Connect sys/password@database as sysdba E-Business suite
Title: Connect sys/[EMAIL PROTECTED] as sysdba E-Business suite Hi All, I have seen some weird behaviour and must have been searching in the wrong places. When logging in to a 9i RAC environment using the syntax sys/[EMAIL PROTECTED] as sysdba it works fine at the primary instance but reports invalid username/password at the secondary instance. Is this normal behaviour? When connecting to an e-business suite(11.5.9?) database I noticed that my sessions (ODBC SQL*Plus) were executing the suites portal login procedure.In fact all connections did this. Also my ODBC connection timed out on tables owned by a none suite schema. Is there a database logon trigger on e-business suite that forces every connection through the suites security mechanism or something? (I have never worked with e-business so I know nothing about it, I just installed some monitor tools repository in this database and could not get to the data) TIA Jack
Re: Connect sys/password@database as sysdba E-Business suite
Title: Connect sys/[EMAIL PROTECTED] as sysdba & E-Business suite Hi! Are you sure that you have correct password file in second instance? Maybe you're using wrong password (or do not have pwdfile) buf on first instance you just belong to os DBA group, thus you can log on using whatever password you provide. If you access your data using ODBC, which username do you use? Is it APPS? Afaik there is no restricting logon trigger in apps, at least up to 11.5.7 there isn't. Try to execute the exact query manually under same user first, to see whether the timeout problem comes from database or ODBC driver. Tanel. - Original Message - From: Jack van Zanen To: Multiple recipients of list ORACLE-L Sent: Friday, September 12, 2003 11:29 AM Subject: Connect sys/[EMAIL PROTECTED] as sysdba E-Business suite Hi All, I have seen some weird behaviour and must have been searching in the wrong places. When logging in to a 9i RAC environment using the syntax sys/[EMAIL PROTECTED] as sysdba it works fine at the primary instance but reports invalid username/password at the secondary instance. Is this "normal" behaviour? When connecting to an e-business suite(11.5.9?) database I noticed that my sessions (ODBC SQL*Plus) were executing the suites portal login procedure.In fact all connections did this. Also my ODBC connection timed out on tables owned by a none suite schema. Is there a database logon trigger on e-business suite that forces every connection through the suites security mechanism or something? (I have never worked with e-business so I know nothing about it, I just installed some monitor tools repository in this database and could not get to the data) TIA Jack
RE: Connect sys/password@database as sysdba E-Business suite
Hi Tanel I did not mention that w/o the connect string it works Will look at the password file. I have not tried to run a query in SQL*Plus, will ask the cst to do so. I use a new user for the repository (not apps) Jack -Original Message- Sent: Friday, September 12, 2003 1:49 PM To: Multiple recipients of list ORACLE-L Hi! Are you sure that you have correct password file in second instance? Maybe you're using wrong password (or do not have pwdfile) buf on first instance you just belong to os DBA group, thus you can log on using whatever password you provide. If you access your data using ODBC, which username do you use? Is it APPS? Afaik there is no restricting logon trigger in apps, at least up to 11.5.7 there isn't. Try to execute the exact query manually under same user first, to see whether the timeout problem comes from database or ODBC driver. Tanel. - Original Message - To: Multiple recipients of list ORACLE-L Sent: Friday, September 12, 2003 11:29 AM Hi All, I have seen some weird behaviour and must have been searching in the wrong places. When logging in to a 9i RAC environment using the syntax sys/[EMAIL PROTECTED] as sysdba it works fine at the primary instance but reports invalid username/password at the secondary instance. Is this normal behaviour? When connecting to an e-business suite(11.5.9?) database I noticed that my sessions (ODBC SQL*Plus) were executing the suites portal login procedure.In fact all connections did this. Also my ODBC connection timed out on tables owned by a none suite schema. Is there a database logon trigger on e-business suite that forces every connection through the suites security mechanism or something? (I have never worked with e-business so I know nothing about it, I just installed some monitor tools repository in this database and could not get to the data) TIA Jack -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Jack van Zanen INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: Connect sys/password@database as sysdba E-Business suite
Hi Tanel I did not mention that w/o the connect string it works Try to log on as sysdba with bogus password (without connect string), you should be able to log on anyway, because you're in os dba group. Tanel. -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Tanel Poder INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Connect sys/password@database as sysdba E-Business suite
