Question Re: Connection to Oracle Database "as SYSDBA" not working in Technology Q&A

Connection to Oracle Database "as SYSDBA" not working

Former Member — Fri, 10 Aug 2018 12:49:09 GMT

Good Afternoon,

We have a strange issue where we cannot find a solution.

Our system was migrated to a new sever one month ago (Windows Server 2016 / Oracle 12.2.01). Everything went fine and DB and SAP were running smooth.

But last night, exactly at midnight a problem occured. At 00:00 the last redo log backup could run, at 00:15 the next one failed because it could not login "AS SYSDBA".

We checked this then and saw that this is not working for any user:

sqlplus / as sysdba --> Not working
sqlplus system/*pw* --> Working
sqlplus system/*pw* AS SYSDBA --> Not working

Error is always the same:

ORA-01017: invalid username/password; logon denied

We checked note 480266 but everything is fine:

<SID>adm is part of ORA_DBA and also ORA_<SID>_DBA
SQLNET.AUTHENTICATION_SERVICES = (NTS) in sqlnet.ora
Environment variables are set correctly
TNS config seems to be correct (worked for the last 4 Weeks, SAP still running smoth)
<SID>adm is not locked or disabled
Connection to AD Server seems to be fine

We saw that there is no orapwd File, but as we understand sqlplus / as sysdba should work anyway localy on the server.

Any other idea what the problem could be?

Thans and best Regards

Re: Connection to Oracle Database "as SYSDBA" not working

janos_mucsi-besze — Fri, 10 Aug 2018 13:43:22 GMT

Hi Pascal,

try removing "SQLNET.AUTHENTICATION_SERVICES = (NTS)" from the sqlnet.ora. Sounds odd, but looks like this is causing the problems.

Regards,

János

Re: Connection to Oracle Database "as SYSDBA" not working

Former Member — Fri, 10 Aug 2018 14:01:22 GMT

Hi Janos,

Thanks a lot for your help. Unfortunatly I does not help to remove this from sqlnet.ora (in usr/sap/profile/oracle and also network/admin) and restart the listener, error message is still the same.

Best Regards

Pascal

Re: Connection to Oracle Database "as SYSDBA" not working

Former Member — Fri, 10 Aug 2018 14:08:02 GMT

Another thing, I just tried to do a redo log backup with BRT$ADM. But also here we got an similar message:

BR0301E SQL error -1017 at location BrInitOraCreate-2, SQL statement:
'CONNECT BRT$ADM/******** AT PROF_CONN IN SYSOPER MODE'
ORA-01017: invalid username/password; logon denied

Re: Connection to Oracle Database "as SYSDBA" not working

JamesZ — Wed, 15 Aug 2018 05:16:02 GMT

Hi Pascal,

I saw this several times in windows, especially in active directory. The point is the "windows" is not able to verify the os user somehow, because sqlplus /as sysdba, give all AUTHENTICATION to windows.

Could you please try to reboot os and see whether it helps?

Best regards,
James

Re: Connection to Oracle Database "as SYSDBA" not working

Reagan — Sat, 01 Sep 2018 21:07:32 GMT

You must be missing some groups specific to Oracle in the <SID>adm user. If all the ORA_ relevant groups have been added to the user then try add the <SID>adm user to the Administrators group and check if that helps.

Re: Connection to Oracle Database "as SYSDBA" not working

Former Member — Mon, 03 Sep 2018 11:23:57 GMT

Thanks everybody for your answers. The problem semmed to be related to some other oracle bugs. Windows groups and sqlnet was fine. After applying corrections from note 2668197 and restarting the database it worked fine as before.

BR
Pascal