#72946 - 09/12/02 02:59 AM
Re: External Oracle DB - "Real Time" Connection - Thoughts and Id eas - View Forms
|
Member
Registered: 06/12/01
Posts: 909
|
**
Kern,
You did not say if your Oracle DB is NT based. Or if it is in the same NT domain. With those "ideas" on the table, I would suggest that a NT domain account should not be required. After all an Oracle instance running on Solars has no concept of "NT Authentication". However, If you have the tools to connect MSSQL to Oracle then I bet there is a way to pass an "Oracle" username and password to that tool. As far as I know the "ARS DB username" does not have to even match the "remote DB username".
What tool are you going to use to get MSSQL to talk to Oracle? (I think there are several out there, but I have not used any specifically. Maybe the rest of ARSList will produces some details about a few of them.)
-
Carey Matthew Black
Solution = People + Process + Tools
Fast, Accurate, Cheap.... Pick two.
-----Original Message-----
From: Kern Robert (SBA) [mailto:kernrobert@SIEMENS.COM]
Sent: Thursday, September 12, 2002 2:53 AM
To: ARSLIST@LISTSERV.QMXS.COM
Subject: External Oracle DB - "Real Time" Connection - Thoughts and Ideas - View Forms
**
Hello List!
we are using ARS5.01, running on a Win2k box with SQL and part of a Win2k domain and are currently evaluating one of the new features so the say (View Forms).
Our "wish list":
One of the new features of 5.01 we plan to use is the ability to connect do external DBs (Oracle in that case), by making use of Remedy's View Forms. However, as far as we understood the whole baby, in order to achieve that the ARAdmin user would have to be a domain user (not local user), in order to have the possibility to grant him access at the external DB (as I think that it is not possible to grant a local user (ARAdmin) rights at another server/db?).
Issue so to say:
Saying that, at the installation of the ARServer at the SQL Tab you would have to check "create ARAdmin as domain user". This would actually mean that a reall user is created at the domain (and therefore that is the reason that you would have to be logged in as domain administrator for that option)? Meaning that no existing one (priorly created) user could be choosen, as far as we understood the whole process that is. In addition, ok I am not sure on that one, you do not have an option (at least at that installation step), to change the name of the ARAdmin (the reason for wanting to do that would be like domain users have to be in line with naming conventions that are in place).
Problems that rise up (if the above said is correct):
- domain user may not be in line with naming policies
- installation option requires domain admin rights (big no, no, no from our domain admins =)
- domain user is created by installation from the tool (see above)
- no existing domain user can be selected
Alternatives:
There are other ways I could think of how to establish "Real Time" connections. One that might work I think, without view forms or ARAdmin as domain user, would be to import/export data lets say every hour and simply run escalations. That might also do the trick.
Another option may be, if the ARAdmin is a local user, to create another SQL Table at the ARBox and then grant the (local) ARAdmin User rights and then make use of view forms, by connection to the local DB at the ARServer.
Hmmmm, k. That are our first thoughts and impressions when looking at that new feature. I am not sure if the above said is all correct, but I would say that the documentation of that specific option is not that detailed (of course it still may be totally clear to everyone else, beside us =)
Thanks all in advance for any comments / feedback / help.
\^^/
(OO)
~~~~~~~~~~o~0o~()~o00o~~~~~~~~~~~~~
Robert
|
|
Top
|
|
|
|
|
#72947 - 09/12/02 04:08 AM
AW: External Oracle DB - "Real Time" Connection - Thoughts and Id eas - View Forms
[Re: ]
|
addict
Registered: 05/21/02
Posts: 413
|
**
Hello Carey and thanks for the response,
regarding your questions. The Oracle DB is running on Solaris and is part of the same NT domain. I have not been in touch with Oracle until yet and was not aware that any extra tool for connection is required.
Basically I thought that connecting to the Oracle DB by making use of the with V5 introduced "view forms" will handle the connection and wanted to check the requirments for making use of that feature (domain user or not, how to grant rights to ARAdmin user, ...).
Well, it does not seem to be that easy then =)
In terms of ARS SQL to xyz SQL. Connecting to "external SQL DB" (that is located at the same box as ARSDB) however with view forms did work with no problems, as I am then able to grant the local ARAdmin User rights (if the SQL DB would be on another box, to my understanding you then would not be able to grant rights to the ARAdmin user, if that one only exists as local user at another box. Then you would need ARAdmin to be a domain user, right? ...and then we are at the posted issues again...).
