Posts

Showing posts from May 13, 2023

Kereberos Integration with Oracle Database for authentication - 19c

Image
  Was recently testing integrating kerberos with an oracle database. This is extremely helpful when there are many databases to manage.  Complying with password reset policy across many databases is a nearly impossible task. By integrating with kerberos this is achieved each time a user's domain account password is changed. This also helps to move from default password authentication to strong authentication. As most of the organizations are already using Windows AD, it's very easy to integrate with the Oracle database. Centralized authentication also provides the benefit of single sign-on (SSO) for users. Below are key areas steps are performed in the integration process. Settings on the Kerberos Server Configuration on the Database server Setting on the Client It can be taken to next level for CMU Configurations on the Kerberos Server(Version I used - Windows 2012) Tools and Utilities used Active Directory Users and Computers (ADUC) Ktpass.exe : Utility to generate keytab fi