|
plsqldeveloper kerberos authentication
|
Joined: Nov 2007
Posts: 53 Tel Aviv,Israel
Member
|
OP
Member
Joined: Nov 2007
Posts: 53 Tel Aviv,Israel |
Hi.
We've managed to setup oracle advanaced security with kerb authentication. When i enter to plsqldeveloper without user/password but only with SID, it works well.
But i still got few issues:
1. Logon history The user/password@db entry isnt being kept in the logon history.
2. Domain Authentication - using okinit When the end user wants to login into the DB from a machine that isn't part of the domain - they need to activate a tool called okinit in order to authenticate to the right domain and get a kerberos ticket. Only later on they can login without user/pass. That is a normal behaviour of Oracle Client, but still I would prefer if you guys could add to the login screen an option to authenticate to the domain itself , instead of activating the okinit tool before activating plsqldeveloper.
Sagi Zvi
|
|
|
Re: plsqldeveloper kerberos authentication
|
Joined: Aug 1999
Posts: 22,487
Member
|
Member
Joined: Aug 1999
Posts: 22,487 |
[quote=sagizvi]1. Logon history The user/password@db entry isnt being kept in the logon history.[/quote] We'll check it out and will fix it.
[quote=sagizvi]2. Domain Authentication - using okinit When the end user wants to login into the DB from a machine that isn't part of the domain - they need to activate a tool called okinit in order to authenticate to the right domain and get a kerberos ticket. Only later on they can login without user/pass. That is a normal behaviour of Oracle Client, but still I would prefer if you guys could add to the login screen an option to authenticate to the domain itself , instead of activating the okinit tool before activating plsqldeveloper.[/quote] I have added this to the list of enhancement requests.
Marco Kalter Allround Automations
|
|
|
Re: plsqldeveloper kerberos authentication
|
Joined: Nov 2007
Posts: 53 Tel Aviv,Israel
Member
|
OP
Member
Joined: Nov 2007
Posts: 53 Tel Aviv,Israel |
Sagi Zvi
|
|
|
Re: plsqldeveloper kerberos authentication
|
Joined: Nov 2007
Posts: 53 Tel Aviv,Israel
Member
|
OP
Member
Joined: Nov 2007
Posts: 53 Tel Aviv,Israel |
in the meanwhile i can configure the okinit as a "tool configuration". Our clients are using a network drive for plsql binaries and configuration. is there a way to configure okinit for all of the clients from this single network location?
Sagi Zvi
|
|
|
Re: plsqldeveloper kerberos authentication
|
Joined: Aug 1999
Posts: 22,487
Member
|
Member
Joined: Aug 1999
Posts: 22,487 |
Yes, this is possible. You can copy the corresponding [ExternalTools] section from your user.prefs file to the Preferences\Default\user.prefs file on the server. This way all new users will get these tools by default. For existing users you will need to copy the tool definition to their existing user.prefs file.
Marco Kalter Allround Automations
|
|
|
Re: plsqldeveloper kerberos authentication
|
Joined: Oct 2022
Posts: 1
Member
|
Member
Joined: Oct 2022
Posts: 1 |
Hello, can I ask you for instruction how to setup pl/sql developer to use kerberos authentication? Thanks
|
|
|
Re: plsqldeveloper kerberos authentication
|
Joined: Nov 2007
Posts: 53 Tel Aviv,Israel
Member
|
OP
Member
Joined: Nov 2007
Posts: 53 Tel Aviv,Israel |
Marco. Did you add these features already ? It has been a few years now.
Sagi Zvi
|
|
|
Re: plsqldeveloper kerberos authentication
|
Joined: Aug 1999
Posts: 22,487
Member
|
Member
Joined: Aug 1999
Posts: 22,487 |
Which feature(s) do you mean specifically?
Marco Kalter Allround Automations
|
|
|
Re: plsqldeveloper kerberos authentication
|
Joined: Nov 2007
Posts: 53 Tel Aviv,Israel
Member
|
OP
Member
Joined: Nov 2007
Posts: 53 Tel Aviv,Israel |
this one: 2. Domain Authentication - using okinit When the end user wants to login into the DB from a machine that isn't part of the domain - they need to activate a tool called okinit in order to authenticate to the right domain and get a kerberos ticket. Only later on they can login without user/pass. That is a normal behaviour of Oracle Client, but still I would prefer if you guys could add to the login screen an option to authenticate to the domain itself , instead of activating the okinit tool before activating plsqldeveloper. I have added this to the list of enhancement requests.[/quote]
Sagi Zvi
|
|
|
|
|
|