oracle database: Unable to connect as "sys as sysdba" when oradata mapped to windows 10 volume

[tomlprog]

I have created two containers created from the same "oracle/database 12.2.0.1-se2" image. The image was built on Windows 10 OS and I am running Docker For Windows Version 17.06.0-ce-win19 (12801).

1. The first container does not have a volume mapped for the database files:

   docker run --name oracle1 -p 1521:1521 -p 5500:5500 -e ORACLE_SID=DEV -e ORACLE_PDB=TRUNK -e ORACLE_PWD=Databas3 -e ORACLE_CHARACTERSET=AL32UTF8 oracle/database:12.2.0.1-se2

and I can connect to the database running in the first container as:

E:\wfm\trunk\workspace\weblogic>docker exec -ti -u oracle oracle1 sqlplus SYS/Databas3@//localhost:1521/DEV AS SYSDBA
SQL*Plus: Release 12.2.0.1.0 Production on Wed Aug 2 19:43:00 2017
Copyright (c) 1982, 2016, Oracle. All rights reserved.
Connected to:
Oracle Database 12c Standard Edition Release 12.2.0.1.0 - 64bit Production
SQL>

2. The second container does have a volume mapped for database files:

docker run --name oracle2 -p 1521:1521 -p 5500:5500 -e ORACLE_SID=DEV -e ORACLE_PDB=TRUNK -e ORACLE_PWD=Databas3 -e ORACLE_CHARACTERSET=AL32UTF8 -v E:\wfm\trunk\workspace\weblogic\database\oracle\oradata:/opt/oracle/oradata oracle/database:12.2.0.1-se2

and when I try to connect to the database running in the second container as I get the following error:

E:\wfm\trunk\workspace\weblogic>docker exec -ti -u oracle oracle2 sqlplus SYS/Databas3@//localhost:1521/DEV AS SYSDBA
SQL*Plus: Release 12.2.0.1.0 Production on Wed Aug 2 19:19:08 2017
Copyright (c) 1982, 2016, Oracle. All rights reserved.
ERROR:
ORA-01017: invalid username/password; logon denied
Enter user-name:

I also get the same error when I try to connect from my windows host:

E:\wfm\trunk\workspace\weblogic>sqlplus SYS/Databas3@//localhost:1521/DEV AS SYSDBA
SQL*Plus: Release 12.2.0.1.0 Production on Wed Aug 2 19:19:08 2017
Copyright (c) 1982, 2016, Oracle. All rights reserved.
ERROR:
ORA-01017: invalid username/password; logon denied
Enter user-name:

I can connect to either database locally (inside the container) using the syntax:

sqlplus / as sysdba

This isn't blocking issue for me as I can work-around this by executing sql scripts as sysdba locally inside the container, but this might be a bigger concern for others that may not be able to do the same in their environments.

[gvenzl]

Hm, this is a strange error which I cannot reproduce with the commands that you have provided:

1. Running without a Volume mapped to the container:

[root@localhost dockerfiles]# docker run --name oracle1 -p 1521:1521 -p 5500:5500 -e ORACLE_SID=DEV -e ORACLE_PDB=TRUNK -e ORACLE_PWD=Databas3 -e ORACLE_CHARACTERSET=AL32UTF8 oracle/database:12.2.0.1-se2
ORACLE PASSWORD FOR SYS, SYSTEM AND PDBADMIN: Databas3
...
...
...
#########################
DATABASE IS READY TO USE!
#########################

Where connecting works just fine:

[root@localhost ~]# docker exec -ti -u oracle oracle1 sqlplus SYS/Databas3@//localhost:1521/DEV AS SYSDBA

SQL*Plus: Release 12.2.0.1.0 Production on Thu Aug 3 22:06:29 2017

Copyright (c) 1982, 2016, Oracle.  All rights reserved.


Connected to:
Oracle Database 12c Standard Edition Release 12.2.0.1.0 - 64bit Production

SQL> exit
Disconnected from Oracle Database 12c Standard Edition Release 12.2.0.1.0 - 64bit Production

2. Running with a container with a volume attached to it:

[root@localhost dockerfiles]# docker run --name oracle2 -p 1521:1521 -p 5500:5500 -e ORACLE_SID=DEV -e ORACLE_PDB=TRUNK -e ORACLE_PWD=Databas3 -e ORACLE_CHARACTERSET=AL32UTF8 -v /home/oracle/oradata:/opt/oracle/oradata oracle/database:12.2.0.1-se2
ORACLE PASSWORD FOR SYS, SYSTEM AND PDBADMIN: Databas3
...
...
#########################
DATABASE IS READY TO USE!
#########################

And also here connecting works just fine:

[root@localhost ~]# docker exec -ti -u oracle oracle2 sqlplus SYS/Databas3@//localhost:1521/DEV AS SYSDBA

SQL*Plus: Release 12.2.0.1.0 Production on Thu Aug 3 22:28:38 2017

Copyright (c) 1982, 2016, Oracle.  All rights reserved.


Connected to:
Oracle Database 12c Standard Edition Release 12.2.0.1.0 - 64bit Production

SQL> exit
Disconnected from Oracle Database 12c Standard Edition Release 12.2.0.1.0 - 64bit Production

Are you sure that the database came up successfully in step 2 and that there weren't any typos?

[tomlprog]

I am not sure, but it looks like you ran your test with docker running on linux host instead of a windows 10 host?

I suspect this because the path to your host volume does not start with a drive letter:
/home/oracle/oradata:/opt/oracle/oradata
and mine does:
E:\wfm\trunk\workspace\weblogic\database\oracle\oradata:/opt/oracle/oradata

I have run my tests a few times already and get the same results. I have also tried a test with using the '/' char instead of '' as the directory separator in the host volume path and get the same result.

The database in step #2 come up fine and I am able to logon as another user: e.g.

C:\WINDOWS\system32>docker exec -ti -u oracle oracle2 sqlplus SYSTEM/Databas3@//localhost:1521/DEV
SQL*Plus: Release 12.2.0.1.0 Production on Mon Aug 7 18:32:09 2017
Copyright (c) 1982, 2016, Oracle.  All rights reserved.
Connected to:
Oracle Database 12c Standard Edition Release 12.2.0.1.0 - 64bit Production
SQL>

I created another container (oracle3) using the command:

docker run --name oracle3 -p 1521:1521 -p 5500:5500 -e ORACLE_SID=DEV -e ORACLE_PDB=TRUNK -e ORACLE_PWD=Databas3 -e ORACLE_CHARACTERSET=AL32UTF8 -v E:\wfm\trunk\workspace\weblogic\database\oracle\oradata3:/opt/oracle/oradata oracle/database:12.2.0.1-se2

and I have attached the log output to this ticket.

Would you be to perform these tests on a windows 10 host OS so as to be running in the same environment that I am?

-Tom

[tomlprog]

oracle3log.txt

[gvenzl]

Hi @tomlprog,

Yes, you are correct. I ran the tests on Oracle Linux 7.3, UEK4, Docker CE 17.03. Unfortunately I do not have a Windows environment available but given that it works on Linux I can only assume that it is an environment issue. On Linux I sometimes encountered problems with SELinux blocking certain commands and operations but on Windows I can unfortunately not comment on but merely suspect something similar.

Thanks for attaching the output, it looks like everything went fine inside the container.

It is very odd that only this username/password combination is failing while all the others work fine.
Do you see the same issue when connecting from outside the container, i.e. running a SQL*Plus or SQL Developer locally?

Thx,

[tomlprog]

I suspect that it has nothing to do with the SYS user because as the SYS user I can connect without the error if I do not specify any network/host connection info: e.g. docker exec -ti -u oracle oracle3 sqlplus SYS/Databas3 as sysdba
works fine,
but if i specify an @ sign followed by some connection info i do get the error: e.g.
docker exec -ti -u oracle oracle3 sqlplus SYS/Databas3@DEV as sysdba
or
docker exec -ti -u oracle oracle3 sqlplus SYS/Databas3@//localhost:1521/DEV as sysdba

I get the same results as above if I use the SYSTEM user instead of the SYS user. However, I can logon fine as SYSTEM if I do not specify "as sysdba" using any of the above connection info strings.

