Connect sys/password@database as sysdba E-Business suite

2003-09-12 Thread Jack van Zanen
Title: Connect sys/[EMAIL PROTECTED] as sysdba  E-Business suite





Hi All,



I have seen some weird behaviour and must have been searching in the wrong places.


When logging in to a 9i RAC environment using the syntax sys/[EMAIL PROTECTED] as sysdba it works fine at the primary instance but reports invalid username/password at the secondary instance.

Is this normal behaviour?



When connecting to an e-business suite(11.5.9?) database I noticed that my sessions (ODBC  SQL*Plus) were executing the suites portal login procedure.In fact all connections did this. 

Also my ODBC connection timed out on tables owned by a none suite schema.


Is there a database logon trigger on e-business suite that forces every connection through the suites security mechanism or something?

(I have never worked with e-business so I know nothing about it, I just installed some monitor tools repository in this database and could not get to the data)


TIA




Jack






Re: Connect sys/password@database as sysdba E-Business suite

2003-09-12 Thread Tanel Poder
Title: Connect sys/[EMAIL PROTECTED] as sysdba & E-Business suite



Hi!

Are you sure that you have correct password file in 
second instance?
Maybe you're using wrong password (or do not have 
pwdfile) buf on first instance you just belong to os DBA group, thus you can log 
on using whatever password you provide.

If you access your data using ODBC, which username 
do you use? Is it APPS? Afaik there is no restricting logon trigger in apps, at 
least up to 11.5.7 there isn't. Try to execute the exact query manually under 
same user first, to see whether the timeout problem comes from database or ODBC 
driver.

Tanel.


  - Original Message - 
  From: 
  Jack van 
  Zanen 
  To: Multiple recipients of list ORACLE-L 
  
  Sent: Friday, September 12, 2003 11:29 
  AM
  Subject: Connect sys/[EMAIL PROTECTED] as sysdba  
  E-Business suite
  
  Hi All, 
  I have seen some weird behaviour and must have been 
  searching in the wrong places. 
  When logging in to a 9i RAC environment using the 
  syntax sys/[EMAIL PROTECTED] as 
  sysdba it works fine at the primary instance but reports invalid 
  username/password at the secondary instance.
  Is this "normal" behaviour? 
  When connecting to an e-business suite(11.5.9?) 
  database I noticed that my sessions (ODBC  SQL*Plus) were executing the 
  suites portal login procedure.In fact all connections did this. 
  Also my ODBC connection timed out on tables owned 
  by a none suite schema. 
  Is there a database logon trigger on e-business 
  suite that forces every connection through the suites security mechanism or 
  something?
  (I have never worked with e-business so I know 
  nothing about it, I just installed some monitor tools repository in this 
  database and could not get to the data)
  TIA 
  Jack 


RE: Connect sys/password@database as sysdba E-Business suite

2003-09-12 Thread Jack van Zanen
Hi Tanel

I did not mention that w/o the connect string it works

Will look at the password file.

I have not tried to run a query in SQL*Plus, will ask the cst to do so.

I use a new user for the repository (not apps)


Jack
 
-Original Message-
Sent: Friday, September 12, 2003 1:49 PM
To: Multiple recipients of list ORACLE-L


Hi!

Are you sure that you have correct password file in second instance?
Maybe you're using wrong password (or do not have pwdfile) buf on first
instance you just belong to os DBA group, thus you can log on using whatever
password you provide.

If you access your data using ODBC, which username do you use? Is it APPS?
Afaik there is no restricting logon trigger in apps, at least up to 11.5.7
there isn't. Try to execute the exact query manually under same user first,
to see whether the timeout problem comes from database or ODBC driver.

Tanel.

- Original Message - 
To: Multiple recipients of list ORACLE-L 
Sent: Friday, September 12, 2003 11:29 AM


Hi All, 


I have seen some weird behaviour and must have been searching in the wrong
places. 
When logging in to a 9i RAC environment using the syntax
sys/[EMAIL PROTECTED] as sysdba it works fine at the primary instance but
reports invalid username/password at the secondary instance.
Is this normal behaviour? 


