Incorrect OSUSER captured in oracle after upgrading the microsoft integration runtime

Tan Check Leam 0

The database connection from ADF to Oracle On Prem is getting authentication error after I have upgraded the IR version to the latest.

Based on investigation from DBA, the incoming request from IR is not sending the previous OSUSER name (DIAHostService) which has been whitelisted, but instead it was receiving UNKNOWN USER instead.

Does anyone face the same problem ?

Bhargava-MSFT 30,741 Reputation points Microsoft Employee

2024-09-05T15:59:23.55+00:00

Hello Tan Check Leam,

Welcome to the Microsoft Q&A forum.

Could you share the detailed error message that you are getting?
Tan Check Leam 0 Reputation points

2024-09-06T01:20:57.2133333+00:00

Here's some additional info for your reference.

Integration Runtime (IR) service run using the default ID created which is DIAHostService. However, when the connection made to the target oracle database, when using the SYS_CONTEXT('USERENV','OS_USER'), it returned as UNKNOWN_USER.

Due to whitelisting policy, this caused the DB not able to authorize the connection and return with error ORA-20001: YOU DO NOT HAVE DATABASE ACCESS AUTHORITY. PLEASE CONTACT YOUR DATABASE ADMINISTRATOR For Access if needed !

FYI, there was no issue when running using a previous version (IntegrationRuntime_5.32.8600.2) until recently the apps forced for a version upgrade due to expiry.

I just wonder could this be due to the Microsoft ODBC from the IR package?

1 answer

Bhargava-MSFT 30,741 Reputation points Microsoft Employee

2024-09-09T15:30:51.7+00:00
Hello Tan Check Leam,

Thanks for the additional details.

Your SHIR host account "NT SERVICE\DIAHostService" lost the permission on the SHIR profiles.

Could you add "NT SERVICE\DIAHostService" on the following 3 directories with FULL CONTROL? This should resolve the issue.

Please note: The Self-hosted Integration Runtime and the machine are fully managed by the customers. If you manually install the SHIR, the application will automatically add the necessary permissions to these folders. However, the administrator can later remove these permissions if needed.

C:\ProgramData\Microsoft\Data Transfer\DataManagementGateway

C:\ProgramData\Microsoft\Data Transfer\DataManagementGatewayUpgrade

C:\ProgramData\Microsoft\Data Transfer\DataScanActivity

If this answers your question, please consider accepting the answer by hitting the Accept answer and up-vote as it helps the community look for answers to similar questions.
Please sign in to rate this answer.
Tan Check Leam 0 Reputation points

2024-09-10T01:54:09.14+00:00

I have checked all 3 folders and the permission are there. I don't think this was the issue.

FYI, the working version before the upgrade was IntegrationRuntime_5.32.8600.2 and now i am running on IntegrationRuntime_5.45.8999.1

I can see there are difference in term of the version of the dll and odbc drivers . Maybe you could help to look into this

IntegrationRuntime_5.45.8999.1

Microsoft Oracle Service Cloud ODBC Driver_1.6.44.1009

Microsoft Oracle ODBC Driver_8.0.2.3072

Microsoft Oracle ODBC Driver_8.0.2.2584

Microsoft Oracle ODBC Driver_8.0.2.2493

Microsoft.DataTransfer.ClientLibrary.OracleSource.dll - modified on 28/08/2024

IntegrationRuntime_5.32.8600.2

Microsoft Oracle Service Cloud ODBC Driver_1.6.44.1009

Microsoft Oracle ODBC Driver_8.0.2.2584

Microsoft Oracle ODBC Driver_8.0.2.2493

Microsoft.DataTransfer.ClientLibrary.OracleSource.dll - modified on 10/08/2023

Bhargava-MSFT 30,741 Reputation points Microsoft Employee

2024-09-10T17:24:00.3566667+00:00

HelloTan Check Leam

Thanks for the additional details. As next steps, can you please collect the SHIR logs and open a support case for further investigation.

In case if you don't have a support plan, please let me know so that I can enable a onetime free support request to work on this case.

Tan Check Leam 0 Reputation points

2024-09-11T01:16:33.5066667+00:00

Hi,

Can you please provide the steps to capture the logs.

Tan Check Leam 0 Reputation points

2024-09-11T01:25:12.8333333+00:00

Hi,

Please also enable a onetime free support request for me to log the case

Bhargava-MSFT 30,741 Reputation points Microsoft Employee

2024-09-11T13:38:13.67+00:00

Hello Tan Check Leam,

I have sent you a private message. Can you please check and respond to that.
Please see the below StackOverflow to collect and send the logs.

https://stackoverflow.com/questions/75022126/is-it-possible-to-export-activity-logs-on-self-hosted-ir-in-azure-data-factory
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Incorrect OSUSER captured in oracle after upgrading the microsoft integration runtime

1 answer

Your answer