I am not familiar with oracle and Kerberos, and I am trying to configure oracle 19c to use kerberos authentication. And met this error "114: Key table entry not found" in trace file, please kindly help on it, thank you so so much!!!
environment
windows active directory on windows 2019
oracle 19c server on the same machine as windows active directory (on windows 2019), is it supported to put oracle server and active directory on the same machine?
configuration
sqlnet.ora
# sqlnet.ora Network Configuration File: C:\oracle\server\NETWORK\ADMIN\sqlnet.ora
# Generated by Oracle configuration tools.
# This file is actually generated by netca. But if customers choose to
# install "Software Only", this file wont exist and without the native
# authentication, they will not be able to connect to the database on NT.
# SQLNET.AUTHENTICATION_SERVICES= (NTS)
# NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT, ONAMES, HOSTNAME)
SQLNET.KERBEROS5_KEYTAB=C:\oracle\keytab2
SQLNET.KERBEROS5_CONF=C:\oracle\krb5.conf
SQLNET.KERBEROS5_CONF_MIT=TRUE
#SQLNET.AUTHENTICATION_KERBEROS5_SERVICE=SANDYORACL19C1
SQLNET.AUTHENTICATION_KERBEROS5_SERVICE=orcl
SQLNET.AUTHENTICATION_SERVICES=(kerberos5pre,kerberos5)
#should we remove NTS and BEQ here?
SQLNET.KERBEROS5_CLOCKSKEW=6000
SQLNET.KERBEROS5_CONF_MIT=TRUE
SQLNET.FALLBACK_AUTHENTICATION=TRUE
SQLNET.KERBEROS5_CC_NAME=C:\Users\Administrator\AppData\Local\Temp\2\krb5cc
#SQLNET.KERBEROS5_CC_NAME=OSMSFT://
DIAG_ADR_ENABLED=off
TRACE_LEVEL_SERVER=16
TRACE_DIRECTORY_SERVER=C:\oracle\trace
TRACE_FILE_SERVER=oracle
krb5.conf
[libdefaults]
default_realm = SANDYTEST.COM
clockskew = 6000
forwardable = yes
[realms]
SANDYTEST.COM = {
kdc = sandyOracle19c1.sandytest.com:88
}
[domain_realm]
.sandytest.com = SANDYTEST.COM
sandytest.com = SANDYTEST.COM
.SANDYTEST.COM = SANDYTEST.COM
SANDYTEST.COM = SANDYTEST.COM
.fyre.ibm.com = SANDYTEST.COM
fyre.ibm.com = SANDYTEST.COM
.FYRE.IBM.COM = SANDYTEST.COM
FYRE.IBM.COM = SANDYTEST.COM
User I created in active directory: User logon name: orcl, First name and full name: sandyOracle19c1.SANDYTEST.COM
another active directory user: username: oracmu, password: Passw0rd
create user oracmu identified externally as oracmu#SANDYTEST.COM";
grant create session to "oracmu#SANDYTEST.COM";
command output
PS C:\oracle> ktpass.exe -princ orcl/sandyOracle19c1.SANDYTEST.COM#SANDYTEST.COM -mapuser sandyOracle19c1.SANDYTEST.COM -crypto all -pass Passw0rd -out c:\keytab2
Targeting domain controller: sandyOracle19c1.sandytest.com
Using legacy password setting method
Successfully mapped orcl/sandyOracle19c1.SANDYTEST.COM to orcl.
WARNING: pType and account type do not match. This might cause problems.
Key created.
Key created.
Key created.
Key created.
Key created.
Output keytab to c:\keytab2:
Keytab version: 0x502
keysize 75 orcl/sandyOracle19c1.SANDYTEST.COM#SANDYTEST.COM ptype 0 (KRB5_NT_UNKNOWN) vno 3 etype 0x1 (DES-CBC-CRC) keylength 8 (0x910834c8201cea13)
keysize 75 orcl/sandyOracle19c1.SANDYTEST.COM#SANDYTEST.COM ptype 0 (KRB5_NT_UNKNOWN) vno 3 etype 0x3 (DES-CBC-MD5) keylength 8 (0x910834c8201cea13)
keysize 83 orcl/sandyOracle19c1.SANDYTEST.COM#SANDYTEST.COM ptype 0 (KRB5_NT_UNKNOWN) vno 3 etype 0x17 (RC4-HMAC) keylength 16 (0xa87f3a337d73085c45f9416be5787d86)
keysize 99 orcl/sandyOracle19c1.SANDYTEST.COM#SANDYTEST.COM ptype 0 (KRB5_NT_UNKNOWN) vno 3 etype 0x12 (AES256-SHA1) keylength 32 (0x0890c460c8fd79c6c965c474fad51df3b7cf42d1aecfbb42606884c99813b3a2)
keysize 83 orcl/sandyOracle19c1.SANDYTEST.COM#SANDYTEST.COM ptype 0 (KRB5_NT_UNKNOWN) vno 3 etype 0x11 (AES128-SHA1) keylength 16 (0x540b6e8e2422fcd31c6b9788031c5f2f)
PS C:\oracle> setspn -Q orcl/sandyOracle19c1.SANDYTEST.COM
Checking domain DC=sandytest,DC=com
CN=sandyOracle19c1.SANDYTEST.COM,CN=Users,DC=sandytest,DC=com
orcl/sandyOracle19c1.SANDYTEST.COM
Existing SPN found!
