Windows external job user

When running an external job on Oracle 10g in Windows, it seems that the external job username is no name at all. In the file which is kicked off by the scheduler job I put this line:
echo "%username%" >> %SI_HOME%\lib\imp_data.log
which produces just "" in the log file. It is supposed to log in with an externally authenticated account to run datapump imports, but it fails.
I read that for Oracle 10g the external job in Windows runs as the owner of the OracleJobScheduler service. In the properties it says it logs on as "Local System Account" which I thought would be username I want, but apparently it is not. I also tried to specify the account to run under but it won't take it, saying the account doesn't exist.
How can the username for external jobs be set to what I want?
Thanks.

I received the same results when running the OracleJobScheduler service under the 'Local System' credentials. I don't have an explanation for that. Here is some Microsoft documentation on it:
LocalSystem Account
However, you should have no problem specifying another account to run this service under. I do this on my systems. Remember this is an OS account not a database account. It can either be a Local User or Domain User.
If you want more help figuring out how to specify a custom account please provide more details.

Similar Messages

Guide to External Jobs on 10g with dbms_scheduler e.g. scripts,batch files

GUIDE TO RUNNING EXTERNAL JOBS ON 10g WITH DBMS_SCHEDULER
NOTE: Users using 11g should use the new method of specifying a credential which eliminates many of the issues mentioned in this note.
This guide covers several common questions and problems encountered when using
dbms_scheduler to run external jobs, either on Windows or on UNIX.
What operating system (OS) user does the job run as ?
External jobs which have a credential (available in 11g) run as the user
specified in the credential. But for jobs without credentials including
all jobs in 10gR1 and 10gR2 there are several cases.
- On UNIX systems, in releases including and after 10.2.0.2 there is a file $ORACLE_HOME/rdbms/admin/externaljob.ora . All external jobs not in the SYS schema and with no credential run as the user and group specified in this file. This should be nobody:nobody by default.
- On UNIX systems, in releases prior to 10.2.0.2 there was no "externaljob.ora" file. In this case all external jobs not in the SYS schema and with no credential run as the owner and group of the $ORACLE_HOME/bin/extjob file which should be setuid and setgid. By default extjob is owned by nobody:nobody except for oracle-xe where it is owned by oracle:oraclegroup and is not setuid/setgid.
- On Windows, external jobs not in the SYS schema and with no credential run as the user that the OracleJobScheduler Windows service runs as. This service must be started before these jobs can run.
- In all releases on both Windows and UNIX systems, external jobs in the SYS schema without a credential run as the oracle user.
What errors are reported in SCHEDULERJOB_RUN_DETAILS views ?
If a job fails, the first place to look for diagnostic information is the SCHEDULERJOB_RUN_DETAILS set of views. In 10gR2 and up the first 200 characters of the standard error stream is included in the additional_info column.
In all releases, the error number returned by the job is converted into a
system error message (e.g. errno.h on UNIX or net helpmsg on Windows) and that
system error message is recorded in the additional info column. If there is no
corresponding message the number is displayed.
In 11g and up the error number returned by the job is additionally recorded in
the error# column. In earlier releases 27369 would always be recorded in the
error# column.
Generic Issues Applicable to UNIX and Windows
- The job action (script or executable) must return 0 or the job run will be marked as failed.
- Always use the full pathname to executables and scripts.
- Do not count on environment variables being set in your job. Make sure that the script or executable that your jobs runs sets all required environment variables including ORACLE_HOME, ORACLE_SID, PATH etc.
- It is not recommended to pass in a complete command line including arguments as the action. Instead it is recommended to pass in only the path to and name of the executable and to pass in arguments as job argument values.
- Scripts with special characters in the execution path or script name may give problems.
- Ensure that the OS user your job runs as has the required privileges/permissions to run your job. See above for how to tell who the job runs as.
- External job actions cannot contain redirection operators e.g. > < >> | && ||
