Hi all.

On a customers db-server, we have a single Oracle service that should
be started automatically when the system boots.
This used to work well, but the machine has been moved into the
customers windows-domain, and the instance won't be started
automatically by the windows-service anymore.
- Note that the Windows-service as such is started and running.
- Manually starting via sqlplus & startup; works OK.
- startup via oradim ... also does _not_ work when the PC is in the
domain.

The registry settings and config files seem to be correct and no
obvious messages are reported to the log files (sqlnet.log, oradim.log)

After hours of trying, we moved the machine out of the windows-domain
again, and - voila - the automatic startup works again.

Are there known issues with automatic startup and Windows-domains on
Oracle 9i 2 ?

The strange thing is, there are other PCs with _exactly_ the same setup
as this, that also are in a domain, where it works.

Maybe something to do with active directory domains vs. NT domains ?

hope someone can shed light on this,
thanks in advance,
best regards,
Martin Trappel

On 21 Jun 2005 08:31:29 -0700, "Martin T."
<bilbothebagginsbab5@freenet.de> wrote:

>Are there known issues with automatic startup and Windows-domains on
>Oracle 9i 2 ?
>
>The strange thing is, there are other PCs with _exactly_ the same setup
>as this, that also are in a domain, where it works.
>
>Maybe something to do with active directory domains vs. NT domains ?

More likely with not adhering to the installation instructions and
installing and/or running Oracle under a domain administrator account,
instead of the local administrator account.


--
Sybrand Bakker, Senior Oracle DBA

On Tue, 21 Jun 2005 08:31:29 -0700, Martin T. interested us by writing:

>
> Are there known issues with automatic startup and Windows-domains on
> Oracle 9i 2 ?
>
> The strange thing is, there are other PCs with _exactly_ the same setup
> as this, that also are in a domain, where it works.
>
> Maybe something to do with active directory domains vs. NT domains ?

Sounds suspiciously like a security issue. Is the startup controlled by a
local administrator or a domain administrator?

--
Hans Forbrich
Canada-wide Oracle training and consulting
mailto: Fuzzy.GreyBeard_at_gmail.com
*** I no longer assist with top-posted newsgroup queries ***

On 21 Jun 2005 08:31:29 -0700, "Martin T."
<bilbothebagginsbab5@freenet.de> wrote:

....
>Are there known issues with automatic startup and Windows-domains on
>Oracle 9i 2 ?

In general it's always been a pain in my experience. A RAC node
service nearly always gets created to start the process but not the
full service, so I have to oradim remove and oradim create again. In
your case (in domain fails, out of domain works) did you re-enter the
user/password in the services login, selecting the apparent-same user
from the domain drop list? I assume you did but just want to be
complete.

In one location we gave up and went for a net start script instead,
but this tends to be specific to RAC where Oracle knows the auto
startup fails (interconnect not up when the CM is trying to chatter).

Windows = pane!


--
New anti-spam address cmylod at despammed dot com

Sybrand Bakker wrote:
> On 21 Jun 2005 08:31:29 -0700, "Martin T."
> <bilbothebagginsbab5@freenet.de> wrote:
>
> >Are there known issues with automatic startup and Windows-domains on
> >Oracle 9i 2 ?
> >
> >The strange thing is, there are other PCs with _exactly_ the same setup
> >as this, that also are in a domain, where it works.
> >
> >Maybe something to do with active directory domains vs. NT domains ?
>
> More likely with not adhering to the installation instructions and
> installing and/or running Oracle under a domain administrator account,
> instead of the local administrator account.
>
Hmm ... The setup was done under local administrator and we haven't
changed any user settings for the service, so it seems likely (it's a
remote site I have no access to at the moment) it's still running under
local/system.

Maybe I should RTFM, but I'm really kind of a backup who's also
researching into this issue
Btw. - any FM to read about recommended user to run the
OracleServiceSID under?

thanks,
best regards,
Martin

Colum Mylod wrote:
> On 21 Jun 2005 08:31:29 -0700, "Martin T."
> <bilbothebagginsbab5@freenet.de> wrote:
>
> ...
> >Are there known issues with automatic startup and Windows-domains on
> >Oracle 9i 2 ?
>
> In general it's always been a pain in my experience. A RAC node
> service nearly always gets created to start the process but not the
> full service, so I have to oradim remove and oradim create again.