Everything not that easy =)
Robert
-----Ursprungliche Nachricht-----
Von: Black, Matt [mailto:matt.black@VERIZON.COM]
Gesendet: Donnerstag, 12. September 2002 14:59
An: ARSLIST@LISTSERV.QMXS.COM
Betreff: Re: External Oracle DB - "Real Time" Connection - Thoughts and Id eas - View Forms
**
Kern,
You did not say if your Oracle DB is NT based. Or if it is in the same NT domain. With those "ideas" on the table, I would suggest that a NT domain account should not be required. After all an Oracle instance running on Solars has no concept of "NT Authentication". However, If you have the tools to connect MSSQL to Oracle then I bet there is a way to pass an "Oracle" username and password to that tool. As far as I know the "ARS DB username" does not have to even match the "remote DB username".
What tool are you going to use to get MSSQL to talk to Oracle? (I think there are several out there, but I have not used any specifically. Maybe the rest of ARSList will produces some details about a few of them.)
-
Carey Matthew Black
Solution = People + Process + Tools
Fast, Accurate, Cheap.... Pick two.
-----Original Message-----
From: Kern Robert (SBA) [mailto:kernrobert@SIEMENS.COM]
Sent: Thursday, September 12, 2002 2:53 AM
To: ARSLIST@LISTSERV.QMXS.COM
Subject: External Oracle DB - "Real Time" Connection - Thoughts and Ideas - View Forms
**
Hello List!
we are using ARS5.01, running on a Win2k box with SQL and part of a Win2k domain and are currently evaluating one of the new features so the say (View Forms).
Our "wish list":
One of the new features of 5.01 we plan to use is the ability to connect do external DBs (Oracle in that case), by making use of Remedy's View Forms. However, as far as we understood the whole baby, in order to achieve that the ARAdmin user would have to be a domain user (not local user), in order to have the possibility to grant him access at the external DB (as I think that it is not possible to grant a local user (ARAdmin) rights at another server/db?).
Issue so to say:
Saying that, at the installation of the ARServer at the SQL Tab you would have to check "create ARAdmin as domain user". This would actually mean that a reall user is created at the domain (and therefore that is the reason that you would have to be logged in as domain administrator for that option)? Meaning that no existing one (priorly created) user could be choosen, as far as we understood the whole process that is. In addition, ok I am not sure on that one, you do not have an option (at least at that installation step), to change the name of the ARAdmin (the reason for wanting to do that would be like domain users have to be in line with naming conventions that are in place).
Problems that rise up (if the above said is correct):
- domain user may not be in line with naming policies
- installation option requires domain admin rights (big no, no, no from our domain admins =)
- domain user is created by installation from the tool (see above)
- no existing domain user can be selected
Alternatives:
There are other ways I could think of how to establish "Real Time" connections. One that might work I think, without view forms or ARAdmin as domain user, would be to import/export data lets say every hour and simply run escalations. That might also do the trick.
Another option may be, if the ARAdmin is a local user, to create another SQL Table at the ARBox and then grant the (local) ARAdmin User rights and then make use of view forms, by connection to the local DB at the ARServer.
Hmmmm, k. That are our first thoughts and impressions when looking at that new feature. I am not sure if the above said is all correct, but I would say that the documentation of that specific option is not that detailed (of course it still may be totally clear to everyone else, beside us =)
Thanks all in advance for any comments / feedback / help.
\^^/
(OO)
~~~~~~~~~~o~0o~()~o00o~~~~~~~~~~~~~
Robert
|
|
Top
|
|
|
|
|
#72948 - 09/12/02 08:26 AM
Re: External Oracle DB - "Real Time" Connection - Thoughts and Id eas - View Forms
[Re: ]
|
Member
Registered: 06/12/01
Posts: 909
|
**
Kern,
My point was.... If Oracle is on a NON NT OS, then I don't think it has any concept of what an NT user is. (Someone please correct me if I'm wrong here.) MSSQL is a bit "strange" in that it also supports the idea of NT Domain authentication, with the click of a radio button. I'm sure that, if it is possible, it would require a bit more effort to make an instance of Solaris Oracle be able to authenticate users against an NT domain. (Maybe some PAM-SAMBA or something like that? However, that assumes that Solaris Oracle supports an OS user authentication model as well. As I'm not an Oracle DBA... I'm just guessing here.)