When connecting to an e-business suite(11.5.9?) database I noticed that my
sessions (ODBC  SQL*Plus) were executing the suites portal login
procedure.In fact all connections did this. 
Also my ODBC connection timed out on tables owned by a none suite schema. 
Is there a database logon trigger on e-business suite that forces every
connection through the suites security mechanism or something?
(I have never worked with e-business so I know nothing about it, I just
installed some monitor tools repository in this database and could not get
to the data)


TIA 



Jack 
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jack van Zanen
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


Re: Connect sys/password@database as sysdba E-Business suite

2003-09-12 Thread Tanel Poder
 Hi Tanel

 I did not mention that w/o the connect string it works

Try to log on as sysdba with bogus password (without connect string), you
should be able to log on anyway, because you're in os dba group.

Tanel.


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Tanel Poder
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


RE: Connect sys/password@database as sysdba E-Business suite

2003-09-12 Thread Mladen Gogala
Title: Message



You 
should set remote_os_authent and remote_os_rolesto true, otherwise 
RMAN will not be able to connect to the remote isntance as
sysdba. On the other hand, you might want to reconsider it, because that 
would open your instance wide to the various forms of 
network
attacks. 


--Mladen GogalaOracle DBA 

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jack 
  van ZanenSent: Friday, September 12, 2003 4:29 AMTo: 
  Multiple recipients of list ORACLE-LSubject: Connect 
  sys/[EMAIL PROTECTED] as sysdba  E-Business suite
  Hi All, 
  I have seen some weird behaviour and must have been 
  searching in the wrong places. 
  When logging in to a 9i RAC environment using the 
  syntax sys/[EMAIL PROTECTED] as sysdba it works fine at the primary instance 
  but reports invalid username/password at the secondary instance.
  Is this "normal" behaviour? 
  When connecting to an e-business suite(11.5.9?) 
  database I noticed that my sessions (ODBC  SQL*Plus) were executing the 
  suites portal login procedure.In fact all connections did this. 
  Also my ODBC connection timed out on tables owned 
  by a none suite schema. 
  Is there a database logon trigger on e-business 
  suite that forces every connection through the suites security mechanism or 
  something?
  (I have never worked with e-business so I know 
  nothing about it, I just installed some monitor tools repository in this 
  database and could not get to the data)
  TIA 
  Jack 

Note:
This message is for the named person's use only. It may contain 
confidential, proprietary or legally privileged information. No 
confidentiality or privilege is waived or lost by any mistransmission. If 
you receive this message in error,please immediately delete it and all 
copies of it from your system, destroy any hard copies of it and notify the 
sender. You must not, directly or indirectly, use, disclose, distribute, 
print, or copy any part of this message if you are not the intended 
recipient.Wang Trading 
LLCand any of its subsidiaries each reserve the right to 
monitor all e-mail communications through its networks. Any views 
expressed in this message are those of the individual sender, except where the 
message states otherwise and the sender is authorized to state them to be the 
views of any such entity.





RE: Connect sys/password@database as sysdba E-Business suite

2003-09-12 Thread Mladen Gogala
You are not right. SYSDBA is authenticated through the operating system. You
must have a DBA role 
to be a SYSDBA, be it local or remote. To allow authentication of a remote
user as a sysdba, you
must explicitely tell oracle to do so. Dictionary accessibility has nothing
to do with that.

--
Mladen Gogala
Oracle DBA 



 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of ManojKr Jha
 Sent: Friday, September 12, 2003 11:44 AM
 To: Multiple recipients of list ORACLE-L
 Subject: RE: Connect sys/[EMAIL PROTECTED] as sysdba  
 E-Business suite
 
 
 
 This is not true. If O7_DICTIONARY_ACCESSIBILITY is set true, 
 the instance can be connect as sysdba from remote if user has 
 granted role sysdba. Am I right?. If this value is true. even 
 then sys can be connected as normal user.
 
 With Regards,
 Manoj Kumar Jha
 C-56 , Phase-2
 NOIDA -201305, UP(INDIA)
 Tata Consultancy Services
 Ph No: (+91-120) 4461001  ext : 1037 (Off.)
 Mobile No : 9810090974
 
 --
 --
 
 
 A transcendentalist engaged in auspicious activities does not 
 meet with destruction either in this world or in the 
 spiritual world; one who does good, is never overcome by evil.
 --
 --
 
 
 
 
   
   
 Mladen   
   
 Gogala   To: Multiple 
 recipients of list ORACLE-L [EMAIL PROTECTED]   
 [EMAIL PROTECTED]cc: 
   
 ading.comSubject: RE: 
 Connect sys/[EMAIL PROTECTED] as sysdba  E-Business 
 Sent by:  suite   
   
 [EMAIL PROTECTED]
   
 ity.com   
   
   
   
   
   
 09/12/03 07:44
   
 PM
   
 Please respond
   
 to ORACLE-L   
   
   
   
   
   
 
 
 
 
 You should set remote_os_authent and remote_os_roles  to 
 true, otherwise RMAN will not be able to connect to the 
 remote isntance as sysdba. On the other hand, you might want 
 to reconsider it, because that would open your instance wide 
 to the various forms of network attacks.
 