I must admit I hear "Oracle RAC" for the first time here, and don't
really have a clue what 'Real Application Cluster's have to do with
this. (no cynicism - I'm just no Oracle expert - more of an absolute
newbie

> In
> your case (in domain fails, out of domain works) did you re-enter the
> user/password in the services login, selecting the apparent-same user
> from the domain drop list? I assume you did but just want to be
> complete.
>
No - we didn't change any login credentials for the OracleServiceSID
.... my guess is, it's still running under local/system.
What we've done though is to delete / recreate the service with oradim
under local Administrator.

> In one location we gave up and went for a net start script instead,
> (...)

We are going to do this via a monitor service for the db ... i.e. when
the instance is idle, we will invoke a script that startups it.

>
> Windows = pane!
>
.... absolutely But that's what we've got.


thanks,
best regards,
Martin

Take a look at your Local Groups, in particular
OraDBA, and see which accounts are members of it.
Add domain or local administrator (which ever is
missing).

Check sqlnet.ora - iirc, it should have the following:
SQLNET.AUTHENTICATION_SERVICES=NTS
in order to prevent 'Not enough privileges' with
remote_login_passwordfile=exclusive

--
Regards,
Frank van Bortel

Sybrand Bakker wrote:
> On 21 Jun 2005 08:31:29 -0700, "Martin T."
> <bilbothebagginsbab5@freenet.de> wrote:
>
>
>>Are there known issues with automatic startup and Windows-domains on
>>Oracle 9i 2 ?
>>
>>The strange thing is, there are other PCs with _exactly_ the same setup
>>as this, that also are in a domain, where it works.
>>
>>Maybe something to do with active directory domains vs. NT domains ?
>
>
> More likely with not adhering to the installation instructions and
> installing and/or running Oracle under a domain administrator account,
> instead of the local administrator account.
>
>
> --
> Sybrand Bakker, Senior Oracle DBA

Funny thing, you still keep on saying that.

The installation Documentation that shipped with 9i (download version) states:

<quote>
Before you install 9i
[...]
4. Log on as a member of the Administrators group to the computer on which to install
Oracle components. Log on as a member of the Domain Administrators group if you are
installing on a Primary Domain Controller (PDC) or a Backup Domain Controller (BDC).
</quote>

Oh dear, they even don't discourage to install Oracle on a PDC or BDC, although if you
are in the right frame of mind, you wouldn't do that of course. I think the only reason
they are explicit about this, is that there is no *Local* Administrators Group on a PDC
or BDC. The AD is as local as it can get.

But the point is, it doesn't state to use *the* local administrator account but a member
of the Administrators group, which incidentaly can be any Domain User if you like. And
for certain requirements you need the instance to run under a domain account e.g. if you
want to use UNC-Paths to store RMAN BAckups.

Now you probably meant all this. But then please use your wording with caution because
to someone with less experience they are misleading.


Regards,
Holger

Frank van Bortel wrote:
> Take a look at your Local Groups, in particular
> OraDBA, and see which accounts are members of it.
> Add domain or local administrator (which ever is
> missing).
>
Local admin is member of the ORA_DBA group (this is the only member)

Note that our OracleServiceSID is running under local System ... is
this something that is not recommended or that could create known
problems?

> Check sqlnet.ora - iirc, it should have the following:
> SQLNET.AUTHENTICATION_SERVICES=NTS
> in order to prevent 'Not enough privileges' with
> remote_login_passwordfile=exclusive
>
Both settings are there.

thanks,
bestr regards,
Martin

Martin T. wrote:
> Frank van Bortel wrote:
>
>>Take a look at your Local Groups, in particular
>>OraDBA, and see which accounts are members of it.
>>Add domain or local administrator (which ever is
>>missing).
>>
>
> Local admin is member of the ORA_DBA group (this is the only member)
>
> Note that our OracleServiceSID is running under local System ... is
> this something that is not recommended or that could create known
> problems?
>

Add your Domain admin to the ORADBA group - that account is checked
when there's a "connect / as sysdba". Which is, I think, what happens
when the database needs to be mounted and opened.

Alternatively, use a 'login as', instead of the system account, and
log on as local administrator
--
Regards,
Frank van Bortel