It would seem to me, the best way to "deal" with RDBMS to RDBMS authentication to be to use RDBMS level authentication on the target RDBMS. (The target RDBMS should not care what user is running the process on the other end. It should only care if the connection has authenticated properly as a user it knows about.) Most RDBMS's provide some form of proprietary authentication.
If your model is Oracle on NT Domain #1, and MSSQL on NT Domain #2, then that may have still other issues.
Let's try to fully define the configuration your attempting to get running. (maybe I missed the details in the first post, but please restate them.)
MSSQL (Version ?)(NT Domain named?)
"external RDBMS" vender: ?
"external RDBMS" version: ?
"external RDBMS" OS: ?
Are there firewall issues between the two RDBMS's?
Do you have the ability to authenticate to both RDBMS's? (manually, through any client interface?)
As your getting answers to those questions... let me also give you this to think about.
View forms are "intended" to allow you to access non-ARSystem DB tables on you local RDBMS. It does not "provide" any connection capabilities to connect to other RDBMS's or even other DB on you local RDBMS. All of that is managed at the RDBMS level, and permissions at that level apply as normal.
Example 1) If ARS is using MSSQL and you have 15 databases on that instance of MSSQL then you could create a view form and "point at" a table in a different DB on that instance of MSSQL. (If this exists, you could possible also use other instance of MSSQL on remote hosts using an MSSQL to MSSQL connection capabilities of MSSQL.)
Example 2) If ARS is using Oracle and you have 15 databases on that instance of Oracle then you could create a view form and "point at" a table in a different DB on that instance of Oracle. (If this exists, you could possible also use other instance of Oracle on remote hosts using an Oracle to Oracle connection capabilities of Oracle.)
*NOTE: Example 1 and 2 are identical , when MSSQL --> RDBMS and Oracle --> RDBMS :) So to try to beat that into a "General statement"
General) If you can create a "local table" that is a "link" to an external RDBMS (same vender or different vender) then that table might be usable as a "local target" for an ARS View form. (If this exists, you could possible also use another RDBMS using an RDBMS(local) to RDBMS(remote) connection capabilities of your RDBMS(local).)
There are also some "requirements" for what tables can be used as "targets" for View forms. (Mainly, that they must have a char(15) column that contains a unique value for all data entries, so that it can be mapped to the 'Request ID'.)
I hope that some of that helps.
--
Carey Matthew Black
Solution = People + Process + Tools
Fast, Accurate, Cheap.... Pick two.
-----Original Message-----
From: Kern Robert (SBA) [mailto:kernrobert@SIEMENS.COM]
Sent: Thursday, September 12, 2002 9:09 AM
To: ARSLIST@LISTSERV.QMXS.COM
Subject: AW: External Oracle DB - "Real Time" Connection - Thoughts and Id eas - View Forms
**
Hello Carey and thanks for the response,
regarding your questions. The Oracle DB is running on Solaris and is part of the same NT domain. I have not been in touch with Oracle until yet and was not aware that any extra tool for connection is required.
Basically I thought that connecting to the Oracle DB by making use of the with V5 introduced "view forms" will handle the connection and wanted to check the requirments for making use of that feature (domain user or not, how to grant rights to ARAdmin user, ...).
Well, it does not seem to be that easy then =)
In terms of ARS SQL to xyz SQL. Connecting to "external SQL DB" (that is located at the same box as ARSDB) however with view forms did work with no problems, as I am then able to grant the local ARAdmin User rights (if the SQL DB would be on another box, to my understanding you then would not be able to grant rights to the ARAdmin user, if that one only exists as local user at another box. Then you would need ARAdmin to be a domain user, right? ...and then we are at the posted issues again...).
Everything not that easy =)
Robert
|
|
Top
|
|
|
|
|
#72949 - 09/12/02 01:04 PM
Re: External Oracle DB - "Real Time" Connection - Thoughts and Id eas - View Forms
[Re: ]
|
Stealth Member
Registered: 03/11/04
Posts: 192
|
**
Hello Kern,
The solution you're after doesn't require ARAdmin login (the owner of ARSystem database) to be domain user account, it can stay standard MS SQL Server login, as for most installations of ARS.
However, this is not the case for MS SQL Server, MSSQLServer service has to run under Windows 2000 domain user account in order to be able to run distributed queries accessing data on remote or linked servers.