PS C:\oracle> setspn -X
Checking domain DC=sandytest,DC=com
Processing entry 0
found 0 group of duplicate SPNs.
PS C:\oracle> okdstry
Kerberos Utilities for 64-bit Windows: Version 19.0.0.0.0 - Production on 05-SEP-2022 23:51:12
Copyright (c) 1996, 2019 Oracle. All rights reserved.
Configuration file : C:\oracle\krb5.conf.
PS C:\oracle> okinit oracmu
Kerberos Utilities for 64-bit Windows: Version 19.0.0.0.0 - Production on 05-SEP-2022 23:51:21
Copyright (c) 1996, 2019 Oracle. All rights reserved.
Configuration file : C:\oracle\krb5.conf.
Password for oracmu#SANDYTEST.COM:
PS C:\oracle> oklist
Kerberos Utilities for 64-bit Windows: Version 19.0.0.0.0 - Production on 05-SEP-2022 23:51:27
Copyright (c) 1996, 2019 Oracle. All rights reserved.
Configuration file : C:\oracle\krb5.conf.
Ticket cache: FILE:C:\Users\Administrator\AppData\Local\Temp\2\krb5cc
Default principal: oracmu#SANDYTEST.COM
Valid starting Expires Service principal
09/05/22 23:51:23 09/06/22 09:51:23 krbtgt/SANDYTEST.COM#SANDYTEST.COM
renew until 09/06/22 23:51:21
PS C:\oracle> klist
Current LogonId is 0:0xde9c5
Cached Tickets: (2)
#0> Client: administrator # SANDYTEST.COM
Server: krbtgt/SANDYTEST.COM # SANDYTEST.COM
KerbTicket Encryption Type: AES-256-CTS-HMAC-SHA1-96
Ticket Flags 0x40e10000 -> forwardable renewable initial pre_authent name_canonicalize
Start Time: 9/5/2022 19:47:05 (local)
End Time: 9/6/2022 5:47:05 (local)
Renew Time: 9/12/2022 19:47:05 (local)
Session Key Type: AES-256-CTS-HMAC-SHA1-96
Cache Flags: 0x1 -> PRIMARY
Kdc Called: SANDYORACLE19C1
#1> Client: administrator # SANDYTEST.COM
Server: host/sandyoracle19c1.sandytest.com # SANDYTEST.COM
KerbTicket Encryption Type: AES-256-CTS-HMAC-SHA1-96
Ticket Flags 0x40a50000 -> forwardable renewable pre_authent ok_as_delegate name_canonicalize
Start Time: 9/5/2022 19:47:05 (local)
End Time: 9/6/2022 5:47:05 (local)
Renew Time: 9/12/2022 19:47:05 (local)
Session Key Type: AES-256-CTS-HMAC-SHA1-96
Cache Flags: 0
Kdc Called: SANDYORACLE19C1
PS C:\oracle> sqlplus /#orcl
SQL*Plus: Release 19.0.0.0.0 - Production on Mon Sep 5 23:51:38 2022
Version 19.3.0.0.0
Copyright (c) 1982, 2019, Oracle. All rights reserved.
ERROR:
ORA-12631: Username retrieval failed
Enter user-name:
oracle trace file
[05-SEP-2022 23:51:38:878] snauk5g_open_file: Opening C:\oracle\keytab2.