- In general try getting a simple external job working first e.g. /bin/echo or ipconfig.exe on Windows. Also try running the job action directly from the commandline as the OS user that the job will run as.
Windows-specific Issues
- The OracleJobScheduler Windows service must be started before external jobs will run (except for jobs in the SYS schema and jobs with credentials).
- The user that the OracleJobScheduler Windows service runs as must have the "Log on as batch job" Windows privilege.
- A batch file (ending in .bat) cannot be called directly by the Scheduler. Instead cmd.exe must be used and the name of the batch file passed in as an argument. For example
begin
dbms_scheduler.create_job('myjob',
   job_action=>'C:\WINDOWS\SYSTEM32\CMD.EXE',
   number_of_arguments=>3,
   job_type=>'executable', enabled=>false);
dbms_scheduler.set_job_argument_value('myjob',1,'/q');
dbms_scheduler.set_job_argument_value('myjob',2,'/c');
dbms_scheduler.set_job_argument_value('myjob',3,'c:\temp\test.bat');
dbms_scheduler.enable('myjob');
end;
/- In 10gR1 external jobs that wrote to standard output or standard error streams would sometimes return errors. Redirect to files or suppress all output and error messages when using 10gR1 to run external jobs.
UNIX-specific Issues
- When running scripts, make sure that the executable bit is set.
- When running scripts directly, make sure that the first line of the script in a valid shebang line - starting with "#!" and containing the interpreter for the script.
- In release 10.2.0.1, jobs creating a large amount of standard error text may hang when running (this was fixed in the first 10.2.0.2 patchset). If you are seeing this issue, redirect standard error to a file in your job. This issue has been seen when running the expdp utility which may produce large amounts of standard error text.
- the user that the job runs as (see above section) must have execute access on $ORACLE_HOME/bin and all parent directories. If this is not the case the job may be reported as failed or hang in a running state. For example if your $ORACLE_HOME is /opt/oracle/db then you would have to make sure that
chmod a+rx /opt
chmod a+rx /opt/oracle
chmod a+rx /opt/oracle/db
chmod a+rx /opt/oracle/db/bin
- On oracle-xe, the primary group of your oracle user (if it exists) must be dba before you install oracle-xe for external jobs to work. If you have an oracle user from a regular Oracle installation it may have the primary group set to oinstall.
- On oracle-xe, the extjobo executable is missing so external jobs in the SYS schema will not work properly. This can be fixed by copying the extjob executable to extjobo in the same directory ($ORACLE_HOME/bin).
- Check that correct permissions are set for external job files - extjob and externaljob.ora (see below)
Correct permissions for extjob and externaljob.ora on UNIX
There is some confusion as to what correct permissions are for external job related files.
In 10gR1 and 10.2.0.1 :
- rdbms/admin/externaljob.ora should not exist
- bin/extjob should be setuid and setgid 6550 (r-sr-s---). It should be owned by the user that jobs should run as and by the group that jobs should run as.
- bin/extjobo should have normal 755 (rwxr-xr-x) permissions and be owned by oracle:oraclegroup
In 10.2.0.2 and higher
- rdbms/admin/externaljob.ora file must must be owned by root:oraclegroup and be writable only by the owner i.e. 644 (rw-r--r--) It must contain at least two lines: one specifying the run-user and one specifying the run-group.
- bin/extjob file must be also owned by root:oraclegroup but must be setuid i.e. 4750 (-rwsr-x---)
- bin/extjobo should have normal 755 (rwxr-xr-x) permissions and be owned by oracle:oraclegroup
In 11g and higher
Same as 10.2.0.2 but additionally bin/jssu should exist with root setuid
permissions i.e. owned by root:oraclegroup with 4750 (-rwsr-x---)
Internal Error numbers for UNIX on 10.2.0.2 or 10.1.0.6 or higher
If you are not using a credential and are using version 10.2.0.2 or higher or 10.1.0.6 or higher you may come across an internal error number. Here are the meanings for the internal error numbers.
274661 - can't get owner of or permissions of externaljob.ora file
274662 - not running as root or externaljob.ora file is writable by group or other or externaljob.ora file not owned by root (can't switch user)
274663 - setting the group or effective group failed
274664 - setting the user or effective user failed
274665 - a user or group id was not changed successfully
274666 - cannot access or open externaljob.ora file
274667 - invalid run_user specified in externaljob.ora file
274668 - invalid run_group specified in externaljob.ora file
274669 - error parsing externaljob.ora file
274670 - extjobo is running as root user or group