To accomplish this task you can take these steps:
1. Assing particular Windows 2000 domain user account to MSSQLServer service and make sure that this account is a member of Local Administrators group on the machine running MS SQL Server.
2. Make sure you have Oracle clients installed on MS SQL Server machine. I believe this is necessary for MS SQL Server OLE DB Provider for Oracle.
Configure Oracle client to access Oracle DBMS server on another machine.
3. Configure Oracle machine as linked server on MS SQL Server machine and map local SQL Server login ARAdmin to the remote Oracle login.
Then, when you run any type of query against Oracle linked server, either from withing ARS or from MS Query Analyser, having connected as ARAdmin, MS SQL Server will attempt to connect to Oracle using security credentials of remote Oracle login, not security credentials of local SQL Server login ARAdmin.
So, in order to tailor security, you need to assign appropriate permissions to Oracle login, which you'll be using to connect to Oracle linked server, and MS SQL Server will be resticted to the set of rights granted to that Oracle remote login.
I tested this feature at the database level with ARS 4.5.2, MS SQL Server 7.0 and Oracle 8.1.6 on Windows 2000 Server about 6 months ago - worked fined.
Had to un-install Oracle then, too heavy for my PC.
I haven't tested view forms with Oracle, and actually found out that it seems not to be possible to create view forms with heterogenous data sources, say ARS cannot use Microsoft OLE DB Provider for ODBC drivers, which makes it impossible to configure view forms from MS Access, MS Excel or text files.
Anyway, plan to test view forms with Oracle this week, and see how it goes.
Let me know if you need any additional information.
Regards,
Mikhail Gvozdev
Remedy Product Support
Planwell Technology Australia Ltd.
1-5 Railway Street
CHATSWOOD NSW 2067
Phone: +61 2 9412 - 8763
Fax: +61 2 9419 - 7803
mailto:mikhailg@planwell.com.au
-----Original Message-----
From: Kern Robert (SBA) [mailto:kernrobert@SIEMENS.COM]
Sent: Thursday, 12 September 2002 05:53 PM
To: ARSLIST@LISTSERV.QMXS.COM
Subject: External Oracle DB - "Real Time" Connection - Thoughts and Ideas - View Forms
**
Hello List!
we are using ARS5.01, running on a Win2k box with SQL and part of a Win2k domain and are currently evaluating one of the new features so the say (View Forms).
Our "wish list":
One of the new features of 5.01 we plan to use is the ability to connect do external DBs (Oracle in that case), by making use of Remedy's View Forms. However, as far as we understood the whole baby, in order to achieve that the ARAdmin user would have to be a domain user (not local user), in order to have the possibility to grant him access at the external DB (as I think that it is not possible to grant a local user (ARAdmin) rights at another server/db?).
Issue so to say:
Saying that, at the installation of the ARServer at the SQL Tab you would have to check "create ARAdmin as domain user". This would actually mean that a reall user is created at the domain (and therefore that is the reason that you would have to be logged in as domain administrator for that option)? Meaning that no existing one (priorly created) user could be choosen, as far as we understood the whole process that is. In addition, ok I am not sure on that one, you do not have an option (at least at that installation step), to change the name of the ARAdmin (the reason for wanting to do that would be like domain users have to be in line with naming conventions that are in place).
Problems that rise up (if the above said is correct):
- domain user may not be in line with naming policies
- installation option requires domain admin rights (big no, no, no from our domain admins =)
- domain user is created by installation from the tool (see above)
- no existing domain user can be selected
Alternatives:
There are other ways I could think of how to establish "Real Time" connections. One that might work I think, without view forms or ARAdmin as domain user, would be to import/export data lets say every hour and simply run escalations. That might also do the trick.
Another option may be, if the ARAdmin is a local user, to create another SQL Table at the ARBox and then grant the (local) ARAdmin User rights and then make use of view forms, by connection to the local DB at the ARServer.
Hmmmm, k. That are our first thoughts and impressions when looking at that new feature. I am not sure if the above said is all correct, but I would say that the documentation of that specific option is not that detailed (of course it still may be totally clear to everyone else, beside us =)
Thanks all in advance for any comments / feedback / help.
\^^/
(OO)
~~~~~~~~~~o~0o~()~o00o~~~~~~~~~~~~~
Robert
|
|
Top
|
|
|
|
|
#72950 - 09/12/02 09:37 PM
AW: External Oracle DB - "Real Time" Connection - Thoughts and Id eas - View Forms
[Re: ]
|
addict
Registered: 05/21/02
Posts: 413
|
**
Good morning (just showed up at the office =) and thanks everyone very much for the feedback and instructions!
So to say, that is a lot for me to "chew on" and to go through. And you made it possible to start with that!
Thanks again very much and perhaps some further questions may arise and will make me to post another question or two =)
Thanks again and a nice weekend to everyone,
Robert
-----Ursprungliche Nachricht-----
Von: Mikhail Gvozdev [mailto:mikhailg@PLANWELL.COM.AU]
Gesendet: Freitag, 13. September 2002 01:04
An: ARSLIST@LISTSERV.QMXS.COM
Betreff: Re: External Oracle DB - "Real Time" Connection - Thoughts and Id eas - View Forms
**
Hello Kern,
The solution you're after doesn't require ARAdmin login (the owner of ARSystem database) to be domain user account, it can stay standard MS SQL Server login, as for most installations of ARS.
However, this is not the case for MS SQL Server, MSSQLServer service has to run under Windows 2000 domain user account in order to be able to run distributed queries accessing data on remote or linked servers.
To accomplish this task you can take these steps:
1. Assing particular Windows 2000 domain user account to MSSQLServer service and make sure that this account is a member of Local Administrators group on the machine running MS SQL Server.
2. Make sure you have Oracle clients installed on MS SQL Server machine. I believe this is necessary for MS SQL Server OLE DB Provider for Oracle.
Configure Oracle client to access Oracle DBMS server on another machine.
3. Configure Oracle machine as linked server on MS SQL Server machine and map local SQL Server login ARAdmin to the remote Oracle login.
Then, when you run any type of query against Oracle linked server, either from withing ARS or from MS Query Analyser, having connected as ARAdmin, MS SQL Server will attempt to connect to Oracle using security credentials of remote Oracle login, not security credentials of local SQL Server login ARAdmin.
So, in order to tailor security, you need to assign appropriate permissions to Oracle login, which you'll be using to connect to Oracle linked server, and MS SQL Server will be resticted to the set of rights granted to that Oracle remote login.
I tested this feature at the database level with ARS 4.5.2, MS SQL Server 7.0 and Oracle 8.1.6 on Windows 2000 Server about 6 months ago - worked fined.
Had to un-install Oracle then, too heavy for my PC.
I haven't tested view forms with Oracle, and actually found out that it seems not to be possible to create view forms with heterogenous data sources, say ARS cannot use Microsoft OLE DB Provider for ODBC drivers, which makes it impossible to configure view forms from MS Access, MS Excel or text files.
Anyway, plan to test view forms with Oracle this week, and see how it goes.
Let me know if you need any additional information.
Regards,
Mikhail Gvozdev
Remedy Product Support
Planwell Technology Australia Ltd.
1-5 Railway Street
CHATSWOOD NSW 2067
Phone: +61 2 9412 - 8763
Fax: +61 2 9419 - 7803
mailto:mikhailg@planwell.com.au
-----Original Message-----
From: Kern Robert (SBA) [mailto:kernrobert@SIEMENS.COM]
Sent: Thursday, 12 September 2002 05:53 PM
To: ARSLIST@LISTSERV.QMXS.COM
Subject: External Oracle DB - "Real Time" Connection - Thoughts and Ideas - View Forms
**
Hello List!
we are using ARS5.01, running on a Win2k box with SQL and part of a Win2k domain and are currently evaluating one of the new features so the say (View Forms).
Our "wish list":
One of the new features of 5.01 we plan to use is the ability to connect do external DBs (Oracle in that case), by making use of Remedy's View Forms. However, as far as we understood the whole baby, in order to achieve that the ARAdmin user would have to be a domain user (not local user), in order to have the possibility to grant him access at the external DB (as I think that it is not possible to grant a local user (ARAdmin) rights at another server/db?).
Issue so to say:
Saying that, at the installation of the ARServer at the SQL Tab you would have to check "create ARAdmin as domain user". This would actually mean that a reall user is created at the domain (and therefore that is the reason that you would have to be logged in as domain administrator for that option)? Meaning that no existing one (priorly created) user could be choosen, as far as we understood the whole process that is. In addition, ok I am not sure on that one, you do not have an option (at least at that installation step), to change the name of the ARAdmin (the reason for wanting to do that would be like domain users have to be in line with naming conventions that are in place).