 
 --
 Mladen Gogala
 Oracle DBA
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
 On Behalf Of  Jack van Zanen
  Sent: Friday, September 12, 2003 4:29 AM
  To: Multiple recipients of list ORACLE-L
  Subject: Connect sys/[EMAIL PROTECTED] as sysdba  E-Business suite
 
 
 
  Hi All,
 
 
 
 
 
  I have seen some weird behaviour and must have been 
 searching in the wrong  places.
 
 
  When logging in to a 9i RAC environment using the syntax  
 sys/[EMAIL PROTECTED] as sysdba it works fine at the primary 
 instance but  reports invalid username/password at the 
 secondary instance.
 
 
  Is this normal behaviour?
 
 
 
 
 
  When connecting to an e-business suite(11.5.9?) database I 
 noticed that my  sessions (ODBC  SQL*Plus) were executing 
 the suites portal login  procedure.In fact all connections did this.
 
 
  Also my ODBC connection timed out on tables owned by a none 
 suite schema.
 
 
  Is there a database logon trigger on e-business suite that 
 forces every  connection through the suites security 
 mechanism or something?
 
 
  (I have never worked with e-business so I know nothing about 
 it, I just  installed some monitor tools repository in this 
 database and could not get  to the data)
 
 
 
 
 
  TIA
 
 
 
 
 
 
  Jack
 
 
 
 
 Note:
 This message is for the named person's use only.  It may 
 contain 

Re: Connect sys/password@database as sysdba E-Business suite

2003-09-12 Thread Tanel Poder
Hi!

No, o7_dictionary_accessibility controls whether SYS user can log on to
database without SYSDBA privilege (starting from 9.2). If it's false, sys
always has to connect as sysdba.

Mladen, don't you think that if you have created passwordfiles for each
instance in RAC and set remote_password_file accordingly, then RMAN can
connect to remote instances as sysdba? I'm asking this, haven't had a chance
to test.

Tanel.

- Original Message - 
To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED]
Sent: Friday, September 12, 2003 6:44 PM



 This is not true. If O7_DICTIONARY_ACCESSIBILITY is set true, the instance
 can be connect as sysdba from remote if user has granted role sysdba. Am I
 right?. If this value is true. even then sys can be connected as normal
 user.

 With Regards,
 Manoj Kumar Jha
 C-56 , Phase-2
 NOIDA -201305, UP(INDIA)
 Tata Consultancy Services
 Ph No: (+91-120) 4461001  ext : 1037 (Off.)
 Mobile No : 9810090974

 --
--

 
 A transcendentalist engaged in auspicious activities does not meet with
 destruction either in this world or in the spiritual world; one who does
 good,
 is never overcome by evil.
 --
--

 



 Mladen
 Gogala   To: Multiple recipients of
list ORACLE-L [EMAIL PROTECTED]
 [EMAIL PROTECTED]cc:
 ading.comSubject: RE: Connect
sys/[EMAIL PROTECTED] as sysdba  E-Business
 Sent by:  suite
 [EMAIL PROTECTED]
 ity.com


 09/12/03 07:44
 PM
 Please respond
 to ORACLE-L






 You should set remote_os_authent and remote_os_roles  to true, otherwise
 RMAN will not be able to connect to the remote isntance as
 sysdba. On the other hand, you might want to reconsider it, because that
 would open your instance wide to the various forms of network
 attacks.


 --
 Mladen Gogala
 Oracle DBA
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
  Jack van Zanen
  Sent: Friday, September 12, 2003 4:29 AM
  To: Multiple recipients of list ORACLE-L
  Subject: Connect sys/[EMAIL PROTECTED] as sysdba  E-Business suite



  Hi All,





  I have seen some weird behaviour and must have been searching in the
wrong
  places.


  When logging in to a 9i RAC environment using the syntax
  sys/[EMAIL PROTECTED] as sysdba it works fine at the primary instance but
  reports invalid username/password at the secondary instance.