Title: Message You should set remote_os_authent and remote_os_rolesto true, otherwise RMAN will not be able to connect to the remote isntance as sysdba. On the other hand, you might want to reconsider it, because that would open your instance wide to the various forms of network attacks. --Mladen GogalaOracle DBA -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jack van ZanenSent: Friday, September 12, 2003 4:29 AMTo: Multiple recipients of list ORACLE-LSubject: Connect sys/[EMAIL PROTECTED] as sysdba E-Business suite Hi All, I have seen some weird behaviour and must have been searching in the wrong places. When logging in to a 9i RAC environment using the syntax sys/[EMAIL PROTECTED] as sysdba it works fine at the primary instance but reports invalid username/password at the secondary instance. Is this "normal" behaviour? When connecting to an e-business suite(11.5.9?) database I noticed that my sessions (ODBC SQL*Plus) were executing the suites portal login procedure.In fact all connections did this. Also my ODBC connection timed out on tables owned by a none suite schema. Is there a database logon trigger on e-business suite that forces every connection through the suites security mechanism or something? (I have never worked with e-business so I know nothing about it, I just installed some monitor tools repository in this database and could not get to the data) TIA Jack Note: This message is for the named person's use only. It may contain confidential, proprietary or legally privileged information. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error,please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient.Wang Trading LLCand any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorized to state them to be the views of any such entity.
RE: Connect sys/password@database as sysdba E-Business suite
You are not right. SYSDBA is authenticated through the operating system. You must have a DBA role to be a SYSDBA, be it local or remote. To allow authentication of a remote user as a sysdba, you must explicitely tell oracle to do so. Dictionary accessibility has nothing to do with that. -- Mladen Gogala Oracle DBA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of ManojKr Jha Sent: Friday, September 12, 2003 11:44 AM To: Multiple recipients of list ORACLE-L Subject: RE: Connect sys/[EMAIL PROTECTED] as sysdba E-Business suite This is not true. If O7_DICTIONARY_ACCESSIBILITY is set true, the instance can be connect as sysdba from remote if user has granted role sysdba. Am I right?. If this value is true. even then sys can be connected as normal user. With Regards, Manoj Kumar Jha C-56 , Phase-2 NOIDA -201305, UP(INDIA) Tata Consultancy Services Ph No: (+91-120) 4461001 ext : 1037 (Off.) Mobile No : 9810090974 -- -- A transcendentalist engaged in auspicious activities does not meet with destruction either in this world or in the spiritual world; one who does good, is never overcome by evil. -- -- Mladen Gogala To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] [EMAIL PROTECTED]cc: ading.comSubject: RE: Connect sys/[EMAIL PROTECTED] as sysdba E-Business Sent by: suite [EMAIL PROTECTED] ity.com 09/12/03 07:44 PM Please respond to ORACLE-L You should set remote_os_authent and remote_os_roles to true, otherwise RMAN will not be able to connect to the remote isntance as sysdba. On the other hand, you might want to reconsider it, because that would open your instance wide to the various forms of network attacks. -- Mladen Gogala Oracle DBA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jack van Zanen Sent: Friday, September 12, 2003 4:29 AM To: Multiple recipients of list ORACLE-L Subject: Connect sys/[EMAIL PROTECTED] as sysdba E-Business suite Hi All, I have seen some weird behaviour and must have been searching in the wrong places. When logging in to a 9i RAC environment using the syntax sys/[EMAIL PROTECTED] as sysdba it works fine at the primary instance but reports invalid username/password at the secondary instance. Is this normal behaviour? When connecting to an e-business suite(11.5.9?) database I noticed that my sessions (ODBC SQL*Plus) were executing the suites portal login procedure.In fact all connections did this. Also my ODBC connection timed out on tables owned by a none suite schema. Is there a database logon trigger on e-business suite that forces every connection through the suites security mechanism or something? (I have never worked with e-business so I know nothing about it, I just installed some monitor tools repository in this database and could not get to the data) TIA Jack Note: This message is for the named person's use only. It may contain
Re: Connect sys/password@database as sysdba E-Business suite
