EUS with OVD 11g Integration: How to Register a DB with DBCA with a NonAdmin Account, i.e., a Different Account Other than the "cn=orcladmin" Superuser Account? (TNS-04411: Directory service: permission denied)
Last updated on SEPTEMBER 01, 2017
Applies to:Oracle Virtual Directory - Version 184.108.40.206 and later
Information in this document applies to any platform.
What group membership does a regular (non-administrator) LDAP user account object need in order to register databases using Database Configuration Assistant (DBCA) for Enterprise User Security (EUS) through Oracle Virtual Directory (OVD) 11g?
It is possible to register databases using a different account other than the "cn=orcladmin" superuser account?
For example: Realm name is dc=mycompany,dc=com, or dc=eusovd,dc=com if using the default OVD EUS setup.
When creating a user account object at that level (for example cn=user1,dc=mycompany,dc=com), what group should this user be added to in order to register a databases with DBCA?
After following RDBMS documentation:
Oracle® Database Net Services Administrator's Guide 11g Release 2 (11.2) E41945-03
Chapter 3 Managing Network Address Information
Section "Who Can Add or Modify Entries in the Directory Server"
And adding the user to the following groups:
Registering a DB with DBCA still fails with:
service. - TNS-04411: Directory service:
TNS-04411: Directory service: permission denied
caused by: oracle.net.ldap/NNFLException
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms