Non-Oracle users use the operating system to verify login (/assysdba)

I wrote a blog titled "error in logging on to new users using sqlplusassysdba. csdn. netbisalarticledetails9285087 today I happened to see a recommended post "create a user (non-oracle). Operating System verification is not available if dba is not assigned to the group." www. itpub. netthread

I have written a blog "new user using sqlplus/as sysdba login error" http://blog.csdn.net/bisal/article/details/9285087 today happened to see a recommended post "create a user (non-oracle ), operating system verification http://www.itpub.net/thread cannot be used without the dba's group

Before I wrote a blog "new users use sqlplus/as sysdba login error" http://blog.csdn.net/bisal/article/details/9285087

Today, I happened to see a recommended post "create a user (non-oracle), do not use operating system verification if dba is not assigned to the group."

Http://www.itpub.net/thread-1811278-1-1.html. It is also the process that is handled according to the actual operation.

To sum up, you need to perform the following operations to verify logon using a non-oracle operating system:

1. Set related environment variables;

2. Add the user to the dba group;

3. You have the execution permission for the $ ORACLE_HOME related path (especially bin) file.

However, when I debugged A Test Database last time and created a non-Oracle Installation user, I also tried the above method, but it didn't work. I'm sure there are some problems, so I have to wait for a while and try again.

To:

Operating system verification is not supported when you create a new user (not an oracle user) that does not assign the dba to a group.

[Grid @ dbaup ~] $ Id

Uid = 1002 (grid) gid = 1003 (grid) group = 1003 (grid)

[Grid @ dbaup ~] $ Export ORACLE_BASE =/u01/oracle

[Grid @ dbaup ~] $ Export ORACLE_HOME = $ ORACLE_BASE/product/11.0.2.1

[Grid @ dbaup ~] $ Export ORACLE_SID = gbk11g

[Grid @ dbaup ~] $ Export PATH = $ PATH: $ HOME/bin: $ ORACLE_HOME/bin

[Grid @ dbaup ~] $ Export LD_LIBRARY_PATH = $ ORACLE_HOME/lib:/usr/lib

-- SQLNET. AUTHENTICATION_SERVICES = beq by default in linux, which can be used for operating system and password verification. none is set below.

[Grid @ dbaup ~] $ Cat/u01/oracle/product/11.0.2.1/network/admin/sqlnet. ora

# Sqlnet. ora NetworkConfiguration File:/u01/oracle/product/11.0.2.1/network/admin/sqlnet. ora

# Generated byOracle configuration tools.

NAMES. DIRECTORY_PATH = (TNSNAMES, EZCONNECT)

ADR_BASE =/u01/oracle

-- ORA-01031 for operating system authentication: insufficient privileges

[Grid @ dbaup ~] $ Sqlplus/as sysdba

SQL * Plus: Release11.2.0.1.0 Production ction on Tue Aug 20 21:39:04 2013

Copyright (c) 1982,2009, Oracle. All rights reserved.

ERROR:

ORA-01031: insufficient privileges

Enter user-name:

Open a new window (window 2) to add a dba additional group for the grid user

[Root @ dbaup ~] # Idgrid

Uid = 1002 (grid) gid = 1003 (grid) group = 1003 (grid), 1001 (dba)

Log on to the gird user again in window 1, and check that the grid user has an additional dba group.

[Gird @ dbaup ~] $ Exit

Logout

[Root @ dbaup bin] # su-grid

[Grid @ dbaup ~] $ Id

Uid = 1002 (grid) gid = 1003 (grid) group = 1003 (grid), 1001 (dba)

-- Reset Environment Variables

[Grid @ dbaup ~] $ Export ORACLE_BASE =/u01/oracle

[Grid @ dbaup ~] $ Export ORACLE_HOME = $ ORACLE_BASE/product/11.0.2.1

[Grid @ dbaup ~] $ Export ORACLE_SID = gbk11g

[Grid @ dbaup ~] $ Export PATH = $ PATH: $ HOME/bin: $ ORACLE_HOME/bin

[Grid @ dbaup ~] $ Export LD_LIBRARY_PATH = $ ORACLE_HOME/lib:/usr/lib

-- Logon to the operating system is verified successfully.

[Grid @ dbaup ~] $ Sqlplus/as sysdba

SQL * Plus: Release11.2.0.1.0 Production ction on Tue Aug 20 21:42:36 2013

Copyright (c) 1982,2009, Oracle. All rights reserved.

Connected:

Oracle Database 11 gEnterprise Edition Release 11.2.0.1.0-64bit Production

With thePartitioning, OLAP, Data Mining and Real Application Testing options

SQL>

Why is this happening?

[Root @ dbaup ~] # Find/-group dba

/U01/oracle/product/11.0.2.1/dbaup_gbk11g/sysman/log

/U01/oracle/product/11.0.2.1/dbaup_ora11g/sysman/log

Find: "/proc/20062/task/20062/fd/5": the file or directory does not exist.

Find: "/proc/20062/task/20062/fdinfo/5": the file or directory does not exist.

Find: "/proc/20062/fd/5": the file or directory does not exist.

Find: "/proc/20062/fdinfo/5": the file or directory does not exist.

-- The/u01/oracle/product/11.0.2.1/dbaup_gbk11g/sysman/log group is dba, and other has no permissions.

[Root @ dbaup ~] # Ls-l/u01/oracle/product/11.0.2.1/dbaup_gbk11g/sysman/log

Total usage 5604

-Rw-r -----. 1 oracleoinstall 0 June 3 22: 19 emagentfetchlet. log

-Rw-r -----. 1 oracleoinstall 0 June 3 22: 19 emagentfetchlet. trc

-Rw-r -----. 1 oracleoinstall 956 July 29 17:04 emagent. log

-Rw-r -----. 1 oracleoinstall 39430 July 29 17:10 emagent_perl.trc

-Rw-r -----. 1 oracleoinstall 757974 July 29 18:49 emagent. trc

-Rw-r -----. 1 oracleoinstall 11794 July 29 18:49 emdb. nohup

-Rw-r -----. 1 oracleoinstall 0 June 3 22: 18 emdctl. log

-Rw-r -----. 1 oracleoinstall 3441 17:04 emdctl. trc

-Rw-r -----. 1 oracleoinstall 2443250 July 29 18:49 emoms. log

-Rw-r -----. 1 oracleoinstall 2443250 July 29 18:49 emoms. trc

-Rw-r -----. 1 oracleoinstall 0 June 3 22: 21 nfsPatchPlug. log

Drwxr -----. 2 oracleoinstall 4096 June 3 22: 20 pafLogs

-Rw-r -----. 1 oracleoinstall 0 June 3 22: 19 patchAgtStPlugin. log

-Rw-r -----. 1 oracleoinstall 5279 June 3 22: 19 secure. log

[Root @ dbaup ~] # Ls-ld/u01/oracle/product/11.0.2.1/dbaup_gbk11g/sysman/log

Drwxr-x ---. 3 oracle dba 4096 July 29 17:04/u01/oracle/product/11.0.2.1/dbaup_gbk11g/sysman/log

Conclusion: If operating system verification is enabled for users outside of oracle, you must join the dba group before operating system verification can be used.