Configuring Enterprise User Security for Kerberos Authentication
Task 3: Connect as a Password-Authenticated Enterprise User
For an enterprise user whose directory login name is hscortea and whose
password is welcome, enter the following to connect to the database by using
SQL*Plus:
SQL> connect hscortea/welcome@<Oracle Net Service Name>
The database authenticates the enterprise user (hscortea) by verifying the
username/password combination against the directory entry associated with this
user. Then it identifies the proper schema and retrieves the user's global roles. If
successful, the connection to the database is established.
If your connection succeeds, then the system responds Connected to:.... This
is the confirmation message of a successful connect and setup. If an error message
displays, then see
page 12-26.
If you do connect successfully, then check that the appropriate global roles were
retrieved from the directory by entering the following at the SQL*Plus prompt:
select * from session_roles
If the global roles were not retrieved from the directory, then see
"NO-GLOBAL-ROLES Checklist"
You have completed password-authenticated Enterprise User Security
configuration.
Configuring Enterprise User Security for Kerberos Authentication
The configuration steps in this section assume the following:
12-18 Oracle Database Advanced Security Administrator's Guide
"ORA-# Errors for Password-Authenticated Enterprise Users"
See Also:
"Troubleshooting Enterprise User Security"
information about diagnosing and resolving errors.
Chapter 13, "Administering Enterprise User Security"
information about configuring the identity management realm,
and about creating and managing enterprise domains,
enterprise roles, and enterprise users.
You have registered your databases with the Kerberos authentication server and
configured your Oracle Net Services as described in
Kerberos
Authentication".
on page 12-33.
on page 12-26 for
for
Chapter 6, "Configuring
on
Need help?
Do you have a question about the Oracle Database B10772-01 and is the answer not in the manual?