I get the exact same results whether I run the sqlplus inside the container or outside the container: i.e. running sqlplus (or sql developer) on windows host

Thanks,
Tom

[Philippe-Collignon]

Hello, I can confirm the exact same issue on windows 10 with docker machine in virtualbox
sqlplus SYS/welcome1Oracle@//192.168.99.100:1521/ORCLCDB as sysdba
fails with invalid username/password
sqlplus SYSTEM/welcome1Oracle@//192.168.99.100:1521/ORCLCDB
works !
and the command inside the container without the @host all works ..

It might be related to the fact that the owner of oradata on windows shared folder is not oracle user (This is the only difference I see with the linux host but I did not find a way to assign it to oracle user ) :

[oracle@e8c289b808be oracle]$ ls -al
total 80
drwxr-xr-x 18 oracle dba      4096 Aug 28 16:14 .
drwxr-xr-x  9 root   root     4096 Aug 28 15:12 ..
drwxr-x---  3 oracle oinstall 4096 Aug 28 15:12 admin
drwxr-x---  2 oracle oinstall 4096 Aug 28 15:12 audit
drwxr-x---  4 oracle oinstall 4096 Aug 28 15:16 cfgtoollogs
-rwxr-xr-x  1 oracle dba      1259 Aug 17 09:33 checkDBStatus.sh
drwxr-xr-x  2 oracle oinstall 4096 Aug 17 10:11 checkpoints
-rwxr-xr-x  1 oracle dba      2964 Aug 17 09:33 createDB.sh
-rwxr-xr-x  1 oracle dba      9406 Aug 17 09:33 dbca.rsp.tmpl
drwxrwxr-x 23 oracle oinstall 4096 Aug 28 15:12 diag
drwxrwx---  8 oracle dba      4096 Aug 17 10:12 oraInventory
drwxrwxrwx  1   1000 ftp         0 Aug 28 15:18 oradata  <==== owner is not oracle user !
drwxr-xr-x  5 oracle oinstall 4096 Aug 28 15:12 product
-rwxr-xr-x  1 oracle dba      6151 Aug 17 09:33 runOracle.sh
-rwxr-xr-x  1 oracle dba      1026 Aug 17 09:33 runUserScripts.sh
drwxr-xr-x  4 oracle dba      4096 Aug 17 10:05 scripts
-rwxr-xr-x  1 oracle dba       769 Aug 17 09:33 setPassword.sh
-rwxr-xr-x  1 oracle dba       689 Aug 17 09:33 startDB.sh

[repos-jmp]

We are facing this issue on Windows 10 too, SYS fails with invalid username/password.

[cmosguy]

I am running on windows 10 host as well and I am having exact same issue, is there a solution to this issue?

[NielsIH]

I am having the same issue. Windows 10 with a mapped volume for the database.
I can not login as sysdba.

C:\Users\niels>sqlplus sys/oracle@localhost:1521/ORCLPDB1 as sysdba

SQL*Plus: Release 12.2.0.1.0 Production on Wed Nov 1 21:25:24 2017

Copyright (c) 1982, 2016, Oracle.  All rights reserved.

ERROR:
ORA-01017: invalid username/password; logon denied

C:\Users\niels>sqlplus system/oracle@localhost:1521/ORCLPDB1

SQL*Plus: Release 12.2.0.1.0 Production on Wed Nov 1 21:27:46 2017

Copyright (c) 1982, 2016, Oracle.  All rights reserved.

Last Successful login time: Wed Nov 01 2017 21:13:12 +01:00

Connected to:
Oracle Database 12c Enterprise Edition Release 12.2.0.1.0 - 64bit Production

SQL>

This is a blocking issue for me because there seems to be no way to administer the database.

[klebeer]

same problem on macOS High Sierra,

bash-4.2# ls -la
total 88

drwxrwx--- 1 oracle dba 4096 Jan 6 16:44 oraInventory
drwxr-xr-x 7 root root 224 Jan 6 18:00 oradata
drwxr-xr-x 1 oracle oinstall 4096 Jan 6 16:41 product

after a chown -Rf oracle.dba /opt/oracle/oradata/
works fine

[ByronLudwig]

I am having the same issue running docker toolbox on Windows 7. When the volume is enabled and mapped then I cannot connect to sys from outside the container. If there is no volume mapped then I can connect just fine.

I just tried and I can login with SYSTEM user but not SYS! What is the reason for this?