[05-SEP-2022 23:51:38:878] snauk5g_open_file: exit
[05-SEP-2022 23:51:38:878] nauk5wj_ktfileint_open: exit
[05-SEP-2022 23:51:38:878] nauk5y2_kt_get_entry: Searching for keytype=23 ,kvno=3;Current keytype=1,kvno=3
[05-SEP-2022 23:51:38:878] nauk5fq_free_principal: entry
[05-SEP-2022 23:51:38:878] nauk5fq_free_principal: exit
[05-SEP-2022 23:51:38:878] nauk5y2_kt_get_entry: Searching for keytype=23 ,kvno=3;Current keytype=3,kvno=3
[05-SEP-2022 23:51:38:878] nauk5fq_free_principal: entry
[05-SEP-2022 23:51:38:878] nauk5fq_free_principal: exit
[05-SEP-2022 23:51:38:878] nauk5y2_kt_get_entry: Searching for keytype=23 ,kvno=3;Current keytype=23,kvno=3
[05-SEP-2022 23:51:38:878] nauk5fq_free_principal: entry
[05-SEP-2022 23:51:38:878] nauk5fq_free_principal: exit
[05-SEP-2022 23:51:38:878] nauk5y2_kt_get_entry: Searching for keytype=23 ,kvno=3;Current keytype=18,kvno=3
[05-SEP-2022 23:51:38:878] nauk5fq_free_principal: entry
[05-SEP-2022 23:51:38:878] nauk5fq_free_principal: exit
[05-SEP-2022 23:51:38:878] nauk5y2_kt_get_entry: Searching for keytype=23 ,kvno=3;Current keytype=17,kvno=3
[05-SEP-2022 23:51:38:878] nauk5fq_free_principal: entry
[05-SEP-2022 23:51:38:878] nauk5fq_free_principal: exit
[05-SEP-2022 23:51:38:878] snauk5t_close_file: entry
[05-SEP-2022 23:51:38:878] snauk5t_close_file: exit
[05-SEP-2022 23:51:38:878] nauk5fq_free_principal: entry
[05-SEP-2022 23:51:38:878] nauk5fq_free_principal: exit
[05-SEP-2022 23:51:38:878] nauk5y2_kt_get_entry: Returning 114: Key table entry not found
.
[05-SEP-2022 23:51:38:878] nauk5y2_kt_get_entry: exit
[05-SEP-2022 23:51:38:878] nauk5fq_free_principal: entry
[05-SEP-2022 23:51:38:878] nauk5fq_free_principal: exit
[05-SEP-2022 23:51:38:878] nauk5kz_rd_req_simple: Returning 114: Key table entry not found
.
[05-SEP-2022 23:51:38:878] nauk5kz_rd_req_simple: exit
[05-SEP-2022 23:51:38:878] nauk5ahgetcontext: entry
[05-SEP-2022 23:51:38:878] nauk5ahgetcontext: Using default context.
[05-SEP-2022 23:51:38:878] nauk5ahgetcontext: exit
[05-SEP-2022 23:51:38:878] nauk5kz_rd_req_simple: nauk5kz_rd_req_simple: Key table entry not found
.[05-SEP-2022 23:51:38:878] nauk5fq_free_principal: entry
[05-SEP-2022 23:51:38:878] nauk5fq_free_principal: exit
[05-SEP-2022 23:51:38:878] nauk5a_process_RDREQ: exit
[05-SEP-2022 23:51:38:878] nauk5a3recvclientauth: exit
[05-SEP-2022 23:51:38:878] nauk5avalidate: nauk5a3recvclientauth() failed to process the request
[05-SEP-2022 23:51:38:878] nauk5avalidate: failed
[05-SEP-2022 23:51:38:878] nauk5avalidate: exit
[05-SEP-2022 23:51:38:878] nau_scn: credential validation function failed
[05-SEP-2022 23:51:38:878] nacomsd: entry
[05-SEP-2022 23:51:38:878] nacomfsd: entry
[05-SEP-2022 23:51:38:878] nacomfsd: exit
[05-SEP-2022 23:51:38:878] nacomsd: exit
[05-SEP-2022 23:51:38:878] nau_scn: failed with error 12631
[05-SEP-2022 23:51:38:878] nau_scn: exit
[05-SEP-2022 23:51:38:878] na_csrd: failed with error 12631
[05-SEP-2022 23:51:38:878] na_csrd: exit
[05-SEP-2022 23:51:38:878] nacomer: error 12631 received from Authentication service
[05-SEP-2022 23:51:38:878] nacomer: failed with error 12631
[05-SEP-2022 23:51:38:878] nacomsn: entry
[05-SEP-2022 23:51:38:878] nacomap: entry
[05-SEP-2022 23:51:38:878] nacomap: Packet length 21
Related
I watched video tutorial at https://www.youtube.com/watch?v=IalqQN09OaA . My Oracle database version
select * from v$version;
Oracle Database 21c Express Edition Release 21.0.0.0.0 - Production
I download sample at https://github.com/donhuvy/db-sample-schemas/tree/main/human_resources .
Inside Oracle SQL Developer version 22.x , with user system, Run command
# C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
I entered
Input 1: Password for HR: 123456
Input 2: Tablespace: SYSTEM
Input 3: Temporary tablespace: TEMP
Input 4: Password for SYSTEM user: 12345678
Input 5: Log path: C:\
Input 6: Connection string: localhost:1521/xe
My steps
localhost:1521/xe
Error
specify password for HR as parameter 1:
specify default tablespeace for HR as parameter 2:
specify temporary tablespace for HR as parameter 3:
specify password for SYS as parameter 4:
specify log path as parameter 5:
specify connect string as parameter 6:
Error starting at line : 86 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
DROP USER hr CASCADE
Error report -
ORA-01918: user 'HR' does not exist
01918. 00000 - "user '%s' does not exist"
*Cause: User does not exist in the system.
