Oracle Database B10772-01 Administrator's Manual page 157

Parameter:
SQLNET.KERBEROS5_CLOCKSKEW=number_of_seconds_
accepted_as_network_delay
Description: This parameter specifies how many seconds can pass before a
Kerberos credential is considered out-of-date. It is used when
a credential is actually received by either a client or a database
server. An Oracle database server also uses it to decide if a
credential needs to be stored to protect against a replay attack.
The default is 300 seconds.
Example:
SQLNET.KERBEROS5_CLOCKSKEW=1200
Parameter:
SQLNET.KERBEROS5_CONF=pathname_to_Kerberos_
configuration_file
Description: This parameter specifies the complete path name to the
Kerberos configuration file. The configuration file contains the
realm for the default KDC (key distribution center) and maps
realms to KDC hosts. The default is operating
system-dependent. For UNIX, it is
Example:
SQLNET.KERBEROS5_CONF=/krb/krb.conf
Parameter:
SQLNET.KERBEROS5_CONF_MIT=[TRUE|FALSE]
Description: This parameter specifies whether the new MIT Kerberos
configuration format is used. If the value is set to TRUE, it will
parse the file according to the new configuration format rules.
When the value is set to FALSE, the default (non-MIT)
configuration is used. The default is FALSE.
Example:
SQLNET.KERBEROS5_CONF_MIT=False
Parameter:
SQLNET.KERBEROS5_KEYTAB=
pathname_to_Kerberos_principal/key_table
Description: This parameter specifies the complete path name to the
Kerberos principal/secret key mapping file. It is used by the
Oracle database server to extract its key and decrypt the
incoming authentication information from the client. The
default is operating system-dependent. For UNIX, it is
/etc/v5srvtab
Example:
SQLNET.KERBEROS5_KEYTAB=/etc/v5srvtab
Parameter:
SQLNET.KERBEROS5_REALMS=
pathname_to_Kerberos_realm_translation_file
Enabling Kerberos Authentication
/krb5/krb.conf
.
Configuring Kerberos Authentication 6-9
.