I wrote a blog titled "error in logging on to new users using sqlplusassysdba. csdn. netbisalarticledetails9285087 today I happened to see a recommended post "create a user (non-oracle). Operating System verification is not available if dba is not assigned to the group." www. itpub. netthread
I have written a blog "new user using sqlplus/as sysdba login error" http://blog.csdn.net/bisal/article/details/9285087 today happened to see a recommended post "create a user (non-oracle ), operating system verification http://www.itpub.net/thread cannot be used without the dba's group
Before I wrote a blog "new users use sqlplus/as sysdba login error" http://blog.csdn.net/bisal/article/details/9285087
Today, I happened to see a recommended post "create a user (non-oracle), do not use operating system verification if dba is not assigned to the group."
Http://www.itpub.net/thread-1811278-1-1.html. It is also the process that is handled according to the actual operation.
To sum up, you need to perform the following operations to verify logon using a non-oracle operating system:
1. Set related environment variables;
2. Add the user to the dba group;
3. You have the execution permission for the $ ORACLE_HOME related path (especially bin) file.
However, when I debugged A Test Database last time and created a non-Oracle Installation user, I also tried the above method, but it didn't work. I'm sure there are some problems, so I have to wait for a while and try again.
To:
Operating system verification is not supported when you create a new user (not an oracle user) that does not assign the dba to a group.
[Grid @ dbaup ~] $ Id
Uid = 1002 (grid) gid = 1003 (grid) group = 1003 (grid)
[Grid @ dbaup ~] $ Export ORACLE_BASE =/u01/oracle
[Grid @ dbaup ~] $ Export ORACLE_HOME = $ ORACLE_BASE/product/11.0.2.1
[Grid @ dbaup ~] $ Export ORACLE_SID = gbk11g
[Grid @ dbaup ~] $ Export PATH = $ PATH: $ HOME/bin: $ ORACLE_HOME/bin
[Grid @ dbaup ~] $ Export LD_LIBRARY_PATH = $ ORACLE_HOME/lib:/usr/lib
-- SQLNET. AUTHENTICATION_SERVICES = beq by default in linux, which can be used for operating system and password verification. none is set below.
[Grid @ dbaup ~] $ Cat/u01/oracle/product/11.0.2.1/network/admin/sqlnet. ora
# Sqlnet. ora NetworkConfiguration File:/u01/oracle/product/11.0.2.1/network/admin/sqlnet. ora
# Generated byOracle configuration tools.
NAMES. DIRECTORY_PATH = (TNSNAMES, EZCONNECT)
ADR_BASE =/u01/oracle
-- ORA-01031 for operating system authentication: insufficient privileges
[Grid @ dbaup ~] $ Sqlplus/as sysdba
SQL * Plus: Release11.2.0.1.0 Production ction on Tue Aug 20 21:39:04 2013
Copyright (c) 1982,2009, Oracle. All rights reserved.
ERROR:
ORA-01031: insufficient privileges
Enter user-name:
Open a new window (window 2) to add a dba additional group for the grid user
[Root @ dbaup ~] # Idgrid
Uid = 1002 (grid) gid = 1003 (grid) group = 1003 (grid), 1001 (dba)
Log on to the gird user again in window 1, and check that the grid user has an additional dba group.
[Gird @ dbaup ~] $ Exit
Logout
[Root @ dbaup bin] # su-grid
[Grid @ dbaup ~] $ Id
Uid = 1002 (grid) gid = 1003 (grid) group = 1003 (grid), 1001 (dba)
-- Reset Environment Variables
[Grid @ dbaup ~] $ Export ORACLE_BASE =/u01/oracle
[Grid @ dbaup ~] $ Export ORACLE_HOME = $ ORACLE_BASE/product/11.0.2.1
[Grid @ dbaup ~] $ Export ORACLE_SID = gbk11g
[Grid @ dbaup ~] $ Export PATH = $ PATH: $ HOME/bin: $ ORACLE_HOME/bin
[Grid @ dbaup ~] $ Export LD_LIBRARY_PATH = $ ORACLE_HOME/lib:/usr/lib
-- Logon to the operating system is verified successfully.
[Grid @ dbaup ~] $ Sqlplus/as sysdba
SQL * Plus: Release11.2.0.1.0 Production ction on Tue Aug 20 21:42:36 2013
Copyright (c) 1982,2009, Oracle. All rights reserved.
Connected:
Oracle Database 11 gEnterprise Edition Release 11.2.0.1.0-64bit Production
With thePartitioning, OLAP, Data Mining and Real Application Testing options
SQL>
Why is this happening?
[Root @ dbaup ~] # Find/-group dba
/U01/oracle/product/11.0.2.1/dbaup_gbk11g/sysman/log
/U01/oracle/product/11.0.2.1/dbaup_ora11g/sysman/log
Find: "/proc/20062/task/20062/fd/5": the file or directory does not exist.
Find: "/proc/20062/task/20062/fdinfo/5": the file or directory does not exist.
Find: "/proc/20062/fd/5": the file or directory does not exist.
Find: "/proc/20062/fdinfo/5": the file or directory does not exist.
-- The/u01/oracle/product/11.0.2.1/dbaup_gbk11g/sysman/log group is dba, and other has no permissions.
[Root @ dbaup ~] # Ls-l/u01/oracle/product/11.0.2.1/dbaup_gbk11g/sysman/log
Total usage 5604
-Rw-r -----. 1 oracleoinstall 0 June 3 22: 19 emagentfetchlet. log
-Rw-r -----. 1 oracleoinstall 0 June 3 22: 19 emagentfetchlet. trc
-Rw-r -----. 1 oracleoinstall 956 July 29 17:04 emagent. log
-Rw-r -----. 1 oracleoinstall 39430 July 29 17:10 emagent_perl.trc
-Rw-r -----. 1 oracleoinstall 757974 July 29 18:49 emagent. trc
-Rw-r -----. 1 oracleoinstall 11794 July 29 18:49 emdb. nohup
-Rw-r -----. 1 oracleoinstall 0 June 3 22: 18 emdctl. log
-Rw-r -----. 1 oracleoinstall 3441 17:04 emdctl. trc
-Rw-r -----. 1 oracleoinstall 2443250 July 29 18:49 emoms. log
-Rw-r -----. 1 oracleoinstall 2443250 July 29 18:49 emoms. trc
-Rw-r -----. 1 oracleoinstall 0 June 3 22: 21 nfsPatchPlug. log
Drwxr -----. 2 oracleoinstall 4096 June 3 22: 20 pafLogs
-Rw-r -----. 1 oracleoinstall 0 June 3 22: 19 patchAgtStPlugin. log
-Rw-r -----. 1 oracleoinstall 5279 June 3 22: 19 secure. log
[Root @ dbaup ~] # Ls-ld/u01/oracle/product/11.0.2.1/dbaup_gbk11g/sysman/log
Drwxr-x ---. 3 oracle dba 4096 July 29 17:04/u01/oracle/product/11.0.2.1/dbaup_gbk11g/sysman/log
Conclusion: If operating system verification is enabled for users outside of oracle, you must join the dba group before operating system verification can be used.