Database Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Authentication against MIT Kerberos on RHEL clone

409758May 27 2008 — edited Sep 19 2008

Hello, I already post this in the database - general forum

Does anybody know how to configure ASO to authenticate against MIT Kerberos.

I successfully install MIT Kerberos and LDAP on localhost (CentOS 5). The Kerberos and LDAP is working.

I follow up the Oracle instructions on (http://download.oracle.com/docs/cd/B19306_01/network.102/b14268/asokerb. htm#ASOAG060)

I'am able to use all Oracle's Kerberos tools such as okinit, oklist, etc. But I'm not able to use sqlplus (sqlplus /@SID). The connect ends up with the : ORA-12638: Credential retrieval failed
Cause: The authentication service failed to retrieve the credentials of a user.
Action: Enable tracing to determine the exact error.

I think that problem is in the sqlnet.ora configuration.

Here is the sqlnet.ora.

SQLNET.KERBEROS5_REALMS = /etc/krb5.conf

SQLNET.KERBEROS5_CC_NAME = /tmp/krb5cc_501

SQLNET.AUTHENTICATION_SERVICES= (BEQ, KERBEROS5)

TRACE_LEVEL_CLIENT = SUPPORT

TRACE_UNIQUE_CLIENT = on

NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)

TRACE_LEVEL_SERVER = SUPPORT

SQLNET.KERBEROS5_CONF = /etc/krb5.conf

SQLNET.KERBEROS5_CONF_MIT = TRUE

SQLNET.AUTHENTICATION_KERBEROS5_SERVICE = Kservice

Thanks in advance.

Locked Post

New comments cannot be posted to this locked post.

Locked on Oct 17 2008

Added on May 27 2008

#database-security, #database-security-general

6 comments

11,874 views