Kerberos Authentication in .NET Application
Hi All,
My oracle 11g R2 server is configured for kerberos on Win2003sp2(DBSVR) and .NET application is on another win2003sp2(APPSVR). When I configure APPSVR in Active Directory to be "Trust this computer for delegation to any service (Kerberos only)", my application runs perfectly, but when I configure it as "Trust this computer for delegation to specified services only" and add SPN that I created while creating keytab, my application gives error "nacomer: error 12638 received from authentication service". Oracle 11g documentation says that 11g supports constrained delegation, but how, it is not clear. Any hint will be greatly appreciated.
My oracle 11g R2 server is configured for kerberos on Win2003sp2(DBSVR) and .NET application is on another win2003sp2(APPSVR). When I configure APPSVR in Active Directory to be "Trust this computer for delegation to any service (Kerberos only)", my application runs perfectly, but when I configure it as "Trust this computer for delegation to specified services only" and add SPN that I created while creating keytab, my application gives error "nacomer: error 12638 received from authentication service". Oracle 11g documentation says that 11g supports constrained delegation, but how, it is not clear. Any hint will be greatly appreciated.
0