Configuring SQL deveoper to connect to database using kerberose

 

Sqldeveloper: 23.1

 

Tools > Preferences > Database > Advanced

 

Config File(krb5.conf)= Give full path to krb5.conf file

Credential Cache file = cache file location

Click on Configure Button and make sure oracle 21c client home is selected. I spent sometime testing with 19c home it never worked. 

 

 

make sure that sqlnet.ora parameter is properly configured and correct path is used in the sqldeveloper as well. If default is used update sqldeveloper with that path. Sqldeveloper does not work with kerberose ticket from memory

 

SQLNET.KERBEROS5_CC_NAME=C:\app\krb5_cc 


Edit: sqldeveloper 23.1 with database client 21c, it works without giving krb5 cache file location. 21c client is able to take tickets from MSLSA (Memory)

Before connecting to database using kerberos authentication make sure that kerebeos ticket is already available.

new kerberos ticket can be generated with

okinit <domain_username>

oklist can be used to check current ticket and expiry 

 

 

 


setup a new connection on sqldeveloper

Authentication type: kerberos

in the advanced tab tick the checkbox: Use OCI


 

 

Lets query and see user and authentication info

 Select user"DB_SCHEMA",
sys_context('userenv','authentication_method') "Athentication Method",
sys_context('userenv','authenticated_identity') "Domain User"
from dual


 

 

Comments

Post a Comment

Popular posts from this blog

Error processing request - Contact your application administrator apex 20.1

Image
After upgrading 11.2.0.4 to 19c with apex 20.1 accessing apex_admin/apex pages was throwing “Error processing request” Contact your application administrator. There were three invalid objects for APEX_200100 WWV_FLOW_SESSION_RAS WWV_FLOW_WIZARD_API WWV_FLOW_DATA_LOADER Tried compiling these objects but compile was completing with PL/SQL: ORA-00942: table or view does not exist To resolve the issue following rant needs to be given then compile (ran both grant and compile as sysdba) grant select on SYS.DBA_XS_DYNAMIC_ROLES to APEX_200100; grant select on SYS.DBA_TAB_IDENTITY_COLS to APEX_200100; alter package APEX_200100.WWV_FLOW_SESSION_RAS compile body; alter package APEX_200100.WWV_FLOW_WIZARD_API compile body; alter package APEX_200100.WWV_FLOW_DATA_LOADER compile body; Returned 0 invalid object for APEX_200100  select * from dba_objects where status = 'INVALID' and owner = 'APEX_200100' ; Now both admin and apex pages ar
Read more

APP-FND-01436: List of Values cannot find any values for you to choose error from concurrent request program parameter (R12 12.1.3)

Image
APP-FND-01436: List of Values cannot find any values for you to choose error from concurrent request program parameter After upgrading oracle application 11i(11.5.10.2) to R12(12.1.3) running concurrent program request caused this issue When concurrent program is run for a concurrent request after upgrading to R12 12.1.3 the lov, which is attached to a parameter, gives APP-FND-01436: “List of Values cannot find any values for you to choose”. When the same request is run from oracle applications 11i 11.5.10.2 the same value set is working fine. The value set is based on a table. If you go and test the value set query from the value set definition screen it returns complete successful message yet if you go to the parameter of the concurrent request program form where the particular value set is used it gives you the above error. After searching google and oracle support I found metalink note 1400963.1, EBS R12.1: Parameter for Concurrent Request Using Table Based LOV G
Read more

WEB ADI - issues encountered during initial access

Image
On accessing create document link under Desktop Integrator responsibility browser was showing following error Set BNE UIX Physical Directory profile value to proper directory at site level Location = $COMMON_TOP/html/cabo/  (11i) Location = $COMMON_TOP/webapps/oacore/html/cabo/  (R12) As this was a cloned instance the value of this profile setting was pointing to a wrong location. set as BNE UIX Physical Directory /u03/oracle/prodcomn/html/cabo/ Access to functions are controlled by function security so to access and work with web adi the user should have proper access. You should have access to particular integrator to access and work with it Find out responsibility which is created to work with web adi check the main menu for this responsibility. Modify the responsibility or Menu if default is not fitting to your needs. For instance Desktop Integration Menu has create document, Define Lay out, Define Mapping, Manage Documents, Setup options Note : you must add
Read more