*Action: Verify the user name is correct.
Error starting at line : 95 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
CREATE USER hr IDENTIFIED BY &pass
Error report -
ORA-65096: invalid common user or role name
65096. 00000 - "invalid common user or role name"
*Cause: An attempt was made to create a common user or role with a name
that was not valid for common users or roles. In addition to the
usual rules for user and role names, common user and role names
must consist only of ASCII characters, and must contain the prefix
specified in common_user_prefix parameter.
*Action: Specify a valid common user or role name.
Error starting at line : 97 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
ALTER USER hr DEFAULT TABLESPACE &tbs
QUOTA UNLIMITED ON &tbs
Error report -
ORA-01918: user 'HR' does not exist
01918. 00000 - "user '%s' does not exist"
*Cause: User does not exist in the system.
*Action: Verify the user name is correct.
Error starting at line : 100 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
ALTER USER hr TEMPORARY TABLESPACE &ttbs
Error report -
ORA-01918: user 'HR' does not exist
01918. 00000 - "user '%s' does not exist"
*Cause: User does not exist in the system.
*Action: Verify the user name is correct.
Error starting at line : 102 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
GRANT CREATE SESSION, CREATE VIEW, ALTER SESSION, CREATE SEQUENCE TO hr
Error report -
ORA-01917: user or role 'HR' does not exist
01917. 00000 - "user or role '%s' does not exist"
*Cause: There is not a user or role by that name.
*Action: Re-specify the name.
Error starting at line : 103 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
GRANT CREATE SYNONYM, CREATE DATABASE LINK, RESOURCE , UNLIMITED TABLESPACE TO hr
Error report -
ORA-01917: user or role 'HR' does not exist
01917. 00000 - "user or role '%s' does not exist"
*Cause: There is not a user or role by that name.
*Action: Re-specify the name.
Connected.
Error starting at line : 110 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
GRANT execute ON sys.dbms_stats TO hr
Error report -
ORA-01917: user or role 'HR' does not exist
01917. 00000 - "user or role '%s' does not exist"
*Cause: There is not a user or role by that name.
*Action: Re-specify the name.
Error starting at line : 116 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
connect ...
Error report -
Connection Failed
USER = hr
URL = jdbc:oracle:thin:#localhost:1521/xe
Error Message = ORA-01017: invalid username/password; logon denied
Commit
SP2-0640: Not connected
SP2-0640: Not connected
Error starting at line : 124 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
#__SUB__CWD__/human_resources/hr_cre
Error report -
SP2-0310: Unable to open file: "__SUB__CWD__/human_resources/hr_cre.sql"
Error starting at line : 130 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
#__SUB__CWD__/human_resources/hr_popul
Error report -
SP2-0310: Unable to open file: "__SUB__CWD__/human_resources/hr_popul.sql"
Error starting at line : 136 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
#__SUB__CWD__/human_resources/hr_idx
Error report -
SP2-0310: Unable to open file: "__SUB__CWD__/human_resources/hr_idx.sql"
Error starting at line : 142 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
#__SUB__CWD__/human_resources/hr_code
Error report -
SP2-0310: Unable to open file: "__SUB__CWD__/human_resources/hr_code.sql"
Error starting at line : 148 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
#__SUB__CWD__/human_resources/hr_comnt
Error report -
SP2-0310: Unable to open file: "__SUB__CWD__/human_resources/hr_comnt.sql"
Error starting at line : 154 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
#__SUB__CWD__/human_resources/hr_analz
Error report -
SP2-0310: Unable to open file: "__SUB__CWD__/human_resources/hr_analz.sql"
How to fix?
Update
Use command
alter session set "_oracle_script"=true;
# C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
Session altered.
specify password for HR as parameter 1:
specify default tablespeace for HR as parameter 2:
specify temporary tablespace for HR as parameter 3:
specify password for SYS as parameter 4:
specify log path as parameter 5:
specify connect string as parameter 6:
User HR dropped.
User HR created.
User HR altered.
User HR altered.
Grant succeeded.
Grant succeeded.
Connected.
Grant succeeded.
Connected.
Session altered.
Session altered.