Problems that rise up (if the above said is correct):
- domain user may not be in line with naming policies
- installation option requires domain admin rights (big no, no, no from our domain admins =)
- domain user is created by installation from the tool (see above)
- no existing domain user can be selected
Alternatives:
There are other ways I could think of how to establish "Real Time" connections. One that might work I think, without view forms or ARAdmin as domain user, would be to import/export data lets say every hour and simply run escalations. That might also do the trick.
Another option may be, if the ARAdmin is a local user, to create another SQL Table at the ARBox and then grant the (local) ARAdmin User rights and then make use of view forms, by connection to the local DB at the ARServer.
Hmmmm, k. That are our first thoughts and impressions when looking at that new feature. I am not sure if the above said is all correct, but I would say that the documentation of that specific option is not that detailed (of course it still may be totally clear to everyone else, beside us =)
Thanks all in advance for any comments / feedback / help.
\^^/
(OO)
~~~~~~~~~~o~0o~()~o00o~~~~~~~~~~~~~
Robert
|
|
Top
|
|
|
|
|
#72951 - 09/12/02 11:46 PM
Re: External Oracle DB - "Real Time" Connection - Thoughts and Id eas - View Forms
[Re: ]
|
enthusiast
Registered: 06/12/01
Posts: 366
|
**
Good idea Mikhail,
I was playing around with linked servers last night and I did create an
entry but that is as far as I went. I chose another method of creating a non
Remedy table in Oracle (under the ARADMIN schema) and using DTS to populate
that table. I then used a View form on my newly created table and it worked
fine BUT it is not real time which is what I want.
I will look further into Linked servers tonight.
Mike.
Michael Worts
Phone: 01483 875273
Mobile: 07801 755346
VPN: (716) 5273
mailto:michael.worts@ntl.com
If you have a Remedy problem or question, log it with the IT Helpdesk on
3333.
-----Original Message-----
From: Kern Robert (SBA) [mailto:kernrobert@SIEMENS.COM]
Sent: 13 September 2002 08:38
To: ARSLIST@LISTSERV.QMXS.COM
Subject: AW: External Oracle DB - "Real Time" Connection - Thoughts and Id
eas - View Forms
**
Good morning (just showed up at the office =) and thanks everyone very much
for the feedback and instructions!
So to say, that is a lot for me to "chew on" and to go through. And you made
it possible to start with that!
Thanks again very much and perhaps some further questions may arise and will
make me to post another question or two =)
Thanks again and a nice weekend to everyone,
Robert
-----Ursprungliche Nachricht-----
Von: Mikhail Gvozdev [mailto:mikhailg@PLANWELL.COM.AU]
Gesendet: Freitag, 13. September 2002 01:04
An: ARSLIST@LISTSERV.QMXS.COM
Betreff: Re: External Oracle DB - "Real Time" Connection - Thoughts and Id
eas - View Forms
**
Hello Kern,
The solution you're after doesn't require ARAdmin login (the owner of
ARSystem database) to be domain user account, it can stay standard MS SQL
Server login, as for most installations of ARS.
However, this is not the case for MS SQL Server, MSSQLServer service has to
run under Windows 2000 domain user account in order to be able to run
distributed queries accessing data on remote or linked servers.
To accomplish this task you can take these steps:
1. Assing particular Windows 2000 domain user account to MSSQLServer service
and make sure that this account is a member of Local Administrators group on
the machine running MS SQL Server.
2. Make sure you have Oracle clients installed on MS SQL Server machine. I
believe this is necessary for MS SQL Server OLE DB Provider for Oracle.
Configure Oracle client to access Oracle DBMS server on another machine.
3. Configure Oracle machine as linked server on MS SQL Server machine and
map local SQL Server login ARAdmin to the remote Oracle login.
Then, when you run any type of query against Oracle linked server, either
from withing ARS or from MS Query Analyser, having connected as ARAdmin, MS
SQL Server will attempt to connect to Oracle using security credentials of
remote Oracle login, not security credentials of local SQL Server login
ARAdmin.
So, in order to tailor security, you need to assign appropriate permissions
to Oracle login, which you'll be using to connect to Oracle linked server,
and MS SQL Server will be resticted to the set of rights granted to that
Oracle remote login.
