Does Oracle Virtual Directory (OVD) Use Standard krb5 lib? Does OVD Use DNS's SRV Records To Find Available KDC/Domain Controllers? (Doc ID 370690.1)

Last updated on OCTOBER 25, 2019

Applies to:

Goal

All AD domains automatically create SRV records in the DNS zone Kerberos.REALM.NAME for each KDC in the realm. Since KRB5 libraries (both MIT and Heimdal) default to checking for these records, they automatically find the KDCs. In addition, "krb5.conf" allows specifying only a single KDC, even if there is more than one.  Using the DNS lookup allows the KRB5 libraries to use whichever KDCs are available.

1. Is Oracle Virtual Directory (OVD) using standard krb5 lib, or a modified version?
2. Is OVD using DNS's SRV records to find available KDC/Domain Controllers (i.e., as described in How Domain Controllers Are Located in Windows )?

DISCLAIMER: Oracle is not responsible for instructions/information from 3rd party sites that may be contained in this KM note

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.