Connection to Oracle Database "as SYSDBA" not working

[#1]

Good Afternoon,

We have a strange issue where we cannot find a solution.

Our system was migrated to a new sever one month ago (Windows Server 2016 / Oracle 12.2.01). Everything went fine and DB and SAP were running smooth.

But last night, exactly at midnight a problem occured. At 00:00 the last redo log backup could run, at 00:15 the next one failed because it could not login "AS SYSDBA".

We checked this then and saw that this is not working for any user:

• sqlplus / as sysdba --> Not working
• sqlplus system/*pw* --> Working
• sqlplus system/*pw* AS SYSDBA --> Not working

Error is always the same:

ORA-01017: invalid username/password; logon denied

We checked note 480266 but everything is fine:

• <SID>adm is part of ORA_DBA and also ORA_<SID>_DBA
• SQLNET.AUTHENTICATION_SERVICES = (NTS) in sqlnet.ora
• Environment variables are set correctly
• TNS config seems to be correct (worked for the last 4 Weeks, SAP still running smoth)
• <SID>adm is not locked or disabled
• Connection to AD Server seems to be fine

We saw that there is no orapwd File, but as we understand sqlplus / as sysdba should work anyway localy on the server.

Any other idea what the problem could be?

Thans and best Regards

[Former Member · Accepted solution]

Thanks everybody for your answers. The problem semmed to be related to some other oracle bugs. Windows groups and sqlnet was fine. After applying corrections from note 2668197 and restarting the database it worked fine as before.

BR
Pascal

[Reagan]

You must be missing some groups specific to Oracle in the <SID>adm user. If all the ORA_ relevant groups have been added to the user then try add the <SID>adm user to the Administrators group and check if that helps.

[JamesZ]

Hi Pascal,

I saw this several times in windows, especially in active directory. The point is the "windows" is not able to verify the os user somehow, because sqlplus /as sysdba, give all AUTHENTICATION to windows.

Could you please try to reboot os and see whether it helps?

Best regards,
James

[Former Member]

Another thing, I just tried to do a redo log backup with BRT$ADM. But also here we got an similar message:

BR0301E SQL error -1017 at location BrInitOraCreate-2, SQL statement:
'CONNECT BRT$ADM/******** AT PROF_CONN IN SYSOPER MODE'
ORA-01017: invalid username/password; logon denied

[janos_mucsi-besze]

Hi Pascal,

try removing "SQLNET.AUTHENTICATION_SERVICES = (NTS)" from the sqlnet.ora. Sounds odd, but looks like this is causing the problems.

Regards,

János

[Former Member]

Hi Janos,

Thanks a lot for your help. Unfortunatly I does not help to remove this from sqlnet.ora (in usr/sap/profile/oracle and also network/admin) and restart the listener, error message is still the same.

Best Regards

Pascal