I am running into an odd situation with adding windows domain group to ORA_DBA group to grant sysdba privileges.

I am getting an invalid username/password - logon denied error while connecting to an instance in Oracle 12c.

But, if I add my individual windows account to ORA_DBA group, I am able to login just fine.

I have tried to research for an entire day but haven't had much luck. Any help would be greatly appreciated.

Note : The windows domain group is part of the Administrator group on the server.

This is how my sqlnet.ora file looks like:

  • Need more details. Works for me (Windows 2012 R2 Domain Controller and database server, database), see: pastebin.com/V1EXbbXJ All default settings. – Balazs Papp Nov 6 '16 at 13:26
  • Thanks @BalazsPapp for testing it out. Could you please try to create a Domain group in Active Directory and adding a few users to it, and then try testing it again? I appreciate your help. Also, please let me know what more details should I include. – FutbolFan Nov 14 '16 at 19:53

Most likely you can't.

As part that oracle documentation is clear, you have to be part of the ORA_DBA group to have the sysdba privilege with your Windows account. Being in a subgroup means that you have all the privileges of the parent group without being part of it As the same logic of oracle privileges and roles.

  • Thanks for your response, Walid. I am not sure if I understand what documentation you are referring. Can you please add that here? – FutbolFan Nov 3 '16 at 21:33
  • link – Walid El Oubaha Nov 3 '16 at 21:42
  • Unfortunately, this documentation doesn't answer much of my question. I have already gone through this documentation twice. I appreciate it though! – FutbolFan Nov 4 '16 at 18:16
  • Let make this clear : if i ask you this : assuming that user A is a member of subgroup that belong to ORA_DBA group, is user A a member of ORA_DBA? – Walid El Oubaha Nov 4 '16 at 20:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.