Can a single Kerberos Keytab file hold multiple principals?

Hi
I have a situation where I have multiple keytab files (different principal accounts) and my application is going to use these different service
principal accounts and connect to one or more Oracle databases (all kerberos enabled). Can I maintain only one keytab (merging all into one)in my application environment?
If I merge all keytabs into one using kutil and issue kinit (or okinit) using keytab and service principal, I could see the command runs successful and see
the cache credentials getting updated. But I am not sure if the single cache file is actually storing tickets for all the principals. When I issue klist (or oklist),
I could only see the last issued service principal's ticket.
Do we ever put more than one principal in a single keytab file and maintain it in an application env? If not, why there is an option to merge keytab files? only to be used in kdc may be?
The reason why I want to maintain one keytab is, my applications rely on Oracle OCI thick driver (sqlnet.ora) and I cant maintain multiple keytab files and multiple sqlnet.ora,
as sqlnet.ora cannot be switched or changed in runtime.
I know I am missing something here, perhaps a flaw in my application design using more than one service account at first place?
Please give me some directions, I dont find the right forum where I get my queries answered. Thanks in advance.
-Srivatsan Nallazhagappan
Edited by: 989781 on Apr 8, 2013 7:43 PM
Edited by: 989781 on Apr 8, 2013 8:05 PM

Hi,
The application is not written in Java, but in C++ which uses Oracle OCI thick driver and not JAAS like thin driver. With Oracle OCI thick driver within a running process, you can connect to Oracle database with only one Kerberos principal, and switching between principals is not supported.
For example, once you login to sqlplus /@<TNS-Service> using a kerberos principal, you cannot connect with another principal within that same sqlplus session. (sqlplus uses Oracle's sqlnet which is a OCI thick driver )
I know JAAS does support because its thin but not OCI thick driver which loads the Oracle parameters during process boot up and can never refresh (atleast the sqlnet parameters)
I have changed my application to use only one service principal (provide all the required privileges for that principal to use the resources) .
Thanks
Srivatsan

Similar Messages

  • Export to PDF - Can a single report (rpt file) create multiple PDF files using the export command?

    Post Author: markeyjd2
    CA Forum: Exporting
    Greetings forum members,
    My question is, in its entirety: Can a single report (rpt file) create multiple PDF files using the export command, ideally one PDF file per DB record?
    In my case; I have a Crystal Report that reads data from a DB table containing ~ 500 records.  When I export the report to a PDF file, I get one PDF file, with ~ 500 pages.
    What I would like to do is export the report to ~ 500 individual PDF files; One file per DB record.  The file names would be based on the table's primary key.
    Is this possible?

    Post Author: Micha
    CA Forum: Exporting
    Hi,
    you need some lines of code, but its easy. Dependend on how to start the generation of your 500 PDFs, you can write an ASP page and start it via Web Browser, or a Windows Script and start it via scheduled job...
    Here's an abstract of the ASP code I use:
    First, you create a recordset (here: "rsc") which gives you the list of ID fields you want to export, then you create CrystalRuntime.Application object, then you loop through the recordset, open your report (here: "oRpt") and set login info. Then set the selectionformula, so that the report displays only the data of the current ID, e.g.:
      oRpt.RecordSelectionFormula = "(" & oRpt.RecordSelectionFormula & ") AND {myTab.myVal}=" & rsc("myVal")
    Then you export the report, move to the next record in recordset, and repeat the loop until recordset.EOF. Then you close recordset and connection.
    Micha

  • How can i create a zip-file with multiple volumes

    Hi,
    i've to zip a large file (250 MB and more). But the zip file shouldn't be greater than 5 MB, because i have to send the file via E-Mail. So i've thought, that the solution of this problem can be to zip the large file in smaller zip-files, which are multiple volumes of a zip-archive. I've searched very long in WWW, but didn't find something. Perhaps you can help.
    Sorry, about the bad english. :-)
    Timo Bunger

    Hi
    Who said your english is bad ?. OK, are you looking for compressing the 250 MB file in to multiple versions using a java program ?. If not, there is a shareware you can download and split the file into multiple parts by specifying size of each part. You can send these parts via email and the other person can combine these parts into a single file again.
    Find this @
    http://www.freedownloadscenter.com/Utilities/File_Splitting_Utilities/EzSplit.html
    You may need to read a bit about it on how to use.
    Thanks
    Srinivas

  • Each line of a file to a single Idoc (one file to multiple IDoc)?

    Hi Community,
    I have a flat file with many lines. Each of these lines has the same structure and has to fill a separate IDoc. How can I configure XI that it creates for each line a separate IDoc?
    I already found a blog to such a topic: File to Multiple IDocs (XSLT Mapping)
    But thatu2019s not what I am looking for (or I do not get the Point).
    I also tried to set u201CRecords per Messageu201D to 1. But that is not working to. :/
    Maybe one of you guys has an idea?
    Thanks in advance,
    Udo

    Hi Udo,
    For instance if  file structure is as follows:
    <File>
    <Header>
    </Header>
    <Item>
    </Item>
    <Item>
    </Item>
    </File>
    Now if u want to genarate a new Idoc for each n every <Item> in the file. The Header Information is to be repeated for each IDOC as well.
    Then allu need to do is  import the idoc in XI, then take the idoc xsd and change the occurrence o..unbound and then create the external definition.
    Look into this blog.
    The specified item was not found.
    Now use the external definition in your mapping instead of using the original IDOC. In your mapping map the item to IDOC, and for header data you have to use the useOneAsMany function.
    Reward if found useful
    Regards,
    Vinod.

  • Can a single license be used to multiple pieces of content?

