Question:
:
I know that the
remote_os_authent
is deprecated, and I
set it to TRUE anyway, bouncing the database and I get a ORA-1017.
How can I establish OS Authentication in a Windows environment?
Answer:
First, Read these
MOSC notes on Windows OS
authentication connection in 11g:
Starting in 11g, you can use Oracle Internet Directory (OID) for OS
authentication in Windows.
OID is an LDAP compliant remote authentication mechanism, that
uses the Windows Active Directory as repository . . . .
Windows is quite secure under a firewall!
But there may be a way to establish remote OS authentication in 11g
Windows without OID.
Try this first:
-
Set OS_AUTHENT_PREFIX=NULL
-
Check your sqlnet.ora to set
SQLNET.AUTHENTICATION_SERVICES=NTS
-
Check that REMOTE_OS_AUTHENT=TRUE
-
Make sure you create your user as "SQL> create user
"MYUSER" identified externally;". Remember to change the user
ID from "OPS$MYDOMAIN\MYUSER" to plain "MYUSER" (all in
uppercase)
-
Create The Windows user with full system
privileges. On Windows, local users are created using the
Computer Management dialog:
(Start
> Programs > Administrative Tools > Computer Management)
-
Domain users can be created in Windows Active
Directory.
********************************************
Once a Window user ID identified externally, you should be able to
connect via SQL*Plus without a password:
C:\oracle> set ORACLE_SID=MYSID
C:\oracle> sqlplus / as
sysdba
The same is true for connecting to the RMAN catalog database:
c:\oracle> rman target /
