Print Thread
plsqldeveloper kerberos authentication
#34120 06/01/09 06:43 AM
Joined: Nov 2007
Posts: 53
Tel Aviv,Israel
S
sagizvi Offline OP
Member
OP Offline
Member
S
Joined: Nov 2007
Posts: 53
Tel Aviv,Israel
Hi.

We've managed to setup oracle advanaced security with kerb authentication. When i enter to plsqldeveloper without user/password but only with SID, it works well.

But i still got few issues:

1. Logon history
The user/password@db entry isnt being kept in the logon history.

2. Domain Authentication - using okinit
When the end user wants to login into the DB from a machine that isn't part of the domain - they need to activate a tool called okinit in order to authenticate to the right domain and get a kerberos ticket.
Only later on they can login without user/pass. That is a normal behaviour of Oracle Client, but still I would prefer if you guys could add to the login screen an option to authenticate to the domain itself , instead of activating the okinit tool before activating plsqldeveloper.


Sagi Zvi
Re: plsqldeveloper kerberos authentication
sagizvi #34122 06/01/09 10:35 AM
Joined: Aug 1999
Posts: 22,200
Member
Offline
Member
Joined: Aug 1999
Posts: 22,200
[quote=sagizvi]1. Logon history
The user/password@db entry isnt being kept in the logon history.[/quote]
We'll check it out and will fix it.

[quote=sagizvi]2. Domain Authentication - using okinit
When the end user wants to login into the DB from a machine that isn't part of the domain - they need to activate a tool called okinit in order to authenticate to the right domain and get a kerberos ticket.
Only later on they can login without user/pass. That is a normal behaviour of Oracle Client, but still I would prefer if you guys could add to the login screen an option to authenticate to the domain itself , instead of activating the okinit tool before activating plsqldeveloper.[/quote]
I have added this to the list of enhancement requests.


Marco Kalter
Allround Automations
Re: plsqldeveloper kerberos authentication
Marco Kalter #34124 06/01/09 04:41 PM
Joined: Nov 2007
Posts: 53
Tel Aviv,Israel
S
sagizvi Offline OP
Member
OP Offline
Member
S
Joined: Nov 2007
Posts: 53
Tel Aviv,Israel
thanks


Sagi Zvi
Re: plsqldeveloper kerberos authentication
sagizvi #34125 06/01/09 04:46 PM
Joined: Nov 2007
Posts: 53
Tel Aviv,Israel
S
sagizvi Offline OP
Member
OP Offline
Member
S
Joined: Nov 2007
Posts: 53
Tel Aviv,Israel
in the meanwhile i can configure the okinit as a "tool configuration".
Our clients are using a network drive for plsql binaries and configuration. is there a way to configure okinit for all of the clients from this single network location?


Sagi Zvi
Re: plsqldeveloper kerberos authentication
sagizvi #34127 06/02/09 10:05 AM
Joined: Aug 1999
Posts: 22,200
Member
Offline
Member
Joined: Aug 1999
Posts: 22,200
Yes, this is possible. You can copy the corresponding [ExternalTools]
section from your user.prefs file to the Preferences\Default\user.prefs file on the server. This way all new users will get these tools by default. For existing users you will need to copy the tool definition to their existing user.prefs file.


Marco Kalter
Allround Automations
Re: plsqldeveloper kerberos authentication
sagizvi #64262 10/03/22 01:10 PM
Joined: Oct 2022
Posts: 1
M
Member
Offline
Member
M
Joined: Oct 2022
Posts: 1
Hello,
can I ask you for instruction how to setup pl/sql developer to use kerberos authentication?
Thanks

Re: plsqldeveloper kerberos authentication
sagizvi #64615 05/20/23 12:32 PM
Joined: Nov 2007
Posts: 53
Tel Aviv,Israel
S
sagizvi Offline OP
Member
OP Offline
Member
S
Joined: Nov 2007
Posts: 53
Tel Aviv,Israel
Marco. Did you add these features already ? It has been a few years now.


Sagi Zvi
Re: plsqldeveloper kerberos authentication
sagizvi #64618 05/22/23 08:52 AM
Joined: Aug 1999
Posts: 22,200
Member
Offline
Member
Joined: Aug 1999
Posts: 22,200
Which feature(s) do you mean specifically?


Marco Kalter
Allround Automations
Re: plsqldeveloper kerberos authentication
Marco Kalter #64714 07/15/23 06:52 AM
Joined: Nov 2007
Posts: 53
Tel Aviv,Israel
S
sagizvi Offline OP
Member
OP Offline
Member
S
Joined: Nov 2007
Posts: 53
Tel Aviv,Israel
this one:

Originally Posted by sagizvi
2. Domain Authentication - using okinit
When the end user wants to login into the DB from a machine that isn't part of the domain - they need to activate a tool called okinit in order to authenticate to the right domain and get a kerberos ticket.
Only later on they can login without user/pass. That is a normal behaviour of Oracle Client, but still I would prefer if you guys could add to the login screen an option to authenticate to the domain itself , instead of activating the okinit tool before activating plsqldeveloper.
I have added this to the list of enhancement requests.[/quote]


Sagi Zvi

Moderated by  support 

Link Copied to Clipboard
Powered by UBB.threads™ PHP Forum Software 7.7.4
(Release build 20200307)
Responsive Width:

PHP: 7.1.33 Page Time: 0.067s Queries: 15 (0.027s) Memory: 2.5330 MB (Peak: 3.0378 MB) Data Comp: Off Server Time: 2024-04-19 22:23:55 UTC
Valid HTML 5 and Valid CSS