I tested this feature at the database level with ARS 4.5.2, MS SQL Server
7.0 and Oracle 8.1.6 on Windows 2000 Server about 6 months ago - worked
fined.
Had to un-install Oracle then, too heavy for my PC.
I haven't tested view forms with Oracle, and actually found out that it
seems not to be possible to create view forms with heterogenous data
sources, say ARS cannot use Microsoft OLE DB Provider for ODBC drivers,
which makes it impossible to configure view forms from MS Access, MS Excel
or text files.
Anyway, plan to test view forms with Oracle this week, and see how it goes.
Let me know if you need any additional information.
Regards,
Mikhail Gvozdev
Remedy Product Support
Planwell Technology Australia Ltd.
1-5 Railway Street
CHATSWOOD NSW 2067
Phone: +61 2 9412 - 8763
Fax: +61 2 9419 - 7803
mailto:mikhailg@planwell.com.au
-----Original Message-----
From: Kern Robert (SBA) [mailto:kernrobert@SIEMENS.COM]
Sent: Thursday, 12 September 2002 05:53 PM
To: ARSLIST@LISTSERV.QMXS.COM
Subject: External Oracle DB - "Real Time" Connection - Thoughts and Ideas -
View Forms
**
Hello List!
we are using ARS5.01, running on a Win2k box with SQL and part of a Win2k
domain and are currently evaluating one of the new features so the say (View
Forms).
Our "wish list":
One of the new features of 5.01 we plan to use is the ability to connect do
external DBs (Oracle in that case), by making use of Remedy's View Forms.
However, as far as we understood the whole baby, in order to achieve that
the ARAdmin user would have to be a domain user (not local user), in order
to have the possibility to grant him access at the external DB (as I think
that it is not possible to grant a local user (ARAdmin) rights at another
server/db?).
Issue so to say:
Saying that, at the installation of the ARServer at the SQL Tab you would
have to check "create ARAdmin as domain user". This would actually mean that
a reall user is created at the domain (and therefore that is the reason that
you would have to be logged in as domain administrator for that option)?
Meaning that no existing one (priorly created) user could be choosen, as far
as we understood the whole process that is. In addition, ok I am not sure on
that one, you do not have an option (at least at that installation step), to
change the name of the ARAdmin (the reason for wanting to do that would be
like domain users have to be in line with naming conventions that are in
place).
Problems that rise up (if the above said is correct):
- domain user may not be in line with naming policies
- installation option requires domain admin rights (big no, no, no from our
domain admins =)
- domain user is created by installation from the tool (see above)
- no existing domain user can be selected
Alternatives:
There are other ways I could think of how to establish "Real Time"
connections. One that might work I think, without view forms or ARAdmin as
domain user, would be to import/export data lets say every hour and simply
run escalations. That might also do the trick.
Another option may be, if the ARAdmin is a local user, to create another SQL
Table at the ARBox and then grant the (local) ARAdmin User rights and then
make use of view forms, by connection to the local DB at the ARServer.
Hmmmm, k. That are our first thoughts and impressions when looking at that
new feature. I am not sure if the above said is all correct, but I would say
that the documentation of that specific option is not that detailed (of
course it still may be totally clear to everyone else, beside us =)
Thanks all in advance for any comments / feedback / help.
\^^/
(OO)
~~~~~~~~~~o~0o~()~o00o~~~~~~~~~~~~~
Robert
To UNSUBSCRIBE, email the message "unsubscribe arslist" to:
listserv@arslist.org You may also control your subscription options,
including UNSUBSCRIBE, at www.ARSLIST.org
To UNSUBSCRIBE, email the message "unsubscribe arslist" to:
listserv@arslist.org You may also control your subscription options,
including UNSUBSCRIBE, at www.ARSLIST.org
To UNSUBSCRIBE, email the message "unsubscribe arslist" to:
listserv@arslist.org You may also control your subscription options,
including UNSUBSCRIBE, at www.ARSLIST.org
The contents of this email and any attachments are sent for the personal attention
of the addressee(s) only and may be confidential. If you are not the intended
addressee, any use, disclosure or copying of this email and any attachments is
unauthorised - please notify the sender by return and delete the message. Any
representations or commitments expressed in this email are subject to contract.
ntl Group Limited
|
|
Top
|
|
|
|
|
|
|