  Is this normal behaviour?





  When connecting to an e-business suite(11.5.9?) database I noticed that
my
  sessions (ODBC  SQL*Plus) were executing the suites portal login
  procedure.In fact all connections did this.


  Also my ODBC connection timed out on tables owned by a none suite schema.


  Is there a database logon trigger on e-business suite that forces every
  connection through the suites security mechanism or something?


  (I have never worked with e-business so I know nothing about it, I just
  installed some monitor tools repository in this database and could not
get
  to the data)





  TIA






  Jack




 Note:
 This message is for the named person's use only.  It may contain
 confidential, proprietary or legally privileged information.  No
 confidentiality or privilege is waived or lost by any mistransmission.  If
 you receive this message in error, please immediately delete it and all
 copies of it from your system, destroy any hard copies of it and notify
the
 sender.  You must not, directly or indirectly, use, disclose, distribute,
 print, or copy any part of this message if you are not the intended
 recipient. Wang Trading LLC and any of its subsidiaries each reserve the
 right to monitor all e-mail communications through its networks.  Any
views
 expressed in this message are those of the individual sender, except where
 the message states otherwise and the sender is authorized to state them to
 be the views of any such entity.





 DISCLAIMER: The information contained in this message is intended only and
 solely for the addressed individual or entity indicated in this message
and
 for the exclusive use of the said addressed individual or entity indicated
 in this message (or responsible for delivery of the message to such
person)
 and may contain legally privileged and confidential information belonging
 to Tata Consultancy Services. It must not be printed, read, copied,
 disclosed, forwarded, distributed or used (in whatsoever manner) by any
 person other than the addressee. Unauthorized use, disclosure or copying
is
 strictly prohibited and may constitute unlawful act and can possibly
 attract legal action, civil and/or criminal. 

Re: Connect sys/password@database as sysdba E-Business suite

2003-09-12 Thread Tanel Poder
 You are not right. SYSDBA is authenticated through the operating system.
You
 must have a DBA role
 to be a SYSDBA, be it local or remote. To allow authentication of a remote

You probably meant SYSDBA privilege to be a SYSDBA? DBA role is irrelevant
here.


Tanel.


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Tanel Poder
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


RE: Connect sys/password@database as sysdba E-Business suite

2003-09-12 Thread Mladen Gogala
You're right. I made a mess of this. I'm busy, and I'll stay away from the
list
today.

--
Mladen Gogala
Oracle DBA 



 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
 Behalf Of Tanel Poder
 Sent: Friday, September 12, 2003 1:05 PM
 To: Multiple recipients of list ORACLE-L
 Subject: Re: Connect sys/[EMAIL PROTECTED] as sysdba  
 E-Business suite
 
 
  You are not right. SYSDBA is authenticated through the operating 
  system.
 You
  must have a DBA role
  to be a SYSDBA, be it local or remote. To allow authentication of a 
  remote
 
 You probably meant SYSDBA privilege to be a SYSDBA? DBA 
 role is irrelevant here.
 
 
 Tanel.
 
 
 -- 
 Please see the official ORACLE-L FAQ: http://www.orafaq.net
 -- 
 Author: Tanel Poder
   INET: [EMAIL PROTECTED]
 
 Fat City Network Services-- 858-538-5051 http://www.fatcity.com
 San Diego, California-- Mailing list and web hosting services
 -
 To REMOVE yourself from this mailing list, send an E-Mail message
 to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') 
 and in the message BODY, include a line containing: UNSUB 
 ORACLE-L (or the name of mailing list you want to be removed 
 from).  You may also send the HELP command for other 
 information (like subscribing).
 




Note:
This message is for the named person's use only.  It may contain confidential, 
proprietary or legally privileged information.  No confidentiality or privilege is 
waived or lost by any mistransmission.  If you receive this message in error, please 
immediately delete it and all copies of it from your system, destroy any hard copies 
of it and notify the sender.  You must not, directly or indirectly, use, disclose, 
distribute, print, or copy any part of this message if you are not the intended 
recipient. Wang Trading LLC and any of its subsidiaries each reserve the right to 
monitor all e-mail communications through its networks.
Any views expressed in this message are those of the individual sender, except where 
the message states otherwise and the sender is authorized to state them to be the 
views of any such entity.

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Mladen Gogala
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).