[EMAIL PROTECTED] wrote:
Never used Kerberos myself but I have noticed with the 11ic that it likes TNS_ADMIN to be set to the dir where your .ORA files are??
(In a test environment): [EMAIL PROTECTED] ~ $ printenv TNS_ADMIN /scratch/ora_net [EMAIL PROTECTED] ~ $ ls -l $TNS_ADMIN total 16 -rw-r----- 1 koczan koczan 148 May 16 13:59 shrept.lst -rw-r----- 1 koczan koczan 379 May 16 14:21 sqlnet.ora -rw-r----- 1 koczan koczan 523 May 16 13:59 tnsnames.ora -rw-r----- 1 koczan koczan 331 May 16 13:59 tnsnames.ora.orig [EMAIL PROTECTED] ~ cat /scratch/ora_net/sqlnet.ora # SQLNET.ORA Network Configuration File # Generated by Oracle configuration tools. # # Modified for use with Oracle InstantClient NAMES.DEFAULT_DOMAIN = cs.wisc.edu NAMES.DIRECTORY_PATH= (TNSNAMES) SQLNET.KERBEROS5_CONF=/etc/krb5.conf SQLNET.AUTHENTICATION_SERVICES=(none) #TRACE_LEVEL_CLIENT=16
check to see it that is what you are useing and give permission to the ORacle user to use that dir
It just appears to use the privileges of the user who I'm running the script as (myself) to read the .ora files. It's reading the .ora files fine.
One thing I did find, running strace on the programs, is that DBD::Oracle only tries to use Kerberos if the Kerberos C libraries (libkrb5.so.3, et al) are already loaded when trying to connect to Oracle, for instance by DBD::Pg.
There is a workaround (specify the krb5 config file in sqlnet.ora go from there), but it seems to me that this is unexpected and undesired behavior.
Point of potential interest, the only places I found references to krb anything were in Oracle client libraries.
[EMAIL PROTECTED] DBD-Oracle-1.21 $ grep -ri krb /usr/lib/oracle/11.1.0.1/client/* /usr/include/oracle/11.1.0.1/client/* /scratch/DBD-Oracle-1.21/*
Binary file /usr/lib/oracle/11.1.0.1/client/lib/libclntsh.so matches Binary file /usr/lib/oracle/11.1.0.1/client/lib/libociei.so matches Binary file /usr/lib/oracle/11.1.0.1/client/lib/libclntsh.so.11.1 matches
It is just a long shot.
It's certainly better than nothing, thanks for the response. Peter
