
SQLNET.KERBEROS5_CC_NAME= complete_path_to_cc_file You can use the following formats to specify a value for SQLNET.KERBEROS5_CC_NAME: This option is supported in all platforms. Using the OS_MEMORY option indicates that an OS-managed memory credential cache is used for the credential cache file. The default value is operating system-dependent. Specifies the complete path name to the Kerberos credentials cache (CC) file. SQLNET.KERBEROS5_CC_NAME= pathname_to_credentials_cache_file| OS_MEMORY Table 22-1 Kerberos-Specific sqlnet.ora Parameters Parameter
Step 9: Get an Initial Ticket for the Kerberos/Oracle Userīefore you can connect to the database, you must ask the Key Distribution Center (KDC) for an initial ticket. Next, you are ready to create an externally authenticated Oracle user. Step 8: Create an Externally Authenticated Oracle User. You must create the Kerberos user on the Kerberos authentication server where the administration tools are installed. You must set the required parameters in the Oracle database server and client sqlnet.ora files. Step 6: Configure Kerberos Authentication. Step 5: Configure Oracle Net Services and Oracle DatabaseĪfter you install the Oracle Database server and client, you can configure Oracle Net Services on the server and client. Step 4: Install an Oracle Database Server and an Oracle ClientĪfter you extract a service key table from Kerberos, you are ready to install the Oracle Database server and an Oracle client. Next, you are ready to extract the service key table from Kerberos and copy it to the Oracle database server/Kerberos client system. Step 3: Extract a Service Key Table from Kerberos. You must create a service principal for Oracle Database before the server can validate the identity of clients that authenticate themselves using Kerberos. Step 2: Configure a Service Principal for an Oracle Database Server. Oracle provides guidance for common Kerberos configuration problems. Troubleshooting the Oracle Kerberos Authentication Configuration. You can configure fallback behavior (password-based authentication) in case the Kerberos authentication fails.
Configuring Kerberos Authentication Fallback Behavior.You can configure Oracle Database to interoperate with a Microsoft Windows 2008 domain controller key distribution center (KDC). Configuring Interoperability with a Windows 2008 Domain Controller KDC.Connecting to an Oracle Database Server Authenticated by KerberosĪfter Kerberos is configured, you can connect to an Oracle database server without using a user name or password.The Oracle Kerberos authentication adapter utilities are designed for an Oracle client with Oracle Kerberos authentication support installed. Utilities for the Kerberos Authentication Adapter.To enable Kerberos authentication for Oracle Database, you must first install it, and then follow a set of configuration steps.