Hi Ravi,
Can you help me...
Hi All,
I planned to create a job to do rman backup daily at 04:00 AM.
1. I created a program as follows
BEGIN
DBMS_SCHEDULER.CREATE_PROGRAM(
program_name => 'rman_backup_prg',
program_action => '/u02/rmanback/rman.sh',
program_type => 'EXECUTABLE',
comments => 'RMAN BACKUP');
END;
my rman script is
#!/usr/bin/ksh
export ORACLE_HOME=/u01/app/oracle/product/10.2.0/db_1
export PATH=$PATH:/u01/app/oracle/product/10.2.0/db_1/bin
/u01/app/oracle/product/10.2.0/db_1/bin/exp rman/cat@catdb file=/u02/rmanback/rm
an_220108.dmp log=/u02/rmanback/rman_220108.log owner=rman statistics=none comp
ress=n buffer=400000
compress *.dmp
exit
2. I created a schedule as follows
BEGIN
DBMS_SCHEDULER.CREATE_SCHEDULE(
schedule_name => 'rman_backup_schedule',
start_date => SYSTIMESTAMP,
end_date => '31-DEC-16 05.00.00 AM',
repeat_interval => 'FREQ=DAILY; BYHOUR=4',
comments => 'Every day at 4 am');
END;
3. I created ajob as follows.
BEGIN
DBMS_SCHEDULER.CREATE_JOB (
job_name => 'rman_backup_job',
program_name => 'rman_backup_prg',
schedule_name => 'rman_backup_schedule',
enabled=> true,
auto_drop=> false
END;
While I am running the job I am getting the following error anybody help me.
ORA-27369: job of type EXECUTABLE failed with exit code: Not owner
ORA-06512: at "SYS.DBMS_ISCHED", line 150
ORA-06512: at "SYS.DBMS_SCHEDULER", line 441
ORA-06512: at line 2
If I removed "compress *.dmp" line in rman script it is working fine.
/* additional Info from dba_scheduler_job_run_details as follows */
ORA-27369: job of type EXECUTABLE failed with exit code: Not owner
STANDARD_ERROR="
Export: Release 10.2.0.3.0 - Production on Tue Jan 22 14:30:08 2008
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Connected to: Oracle Database 10g Release 10.2.0.3.0 - Production
Export"
Regards,
Kiran

Running External jobs in Oracle 10g using a different user ID

Hi,
i would like to run an external job ( shell script ) in oracle scheduler using a Unix user id other than nobody and oracle. is it possible to do that? if so please provide more information. I am currently using oracle version 10.2.0.4.0

Sure,
no problem at all, if you have no problem with the fact that all jobs that run from your ORACLE_HOME use the same account. I would prefer to upgrade to 11.1.0.7 and use the new remote exteral jobs with credentials.
For oracle 10g you have to modify $ORACLE_HOME/rdbms/admin/externaljob.ora and change the run_user and run_group to what ever you want to use.
regards,
Ronald
(also see:
http://www.packtpub.com/mastering-oracle-scheduler-in-oracle-11g-databases)

EREC - How to disable user settings in external job board e recruitment

Hi All,
Is there an option to disable the user settings for External Job Boards ? The user settings where candidate can save default keywork search etc (which unfortunately stays for other candidates unless the default value is discarded.)
Thanks
Suman

Hi Suman,
Please check the following link on how to set up the WDDISABLEUSERPERSONALIZATION parameter:
http://help.sap.com/erp2005_ehp_04/helpdata/EN/7b/fb57412df8091de10000000a155106/frameset.htm
and then set up the parameter for the standard hrrcf_a_unreg_job_search and try to run your WD application.
Hope it helps,
Kind Regards
Christine

Changing from dev to standard edition causes "Could not obtain information about Windows NT group/user error code 0x6e."

