OraFAQ Forum: Security » Kerberos connection to ORACLE DB 11.2.0.4 get refused

Home » RDBMS Server » Security » Kerberos connection to ORACLE DB 11.2.0.4 get refused (OEL 6.3 + DB 11.2.0.4)

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Kerberos connection to ORACLE DB 11.2.0.4 get refused [message #636129]

Fri, 17 April 2015 06:20

voehrs
Messages: 1
Registered: April 2015

Junior Member

Hi guys. I installed a new database for test purpose. Everything fine, no errors or something else. Afterwards I installed vastool and join my system to AD. Now I want to add a Single-Sign-On to a user. This user gets its ticket from kdc:
Valid Starting Expires Principal
17-Apr-2015 13:17:59 17-Apr-2015 23:17:40 krbtgt/FRITZ.BOX@FRITZ.BOX
17-Apr-2015 13:18:00 17-Apr-2015 23:17:40 db/oel6-db.fritz.box@FRITZ.BOX

My sqlnet.ora should be okay:

NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
SQLNET.AUTHENTICATION_KERBEROS5_SERVICE = DB
SQLNET.AUTHENTICATION_SERVICES = (BEQ, KERBEROS5)
SQLNET.KERBEROS5_CONF = /etc/krb5.conf
SQLNET.KERBEROS5_CONF_MIT = TRUE
SQLNET.KERBEROS5_REALMS = /etc/krb.realms
SQLNET.ENCRYPTION_TYPES_SERVER = (DES)
SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER = (MD5)
SQLNET.KERBEROS5_KEYTAB = /etc/opt/quest/vas/db.keytab
SQLNET.ENCRYPTION_TYPES_CLIENT = (DES)
SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT = (MD5)

So I want to connect via sqlplus:

[dbuser@oel6-db ~]$ sqlplus /@orcl

But at this point I get this error:

SQL*Plus: Release 11.2.0.4.0 Production on Fri Apr 17 13:19:07 2015

Copyright (c) 1982, 2013, Oracle. All rights reserved.

Segmentation fault (core dumped)

What's wrong? Do you have any ideas?

Report message to a moderator

Re: Kerberos connection to ORACLE DB 11.2.0.4 get refused [message #636132 is a reply to message #636129]

Fri, 17 April 2015 07:34

BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal

Senior Member

welcome to this forum

Please read and follow the forum guidelines, to enable us to help you:

http://www.orafaq.com/forum/t/88153/0/ and read http://www.orafaq.com/forum/t/174502/

Report message to a moderator

Re: Kerberos connection to ORACLE DB 11.2.0.4 get refused [message #636138 is a reply to message #636129]

Fri, 17 April 2015 10:11

Michel Cadot
Messages: 68417
Registered: March 2007
Location: Nanterre, France, http://...

Senior Member
Account Moderator

I think you have to open a SR to Oracle.
Only them can analyze a code dump.

Report message to a moderator

Previous Topic:	How to stop self password rotation ?
Next Topic:	SYSDBA Login without password

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Wed Mar 22 16:31:07 CDT 2023