Error starting at line : 124 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
#__SUB__CWD__/human_resources/hr_cre
Error report -
SP2-0310: Unable to open file: "__SUB__CWD__/human_resources/hr_cre.sql"
Error starting at line : 130 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
#__SUB__CWD__/human_resources/hr_popul
Error report -
SP2-0310: Unable to open file: "__SUB__CWD__/human_resources/hr_popul.sql"
Error starting at line : 136 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
#__SUB__CWD__/human_resources/hr_idx
Error report -
SP2-0310: Unable to open file: "__SUB__CWD__/human_resources/hr_idx.sql"
Error starting at line : 142 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
#__SUB__CWD__/human_resources/hr_code
Error report -
SP2-0310: Unable to open file: "__SUB__CWD__/human_resources/hr_code.sql"
Error starting at line : 148 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
#__SUB__CWD__/human_resources/hr_comnt
Error report -
SP2-0310: Unable to open file: "__SUB__CWD__/human_resources/hr_comnt.sql"
Error starting at line : 154 File # C:\Users\Administrator\Downloads\db-sample-schemas-21.1\human_resources\hr_main.sql
In command -
#__SUB__CWD__/human_resources/hr_analz
Error report -
SP2-0310: Unable to open file: "__SUB__CWD__/human_resources/hr_analz.sql"
Connection created by CONNECT script command disconnected
PL/SQL procedure successfully completed.
DBMS_SYSTEM.GET_ENV
Alias sqlcl_int_runme dropped
How to fix error
Error report -
SP2-0310: Unable to open file: "__SUB__CWD__/human_resources/hr_idx.sql"
Unfortunately the default sample script installation process is not great for the novice. Please head over to this blog post
https://connor-mcdonald.com/2021/11/02/quick-and-easy-sample-data/
which describes why this is the case, but more importantly will give you a workaround which involves just running a single script in SQL*Plus. That script will also try to guide you through the process to avoid any errors, eg
| 1) Preliminary checks
| =====================
|
| You should be connected to the database at this point.
| If you are, then you will see the following:
|
| >>> Connected as: YOUR_USER <<<
|
| If you are not, you're will see the following
|
| >>>> SP2-0640: Not connected <<<<
|
| If you get this error, press Ctrl-C to exit this script and
| connect first before running it again.
|
| Tip: For Express Edition, the command to connect is *probably*
|
| SQL> connect system/yourpassword#//localhost/XEPDB1
|
| Once you are connected OK, then press Enter to proceed
|
Connected as: MCDONAC
Enter to proceed, Ctrl-C to stop
|
| Checking that we can write a file to the current directory
| If we can't, then this script will exit here. Please make
| you are running the script from the directory you saved it to
| and this directory is writable
|
File test passed!
|
|
| Now checking database details. If any of these fail,
| the script will exit with the error that you need
| to resolve.
|
Container database. PDB PDB1 will be used for installation...proceeding
|
| Checking current user details
|
You are connected as MCDONAC, ie, not the HR schema.
Hence this installation will drop the HR schema entirely
and recreate it. If this was not what you wanted, then press Ctrl-C
the installation, otherwise press Enter to continue
Enter to proceed, Ctrl-C to stop
|
| Checking required privileges
|
Privilege ALTER ANY TABLE..................OK
Privilege ALTER ANY TRIGGER................OK
Privilege ALTER SESSION....................OK
Privilege ALTER USER.......................OK
Privilege ANALYZE ANY......................OK
Privilege COMMENT ANY TABLE................OK
Privilege CREATE ANY CLUSTER...............OK
Privilege CREATE ANY INDEX.................OK
Privilege CREATE ANY INDEXTYPE.............OK
Privilege CREATE ANY OPERATOR..............OK
Privilege CREATE ANY PROCEDURE.............OK
Privilege CREATE ANY SEQUENCE..............OK
Privilege CREATE ANY SYNONYM...............OK
Privilege CREATE ANY TABLE.................OK
Privilege CREATE ANY TRIGGER...............OK
Privilege CREATE ANY TYPE..................OK
Privilege CREATE ANY VIEW..................OK
Privilege CREATE SESSION...................OK
Privilege CREATE USER......................OK
Privilege DELETE ANY TABLE.................OK
Privilege DROP USER........................OK
Privilege GRANT ANY OBJECT PRIVILEGE.......OK
Privilege GRANT ANY PRIVILEGE..............OK
Privilege INSERT ANY TABLE.................OK
Privilege SELECT ANY TABLE.................OK
Privilege UPDATE ANY TABLE.................OK
Privilege SELECT ON GV$SESSION.............OK
|
| Checking tablespaces
|
Checks .......OK
|
| Checking existing HR details
|
Checks .......OK
|
| The new/replaced HR schema will be created now.
|
| Note down this password for the HR schema. You will need it to connect
|
| Password (case-sensitive): DAjcBlFOJq$986
|
| The script will exit on any error encountered, because it should run
| to completion with no errors at all
|
Press Enter to start
****** Creating REGIONS table ....
Table created.
Index created.
Table altered.
etc etc
When trying to decrypt the kerberos by using the keytab file it shows the error "missing keytype 18". The keytab file has the keytype 18.
