Connecting to Oracle Database with Windows domain account (4371086)

Connecting to Oracle Database with Windows domain account

Can a Windows Domain account be used to monitor an Oracle instance?

Errors like the following occur when trying to use a Windows Domain account for monitoring or when adding a new account in the Oracle agent installer

ERROR   [HOSTNAME-INSTANCE-lowPriorityPool-2-[DBO_Usability][]] com.quest.qsi.fason.oracle.collection.processor.DBOUsabilityResponseProcessor - Failed to get new connection on Usability-Response collection on instance  : [HOSTNAME-INSTANCE]. ORA-01017: invalid username/password; logon denied
- Profile:OracleProfile{host='HOSTNAME', instance='INSTANCE', username='mydomain\user.foglight', asSysDBA=true, ports='1521', useSSL=false, properties={oracle.jdbc.ReadTimeout=900000}}
com.quest.qsi.fason.core.errorhandling.AgentConnectionException: ORA-01017: invalid username/password; logon denied

 

Oracle's data dictionary is case sensitive. Oracle will abstract this case sensitivity from the user by converting all unquoted object names to upper case. Double-quotes object names will not undergo this transformation and will be stored in the data dictionary in the case they were entered.

The backslash (\) character used to separate a domain from a username is a special character. Special characters must also be escaped by double quotation marks (") around the special character or the around the parameter value containing the special character (i.e. domain\user)

Domains and Usernames in Windows are not case sensitive, but Active Directory and Windows is Case aware.

For maximum compatibility the Oracle permissions script included for the database agents are designed to convert usernames into Uppercase.

Workaround

The following steps have been found to work in a testing environment. 

When creating a database agent or entering the username, the domain and user account should be added into the Oracle database in uppercase. For example, "MYDOMAIN\USER.FOGLIGHT"

create user "MYDOMAIN\USER.FOGLIGHT" identified by password;
grant create session to "MYDOMAIN\USER.FOGLIGHT";

Then enter the same combination of the domain into the Oracle installer

Then when prompted for insufficient privileges, download the grant permissions script and run enter "MYDOMAIN\USER.FOGLIGHT" (uppercase with double quotes) when prompted for a username in SQL*Plus

The script should complete successfully

 PL/SQL procedure successfully completed.
 PL/SQL procedure successfully completed.

Then click the Skip button and continue with the installation.


The agent should be created and monitored.

Status

Enhancement ID FGDBORA-I-58 has been created to provide native support for Windows domain formatted usernames from within the Oracle installer including lowercase characters. This will be reviewed by Product Management for consideration in a future release of the Oracle cartridge.



 

FGDBORA-I-58