How to use a network resource with the system account[@more@]
Problem Description ------------------- After install of the Oracle rdbms software and the creation of a database. The created database uses the NT internal System account to run. When you try to use a network resource you get an error that the disk or resource is not accessable. This problem can occur using UTL_FILE or for example when enabling archiving to a remote disk. Solution Description -------------------- To enable access on a specific network resource for the system account do the following. Step 1. - Create the share on the node. Use a share name with a $ at the end of the name (which makes it a hidden share). This is for security purposes because in the next step we are disabling security for this share Step 2. - Disable the security for this share a. Start the registry editor regedt32.exe regedt32 is used in stead of regedit because we want to edit in ascii mode and not binary mode b. For Server, from the HKEY_LOCAL_MACHINE subkey, go to the key: SYSTEM CurrentControlSet Services LanmanServer Parameters For Workstation, from the HKEY_LOCAL_MACHINE subkey, go to the key: SYSTEM CurrentControlSet Services LanmanWorkstation Parameters c. Doubleclick the NullSessionShares value d. Now the name of the share we created can be added to the list. e. Reboot the machine After the reboot the share can be accessed by the Oracle process on the other node. Explanation ----------- The problem is related to a security issue in Windows NT where the internal System account does not have any privilege on remote resources. The only way to bypass this is by running the Oracle Service under an Administrator account. This is not advisable because it can create other security problems. It is also not necessary to do this since Microsoft create a nice workaround for this problem in Windows NT/2000. References ---------- Microsoft: Q124184 - Service Running as System Account Fails Accessing Network Q122702 - Using the System Account as a Service in Windows NT 3.5 Q132679 - Local System Account and Null Sessions in Windows NT WARNING. DO NOT USE THIS CONSTRUCTION TO STORE DATAFILES ON REMOTE NODES !!! THIS WILL HAVE A HUGE IMPACT ON SYSTEM PERFORMANCE AND CAUSE UNDESIRED DATABASE CORRUPTIONS !!
Doc ID: Note:144485.1
来自 “ ITPUB博客 ” ,链接:https://blog.itpub.net/178357/viewspace-896208/ ,如需转载,请注明出处,否则将追究法律责任。