8003.htm
    Regard
    Helios

  • Identified externally

    hi
    my OS is windows 2000 professional addition
    Oracle server version is 9.0.1
    i created an operating system user "guest"
    then set OS_AUTHENT_PREFIX=""
    then i restarted the satabase
    then i created a user as follows
    "CREATE USER GUEST IDENTIFIED EXTERNALLY
    QUOTA 10M ON UESRS"
    then i assigned him previleges
    now i logged on to system as "guest"
    and run sqlplus as follows
    sqlplus /
    and it returned me error "ORA-01004"
    kindly tell me did i follow the right steps???
    if yes then why isnt it working
    Regards

    Possible Causes and Remedies:
    Operating system authentication has not been enabled for the system.
    Check ‘{ORACLE_HOME} \ NET80 \ ADMIN \ SQLNET.ORA’ on both client and server. To enable operating system authentication it should contain the line:
    SQLNET.AUTHENTICATION_SERVICES = (NTS)
    If the registry key ‘HKEY_LOCAL_MACHINE \ SOFTWARE \ ORACLE \ OSAUTH_ENFORCE_STRICT’ is set (true) then verify that the user is a member of one of the following NT groups: ORA_<SID>USER, ORA<SID>DBA, ORA<SID>OPER, ORAUSER, ORA_DBA or ORA_OPER.
    If the Oracle database is in a different domain from the logon domain then a trust relationship must be set-up between the two domains for operating system authentication to work.
    The system does not support operating system authentication. The error may in this case be accompanied by the error ‘ORA-01988: remote os login is not allowed’. Log on supplying password and username.

  • How to create user identified by OS!

    I know a command like :
    SQL> create user OPS$name identified by password;
    user created.
    here, user is already an OS user in my linux.
    But this don't work! I didn't get a user identified by Os.
    May somebody give any points?
    Thanks

    Specify EXTERNALLY to create an external user. Such a user must be authenticated by an external service (such as an operating system or a third-party service). In this case, Oracle to relies on the login authentication of the operating system to ensure that a specific operating system user has access to a specific database user.
    This example assumes that OS_AUTHENT_PREFIX = "" (in init.ora)
    CREATE USER os_user IDENTIFIED EXTERNALLY
    GRANT CONNECT to os_user
    To create another user accessible only by the operating system account os_user2, prefix os_user2 by the value of the initialization parameter OS_AUTHENT_PREFIX.
    For example, if this value is "ops$", you can create the user ops$os_user2 with the following statement
    CREATE USER ops$os_user2
    IDENTIFIED EXTERNALLY

  • Importing Users from external table in obiee 11g

    Hi Every one,
    Do any one help me giving suggestions that how we can import users from external table.
    I am using obiee 11.1.1.6.
    In that external table Which i am using there are 56K users.
    They are able to login to obiee analytics.
    But for setting object level security I need to make diffrent groups with these users to assign the dashbords and required objects in front end.
    But how can we get all these users into BI server or presentation server to make them into groups.
    Thanks in advance.
    Edited by: 861096 on Mar 13, 2012 8:44 AM

    Hi,
    or if your lowest level is the same like
    Day->month->year->Total
    Day->businessMonth->businessyear->Total
    Then yes, it is.
    Create the first, then you start to create the second by adding your top(business year) level on the same level as the one you have (year) both under your total.
    Then when you would add your second base level, there is a special option for it, something like use other hierarchy level/shared level (sorry can't recall and does not have a connection right now) then you select your existing day level under your businessmonth level.
    Hope this helps,
    Regards,
    D

  • RE: (forte-users) Forte External Connection - PhysicalPort

    Hi Ronald,
    I think that ExternalConnection class is only aplicable for communication
    using TCP, DECnet or Unix Domain Sockets, and is not applicable to work with
    COM ports.
    I think that to use COM port you must employ C with the Fort&eacute; WRAPPER.
    Daniel
    -----Mensaje original-----
    De: Ronald Celis <[email protected]>
    Para: Daniel <[email protected]>; Ming Yan, Lam <[email protected]>
    CC: Jose Ignacio <[email protected]>; Manuel_Fern&aacute;ndez <[email protected]>;
    Federico_Mu&ntilde;oz <[email protected]>; Lista_Fort&eacute; <[email protected]>
    Fecha: lunes 20 de diciembre de 1999 16:33
    Asunto: RE: (forte-users) Forte External Connection - Physical Port
    Did you try to use the ExternalConnection Class??????????????
    it's documented in the "Integrating with External Systems" Forte Manualpage 228 )
    >
    Hope this help
    --- Daniel <[email protected]> wrote:
    Hello Lam,
    I had some experience about this problem and first answer is that you
    MUST
    use the wrapper. You must realize that if you could develope Fort&eacute; based
    RS-232 functions they would't be portable to any other machines that have
    not the same architecture than the one you use to develope.That's not the
    philosophy of portability of Fort&eacute;.
    I suggest to create a few single task C programs,
    1) Open serial port.
    2) Close serial port.
    3) Write to serial port.
    4) Read from serial port.
    5) Check if there is something in serial port.
    and "put them into a library" to make them usable by TOOL via a portable
    Fort&eacute; class.
    Best regards,
    Daniel.
    Daniel Gonz&aacute;Lucas
    EAM Sistemas Inform&aacute;ticos S.L.
    tel. + 34 983 35 29 22
    fax.+ 34 983 35 21 15
    e-mail:[email protected]
    -----Mensaje original-----
    De: Ming Yan, Lam <[email protected]>
    Para: Forte Users Group <[email protected]>
    Fecha: jueves 16 de diciembre de 1999 8:55
    Asunto: (forte-users) Forte External Connection - Physical Port
    Hi,
    If anyone out there have tried to use Forte to communicate (transmit
    data) to an external connection, which is a physical port such as Com 1,
    Com 2, Xyplex. I would like to know how does Forte handle this type of
    connection or does it have to use C program for this?
    Thanks in advance
    Ming Yan
    BASS Consulting Sdn. Bhd.
    For the archives, go to: http://lists.sageit.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in a
    new
    email the word: 'Unsubscribe' to: [email protected]
    For the archives, go to: http://lists.sageit.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in a new
    email the word: 'Unsubscribe' to: [email protected]
    =====
    Ronald Celis
    [email protected]
    Forte Consultant
    International Business Corporation
    http://www.ibcweb.com
    Do You Yahoo!?
    Thousands of Stores. Millions of Products. All in one place.
    Yahoo! Shopping: http://shopping.yahoo.com
    For the archives, go to: http://lists.sageit.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in a new
    email the word: 'Unsubscribe' to: [email protected]

    Did you try to use the ExternalConnection Class??????????????
    it's documented in the "Integrating with External Systems" Forte Manual ( page 228 )
    Hope this help
    --- Daniel <[email protected]> wrote:
    Hello Lam,
    I had some experience about this problem and first answer is that you MUST
    use the wrapper. You must realize that if you could develope Fort&eacute; based
    RS-232 functions they would't be portable to any other machines that have
    not the same architecture than the one you use to develope.That's not the
    philosophy of portability of Fort&eacute;.
    I suggest to create a few single task C programs,
    1) Open serial port.
    2) Close serial port.
    3) Write to serial port.
    4) Read from serial port.
    5) Check if there is something in serial port.
    and "put them into a library" to make them usable by TOOL via a portable
    Fort&eacute; class.
    Best regards,
    Daniel.
    Daniel Gonz&aacute;lez de Lucas
    EAM Sistemas Inform&aacute;ticos S.L.
    tel. + 34 983 35 29 22
    fax.+ 34 983 35 21 15
    e-mail:[email protected]
    -----Mensaje original-----
    De: Ming Yan, Lam <[email protected]>
    Para: Forte Users Group <[email protected]>
    Fecha: jueves 16 de diciembre de 1999 8:55
    Asunto: (forte-users) Forte External Connection - Physical Port
    Hi,
    If anyone out there have tried to use Forte to communicate (transmit
    data) to an external connection, which is a physical port such as Com 1,
    Com 2, Xyplex. I would like to know how does Forte handle this type of
    connection or does it have to use C program for this?
    Thanks in advance
    Ming Yan
    BASS Consulting Sdn. Bhd.
    For the archives, go to: http://lists.sageit.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in a new
    email the word: 'Unsubscribe' to: [email protected]
    For the archives, go to: http://lists.sageit.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in a new
    email the word: 'Unsubscribe' to: [email protected]
    =====
    Ronald Celis
    [email protected]
    Forte Consultant
    International Business Corporation
    http://www.ibcweb.com
    Do You Yahoo!?
    Thousands of Stores. Millions of Products. All in one place.
    Yahoo! Shopping: http://shopping.yahoo.com

