Oracle Database B10772-01 Uživatelský manuál stáhnout pdf (Strana 158)

100

101

Enabling Kerberos Authentication

6-10 Oracle Database Advanced Security Administrator's Guide

Task 8: Create a Kerberos User

To create Oracle users that Kerberos can authenticate, perform this task on the

Kerberos authentication server where the administration tools are installed. The

realm must already exist.

Run /krb5/admin/kadmin.local as root to create a new Kerberos user, such as

krbuser.

The following example is UNIX-speciﬁc:

# ./kadmin.local

kadmin.local: addprinc krbuser

Enter password for principal: "[email protected]": (password does not display)

Re-enter password for principal: "[email protected]": (password does not

display)

kadmin.local: exit

Task 9: Create an Externally Authenticated Oracle User

Run SQL*Plus on the Oracle database server to create the Oracle user that

corresponds to the Kerberos user. In the following example, OS_AUTHENT_PREFIX

is set to null (""). The Oracle user name is in uppercase enclosed in double

quotation marks as shown in the following example:

SQL> CONNECT / AS SYSDBA;

SQL> CREATE USER "[email protected]" IDENTIFIED EXTERNALLY;

SQL> GRANT CREATE SESSION TO "[email protected]";

Description: This parameter speciﬁes the complete path name to the

Kerberos realm translation ﬁle. The translation ﬁle provides a

mapping from a host name or domain name to a realm. The

default is operating system-dependent. For UNIX, it is

/etc/krb.realms.

Example: SQLNET.KERBEROS5_REALMS=/krb5/krb.realms

Note: The utility names in this section are executable programs.

However, the Kerberos user name krbuser and realm

SOMECO.COM are examples only; they can vary among systems.

1 2 ... 153 154 155 156 157 158 159 160 161 162 163 ... 517 518

Komentáře k této Příručce

Žádné komentáře

Oracle Database B10772-01 Uživatelský manuál Strana 158

Komentáře k této Příručce

Související produkty a manuály pro Databázový software Oracle Database B10772-01