Kerberos configuration file
Thomas A. La Porte
tlaporte at anim.dreamworks.com
Thu Feb 26 18:03:51 EST 2004
There is an Oracle configuration option that goes into sqlnet.ora
that determines whether or not you are using a new MIT-style
krb5.conf file:
SQLNET.KERBEROS5_CONF_MIT = TRUE
>From the Oracle documentation:
Parameter:
SQLNET.KERBEROS5_CONF_MIT=[TRUE|FALSE]
Description:
This parameter specifies whether the new MIT Kerberos
configuration format is used. If the value is set to TRUE, it
will parse the file according to the new configuration format
rules. When the value is set to FALSE, the default (non-MIT)
configuration is used. The default is FALSE.
++++++++++++++
This may be the problem that you are experiencing.
-- Tom
Thomas A. La Porte, DreamWorks SKG
<mailto:tlaporte at anim.dreamworks.com>
On 26 Feb 2004, Matthias Haslbeck wrote:
>I'm trying to configure Kerberos for use with Oracle9i Database
>through ASO (Advanced Security Option) and Windows 2000 Server with
>Active Directory.
>When trying to get the initial ticket with the okinit utility there's
>always the error message: "Improper format of configuration file". So
>i reviewed my krb5.conf file a few times but i can't find the mistake.
>Here's the content of the file:
>
>[libdefaults]
>default_realm=MYCOMPANY.LOCAL
>[realms]
>nkk-1gje43lrh5h.mycompany.local={kdc=mycompany.local}
>[domain_realm]
>.mycompany.local=MYCOMPANY.LOCAL
>
>"mycompany.local" is the domain of my network and should be the realm
>of the KDC. "nkk-1gje43lrh5h" is the name of my server which hosts the
>Active Directory.
>
>Please tell me what's wrong!
>________________________________________________
>Kerberos mailing list Kerberos at mit.edu
>https://mailman-mit-edu.ezproxyberklee.flo.org/mailman/listinfo/kerberos
>
More information about the Kerberos
mailing list