Connecting to an Oracle Database Server Authenticated by Kerberos

Generally, all the necessary settings need to be done in Net Manager/ in sqlnet.ora, because the working local service name is required to use the ODBC, but the algorithm is supposed to be the following:

• Check the settings in the sqlnet.ora file
• Make sure that the appropriate user has been created in the Oracle database
• Check the settings in the krb5.conf file
• Check the connection

1) First of all, the Kerberos Authentication should be tuned on the client. For this purpose we would recommend to follow the instruction(starting from 19.1.6.1 Step 6A: Configure Kerberos on the Client and on the Database Server).

Please make sure that the appropriate lines also exist in sqlnet.ora according to the instruction: The sqlnet.ora file is updated with the following entries in addition to any optional choices that you may have made in the previous step:

 SQLNET.AUTHENTICATION_SERVICES=(KERBEROS5)
 SQLNET.AUTHENTICATION_KERBEROS5_SERVICE=kservice

and

 SQLNET.KERBEROS5_CONF = C:\Temp\clientAdmin\kerberos\krb5.conf 
 SQLNET.KERBEROS5_CONF_MIT = TRUE

Please note that instead of kservice should be your own value.

SQLNET.KERBEROS5_CONF should contain the path to the krb5.conf, that may be created according to 19.4.2.1 Step 1A: Create the Client Kerberos Configuration Files

2) Follow the steps one by one, including creating user (or skip if it already created), getting initial ticket on.

3) Then, please make sure that the appropriate connection record to your Oracle host are exist in tnsname.ora (by path Oracle_home/network/admin).

Also please check the connection to your host via the Net Manager according to the screenshot (choose the right TNS and click on Test Service button in the left):

4) After all the steps made, you may check the connection once again via sqlplus as well: Connecting to an Oracle Database Server Authenticated by Kerberos.

After that, you may create ODBC with no credentials since they are not required while connecting using Kerberos.

In case of any errors, troubleshooting guide may be helpful: Configuring Kerberos Authentication

If you have any questions or encounter any difficulties, please contact us at support@ispirer.com