  • How to add user to external LDAP programmatically?

    Hello.
    I have portal application in JDeveloper. Here is code that adds user to WLS embedded LDAP:
    JpsContextFactory jps = JpsContextFactory.getContextFactory();
    JpsContext jpsContext = jps.getContext();
    IdentityStoreService storeService = jpsContext.getServiceInstance(IdentityStoreService.class);
    IdentityStore is = storeService.getIdmStore();
    UserManager mn = is.getUserManager();
    RoleManager rm = is.getRoleManager();
    Principal p = mn.createUser(username,password.toCharArray()).getPrincipal();
    Role r = is.searchRole(is.SEARCH_BY_NAME, "Administrators");
    rm.grantRole(r, p);
    But I also have external LDAP on my WLS. How can I add users to external LDAP programmaticaly?

    System Preferences > Users & Groups > Unlock the lock on the bottom left > click the plus sign on the bottom left

  • Alter user identified by values

    I use the following method for connecting as different users for test purposes:
    - select the encrypted password from dba_users
    - temporarily change their password,
    - connect using a temporary password,
    - reset their original password using the encrypted value.
    The last step is achieved by the 'alter user identified by values ..' syntax.
    However, I have now found that if the user has a profile with password complexity verification, this always seems to fail.
    Appending the new 9.2 REPLACE <old_password> does not make any difference,
    and in any case that should not be needed if being done with alter any user privilege.
    Has anyone found a way around this ?

    The bad news is that on a 9.2 database I got the error:
    SQL> alter user a identified by values 'FD7C3F4E0D2D2A65' ;
    alter user a identified by values 'FD7C3F4E0D2D2A65'
    ERROR at line 1:
    ORA-28003: password verification for the specified password failed
    SQL>the good news is that on a 10.2 database it worked:
    SQL> alter user a identified by values 'FD7C3F4E0D2D2A65' ;
    User altered.
    SQL>

Maybe you are looking for

  • Photos won't display original filename

    Hi all, I recently purchased a Family Pack Mac Box Set, with iPhoto '11. I've installed everything on both my iMac and Macbook pro. My issue is with publishing galleries to MobileMe, and viewing photos with the Photos App. If I publish an album from

  • Button active state using compressed art

    I have a PSD button placed in Muse, and noticed that after upgrading Muse to 6.0, that the "active" state of a button seems to be using severly compressed artwork. The other states all seem to be using non-compressed images. This may have been an iss

  • OPEN DATASET no new line

    Hi, I'm transferring data through an ABAP program to a file in background. The data is transferred ok, but the whole data gets inserted in the file as a single line. I'm using the commands: OPEN DATASET file FOR OUTPUT IN TEXT MODE and all its varian

  • 正常にインストールできない

    はじめまして. どなたか分かる方がいらっしゃいましたら教えてください. −−−−−−−−−−−−−−−−−−−− インストールし.起動しようとすると次のようなえらーメッセージが出てしまいます. Photoshop Album cannot start or continue because of missing file(s) Please reinstall 何度再インストールしても同じエラーメッセージが出ます. 同じような症状の方いらっしゃいませんか. 解決方法があれば教えてください. Wi

  • WCS v4 with LOC2700

    Hi. Upgraded my customer's WCS to v4.0.81.0. Now I cannot add the Loc2700 (v2.1.39.0) to the WCS. The error message says 'No response from server...' but connectivity is ok and nothing else was changed from before the upgrade. Anyone experience simil