Home » RDBMS Server » Security » Kerberos connection to ORACLE DB 11.2.0.4 get refused (OEL 6.3 + DB 11.2.0.4)
icon4.gif  Kerberos connection to ORACLE DB 11.2.0.4 get refused [message #636129] Fri, 17 April 2015 06:20 Go to next message
voehrs
Messages: 1
Registered: April 2015
Junior Member
Hi guys. I installed a new database for test purpose. Everything fine, no errors or something else. Afterwards I installed vastool and join my system to AD. Now I want to add a Single-Sign-On to a user. This user gets its ticket from kdc:
Valid Starting Expires Principal
17-Apr-2015 13:17:59 17-Apr-2015 23:17:40 krbtgt/FRITZ.BOX@FRITZ.BOX
17-Apr-2015 13:18:00 17-Apr-2015 23:17:40 db/oel6-db.fritz.box@FRITZ.BOX

My sqlnet.ora should be okay:

NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
SQLNET.AUTHENTICATION_KERBEROS5_SERVICE = DB
SQLNET.AUTHENTICATION_SERVICES = (BEQ, KERBEROS5)
SQLNET.KERBEROS5_CONF = /etc/krb5.conf
SQLNET.KERBEROS5_CONF_MIT = TRUE
SQLNET.KERBEROS5_REALMS = /etc/krb.realms
SQLNET.ENCRYPTION_TYPES_SERVER = (DES)
SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER = (MD5)
SQLNET.KERBEROS5_KEYTAB = /etc/opt/quest/vas/db.keytab
SQLNET.ENCRYPTION_TYPES_CLIENT = (DES)
SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT = (MD5)

So I want to connect via sqlplus:

[dbuser@oel6-db ~]$ sqlplus /@orcl


But at this point I get this error:

SQL*Plus: Release 11.2.0.4.0 Production on Fri Apr 17 13:19:07 2015

Copyright (c) 1982, 2013, Oracle. All rights reserved.

Segmentation fault (core dumped)


What's wrong? Do you have any ideas?

Re: Kerberos connection to ORACLE DB 11.2.0.4 get refused [message #636132 is a reply to message #636129] Fri, 17 April 2015 07:34 Go to previous messageGo to next message
BlackSwan
Messages: 26606
Registered: January 2009
Location: SoCal
Senior Member
welcome to this forum

Please read and follow the forum guidelines, to enable us to help you:

http://www.orafaq.com/forum/t/88153/0/ and read http://www.orafaq.com/forum/t/174502/
Re: Kerberos connection to ORACLE DB 11.2.0.4 get refused [message #636138 is a reply to message #636129] Fri, 17 April 2015 10:11 Go to previous message
Michel Cadot
Messages: 66636
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

I think you have to open a SR to Oracle.
Only them can analyze a code dump.

Previous Topic: How to stop self password rotation ?
Next Topic: SYSDBA Login without password
Goto Forum:
  


Current Time: Mon Oct 14 20:07:44 CDT 2019