Hello,
We recently upgrade our SQL Server 2012 SP1 (64bit) dev edition to standard edition, after we purchased the required licence and it was deployed in production.
Since the edition change, we are now receiving the following error, with some of our jobs, which have an e-mail step in them, which is causing the jobs to fail.
Msg 14661,Level 16, State 1, Procedure sp_send_dbmail, Line 517
Query execution failed: Msg 15404, Level 16, State 19, Server BL-SVR15, Line 1
Could not obtain information about Windows NT group/user 'BLUELIZARD\savaa', error code 0x6e.
Any ideas how to fix this issue? We were also having a similar error, when executing the jobs, but changing the job owner to SA has fixed this issue.
Thanks,
Andy.

Hi,
Which user account you used for SQL Server service, domain account or local account?
If it is domain account, are you able to log in to a machine with it?
Make sure that the password of account is not expired.
Also, grant the user Allowed to Authenticate permission and see how it helps.
Refer to the below article:
http://geeks.ms/blogs/ozonicco/archive/2013/01/14/208266.aspx
Thanks.
Tracy Cai
TechNet Community Support

External job creation ORA-27370

Hi Team,
In oracle documentation it is mentioned
The CREATE EXTERNAL JOB privilege is required for database users who want to execute jobs that run on the operating system outside the database. By default, this privilege is granted to all users who have been granted the CREATE JOB privilege.
So as per documentation it is not mandatory to be sysdba could yo please make sure the user who run the job is having CREATE EXTERNAL JOB privilege
However although user has CREATE EXTERNAL JOB
running the following
When running the following statement below:
SQL> BEGIN
DBMS_SCHEDULER.create_job (job_name => 'test_shell',
job_type => 'EXECUTABLE',
job_action => 'ls -l',
start_date => SYSDATE,
repeat_interval => 'FREQ=MINUTELY; INTERVAL=1',
enabled => TRUE,
COMMENTS => 'Calling shell script from Oracle');
END;
getting
ERROR at line 1:
ORA-27370: job slave failed to launch a job of type EXECUTABLE
ORA-27300: OS system dependent operation:accessing extjob wrapper failed with
status: 13
ORA-27301: OS failure message: Permission denied
ORA-27302: failure occurred at: sjsec 3
ORA-06512: at "SYS.DBMS_ISCHED", line 185
ORA-06512: at "SYS.DBMS_SCHEDULER", line 486
ORA-06512: at line 2
using the following it worked
Create the script /tmp/run_test.sh with:
#!/bin/bash
date >> /tmp/run_test.log
b. Change permissions to 755 /tmp/run_test.sh
c. Execute the script and confirm that the file /tmp/run_test.log is created.
d. As sys execute:
begin
dbms_scheduler.create_program
program_name => 'RUN_TEST',
program_type => 'EXECUTABLE',
program_action => '/tmp/run_test.sh',
enabled => TRUE,
comments => 'testing script'
end;
begin
dbms_scheduler.create_schedule
schedule_name => 'EVERY_MIN',
repeat_interval => 'FREQ=MINUTELY; INTERVAL=1',
comments => 'Every 1-mins'
end;
begin
dbms_scheduler.create_job
job_name => 'RUN_TEST_JOB',
program_name => 'RUN_TEST',
schedule_name => 'EVERY_MIN',
comments => 'test script ',
enabled => TRUE
end;
So is it mandatory to use sysdba?
Thanks in Advance,
Jo.

Thanks Grey,
The db version is 11.2.0.3 the OS user is the owner of oracle software for permissions all were done as per note 1059981.1
Regards,

11g R2 Remote External Job Setup

Have followed all of the instructions in the guide for remote external jobs. Running into the following error when trying to register a remote agent with the database:
./schagent -registerdatabase atlantic 16021
Agent Registration Password ? ********
ERROR: Connecting to: http://atlantic:16021/remote_scheduler_agent/register_agent. java.io.IOException: Server returned HTTP response code: 401 for URL: http://atlantic:16021/remote_scheduler_agent/register_agent2
If from that same machine I run the following - telnet atlantic 16021 - I get 'Connected to atlantic'.
When logged into the database named stage on atlantic, I can run the following query:
select dbms_xdb.gethttpport() from dual;
This produces 16021. Has anyone gotten this error message or something similar? I've only ever seen success in every guide, but something about my implementation must be off or different. I'm not sure what details will be helpful here, but willing to provide anything that would be pertinent.
Thanks!
Dan Berry