Hi! No, o7_dictionary_accessibility controls whether SYS user can log on to database without SYSDBA privilege (starting from 9.2). If it's false, sys always has to connect as sysdba. Mladen, don't you think that if you have created passwordfiles for each instance in RAC and set remote_password_file accordingly, then RMAN can connect to remote instances as sysdba? I'm asking this, haven't had a chance to test. Tanel. - Original Message - To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] Sent: Friday, September 12, 2003 6:44 PM This is not true. If O7_DICTIONARY_ACCESSIBILITY is set true, the instance can be connect as sysdba from remote if user has granted role sysdba. Am I right?. If this value is true. even then sys can be connected as normal user. With Regards, Manoj Kumar Jha C-56 , Phase-2 NOIDA -201305, UP(INDIA) Tata Consultancy Services Ph No: (+91-120) 4461001 ext : 1037 (Off.) Mobile No : 9810090974 -- -- A transcendentalist engaged in auspicious activities does not meet with destruction either in this world or in the spiritual world; one who does good, is never overcome by evil. -- -- Mladen Gogala To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED] [EMAIL PROTECTED]cc: ading.comSubject: RE: Connect sys/[EMAIL PROTECTED] as sysdba E-Business Sent by: suite [EMAIL PROTECTED] ity.com 09/12/03 07:44 PM Please respond to ORACLE-L You should set remote_os_authent and remote_os_roles to true, otherwise RMAN will not be able to connect to the remote isntance as sysdba. On the other hand, you might want to reconsider it, because that would open your instance wide to the various forms of network attacks. -- Mladen Gogala Oracle DBA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jack van Zanen Sent: Friday, September 12, 2003 4:29 AM To: Multiple recipients of list ORACLE-L Subject: Connect sys/[EMAIL PROTECTED] as sysdba E-Business suite Hi All, I have seen some weird behaviour and must have been searching in the wrong places. When logging in to a 9i RAC environment using the syntax sys/[EMAIL PROTECTED] as sysdba it works fine at the primary instance but reports invalid username/password at the secondary instance. Is this normal behaviour? When connecting to an e-business suite(11.5.9?) database I noticed that my sessions (ODBC SQL*Plus) were executing the suites portal login procedure.In fact all connections did this. Also my ODBC connection timed out on tables owned by a none suite schema. Is there a database logon trigger on e-business suite that forces every connection through the suites security mechanism or something? (I have never worked with e-business so I know nothing about it, I just installed some monitor tools repository in this database and could not get to the data) TIA Jack Note: This message is for the named person's use only. It may contain confidential, proprietary or legally privileged information. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. Wang Trading LLC and any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorized to state them to be the views of any such entity. DISCLAIMER: The information contained in this message is intended only and solely for the addressed individual or entity indicated in this message and for the exclusive use of the said addressed individual or entity indicated in this message (or responsible for delivery of the message to such person) and may contain legally privileged and confidential information belonging to Tata Consultancy Services. It must not be printed, read, copied, disclosed, forwarded, distributed or used (in whatsoever manner) by any person other than the addressee. Unauthorized use, disclosure or copying is strictly prohibited and may constitute unlawful act and can possibly attract legal action, civil and/or criminal.
Re: Connect sys/password@database as sysdba E-Business suite
You are not right. SYSDBA is authenticated through the operating system. You must have a DBA role to be a SYSDBA, be it local or remote. To allow authentication of a remote You probably meant SYSDBA privilege to be a SYSDBA? DBA role is irrelevant here. Tanel. -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Tanel Poder INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Connect sys/password@database as sysdba E-Business suite
You're right. I made a mess of this. I'm busy, and I'll stay away from the list today. -- Mladen Gogala Oracle DBA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tanel Poder Sent: Friday, September 12, 2003 1:05 PM To: Multiple recipients of list ORACLE-L Subject: Re: Connect sys/[EMAIL PROTECTED] as sysdba E-Business suite You are not right. SYSDBA is authenticated through the operating system. You must have a DBA role to be a SYSDBA, be it local or remote. To allow authentication of a remote You probably meant SYSDBA privilege to be a SYSDBA? DBA role is irrelevant here. Tanel. -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Tanel Poder INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Note: This message is for the named person's use only. It may contain confidential, proprietary or legally privileged information. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. Wang Trading LLC and any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorized to state them to be the views of any such entity. -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Mladen Gogala INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).