Based on the information you shared:
SPN: HOST/INTVMDC03.xxxx.com/xxxx.com.
Keytab entries:
1 1013219#xxxx.com (18:AES256 CTS mode with HMAC
SHA1-96) 1 1013219#xxxx.com (17:AES128 CTS mode with HMAC SHA1-96) 1
1013219#xxxx.com (20:AES256 CTS mode with HMAC SHA384-192) 1
1013219#xxxx.com (19:AES128 CTS mode with HMAC SHA256-128) 1
1013219#xxxx.com (16:DES3 CBC mode with SHA1-KD) 1 1013219#xxxx.com
(23:RC4 with HMAC)
There is no entry corresponding to the SPN being used inside your keytab.
What you need is SPN entries inside keytab, not the UPN entries.
Remember that the ticket is issued for the SPN and not the user principal name (UPN). Therefore Kerberos looks for the SPN entry inside keytab for which the ticket is issued.
Please generate a new keytab file and provide SPN.
For windows, you can use ktpass command (usually works on windows server os).
Check Here.
For example:
ktpass /out <filename> /princ <ServicePrincipalName> /mapuser <UserPrincipalName> /pass <UPN password> /crypto ALL /ptype KRB5_NT_PRINCIPAL /kvno 0
This question already has answers here:
How to check if the Microsoft symbol server is available, and contact them if not?
(2 answers)
Closed 3 years ago.
The Microsoft symbol servers are online but somehow I am not able to download any symbols.
I tried to narrow it down to following POC. It should just download the symbols of aadtb.dll but it returns a HTTP_STATUS_NOT_FOUND.
symchk /v /r c:\windows\system32\aadtb.dll /s SRV*c:\symbols*https://msdl.microsoft.com/download/symbols
Alternatively, I tried downloading the pdb using following different Powershell methods but this also returned 404 messages
$url = "https://msdl.microsoft.com/download/symbols/aadtb.pdb/BC45F7DA843249FFA96D9396BEE5F35D1/aadtb.pdb"
$output = "c:\test.pdb"
(New-Object System.Net.WebClient).DownloadFile($url, $output)
Invoke-WebRequest -Uri $url -OutFile $output
Start-BitsTransfer -Source $url -Destination $output
I still suspect an issue on my end but do note that I did try on two different machines and through 3 different VPN tunnels, all with the same result. It worked last Friday, 25/10 on a completely different machine at work.
Before going completely insane, can someone verify if they can still download symbols, preferably the symbols I mentioned?
Edit
kernel32.dll and ntdll give the same result snipped for brevity
symchk /v c:\windows\system32\kernel32.dll /s SRV*c:\symbols*https://msdl.microsoft.com/download/symbols
symchk /v c:\windows\system32\ntdll.dll /s SRV*c:\symbols*https://msdl.microsoft.com/download/symbols
SYMSRV: HTTPGET: /download/symbols/kernel32.pdb/5A77DE8CE8D58731F0EA38F1C92F48D81/kernel32.pdb
SYMSRV: HttpQueryInfo: 80190194 - HTTP_STATUS_NOT_FOUND
SYMSRV: HTTPGET: /download/symbols/ntdll.pdb/0C2E19EA1901E9B82E4567D2D21E56D21/ntdll.pdb
SYMSRV: HttpQueryInfo: 80190194 - HTTP_STATUS_NOT_FOUND
Edit 2
c:\Program Files (x86)\Windows Kits\10\Debuggers\x64>ver
Microsoft Windows [Version 10.0.18362.418]
Output of symchk
SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
[SYMCHK] Searching for symbols to c:\windows\system32\aadtb.dll in path SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
DBGHELP: Symbol Search Path: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
[SYMCHK] Using search path "SRV*c:\symbols*http://msdl.microsoft.com/download/symbols"
DBGHELP: No header for c:\windows\system32\aadtb.dll. Searching for image on disk
DBGHELP: c:\windows\system32\aadtb.dll - OK
SYMSRV: BYINDEX: 0x1
c:\symbols*http://msdl.microsoft.com/download/symbols
aadtb.pdb
BC45F7DA843249FFA96D9396BEE5F35D1
SYMSRV: UNC: c:\symbols\aadtb.pdb\BC45F7DA843249FFA96D9396BEE5F35D1\aadtb.pdb - path not found
