Oracle Database B10772-01 Administrator's Manual page 86

Enterprise User Security Configuration and Management Tools
Figure 2–8 ESM Console URL Window
2.
Configuring Enterprise Security Manager Console for Kerberos-Authenticated Enterprise
Users By default, Enterprise Security Manager Console user interface does not
display the field where you can configure Kerberos principal names. The first time
you create Kerberos-authenticated users in the directory, you must configure this
tool to display the krbPrincipalName attribute in its Create User window by
using the following steps:
1.
2.
3.
4.
5.
2-24 Oracle Database Advanced Security Administrator's Guide
Enter the appropriate URL for connecting to Enterprise Security Manager
Console, and click OK.
This saves the URL information in Enterprise Security Manager so you can
launch the console again without reconfiguring the URL.
Log into the Oracle Internet Directory Self-Service Console and choose the
Configuration tab. See: Oracle Internet Directory Administrator's Guide for
information about logging in and using the Oracle Internet Directory
Self-Service Console.
In the Configuration page, select the User Entry subtab and click Next until the
Configure User Attributes page appears.
In the Configure User Attributes page, click Add New Attribute and the Add
New Attribute page appears.
In the Add New Attribute page, select krbPrincipalName from the Directory
Attribute Name list (or the attribute that you have configured for
orclCommonKrbPrincipalAttribute in your identity management realm)
and perform the following steps on this page:
Enter Kerberos Principal Name for the user interface label.
a.
Check Searchable and Viewable.
b.
Select Single Line Text from the UI Type list
c.
Click Done.
d.
Click Next to navigate to the Configure Attribute Categories page, and click
Edit for Basic Information and perform the following steps on this page: