Windows OS Authentication in 11g

Question:  :  I know that the remote_os_authent is deprecated, and I set it to TRUE anyway, bouncing the database and I get a ORA-1017.  

How can I establish OS Authentication in an 11g Windows environment?

Answer:   First,  Read these MOSC notes on Windows OS authentication connection in 11g:

•  MOSC Note: 456001.1 for workarounds and details on 11g

• MOSC Note: 60634.1 -  WIN: Setup O/S Authentication  

Starting in 11g, you can use Oracle Internet Directory (OID) for OS authentication in Windows.

OID is an LDAP compliant remote authentication mechanism, that uses the Windows Active Directory as repository . . . .  

 Windows is quite secure under a firewall!

But there may be a way to establish remote OS authentication in 11g Windows without OID.

 Try this first:

•  Set OS_AUTHENT_PREFIX=NULL

• Check your sqlnet.ora to set SQLNET.AUTHENTICATION_SERVICES=NTS

• Check that REMOTE_OS_AUTHENT=TRUE

• Make sure you create your user as "SQL> create user "MYUSER" identified externally;".  Remember to change the user ID from "OPS$MYDOMAIN\MYUSER" to plain "MYUSER" (all in uppercase)

•  Create The Windows user with full system privileges. On Windows, local users are created using the Computer Management dialog:
  
  (Start > Programs > Administrative Tools > Computer Management)

•  Domain users can be created in Windows Active Directory.

 ********************************************

Once a Window user ID identified externally, you should be able to connect via SQL*Plus without a password:

C:\oracle> set ORACLE_SID=MYSID  
C:\oracle> sqlplus / as sysdba  

The same is true for connecting to the RMAN catalog database:

 c:\oracle> rman target /