Operating system authentication in windows

Operating system authentication in windows has recently learned Oracle by myself, if you see the OS _authent_prefix parameter, you can see the official explanation of Property DescriptionParameter type StringSyntax OS _AUTHENT_PREFIX = authentication_prefixDefault value OPS $ Modifiable No OS _AUTHENT_PREFIX is the prefix that Oracle uses to authorize. Oracle adds the value of this parameter to the name and password of the operating system user. When a connection request is attempted, Oracle compares the prefixed username with Oracle usernames in the database. www.2cto.com when a connection is attempted to be established, oracle will compare whether the operating system username with the prefix is consistent with the username in the database. The default value of this parameter is OPS $ for backward compatibility with previous versions. however, you might prefer to set the prefix value to "" (a null string), thereby eliminating the addition of any prefix to operating system account names. the default value of this parameter is OPS $, but it can be changed to "", so that the operating system user name and database user name can be consistent without the prefix. The following describes how to use this parameter to verify the operating system: (1) windows xp SP3ORACLE VERSION: 10.2.0.1 first: add this string value in the registry [HKEY_LOCAL_MACHINE \ SOFTWARE \ ORACLE \ Key_OraDb10g_home1] OSAUTH_PREFIX_DOMAIN = FALSE (value) (2) SQLNET. set in ORA: SQLNET. AUTHENTICATION_SERVICES = (ETS) (3) modify the initialization parameter OS _authent_prefix to "" [SQL] SQL> alter system set OS _authent_prefix = ''scope = spfile; the system has changed. The database www.2cto.com SQL> shutdown immediate has been disabled. The database has been detached. The ORACLE routine has been disabled. The SQL> startup ORACLE routine has been started. Total System Global Area 608174080 bytes Fixed Size 1250404 bytes Variable Size 155192220 bytes Database Buffers 444596224 bytes Redo Buffers 7135232 bytes Database load is complete. The database has been opened. (4) log on to windows xp SQL> connect sys/admin as sysdba as ADMINISTRATOR. Create a database user: [SQL] SQL> show parameter OS _authent_prefix www.2cto.com name type value =----------- unzip OS _authent_prefix string SQL> create user dylan identified externally; the user has created. SQL> grant connect, resource to dylan; authorization successful. (5) Create an operating system user dylan. (6) switch the user to dylan, open cmd and enter the following command to view the effect: [SQL] C: \ Documents ents and Settings \ Administrator> sqlplus/SQL * Plus: release 10.2.0.1.0-Production on Sunday August 19 22:04:01 2012 Copyright (c) 1982,200 5, Oracle. all rights reserved. connect to: Oracle Database 10g Enterprise Edition Release 10.2.0.1.0-Production With the Partitioning, OLAP and Data Mining options www.2cto.com SQL> show user USER is "DYLAN" (7) in general, after a database user logs on, Even if you do not have the alter user permission, you can change your password. However, if you log on to the database using this authentication method, you cannot (without confirmation, just the conclusion of the attempt failure, but think carefully, this requirement is also reasonable ). [SQL] SQL * Plus: Release 10.2.0.1.0-Production on Sunday August 19 22:22:10 2012 Copyright (c) 1982,200 5, Oracle. all rights reserved. connect to: Oracle Database 10g Enterprise Edition Release 10.2.0.1.0-Production With the Partitioning, OLAP and Data Mining options SQL> show user USER: "DYLAN" SQL> alter user dylan identified by dylan; alter user dylan identified by dylan * 1st row error: ORA-01031: insufficient permission SQL> Conn scott/tiger is connected. SQL> alter user scott identified by tiger; the user has changed. SQL> select * from session_privs; www.2cto.com PRIVILEGE creates SESSION UNLIMITED TABLESPACE CREATE TABLE CREATE CLUSTER CREATE SEQUENCE CREATE PROCEDURE CREATE TRIGGER CREATE TYPE CREATE OPERATOR CREATE INDEXTYPE 10 rows have been selected. Note: Registry parameter OSAUTH_PREFIX_DOMAIN = FALSE is the key to using the operating system to authenticate database logon in WINDOWS. By default, this parameter is TRUE, this causes that the operating system Authentication database cannot be used to log on to the WIDNOWS environment! You must add this parameter to the Registry to use this method!