My Oracle Support Banner

Configuring Kerberos Authentication with a Microsoft Windows Active Directory KDC (Doc ID 1304004.1)

Last updated on MARCH 19, 2024

Applies to:

Advanced Networking Option - Version and later
Information in this document applies to any platform.


The purpose of this article is to describe how to configure an Oracle database for Kerberos authentication against Microsoft Windows Active Directory, and how to configure the Oracle clients.


This article is primarily intended for System and Database Administrators wishing to implement Kerberos authentication of Oracle Database users against a Windows Server Active Directory Server.

The article discusses aspects of configuring Kerberos authentication between Oracle Database and Microsoft Windows Server Active Directory

The article is intended to supplement the Oracle Security Guide. This article has a minimum version requirement of for both the client and database server.

The article assumes the existence of an already fully functional Microsoft Windows Active Directory server and an Oracle Database server.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
 Part 1: Create Users in Windows Active Directory
 Part 2: Create Key Table in Windows
 Part 3: Configuring the Oracle Database
 Part 4: Configuring SQLNET for Kerberos on the Oracle Server
 Part 5: Configuring SQLNET for Kerberos on the Oracle Client for a manual ticket
 Part 6: Configuring SQLNET for Kerberos on the Oracle Client using the internal credential cache

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.