Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Oracle Security >> Oracle Security >> Kerberos login working but now can't login as sysd
        
(Message started by: Pete Finnigan on Feb 19^th, 2007, 6:31pm)

Title: Kerberos login working but now can't login as sysd
Post by Pete Finnigan on Feb 19^th, 2007, 6:31pm

I finally got Kerberos authentication working using MS AD and OID. But now I can't login as sys (as sysdba) on the server presumably because it is trying to authenticate against OID where sys does not exist (nor will it ever). The only way I can login as sys is via DBVisualizer using JDBC (presumably because it doesn't attempt kerberos authentication). This is a problem not just because of sys but because of the plethora of system related logins that oracle expects to be available. Eventually after a day or two the database runs out of processes (presumably from its own failed housekeeping logins). Any suggestions?
Thanks, Dave.

Title: Re: Kerberos login working but now can't login as
Post by Pete Finnigan on Feb 19^th, 2007, 7:14pm

To answer my own problem :)

I had removed beq as an authentication service i.e. the line in sqlnet.ora should read:
SQLNET.AUTHENTICATION_SERVICES=(beq,kerberos5)