Welcome Guest ( Log In | Register )


 
 
 
 
 
 

 
 
Oracle 

Performance Tuning Reference poster
 
Oracle training in Linux 

commands
 
Oracle training Weblogic Book
 
Easy Oracle Jumpstart
 
Oracle training & performance tuning books
 
Burleson Consulting Remote DB Administration
 
 
 
Reply to this topicStart new topic
> Report server - database connection with Kerberos - Help !
dalrid
post Mar 13 2016, 11:07 AM
Post #1


Newbie
*

Group: Possible Spammers
Posts: 1
Joined: 13-March 16
Member No.: 51,228



Hi,

Please help.

I have configured Kerberos authentication for Forms on the server and it works fine, it's working fine in sqlplus as well.

I cannot get it to work for Reports (Reports Servlet 11.1.2.2.0)

Looking for help with connection from Report Server by kerberos protocol.

While trying to the launch reports using kerberos tickets. We are calling report server from forms using connection string "/@database_name".
Thatís working well with forms (connecting user through kerberos protocol), but reports returns REP-501 and ORA-01017 (cannot find user).

I've found something similar here :
REP-501 Error When Connecting to Oracle Reports Using Externally Authorised User ( Doc ID 162457.1 )
From the dokument :
" If you pass a command line with USERID=/ to the Reports Server, then an error is
generated because it will try to use the username of the Reports Server process
rather than the username of the client. "

Report Server Process at our server is running as domain user, and that user exists on the database as external identified user.

To run Reports from the Forms we are using RUN_REPORT_OBJECT built-in:
Function RUN_REPORT_OBJECT described in the documentation:
http://www.oracle.com/technetwork/develope...11g-1905204.pdf


HELP !!

Go to the top of the page
 
+Quote Post
burleson
post Mar 13 2016, 02:59 PM
Post #2


Advanced Member
***

Group: Members
Posts: 13,442
Joined: 26-January 04
Member No.: 13



Hi Dalrid, and welcome to the forum!

"Identified external" is a security issue, and it means that you cannot connect with a password from a remote server.

I'm not a SQL*Reports person, but I wonder:

- Have you tried connecting with another user ID?

- Can you get to the database via the tnsping command?

**********************************************

>> REP-501

I have some notes here:

http://www.dba-oracle.com/t_rep_501_unable_to_connect.htm


--------------------
Hope this helps. . .

Donald K. Burleson
Oracle Press author
Author of Oracle Tuning: The Definitive Reference
Go to the top of the page
 
+Quote Post
Berni
post Mar 13 2016, 07:48 PM
Post #3


Newbie
*

Group: Members
Posts: 1
Joined: 13-March 16
Member No.: 51,229



sorry for new account, but forum writes to me that I haven't permissions to answer my own posts...

Hi,

thank's for your answer !

I did all the steps from your post, and from metalink and from all other world (google smile.gif )

"Externally Authorized User" is a security issue ? Why? I'm not trying to connect with OS user.
I'm using Kerberos tickets for user.

and from beginning :
SEC_CASE_SENSITIVE_LOGON - I have "false"

" Bad User ID or connect string (...) it will try to use the username of the Reports Server process rather than the username of the client."
My reports are running with domain user, so "username of the Reports Server proces" = domain name (connection to database with sqlplus on domain name works fine).

Document from metalink 162457.1 is about OP$ - operating system user. I'm connecting with Kerberos tickets, user is identified with windows domain.

It's working for me for database(1) server (linux), it's working on weblogic server. I'm connecting with SqlPlus on domain user to database(1) from weblogic server.
I'm connecting to database(1) with forms, and it's working fine.

I cannot connect to database(1) form reports server. I think, report server is not using kerberos protocol while connecting to database. I think, maybe missing some parameters. I set java.security.krb5.realm, java.security.krb5.kdc for WLS_REPORTS.

You may ask me, why java.security, it's becouse something I've found in database logs.
While connecting to database with Oracle forms, in database logs, I saw connection from frmweb.exe -and it's ok.
Connection from report server is like javaw.exe.

Really, I don't know what to do now. It was simple to configure with forms, but for reports I spent many of hours. I think it's probably new bug.
Go to the top of the page
 
+Quote Post
burleson
post Mar 13 2016, 08:23 PM
Post #4


Advanced Member
***

Group: Members
Posts: 13,442
Joined: 26-January 04
Member No.: 13



Hi Berni,

Sorry that my notes were not of help to you . . .

>> I think it's probably new bug.

That's a good idea, they will have an answer:

http://support.oracle.com

Let us know the resolution!

Good Luck!




--------------------
Hope this helps. . .

Donald K. Burleson
Oracle Press author
Author of Oracle Tuning: The Definitive Reference
Go to the top of the page
 
+Quote Post
marinab
post Mar 7 2017, 05:22 PM
Post #5


Newbie
*

Group: Members
Posts: 1
Joined: 5-March 17
Member No.: 51,819



Hi Dalrib,
How did you configured sqlnet.ora on oracle forms server?
I having problems use Kerberos authentication for oracle forms.
can you help me?
just send me sqlnet.ora on database server and forms server.
Thanks Marinab
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 

Lo-Fi Version Time is now: 28th June 2017 - 05:34 PM