SYMSRV: UNC: c:\symbols\aadtb.pdb\BC45F7DA843249FFA96D9396BEE5F35D1\aadtb.pd_ - path not found
SYMSRV: UNC: c:\symbols\aadtb.pdb\BC45F7DA843249FFA96D9396BEE5F35D1\file.ptr - path not found
SYMSRV: HTTPGET: /download/symbols/index2.txt
SYMSRV: HttpQueryInfo: 80190190 - HTTP_STATUS_BAD_REQUEST
SYMSRV: HTTPGET: /download/symbols/aadtb.pdb/BC45F7DA843249FFA96D9396BEE5F35D1/aadtb.pdb
SYMSRV: HttpQueryInfo: 80190194 - HTTP_STATUS_NOT_FOUND
SYMSRV: HTTPGET: /download/symbols/aadtb.pdb/BC45F7DA843249FFA96D9396BEE5F35D1/aadtb.pd_
SYMSRV: HttpQueryInfo: 80190194 - HTTP_STATUS_NOT_FOUND
SYMSRV: HTTPGET: /download/symbols/aadtb.pdb/BC45F7DA843249FFA96D9396BEE5F35D1/file.ptr
SYMSRV: HttpQueryInfo: 80190194 - HTTP_STATUS_NOT_FOUND
SYMSRV: RESULT: 0x80190194
DBGHELP: aadtb - no symbols loaded
[SYMCHK] MODULE64 Info ----------------------
[SYMCHK] Struct size: 1680 bytes
[SYMCHK] Base: 0x0000000180000000
[SYMCHK] Image size: 1986560 bytes
[SYMCHK] Date: 0x5c901636
[SYMCHK] Checksum: 0x001eadb3
[SYMCHK] NumSyms: 0
[SYMCHK] SymType: SymNone
[SYMCHK] ModName: aadtb
[SYMCHK] ImageName: c:\windows\system32\aadtb.dll
[SYMCHK] LoadedImage: c:\windows\system32\aadtb.dll
[SYMCHK] PDB: ""
[SYMCHK] CV: RSDS
[SYMCHK] CV DWORD: 0x53445352
[SYMCHK] CV Data: aadtb.pdb
[SYMCHK] PDB Sig: 0
[SYMCHK] PDB7 Sig: {BC45F7DA-8432-49FF-A96D-9396BEE5F35D}
[SYMCHK] Age: 1
[SYMCHK] PDB Matched: TRUE
[SYMCHK] DBG Matched: TRUE
[SYMCHK] Line nubmers: FALSE
[SYMCHK] Global syms: FALSE
[SYMCHK] Type Info: FALSE
[SYMCHK] ------------------------------------
SymbolCheckVersion 0x00000002
Result 0x00010001
DbgFilename aadtb.dbg
DbgTimeDateStamp 0x00000000
DbgSizeOfImage 0x00000000
DbgChecksum 0x00000000
PdbFilename aadtb.pdb
PdbSignature {BC45F7DA-8432-49FF-A96D-9396BEE5F35D}
PdbDbiAge 0x00000001
[SYMCHK] [ 0x00000000 - 0x00010001 ] Checked "c:\windows\system32\aadtb.dll"
SYMCHK: aadtb.dll FAILED - aadtb.pdb mismatched or not found
SYMCHK: FAILED files = 1
SYMCHK: PASSED + IGNORED files = 0
Output of Powershell download methods
Exception calling "DownloadFile" with "2" argument(s): "The remote server returned an error: (404) Not Found."
At line:4 char:1
+ (New-Object System.Net.WebClient).DownloadFile($url, $output)
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : WebException
Invoke-WebRequest : The remote server returned an error: (404) Not Found.
At line:5 char:1
+ Invoke-WebRequest -Uri $url -OutFile $output
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: (System.Net.HttpWebRequest:HttpWebRequest) [Invoke-WebRequest], WebException
+ FullyQualifiedErrorId : WebCmdletWebResponseException,Microsoft.PowerShell.Commands.InvokeWebRequestCommand
Start-BitsTransfer : HTTP status 404: The requested URL does not exist on the server.
At line:6 char:1
+ Start-BitsTransfer -Source $url -Destination $output
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: (:) [Start-BitsTransfer], Exception
+ FullyQualifiedErrorId : StartBitsTransferCOMException,Microsoft.BackgroundIntelligentTransfer.Management.NewBitsTransferCommand
It looks like some kinda SNAFU on Microsoft part. So, yeah, like #RbMm pointed out, send an email to WinDbgFb#microsoft.com to let them know. And maybe also tweet it to Andy Luhrs. Keep in mind though that it's a small team, and they might not be able to do anything until Monday (here in US.)
The file simply does not exist on the server.
Can this help you?
I'm trying to sign appx file, but have this error:
SignTool Error: An unexpected internal error has occurred.
Error information: "Error: SignerSign() failed." (-2146958839/0x80080209)
I found that the error means: The SIP_SUBJECTINFO structure used to sign the package didn't contain the required data
Any idea how to fix it?