Hi Ravi,
We re-ran prvtrsch.plb and reset the password. Still given the same error. I can see that the dbms_isched_remote_access package was created in the database, and the it has references to procedures owned by the remote_scheduler_agent user. Is there any way to verify that the registration procedure is available via http? Also, I'm unsure if this makes a difference or not, but when we specify host during registration, we are using atlantic. Atlantic is our physical hardware where several databases reside. The database we want to register with is called stage and the port we set for xdb is 16021. It is the only place where this port is being used. When we register is it fine to say the host is atlantic and the port is 16021, or do we need to find a way to expose stage?
Thanks,
Dan

Error on 11g 2 during external job execution using credential

Hi,
I need a help from you.
I am getting below error on 11g 2 during external job execution using credentials -
EXTERNAL_LOG_ID="job_805812_412409",
ORA-27369: job of type EXECUTABLE failed with exit code: Arg list too long
STANDARD_ERROR="Launching external job failed: Invalid username or password"
Find credentials creation & other required details -
EXECUTE DBMS_SCHEDULER.create_credential(credential_name =>'SYS.SCRIPTS',username =>'scripts',password => 'u5342222');
BEGIN
DBMS_SCHEDULER.CREATE_JOB(
job_name => 'AUTOLOAD_JOB',
job_type => 'EXECUTABLE',
job_action => '/qpshell/dev/scripts/autoload.sh',
repeat_interval => 'freq=MINUTELY;interval=5;byhour=1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22;',
enabled => true,
auto_drop => false,
credential_name => 'SYS.SCRIPTS');
end;
-rw-r--r-- 1 root oinstall 1571 Nov 11 14:42 /u01/app/oracle/product/11.2.0/dbhome_1/rdbms/admin/externaljob.ora
content of externaljob.ora -
run_user = nobody
run_group = nobody
run_user=scripts
run_group=qvcscript
-rwsr-x--- 1 root oinstall 3068424 Nov 11 13:13 extjob
-rwxr-xr-x 1 oracle oinstall 3068424 Nov 11 13:13 extjobo
root@knudwdbs2:/u01/app/oracle/product/11.2.0/dbhome_1/bin> ls -ltr extjob*
-rwx------ 1 oracle oinstall 3068424 Nov 11 12:45 extjoboO
-rwsr-x--- 1 root oinstall 3068424 Nov 11 12:45 extjobO
-rwxr-xr-x 1 oracle oinstall 3068424 Nov 11 13:13 extjobo
-rwsr-x--- 1 root oinstall 3068424 Nov 11 13:13 extjob
Kindly suggest how it can be fixed. Early response much appreciated.
Thanks
Ajay
--

Hi,
When you are logged in to the OS, can you do an "su" to the "scripts" user using this exact password (passwords are case-sensitive) ?
Also make sure that you have libpam.so located somewhere in $LD_LIBRARY_PATH and that it points to a real file.
external jobs with credentials use jssu, but I don't think permissions on jssu are the problem here (it should be setuid to root).
Hope this helps,
Ravi.

Creating Externally Authenticated users

Greetings,
We recently migrated our Security team from Windows XP to Windows 7. With this upgrade, they were forced to stop using the java Oracle 9i Enterprise Manager to manage security and database users. I was able to find the View->DBA tab in Oracle SQL Developer which allows for things like CREATE LIKE, CREATE, etc, but under the CREATE USER, I see nowhere where the tool allows for a user other than a normal database authenticated account. We have a few key databases where we must create externally authenticated users (EXTERNAL) and this just isn't an option. Is this functionality anywhere in the tool?
Thanks
Bradd

