Removing Credentials From The Cache File With The Okdstry Utility; Connecting To An Oracle Database Server Authenticated By Kerberos; Configuring Interoperability With A Windows 2000 Domain Controller Kdc - Oracle Database B10772-01 Administrator's Manual

% oklist -f
27-Jul-1999 21:57:51
krbtgt/SOMECO.COM@SOMECO.COM
Flags: FI

Removing Credentials from the Cache File with the okdstry Utility

Use the
$ okdstry -f
where the -f command option lets you specify an alternative credential cache. For
UNIX, the default is /tmp/krb5cc_uid. You can also specify the alternate
credential cache by using the SQLNET.KRB5_CC_NAME parameter in the
sqlnet.ora file.

Connecting to an Oracle Database Server Authenticated by Kerberos

You can now connect to an Oracle database server without using a user name or
password. Enter a command similar to the following:
$ sqlplus /@net_service_name
where net_service_name is an Oracle Net Services service name. For example:
$ sqlplus /@oracle_dbname
Configuring Interoperability with a Windows 2000 Domain Controller
KDC
Oracle Advanced Security, which complies with MIT Kerberos, can interoperate
with tickets that are issued by a Kerberos Key Distribution Center (KDC) on a
Windows 2000 domain controller to enable Kerberos authentication with an Oracle
database. To configure Kerberos authentication that uses a Windows 2000 domain
controller KDC, perform the following tasks:
Configuring Interoperability with a Windows 2000 Domain Controller KDC
28-Jul-1999 05:58:14
utility to remove credentials from the credentials cache file:
okdstry
Chapter 1, "Introduction to Oracle Advanced
See Also:
for information about external authentication and Oracle Database
Heterogeneous Connectivity Administrator's Guide
Task 1: Configuring an Oracle Kerberos Client to Interoperate with a Windows
2000 Domain Controller KDC
Security",
Configuring Kerberos Authentication 6-13