The test platform became available for me to use... In the previous attempt to get Centrify Express working on Oracle's Database Appliance (ODA), I knew there was an AD group that was also a local group. In an attempt to address this conflict, the "adclient.local.group.merge" option as set to true. While this did seem to resolve the issue, it was found that the ODA software would not complete a startup. It appears that while merge was set, the software was still using the AD GID value for the dba group instead of the local GID value - thus causing permission issues and "breaking" the ODA software. In my current testing, I added the "dba" group to Centrify group.ignore file - so that the local group and its GID value would always be used - even if the group existed in AD. This appears to have resolved the ODA software breakage - all oracle processes now start as expected. If there are no further issues found from the current round of testing, it appears that the ODAs and Centrify Express will peacefully coexist.
↧