We recently migrated our Security team from Windows XP to Windows 7. With this upgrade, they were forced to stop using the java Oracle 9i Enterprise Manager to manage security and database users. I was able to find the View->DBA tab in Oracle SQL Developer which allows for things like CREATE LIKE, CREATE, etc, but under the CREATE USER, I see nowhere where the tool allows for a user other than a normal database authenticated account. We have a few key databases where we must create externally authenticated users (EXTERNAL) and this just isn't an option. Is this functionality anywhere in the tool?
I don't understand what you are trying to do.
Post your full sql developer info and explain in detail what you mean; with an example if possible.
You can create users in the DB the way you do with any tool: write the appropriate DDL for CREATE USER. For OS authentication you add the OS_AUTHENT_PREFIX to the user name.
In sql developer create connections for those users using the connections dialog that you use for any other user. On that dialog there is a checkbox for OS authentication.
See this article by Sue Harper and see if the example for local OS authentication she provides answers your question:
http://www.oracle.com/technetwork/issue-archive/2008/08-may/o38sql-102034.html
To configure local OS authentication for a new user, first find the value of the OS_AUTHENT_PREFIX database initialization parameter in your system's init.ora file. When you create this new user in the database, you must add this parameter value as a prefix to the OS username. The default value is OPS$, for backward compatibility with earlier database releases. (If the value is "", the OS username and the database username are the same, so you don't need to add a prefix to create the Oracle usernames.)
Establish a basic connection with the HR schema as the SYSTEM user. Execute the following from the SQL worksheet, using your database's OS_AUTHENT_PREFIX prefix and substituting your own OS username for "sue":
CREATE USER ops$sue IDENTIFIED EXTERNALLY; GRANT Connect, resource to sue;
Now create a basic connection for this user from the New / Select Database Connection dialog box. Enter a connection name; select Basic for Connection Type ; fill in the Hostname and Port fields; select OS Authentication ; and provide a SID or Service name . Click Test and Connect as before.

Externally Authenticated Users

Dear Sirs;
I have a windows 2003 server with Oracle Database R2 installed on it. I have been trying to create an externally authenticated user but unfortunately it is not working. Are there any special procedures that I must pay attention too? I followed all the instructions that are mentioned in the documentation in the library section.
Thank you in advance for your help.
Mazen

Dear Sirs;
I could finally solve this problem. It turned out that the registry must contain the following entry: osauth_prefix_domain with the value of 0. This entry is located in windows registry > HKEY_LOCAL_MACHINE > SOFTWARE > ORACLE > KEY_OraDb10g_home1. This entry was supposed to be there by default but for some reason it wasn't.
Anyway thanks for everyone who considered helping.
Mazen

Proxy login from externally authenticated user

Hi Experts,
I created an externally authenticated user in database. And can login without password with below syntax.
SQL> connect / @TESTDB
Connected.
SQL> show user;
USER is "SCOTT"
This scott user has a proxy permission to another DBuser PROXY_USER.
I got the syntax but that works only from Database OS.
sqlplus [proxy_user]/
SQL*Plus: Release 11.1.0.6.0 Production on Mon Nov 15 16:28:47 2010
Copyright (c) 1982, 2010, Oracle. All rights reserved.
Connected to:
Oracle Database 11g Release 11.1.0.6.0 - 64bit Production
I can connect as externally authenticated user from windows CLIENT running on Release 10.2.0.1.0
SQL> connect / @TESTDB
Connected.
But the above mentioned Proxy connectivity syntax fails with below from CLIENT
SQL> connect [proxy_user]/ @TESTDB
SP2-0306: Invalid option.
Usage: CONN[ECT] [logon] [AS {SYSDBA|SYSOPER}]
where <logon> ::= <username>[<password>][@<connect_identifier>] | /
But the same syntax works from Database OS!
I can login from TOAD but can't login from SQLDEVELOPER or SQLPLUS
My sqldeveloper version is:
Version 2.1.1.64
Build MAIN-64.45
and sqlplus is:
SQL*Plus: Release 10.2.0.1.0
Any idea?
Thanks.
Edited by: Nadvi on Nov 18, 2010 3:09 PM

Hi Nadvi
If you get SQLPLUS working SQLDeveloper (thick jdbc/oci/instant client) is certainly worth trying.
I am not sure what is the issue with your setup the proxy usecases I am familiar with are:
Through the SQLDeveloper ui
There are two ways of doing proxy logins:
where p1 is proxy user and c1 is proxy client:
1/single session method (if no 2nd password or distinguished name required)
on main connection popup
user: p1[c1]
password: p1
2/Two session method
Main Connection popup
user: p1
password p1
popup connection authentication
proxy client: c1
none or password or distinguished name
-Turloch
SQLDeveloper Team

Any reason why external jobs hang?

