Oracle Advanced Networking Option Administrator's Guide Release 8.0 A58229-01 |
Library | Product | Contents | Index

# 10
Configuring DCE for Oracle DCE Integration

This chapter describes what you need to do to configure DCE to use Oracle DCE Integration after Oracle DCE Integration has been successfully installed.

This information includes the following:

- Section 10.1, "Overview"
- Section 10.2, "Create New Principals and Accounts"
- Section 10.3, "Install the Key of the Server into a Keytab File"
- Section 10.4, "Configuring DCE CDS for Use by Oracle DCE Integration"

For detailed information on DCE, see the list of books and papers in the "Related Publications" section in the Preface of this guide.

## 10.1 Overview

Following is a list of steps with examples you need to follow to configure DCE to use DCE Integration. The steps assume that a DCE cell has been configured and the machines being used are part of that cell.

As the DCE cell administrator, you will need to do the following:

- "Create New Principals and Accounts" for all users in your organization
- "Install the Key of the Server into a Keytab File"
- "Create Oracle Directories in the CDS Namespace"
- "Give Servers Permission to Create Objects in the CDS Namespace"
- "Load Oracle Service Names Into CDS"

## 10.2 Create New Principals and Accounts

First, you need to add server principals using a procedure like the one below:

    % dce_login cell_admin password

    % rgy_edit

    Current site is: registry server at

      /.../cell1/subsys/dce/sec/master

    rgy_edit=>do p

    Domain changed to: principal

    rgy_edit=> add oracle

    rgy_edit=> do a

    Domain changed to: account

    rgy_edit=> add oracle -g none -o none -pw oracle_password

      -mp cell_admin_password

    rgy_edit=> quit

    bye

You just created a DCE principal called "oracle". The principal has a corresponding account with password "password". The account does not belong to any DCE group or DCE profile.

You only need to do this once after DCE Integration has been installed. Also, you only need to do this procedure for the Oracle database server, not for the client.

## 10.3 Install the Key of the Server into a Keytab File

In this step by step procedure, you install the key of the server into a keytab file: dcepa.key. This keytab file contains the password of the principal under which the Net8 listener starts. The Net8 listener reads this file to authenticate itself to DCE. You only need to do this once after DCE Integration has been installed. Also, you only need to do this procedure for the Oracle database server, not for the client.

Note: Remember to substitute the correct full pathname for the $ORACLE_HOME variable. If the specified directories do not already exist, you will need to create it before running the command. Type the following to create the directories.
    mkdir $ORACLE_HOME/dcepa
    mkdir $ORACLE_HOME/dcepa/admin

Run the following command to generate the keytab file.

    % dce_login cell_admin password

    % rgy_edit

    Current site is: registry server at /.../cell1/subsys/dce/sec/master

    rgy_edit=> ktadd -p oracle -pw Oracle_password -f

    	$ORACLE_HOME/dcepa/admin/dcepa.key

    rgy_edit=>quit

    bye

## 10.4 Configuring DCE CDS for Use by Oracle DCE Integration

The /.:/subsys/oracle/names directory contains objects that map Net8 service names to connect descriptors, which are used by the CDS naming adapter.

The /.:/subsys/oracle/service_registry directory also contains objects that map the service name in DCE addresses to the network endpoint which is used by both DCE protocol adapter clients and servers.

### 10.4.1 Create Oracle Directories in the CDS Namespace

You need to perform the steps in this section after installing the DCE Integration Adapter for the first time in a cell.

    % dce_login cell_admin

    Enter Password:   (password not displayed)

    $ cdscp

    cdscp> create dir /.:/subsys/oracle

    cdscp> create dir /.:/subsys/oracle/names

    cdscp> create dir /.:/subsys/oracle/service_registry

    cdscp> exit

    Note:

    Create these directories on all CDS replicas.

### 10.4.2 Give Servers Permission to Create Objects in the CDS Namespace

Perform the following steps to add the principal oracle to the cds-server group.

    $ dce_login cell_admin

    Enter Password:   (password not displayed)

    $ rgy_edit

    rgy_edit=> domain group

    Domain changed to: group

    rgy_edit=> member subsys/dce/cds-server -a oracle

    rgy_edit=> exit

### 10.4.3 Load Oracle Service Names Into CDS

Refer to Section 11.6, "Configuring Clients to Use the DCE CDS Naming Adapter" for instructions on how to configure clients, and to Section 11.6.3, "Create a TNSNAMES.ORA For Loading Oracle Connect Descriptors into CDS" for information on how to load Oracle service names into CDS.

Prev | Next
| Copyright © 1997 Oracle Corporation. All Rights Reserved. |
Library | Product | Contents | Index