Oracle Database B10772-01 - Connecting to an Oracle Database Server Authenticated by Kerberos; Removing Credentials from the Cache File with the Okdstry Utility; Configuring Interoperability with a Windows 2000 Domain Controller KDC

Configuring Interoperability with a Windows 2000 Domain Controller KDC
Configuring Kerberos Authentication 6-13
% oklist -f
27-Jul-1999 21:57:51 28-Jul-1999 05:58:14
krbtgt/SOMECO.COM@SOMECO.COM
Flags: FI
Removing Credentials from the Cache File with the okdstry Utility
Use the okdstry utility to remove credentials from the credentials cache file:
$ okdstry -f
where the -f command option lets you specify an alternative credential cache. For
UNIX, the default is /tmp/krb5cc_uid. You can also specify the alternate
credential cache by using the SQLNET.KRB5_CC_NAME parameter in the
sqlnet.ora file.
Connecting to an Oracle Database Server Authenticated by Kerberos
You can now connect to an Oracle database server without using a user name or
password. Enter a command similar to the following:
$ sqlplus /@net_service_name
where net_service_name is an Oracle Net Services service name. For example:
$ sqlplus /@oracle_dbname
Configuring Interoperability with a Windows 2000 Domain Controller
KDC
Oracle Advanced Security, which complies with MIT Kerberos, can interoperate
with tickets that are issued by a Kerberos Key Distribution Center (KDC) on a
Windows 2000 domain controller to enable Kerberos authentication with an Oracle
database. To configure Kerberos authentication that uses a Windows 2000 domain
controller KDC, perform the following tasks:
■ Task 1: Configuring an Oracle Kerberos Client to Interoperate with a Windows
2000 Domain Controller KDC
See Also: Chapter 1, "Introduction to Oracle Advanced Security",
for information about external authentication and Oracle Database
Heterogeneous Connectivity Administrator's Guide