I'm configuring Kerberos on Oracle I have 2 machines, one is a server with Oracle DB, the other is a client with oracle client(basic+sqlplus), my sqlnet.ora is like this(on server)
SQLNET.AUTHENTICATION_SERVICES= (BEQ, TCPS, KERBEROS5, NONE)
SQLNET.FALLBACK_AUTHENTICATION=TRUE
SQLNET.KERBEROS5_CONF_MIT = TRUE
ADR_BASE = /var/oracle/app
SQLNET.KERBEROS5_CC_NAME = /tmp/krb5cc_
SQLNET.KERBEROS5_KEYTAB = /etc/oracle.keytab
SQLNET.KERBEROS5_CLOCKSKEW = 1200
SQLNET.KERBEROS5_CONF=/etc/krb5.conf
SQLNET.AUTHENTICATION_KERBEROS5_SERVICE=myservice
The keytab is ok, the configuration work and oracle user can access it
sqlplus /@myserver.domain/myservice
SQL*Plus: Release 21.0.0.0.0 - Production on Tue Apr 12 05:41:58 2022
Version 21.3.0.0.0
Copyright (c) 1982, 2021, Oracle. All rights reserved.
Last Successful login time: Tue Apr 12 2022 05:26:22 +02:00
Connected to:
Oracle Database 21c Enterprise Edition Release 21.0.0.0.0 - Production
Version 21.3.0.0.0
SQL> select sys_context('userenv','authentication_method') from dual;
SYS_CONTEXT('USERENV','AUTHENTICATION_METHOD')
--------------------------------------------------------------------------------
KERBEROS
The problem is on client.
I have copied the sqlnet.ora(is identical to the server) in the right place
I did kinit(I don't have okinit in the client) and...
sqlplus /@myserver.domain/myservice
SQL*Plus: Release 21.0.0.0.0 - Production on Tue Apr 12 05:43:44 2022
Version 21.5.0.0.0
Copyright (c) 1982, 2021, Oracle. All rights reserved.
ERROR:
ORA-01017: invalid username/password; logon denied
Enter user-name:
I have configured the user correctly(on the server the kerberos user can enter without problems), what I miss in the client?
Asked by elbarna
(213 rep)
Apr 12, 2022, 03:46 AM
Last activity: Feb 12, 2025, 08:04 AM
Last activity: Feb 12, 2025, 08:04 AM