The certificate is made using commands:
MakeCert /n "CN=..." /r /h 0 /eku 1.3.6.1.5.5.7.3.3 /pe /sv MyKey.pvk MyKey.cer
Pvk2Pfx /pvk MyKey.pvk /pi 123456 /spc MyKey.cer /pfx MyKey.pfx /po 123456
And used as:
signtool.exe sign -f MyKey.pfx -p "123456" -fd SHA256 -v my.appx
But result is as already mentioned:
The following certificate was selected:
Issued to: ...
Issued by: ...
Expires: Sun Jan 01 01:59:59 2040
SHA1 hash: 7D760C6DF55749803CF0E0DF0F9615F607822B12
Done Adding Additional Store
SignTool Error: An unexpected internal error has occurred.
Error information: "Error: SignerSign() failed." (-2146958839/0x80080209)
As a note I should add, that application is signed as an output from DesktopAppConverter.exe, but I need to repack it and the signing is not working even when I use the auto-generated pfx file used by the converter.
Ok... so I found that I was probably using some wrong signtool.exe. I found location of the tool which is used with the DesktopAppConverter in its log. In my case it is:
"C:\Program Files (x86)\Windows Kits\10\bin\10.0.16299.0\x64\signtool.exe"
With this file the signing is successful.
I'm learning Oracle 12c using the book Oracle Database 12c Install, Configure & Maintain Like a Pro. I installed the database, but I didn't find the sample schemas (tables like Customers, Sales, products ...). So I download Oracle Database 12c Release 1 Examples (12.1.0.1.0) for Microsoft Windows (x64) and installed it; but I still don't know how to get the sample tables.
From SQL Developer I ran mksample.sql to install all the sample schemas but I got:
Error starting at line 119 in command:
DROP USER hr CASCADE
SQL Error: ORA-01918: user 'HR' does not exist
01918. 00000 - "user '%s' does not exist"
*Cause: User does not exist in the system.
*Action: Verify the user name is correct.
Error starting at line 120 in command:
DROP USER oe CASCADE
Error report:
SQL Error: ORA-01918: user 'OE' does not exist
01918. 00000 - "user '%s' does not exist"
*Cause: User does not exist in the system.
*Action: Verify the user name is correct.
Error starting at line 121 in command:
DROP USER pm CASCADE
Error report:
SQL Error: ORA-01918: user 'PM' does not exist
01918. 00000 - "user '%s' does not exist"
*Cause: User does not exist in the system.
*Action: Verify the user name is correct.
....
How can I fix this?
update: when i run hr_main.sql I get this after I enter 5 times a password:
specify password for HR as parameter 1:
specify default tablespeace for HR as parameter 2:
specify temporary tablespace for HR as parameter 3:
specify password for SYS as parameter 4:
specify log path as parameter 5:
Error starting at line 63 in command:
DROP USER hr CASCADE
Error report:
SQL Error: ORA-01918: user 'HR' does not exist
01918. 00000 - "user '%s' does not exist"
*Cause: User does not exist in the system.
*Action: Verify the user name is correct.
Error starting at line 72 in command:
CREATE USER hr IDENTIFIED BY oracle12c
Error at Command Line:72 Column:13
Error report:
SQL Error: ORA-65096: invalid common user or role name
Error starting at line 74 in command:
ALTER USER hr DEFAULT TABLESPACE &tbs
QUOTA UNLIMITED ON &tbs
Error report:
SQL Error: ORA-01918: user 'HR' does not exist
01918. 00000 - "user '%s' does not exist"
*Cause: User does not exist in the system.
*Action: Verify the user name is correct.
Error starting at line 77 in command:
ALTER USER hr TEMPORARY TABLESPACE &ttbs
Error report:
SQL Error: ORA-01918: user 'HR' does not exist
01918. 00000 - "user '%s' does not exist"
*Cause: User does not exist in the system.
*Action: Verify the user name is correct.
Error starting at line 79 in command:
GRANT CREATE SESSION, CREATE VIEW, ALTER SESSION, CREATE SEQUENCE TO hr
Error report:
SQL Error: ORA-01917: user or role 'HR' does not exist
01917. 00000 - "user or role '%s' does not exist"
*Cause: There is not a user or role by that name.
*Action: Re-specify the name.
Error starting at line 80 in command:
GRANT CREATE SYNONYM, CREATE DATABASE LINK, RESOURCE , UNLIMITED TABLESPACE TO hr
Error report:
SQL Error: ORA-01917: user or role 'HR' does not exist
01917. 00000 - "user or role '%s' does not exist"
*Cause: There is not a user or role by that name.
*Action: Re-specify the name.
Connected
Error starting at line 87 in command:
GRANT execute ON sys.dbms_stats TO hr
Error report:
SQL Error: ORA-01917: user or role 'HR' does not exist
01917. 00000 - "user or role '%s' does not exist"
*Cause: There is not a user or role by that name.
*Action: Re-specify the name.
Error starting at line 93 in command:
CONNECT hr/&pass
Error report:
Connection Failed
Commit