Database Administration (MOSC)

MOSC Banner

Wrong 'Authenticated Identity'(?) Using Proxy in SQL Developer w. Kerberos authenticated CMU

I have a question about how proxy connection works and should be specified when doing SQL Developer connection.

Scenario:

I have a connected Kerberos user: myName@MYORG.COM

In Kerberos (i.e. in MS Active Directory) the user is member of a group MYGROUP@MYORG.COM

On the database I have a user MYGROUP which is create something like "create user MYGROUP identified globally as 'cn=MYGROUP, ou...,dc=MYORG,dc=COM';"

And onther user APPSCHEMA which have been given proxy privs like: "alter user APPSCHEMA grant connect through MYGROUP"

From a windows PC AD(Kerberos) authenticated as myName@MYORG.COM i can start sqlplus and do a connection with "sqlplus [APPSCHEMA]@tnsalias". That will connect and "select sys_context('userenv', 'authenticated_identity') from dual;" will return "myName@MYORG.COM"

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center