Oracle Database Advanced Security 10g Release 1, Administrator'S Manual

Page: 260 / 518

Configuring DCE for Oracle DCE Integration
10-6 Oracle Database Advanced Security Administrator's Guide
Task 2: Install the Key of the Server into a Keytab File
Install the key of the server into a keytab file,
dcepa.key
. This file contains the
password of the principal under which the Oracle Net listener starts. The Oracle
Net listener reads this file to authenticate itself to DCE. To generate the keytab file,
enter the following:
% dce_login cell_admin password
% rgy_edit
Current site is: registry server at /.../cell1/subsys/dce/sec/master
rgy_edit=> ktadd -p oracle -pw Oracle_password -f
$ORACLE_HOME/dcepa/admin/dcepa.key
rgy_edit=>quit
bye
Task 3: Configure DCE CDS for Use by Oracle DCE Integration
1.
Create Oracle directories in the CDS namespace by entering the following after
installing DCE Integration for the first time in a cell. Create directories on all
CDS replicas:
% dce_login cell_admin
Enter Password:(password not displayed)
$ cdscp
Note:
Perform this task on the server only once after DCE
Integration has been installed. Do not perform this task on client
systems.
Note:
■
Perform this task on the server only once after DCE Integration
has been installed. Do not perform this task on client systems.
■
Remember to substitute the full path name for the $ORACLE_
HOME variable. If the specified directories do not exist, create
them before running the command. To create the directories.
enter the following:
mkdir $ORACLE_HOME/dcepa
mkdir $ORACLE_HOME/dcepa/admin