Configuring Interoperability with a Windows 2000 Domain Controller KDC
Task 1: Configuring an Oracle Kerberos Client to Interoperate with a Windows 2000
Domain Controller KDC
The following steps must be performed on the Oracle Kerberos client.
Step 1: Creating Client Kerberos Configuration Files to Use a Windows Domain
Controller KDC
Create the following Kerberos client configuration files that refer to the Windows
2000 domain controller as the Kerberos KDC. In the examples that follow, the
Windows 2000 domain controller is running on a node named
sales3854.us.acme.com.
6-14 Oracle Database Advanced Security Administrator's Guide
Task 2: Configuring a Windows 2000 Domain Controller KDC to Interoperate
with an Oracle Client
Task 3: Configuring an Oracle Database to Interoperate with a Windows 2000
Domain Controller KDC
Task 4: Getting an Initial Ticket for the Kerberos/Oracle User
krb.conf file
For example:
SALES3854.US.ACME.COM
SALES3854.US.ACME.COM sales3854.us.acme.com admin server
krb5.conf file
For example:
[libdefaults]
default_realm=SALES.US.ACME.COM
[realms]
SALES.US.ACME.COM= {
kdc=sales3854.us.acme.com:88
}
[domain_realm]
.us.acme.com=SALES.US.ACME.COM
krb5.realms file
For example:
us.acme.com SALES.US.ACME.COM
Need help?
Do you have a question about the Oracle Database B10772-01 and is the answer not in the manual?
Questions and answers