Our Database 12.1.0.2.0 is installed on a Windows Server 2012 member server which belongs to a domain (MYDOMAIN).
Oracle Service starts under a local account. We use a domain account (myuser) to administrate the database.
Normally this domain account can log in as "sysdba" in Oracle.
But after an uncertain time (5-30 days) after the start of Oracle Service
it cannot log in as sysdba anymore and following error message appears:
sqlplus / as sysdba
ERROR:
ORA-01017: invalid username/password; logon denied
Enter user-name:
At the same time sysdba login with password works:
sqlplus sys as sysdba
SQL*Plus: Release 12.1.0.2.0 Production on Mon Nov 14 10:41:14 2016
Copyright (c) 1982, 2014, Oracle. All rights reserved.
Enter password:
Connected to:
Oracle Database 12c Enterprise Edition Release 12.1.0.2.0 - 64bit Production
With the Partitioning, OLAP, Advanced Analytics and Real Application Testing options
SQL>
This problem occurs until Oracle Service is restarted and immediately after that the domain account can log in as "sysdba" in Oracle in the same CMD-Session.
If it works we see an audit entry in event log like this:
Audit trail: LENGTH: '175' ACTION :[6] 'COMMIT' DATABASE USER:[1] '/' PRIVILEGE :[6] 'SYSDBA' CLIENT USER:[12] 'MYDOMAIN/myuser' CLIENT TERMINAL:[11] 'MYCOMPUTER' STATUS:[1] '0' DBID:[10] 'XYZ' .
If it does not work the audit entry is like this:
Audit trail: LENGTH: '170' ACTION :[7] 'CONNECT' DATABASE USER:[1] '/' PRIVILEGE :[4] 'NONE' CLIENT USER:[6] 'myuser' CLIENT TERMINAL:[11] 'MYCOMPUTER' STATUS:[4] '1017' DBID:[10] 'XYZ' .
In first case the username is: MYDOMAIN/myuser, in second case only myuser.
In second case Oracle does not recognize the domain part of the username.
We tested this with a local account. The same error occurs.
The environment variable USERDOMAIN ist set correctly.
It seems like that the account under which Oracle-Service starts can not query user information after a while.
Are there any Windows settings that could cause this behaviour?
How does Oracle query operating system user information?
Thanks for any help.