tag:blogger.com,1999:blog-12361937.post4537324970720006531..comments2022-11-05T07:11:03.077+01:00Comments on Frankie goes to Hollywood: Single Sign On to the Database (or WNA for SQL*Plus)Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.comBlogger6125tag:blogger.com,1999:blog-12361937.post-73191415608441722252011-04-12T15:23:57.784+02:002011-04-12T15:23:57.784+02:00Cannot comment on that - 11.2 is on the backlog li...Cannot comment on that - 11.2 is on the backlog list, somewhere :).<br />However, I have been looking into Proxy users (and this just sounds too similar to be completely off), and was NOT impressed.<br />I would rather have the remote credentials presented to the database, so I can actually do SSO/WNA to the database as well, and use features like Enterprise user Security. <br />I will touch thatFrankhttps://www.blogger.com/profile/07830428804236732019noreply@blogger.comtag:blogger.com,1999:blog-12361937.post-77496486076155869962011-03-29T06:39:49.217+02:002011-03-29T06:39:49.217+02:00Hi Frank,
Please accept my apologies for being too...Hi Frank,<br />Please accept my apologies for being too late as I was on leave from my office for two weeks and was not able to respond timely. I am sorry, I could not understand properly your statement in your document, “your server should be configured to support Kerberos, i.e. without support for Kerberos on OS level, this is less likely to succeed.” If it means “Kerberos libraries should beUnknownhttps://www.blogger.com/profile/06232208951099945227noreply@blogger.comtag:blogger.com,1999:blog-12361937.post-71653785792014674792011-03-11T21:16:05.802+01:002011-03-11T21:16:05.802+01:00Altaf, thanks for the thumbs up. I am not quite su...Altaf, thanks for the thumbs up. I am not quite sure what you mean by "it is possible for the kerberos user to be authenticated without support for Kerberos on OS level" - of course, somewhere along the line, there should be Kerberos support. If not, you could never have received a Kerberos ticket.<br />As for your problem: it seems a MicroSoft issue. I recall some settings like "Frankhttps://www.blogger.com/profile/07830428804236732019noreply@blogger.comtag:blogger.com,1999:blog-12361937.post-32594733197274043512011-03-07T19:27:54.075+01:002011-03-07T19:27:54.075+01:00Hi Frank,
You did a great job, as according to my ...Hi Frank,<br />You did a great job, as according to my knowledge, there is no document found of this level on the web. I found two documents on metalink but they are much ambiguous. I would like to add a bit into your document that it is possible for the kerberos user to be authenticated without support for Kerberos on OS level.<br />I'm facing a problem. My oracle 11g server is configuredUnknownhttps://www.blogger.com/profile/06232208951099945227noreply@blogger.comtag:blogger.com,1999:blog-12361937.post-60919807282053849202010-10-26T15:41:48.257+02:002010-10-26T15:41:48.257+02:0012641, 00000, "Authentication service failed ...12641, 00000, "Authentication service failed to initialize"<br />// *Cause: The authentication service failed during initialization.<br />// *Action: Enable tracing to determine the exact error.<br />Did you trace the Kerberos communication, using the following entries in sqlnet.ora?<br />TRACE_LEVEL_OKINIT=16<br />TRACE_DIRECTORY_OKINIT=<br />TRACE_FILE_OKINIT=krb_initFrankhttps://www.blogger.com/profile/07830428804236732019noreply@blogger.comtag:blogger.com,1999:blog-12361937.post-329500118855698032010-10-20T04:11:10.083+02:002010-10-20T04:11:10.083+02:00Hello Frank,
Thanks for posting this. We have Ora...Hello Frank,<br /><br />Thanks for posting this. We have Oracle Server on Windows 2003, KDC on another Windows 2003. okinit works and we get the initial TGT. We get the ORA-12641 when try to connect using sqlplus. Most of the documentation talk about oracle server running on Unix/Linux not Windows. We turned on trace but can not find anything more than ORA-12641, TNS-12641Anonymousnoreply@blogger.com