Use OS Level Authentication

badhri · Post by **badhri** » Mon Sep 29, 2003 11:37 am

Greetings,

What is the use of the "Use OS Level Authentication" checkbox in the Oracle OCI PLug-ins. How does that work?. Kindly let me know your thoughts

Thanks & regards,
Badhri ...

Badhrinath Krishnamoorthy
www.cognizant.com

ray.wurlod · Post by **ray.wurlod** » Mon Sep 29, 2003 5:47 pm

Next time you've got one of these stages open, click on the Help button. The description provided there is quite reasonable, imho.

Ray Wurlod
Education and Consulting Services
ABN 57 092 448 518

vmcburney · Post by **vmcburney** » Mon Sep 29, 2003 5:50 pm

Whenever I've seen that option in other products is means that the login to Oracle will use the network login that is running the process. This means you do not need to supply an Oracle login and password, it will attempt to use the network login and password, which is usually the user name you use to log into DataStage. I've found synchronised network and database logins to be a common practice with SQL Server implementations but not so common in Oracle.

Vincent McBurney
Data Integration Services
www.intramatix.com

Karthik · Post by **Karthik** » Wed Oct 01, 2003 9:06 pm

We are using ORA OCI8 stage to connect to Oracle 817, DS5.1

We were actually looking in to going in for OS Authentication, to cover the audit points raised for password being shown in datastage logs and wrapper script logs.

During our try, we found that enabling the OS Authentication ( checking the box ), would require the Oracle init parameter REMOTE_OS_AUTHEN to be true. Support guys had confirmed that the parameter need to be TRUE for OS Authen to work.

Enabling REMOTE_OS_AUTHEN would open more security concerns, even oracle documentation cautions using these feature.

We were forced to drop the idea of going in for os authentication, and now are trying to make the password type as encrypted, so that ****** is displayed, and password read and decrypted inside the job itself in the job control.

Hope this info helps.

Karthi

ukyrvd · Post by **ukyrvd** » Thu Dec 22, 2005 11:24 am

Sorry for bringing the old topic up ..

I am wondering if there is anything else that we need to change on datastage side other than

a) Check OS level authentication box
b) Enter DB name, leave ID/pswd fields
c) get the DBAs to setup ops$userID on the unix server and REMOTE_OS_AUTHEN = true

thanks in advance.

philolaos · Post by **philolaos** » Mon May 07, 2007 9:45 am

b) Enter DB name, leave ID/pswd fields

On a Job Server 7.5.2 running on Windows, you can't just left empty the User ID/Password fields. You need at least a blank character (or anything else!) in those fields. Other than that, it works!