Hi
I'm in two minds as to whether this as an XE database problem or a general Scheduler problem so I'm trying my luck on this forum first.
Details: Database XE, Centos O/S
Problem
I can schedule all the different types of jobs and all except external jobs(job_type EXECUTABLE) do run. With external jobs, they just never complete running. It's not like they are doing anything either.
- Selecting from USER_SCHEDULER_RUNNING_JOBS while an external job is running just never comes back.
- Checking what's going on in v$session reveals an ACTIVE status and EVENT "JS external job".
- The xe_J00X os process doesn't seem to be doing anything. However, if I terminate(kill) it, it won't die except with kill -9, which frees up the database.
I have searched and tried a number of ideas but I haven't been able to resolve this.
So far
- I have tried the Metalink notes for setting permissions to nobody user.
- I have added #!/bin/ksh or #!/bin/bash to the shell scripts
- Implemented externaljob.ora
The results are the same. External jobs just hang, no error message, nothing.
I'd appreciate help if you can.
Thank you.
Siphiwe

Hi,
This is helpful and I can add some further comments.
- The Metalink notes were intended for normal SE/EE Oracle installs, there is no guarantee that they will work on XE. In fact your experiment shows that setting the permissions as in the Metalink note does not work on XE since nobody does not have access to the libclntsh.so.10.1 library (file and directory permissions are slightly different in XE) . You should ignore the Metalink notes and leave the original install permissions.
- because there is no extjobo executable, external jobs in the SYS schema will not work (although doing "cp extjob extjobo" should fix this) . This is a known filed bug.
- because the Metalink note does not work, all external jobs will run as the Oracle user. This is a security risk that should be taken into account whenever granting the CREATE EXTERNAL JOB system privilege to a user.
I can confirm that on an rpm installation of oracle-xe the following works for me when run as sys
-- test case for an external job on Oracle XE
create user testusr identified by testusr ;
grant create session, resource, create job, create external job to testusr;
connect testusr/testusr
begin
dbms_scheduler.create_job('job1','executable','/bin/sleep',1,
enabled=>false);
dbms_scheduler.set_job_argument_value('job1',1,'10');
dbms_scheduler.enable('job1');
end;
select * from all_scheduler_running_jobs;
select * from all_scheduler_job_run_details;
The job does run successfully and runs for 10 seconds as expected. I suggest you try this test case out after removing the pj files and fixing the permissions on extjob back to
-r-xr-xr-x 1 oracle dba 32068 Feb 19 2006 extjob*
Hope this helps,
Ravi.
null

Windows bactch job to trim the Listener log

Hi All ,
Can you help me to write a Windows batch job to trim the listener.log on periodically.
I have the below steps, which i do manually but i won't which needs to be put in batch.
copy listener.log listener_<today>.log
lsnrctl set log_file listener_new.log
del listener.log
lsnrctl set log_file listener.log
lsnrctl reload
del listener_new.log
Appriciate the Help.
Thanks in Advance.

Have a look here:
http://www.wikihow.com/Write-a-Batch-File
You have the commands, so you only need the batch file around it
HTH
FJFranken

