Oracle Database - Kerberos Authentication - Demo

[@abdelhamidgentelman]

hello and thank you for sharing this demo with us, what is the tools and the steps nedded to migrate a 10g database from oracle db user authentification to Active directory authentification ?

[@dutchdba9983]

Hi Frank, Mooie demo. Als we alleen SSO op de database willen configureren via AD is deze kerberos config dan de beste manier of kunnen we beter Oracle centrally managed users gebruiken? Ons uitgangspunt is config zo simpel mogelijk en weinig afhankelijkheid met de sysadmins. mvg Jeroen

[@mohammadamin6462]

Excellent to read : How to Configure Centrally Managed Users For Database Release 18c or Later Releases (Doc ID 2462012.1)

[@indcool5134]

Frank can we use msga (Microsoft managed group access account) to log into Oracle database i.e.. just get keytab file for gsma account and copy into database server and configure rest of the steps as detailed in the video. Will I able to login using gsma account from IIS server.

[@ramamohanreddy9962]

Hi Frank Is this process like connecting to oracle database 19c using AD account works in standard edition? Where i have to install the kerberos? Database server? Or in client server?

[@dannyabraham2347]

Hi, do we need full Oracle client. We use OIC - is it good enough (on Linux).

[@shruthi3sneha]

hi Frank, What is the difference between okinit and kinit? Credential cache generated from both ways be used vice versa? or any specific feature it has?

[@frankvanderborden5648]

okinit is installed in the Oracle client install directory. It is only needed when you want to get the kerberos ticket on a non-windows system as on Windows the kerberos ticket is populated on logon time

[@ankur21dba]

I m getting invalid username password while connecting to database

[@amitsana2]

Do we need to copy keytab file to windows client? if we have multiple client then copy to all the clients?

[@frankvanderborden5648]

Keytab file needs to be on any Oracle client that needs to use Kerberos. It can be on a shared drive

[@jayakishoreudayagiri261]

hi can we setup same for databases running on windows servers

[@frankvanderborden5648]

The platform is not relevant indeed. So either Windows or Linux or any other OS would work for this Jaya