Database Security Products (MOSC)

MOSC Banner

How to avoid going through Kerberos Authentication when username/passwd@tns is supplied?

edited Nov 18, 2016 9:20AM in Database Security Products (MOSC) 4 commentsAnswered ✓

Hi,

Actually we are using the following sqlnet.ora setup on both client and server side:

NAMES.DIRECTORY_PATH = (TNSNAMES)

SQLNET.KERBEROS5_CONF=/etc/krb5.conf

SQLNET.KERBEROS5_CONF_MIT=true

SQLNET.AUTHENTICATION_SERVICES=(NONE,BEQ,KERBEROS5PRE,KERBEROS5)

SQLNET.AUTHENTICATION_KERBEROS5_SERVICE=oracle

SQLNET.FALLBACK_AUTHENTICATION=TRUE

NAMES.DEFAULT_DOMAIN = L-BANK.INTERN

SQLNET.EXPIRE_TIME = 20

SQLNET.INBOUND_CONNECT_TIMEOUT=600

When connecting the following way and sqlnet trace level 16 is enabled

sqlplus user/password@tns

we see in the sqlnet trace that first Kerberos Authentication is tried, fails with ORA-12630 but continues with the

already opened session.

How  to avoid in this case Kerberos Authentication is tried?

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center