Error while configuring external LDAP user store with weblogic

Hi,
I have weblogic 10.3 installed and I can access weblogic admin console using weblogic (admin) user. I want to use external ldap user store to access admin console with users present in external ldap.
To do this, I have configured authentication provider and provided all the required details to connect to ldap.
For example:
Base DN: cn=admin,cn=Administrators,cn=dscc (user with which we will connect to LDAP)
User DN: ou=People,dc=test,dc=com
Group DN: ou=Groups,dc=test,dc=com
This authentication provider is set to SUFFICIENT mode. I have deleted the default authentication provider.
In the boot.properties file I have given the user name and password of the user with which LDAP instance was created something like below.
password=xxxxxxx
username=admin
Now while starting the admin weblogic server, I am getting the below error:
<Jul 25, 2012 2:22:28 PM IOT> <Critical> <Security> <BEA-090402> <Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.>
<Jul 25, 2012 2:22:28 PM IOT> <Critical> <WebLogicServer> <BEA-000386> <Server subsystem failed. Reason: weblogic.security.SecurityInitializationException: Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.
weblogic.security.SecurityInitializationException: Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:960)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1054)
at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:873)
at weblogic.security.SecurityService.start(SecurityService.java:141)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
Truncated. see log file for complete stacktrace
Caused By: javax.security.auth.login.FailedLoginException: [Security:090304]Authentication Failed: User admin javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User admin denied
at weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.login(LDAPAtnLoginModuleImpl.java:261)
at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
at java.security.AccessController.doPrivileged(Native Method)
at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
Truncated. see log file for complete stacktrace
>
<Jul 25, 2012 2:22:28 PM IOT> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FAILED>
<Jul 25, 2012 2:22:28 PM IOT> <Error> <WebLogicServer> <BEA-000383> <A critical service failed. The server will shut itself down>
<Jul 25, 2012 2:22:28 PM IOT> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FORCE_SHUTTING_DOWN>
Can anyone please suggest how to resolve this problem? If, anyone can suggest the exact steps to configure external ldap store to manage admin console via ldap users.
Regards,
Neeraj Tati.

Hi,
Please refer the below content that I found for Oracle 11g in the docs.
"If an LDAP Authentication provider is the only configured Authentication provider for a security realm, you must have the Admin role to boot WebLogic Server and use a user or group in the LDAP directory. Do one of the following in the LDAP directory:
By default in WebLogic Server, the Admin role includes the Administrators group. Create an Administrators group in the LDAP directory, if one does not already exist. Make sure the LDAP user who will boot WebLogic Server is included in the group.
The Active Directory LDAP directory has a default group called Administrators. Add the user who will be booting WebLogic Server to the Administrators group and define Group Base Distinguished Name (DN) so that the Administrators group is found.
If you do not want to create an Administrators group in the LDAP directory (for example, because the LDAP directory uses the Administrators group for a different purpose), create a new group (or use an existing group) in the LDAP directory and include the user from which you want to boot WebLogic Server in that group. In the WebLogic Administration Console, assign that group the Admin role."
Now in my LDAP directory, setup is in such a way that Administrators is a group created under following heirarchy " cn=Administrators,ou=Groups,dc=test,dc=com" and there is one user added in this Administrators group.
The problem that I am having is when I modify the Admin role in which Administrators group should be added what exaclty I should give in Admin role. Whether I should give only Administrators or full DN: cn=Administrators,ou=Groups,dc=test,dc=com ???
When i give full DN, it takes every attribute as different, i mean cn=Administrators as different and ou=Groups as different and shows a message that cn=Administrators does not exist.
Here not sure what to do.
Also if external ldap authentication provider is the only provider then I need to give the user information in boot.properties file also for weblogic to boot properly. Now, what should I give there in user? still complete DN ??
Regards,
Neeraj Tati.

External LDAP user only has search priviledge in UCM

After I have configed external LDAP successfully in weblogic console, I can see all user from external LDAP. And external LDAP user can login UCM successfully, but these users only has search priviledge. I want external LDAP user has Admin priviledge as weblogic(Default in embed LDAP). How to solve it. Any help will be appreciated greatly! Otherwise, I refer to Oracle's ducument,
51.1.14 LDAP Users Not Receiving Some Administrator Privileges
UCM inspects for the group "Administrators" on each user's login to grant UCM roles. If a user should have access to the UCM admin server, the UCM server requires that the user be a member in a group named "Administrators."
How to add external LDAP user to the group of Administrators.

Hi ,
You can use Credential Maps to be achieve the requirement:
Steps for the same are :
1. Login to UCM - Administration - Credential Maps .
2. Create the map name and the following mapping :
<ldap role> , admin
3. Save the changes
4. Navigate to <domain_home>/ucm/cs/data/providers/jpsuserprovider/provider.hda
add the following variable there :
ProviderCredentialsMap=<map name created in step 2>
5. Save the changes and restart ucm server .
After that login with the user who has the ldap role that is mapped in stpe 2 , this user will have the ucm admin role .
Hope this helps .
Thanks
Srinath

Windows external job user

Similar Messages

Maybe you are looking for