Solved

WIN NT: CONNECT INTERNAL without a password

Posted on 1998-08-14
10
651 Views
Last Modified: 2008-02-01
My backup scripts shutdown the database before making a
full offline backup. The problem is that I have to connect
as INTERNAL providing a password but I do not want to let it
written in my scripts (which are supposed to run at midnight
under user Administrator in Windows NT).

Setting DBA_AUTHORIZATION to BYPASS in Windows NT registry
eliminates the need for a password to connect as INTERNAL
(even when there is a password file). I do not want to
let DBA_AUTHORIZATION set to BYPASS all the time, but just
for the duration of the backup. I have tried to set it as an
environmental variable in the backup.bat file, but it did
not work.

I know that it is simpler in Unix: if the user running
Server Manager belongs to group DBA there is no obligation
to provide a password for INTERNAL.

So the questions are:
1) Is there any environmental variable which allows to bypass
   the password for internal and which can be set from whithin
   my scripts?

2) Is there any way to momentarily change the value of
   DBA_AUTHORIZATION in the registry without the assistance
   of the registry editor?

3) Does Oracle Workgroup Server for Windows NT provide a sort
   of "DBA group" feature similar to that in Unix?

Thanks in advance.
0
Comment
Question by:amonteros
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
10 Comments
 
LVL 3

Expert Comment

by:junfeb
ID: 1081101
Why don't you try this -
Set the remote_login_passwordfile = none in your init.ora

make the ntuser belong to the ORA_ORCL_DBA group . This is equivalent of the sysdba
role in unix .

Then the user can run
svrmgr > connect / as sysdba

The global group equivalent of sysdba is ora_dba.

The user with the sysdba authority can shut down the database and restart the database.


0
 

Author Comment

by:amonteros
ID: 1081102
I do most of my job from a remote PC running Oracle
Enterprise Manager. Setting REMOTE_LOGIN_PASSWORD_FILE to
NONE would not let me CONNECT INTERNAL from a remote PC.

Thanks anyway, junfeb.

0
 
LVL 3

Expert Comment

by:junfeb
ID: 1081103
What version of ORacle Database are you using on your NT?
0
SharePoint Admin?

Enable Your Employees To Focus On The Core With Intuitive Onscreen Guidance That is With You At The Moment of Need.

 
LVL 3

Expert Comment

by:junfeb
ID: 1081104
Please check out Pages 10-20 to 10-21 of your Oracle8 Enterprise edition - getting Started for Windows NT Manual for instructions .You can keep the remote_login_passwordfile setting to shared or Exclusive and be able to connect as internal from a remote client without a password. It still involves creating the new local group ORA_SID_DBA for one instance or a Global ORA_DBA for all instances.  If you don't have the manual, I can list out the exact instructions for you.

Thanks.
0
 

Author Comment

by:amonteros
ID: 1081105
  Oracle7 Server Release 7.3.3.3.0 - Production Release
   With the distributed option
   PL/SQL Release 2.3.3.3.1 - Production
0
 
LVL 2

Expert Comment

by:xiaodong
ID: 1081106
Easy.  All you need to do is create 2 .reg files for the two values for DBA_BYPASS registry key.  In your bacup script, run the .reg which set the bypass=true then do the backup, when you are done, run the .reg which set the bypass=false.  
(If you don't know how to create .reg file, please consult the NT on-line help or the help in registry editor)
0
 

Author Comment

by:amonteros
ID: 1081107
Thanks xiaodong, but I had already discovered that. This was the reason why I posted another question in Customer Service category (check it out) asking how I can cancel this question and get my points back.

Thanks again


0
 

Author Comment

by:amonteros
ID: 1081108
The solution is setting DBA_<SID>_AUTHORIZATION to BYPASS in the registry (the path is HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE) before the backup and reset it to any other value after the backup. One of the ways to do that is by means of 2 files, say before.reg and after.reg, and loading them at the rigth times. You cannot load it with "regedit xxx.reg" in a .BAT file due to be executed with some kind of scheduling system like "at" because regedit asks for an acknowledgement interactively. But you can use Pearl to load the xxx.reg files without a prompt.


0
 

Author Comment

by:amonteros
ID: 1081109
Sorry, I meant Perl instead of Pearl.
0
 
LVL 7

Accepted Solution

by:
linda101698 earned 150 total points
ID: 1081110
I'm posting the solution found by amonteros so the answer can be saved in the previously asked questions.

Linda Gardner
Customer Service @ Experts Exchange    

      The solution is setting DBA_<SID>_AUTHORIZATION to BYPASS in the
     registry (the path is HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE)
     before the backup and reset it to any other value after the backup. One of the
     ways to do that is by means of 2 files, say before.reg and after.reg, and
     loading them at the rigth times. You cannot load it with "regedit xxx.reg" in a
     .BAT file due to be executed with some kind of scheduling system like "at"
     because regedit asks for an acknowledgement interactively. But you can use
     Perl to load the xxx.reg files without a prompt.
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Working with Network Access Control Lists in Oracle 11g (part 2) Part 1: http://www.e-e.com/A_8429.html Previously, I introduced the basics of network ACL's including how to create, delete and modify entries to allow and deny access.  For many…
Configuring and using Oracle Database Gateway for ODBC Introduction First, a brief summary of what a Database Gateway is.  A Gateway is a set of driver agents and configurations that allow an Oracle database to communicate with other platforms…
This video shows how to copy a database user from one database to another user DBMS_METADATA.  It also shows how to copy a user's permissions and discusses password hash differences between Oracle 10g and 11g.
This video shows how to copy an entire tablespace from one database to another database using Transportable Tablespace functionality.
Suggested Courses

628 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question