Arup , the procedure you gave is correct and works fine.
I tried it out on win32 with 9.2.0.1.0.
But I had to set SQLNET.AUTHENTICATION_SERVICES= (none) in sqlnet.ora
My fundamentals are really weak , so please forgive the stupid
questions : These steps create a database user who will be
authenticated by the operating system , right ? I assume that the
authenticating os is the one which runs the database  and not the os
running on the remote client machine .  If yes , then this would mean
that all these externally identified users would have to somehow log
onto the os of the database server.


However why does this procedure work only when remote_os_authent=true
?
I had posted this same question a while ago , did not get any
satisfactory answers , though people told me that
remote_os_authent=true is a security problem.

But it doesn't seem to work without that.
Any ideas of enabling "sqlplus /" without remote_os_authent=true ?
Wouldn't remote_os_authent=true allow remote client machines to
authenticate their users which can then log in  to the database as
long as they know the name of the externally authenticated username
and value of os_authent_prefix

----- Original Message -----
To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]>
Sent: Friday, June 20, 2003 01:15


Sure.

Just declare these in your init.ora

os_authent_prefix=OPS$
remote_os_authent=TRUE

bounce the database, add a user called OPS$<the Windows username>,
e.g. OPS$AK if your Windows login id is AK as

create user ops$ak identified externally

>From windows connect as "/@servicename", e.g. sqlplus /@service1

If it doesn't work, the OS user may be different. Use this query while
connected to the database from Windows cleint.

SQL> select sys_context('USERENV','OS_USER') from dual;

See what OS username comes up; use that instead.

HTH.

Arup Nanda
www.proligence.com


  ----- Original Message -----
  From: AK
  To: Multiple recipients of list ORACLE-L
  Sent: Thursday, June 19, 2003 1:10 PM
  Subject: oracle authentication from windows


  We want our client users ( forms user )  to just enter windows
password and then automatically able to get in to oracle .Is there a
way oracle can authenticate from windows ( or active directory ) .
enbadding password in runform.exe not an option .

  thanks,
  -ak

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: <[EMAIL PROTECTED]
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to