Solved

Windows Terminal Server - Oracle Logon Problem

Posted on 2009-07-15
6
1,549 Views
Last Modified: 2012-05-07
I have a Windows 2003 R2 server setup as an application terminal server.  I am able to connect to a remote Oracle DB as an administrator but not with a user in the "Users" group.  Also, if I establish a connection to the Oracle server as an administrator and then open another terminal server session with a "User" account I can establish a connection to the Oracle server.  If I disconnect the administrator session I loose the user session as well.

I am using Oracle 10g drivers on the server.  I setup a packet capture and do not even see any packets leaving the server when the logon fails.  The Oracle logon error is: Window Title: Connection Error - "Error on Connection to Oracle Database: - 2147467259?"

When the logon fails I get a Windows Security Event ID: 577, Type: Failure Aud, Category: Privilege Use.  In the Description under Privileges it indicates "SeCreateGlobalPrivilege".

It appears Windows/Oracle cannot make a new network connection out of the server as a User.  I do not have the Windows firewall on.  I have an X-Windows Client on this same server that works fine and it opens and closes ports.

Please help.

Thanks in advance!!!
0
Comment
Question by:mbrian7
  • 2
  • 2
6 Comments
 
LVL 40

Expert Comment

by:mrjoltcola
ID: 24865344
You are saying that the Windows 2003 server is just an Oracle client, correct? And you are logging into it with term services and then executing an app that connects remotely to an actual Oracle db server.

It is possible that you installed the Oracle client on the box as administrator, and the other user does not have access to the software install. Possibly it is simple a permissions problem on the client box itself. All users must be able to see the Oracle Home directory (read / execute perms).


0
 
LVL 47

Expert Comment

by:schwertner
ID: 24867321
Possibly because of port redirection there are no possibilyty to keep the ports open.
Possibly port get blocked for some reason.
The complex environment you use the more problems will you have.
0
 

Author Comment

by:mbrian7
ID: 24873736
mrjoltcola,
I have made sure the C:\Oracle folder has the permissions for the User group.  I even gave my "test" user ID full rights and forced inheritance on the Oracle folder as a test.  Still has the same reults.  Since this is a new setup I am going to roll back to a previous image of the server setup and try to reinstall Oracle.  Thanks.
0
 
LVL 40

Expert Comment

by:mrjoltcola
ID: 24873784
I'm sorry that I cannot help more. I don't quite understand your configuration, it sounds a bit complex but perhaps it was just my inability to understand the explanation. I have not seen that error before but it seems like an OS config or security issue, not an Oracle issue. Good luck.

0
 

Accepted Solution

by:
mbrian7 earned 0 total points
ID: 24907447
I finally found a couple of articles that reference what I am seeing.  Not exactly the same problem but the fix is the same. Thanks to ArildS on this site.

http://www.experts-exchange.com/Databases/Oracle/Q_21572054.html and http://support.microsoft.com/default.aspx?kbid=821546 .

Assign the "Create global objects" user right to the non-Administrator account.

1. Click Start, point to Programs, point to Administrative Tools, and then click Local Security Policy.
2. Expand Local Policies, and then click User Rights Assignment.
3. In the right pane, double-click Create global objects.
4. In the Local Security Policy Setting dialog box, click Add.
5. In the Select Users or Group dialog box, click the user account that you want to add, click Add, and then click OK.
6. Click OK.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Cursors in Oracle: A cursor is used to process individual rows returned by database system for a query. In oracle every SQL statement executed by the oracle server has a private area. This area contains information about the SQL statement and theā€¦
Using SQL Scripts we can save all the SQL queries as files that we use very frequently on our database later point of time. This is one of the feature present under SQL Workshop in Oracle Application Express.
This video shows how to copy a database user from one database to another user DBMS_METADATA.  It also shows how to copy a user's permissions and discusses password hash differences between Oracle 10g and 11g.
This video explains what a user managed backup is and shows how to take one, providing a couple of simple example scripts.

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question