    What I'd like to do is have a user retrieve a single license and be able to view all content belonging to a bundle of media.

    Hi Pedro,
    Thanks for the clarification.  I'll try to answer this question from 2 different angles.  : )
    [ 1 ]
    Flash Access differs from WMDRM/PlayReady in the way licenses are acquired.  With Flash Access, the DRMManager.loadVoucher() API is used to retrieve a license.  There is no need to specify a Key/Content/License ID; the only data required is the content's metadata (DRMContentData), which contains all the information needed by the client and server to issue/use the correct license.
    For additional information on the client workflow involved with playing back Flash Access content, please view the AS3 Developer's Guide for Flash Access.
    [ 2 ]
    To answer your original question - yes, you can encrypt multiple content using the same Content-Encryption-Key, and also the same License-ID (See our Java API).  By doing this, your client can download a single license, and all encrypted content you have can utilize the same license to playback video.  However, your workflow will be the exact same (acquire metadata, call DRMManager.loadVoucher(), call NetStream.play()), so you won't really notice any difference between using the same CEK or LicenseID.
    Make sense, or have I added more confusion?
    cheers,
    /Eric.

  • Can a single AE receive and deliver multiple signals at the same time?

    I've looked through the forums and the AE pdf manual and have not been able to find a definitive answer so far.
    We have a (all Apple) cafe in a remote location with no Apple support and we presently operate wireless music and wireless internet for customer use from one iMac and one AE. The iMac is also our cashier station. We have another iMac for customers who don't have their own laptops. The iMacs switch to screensaver displays promoting the cafe when not in use.
    Our wired TV monitors that are currently not associated with our AE display either satellite TV, cable TV or from DVD player using a manually switched hub with the three separate receivers wired to the hub.
    We want to add streaming TV from the internet to the TV monitors so we will have four sources. I am looking at connecting this internet streaming TV source to the TVs via AE hence I want to also allow the other TV sources to operate via AE. If possible, we would also like to switch in the screensaver from one iMac on a timed basis (or using Apple remote to one iMac) if there is nothing else of particular interest on the TVs.
    The AE has multiple ports that can be expanded using hubs that we can hopefully connect the existing 3 TV sources, and can receive / transmit to multiple computers but can it operate the iTunes, internet distribution, and TV output (with switching TV inputs via the iMac & AE Utility) at the same time or do we need multiple AEs and another computer?

    The AE has multiple ports that can be expanded using hubs that we can hopefully connect the existing 3 TV sources, and can receive / transmit to multiple computers but can it operate the iTunes, internet distribution, and TV output (with switching TV inputs via the iMac & AE Utility) at the same time or do we need multiple AEs and another computer?
    The AirPort Extreme base station (AEBS) does not have a TV or video output.
    The AEBS, just like any other router, supports multiple clients simultaneously. Of course there is always bandwidth limitations for any device. So in theory the AEBS can support all of that. In reality the performance of each service will depend on the bandwidth used by each and the bandwidth available. This is no different than any router.

  • Can a single HID report descriptor support multiple touch screens with different sizes?

    Hi Experts:
    I have a question for specifying touch monitor sizes in the HID report descriptor:
    Can ONE HID report descriptor support multiple touch monitors with different sizes ?
    Thanks in advance
    leo

    My screen shot is from AA9, and I have seen that the UI for AAX is vastly different, but...
    Choose Paper Source from Page Size should be the "one-touch" solution your looking for.
    In my test, my Konica-Minolta Bizhub failed to detect the proper paper trays, but Acrobat correctly spooled the pages.

  • Can I make a PDF file with multiple embedded audio files?

    Can basic viewers that receive the PDF via email listen? Every file I have made excluded the audio... ibooks worked and interactive Adobe but not everyone has those programs. This is for an EPK electronic press kit (country music artist)
    Thanks for the help! 

    It's a total crap shoot (as our good friend Bob Levine would say). Some PDF readers handle multimedia well (Adobe Reader and Adobe Acrobat), and some do not (e.g., Apple Preview, PDF readers in browsers, etc.)
    Unless you're willing to provide a link to the free Adobe Reader, and recommend that people download it, it's probably not worth the effort.

  • BizTalk Mapper - Looping multiple nodes to map to a single node in a single row (flat file)

    Hi everybody,
    I'm still new in developing BizTalk app and require some help in this one problem. Appreciate your time and input to help me on this.
    Basically I have an XML document as input and a flat file as output. Example for input is as per below. The "Contact" node's maxOccurs here is set to unbounded and could be multiple. (phone, fax, website, telex ...)
    <root>
    <CustomerName>Company A</CustomerName>
    <Contact>
    <Type>Phone</Type>
    <Locator>03566789</Locator>
    <Type>Phone</Type>
    <Locator>03566790</Locator>
    <Type>Fax</Type>
    <Locator>03566795</Locator>
    <Type>Telex</Type>
    <Locator>03566798</Locator>
    <Type>Website</Type>
    <Locator>www.companyA.com</Locator>
    </Contact>
    </root>
    The expected output in XML would look like below. The final outcome would be a csv file. Strictly Phone 1, phone 2, fax and telex, the rest would be ignored.
    <root>
    <CustomerName>Company A</CustomerName>
    <Phone1>03566789</Phone1>
    <Phone2>03566790</Phone2>
    <Fax>03566795</Fax>
    <Telex>03566798</Telex>
    </root>
    Example of expected output result (csv file): CompanyName;Phone1;Phone2;Fax;Telex;
    In our case here: Company A;03566789;03566790;03566795;03566798;
    Another example could be: Company B;036778911;;036778912;; if only 1 phone number and 1 fax number provided.
    I've used Table Looping and Table Extractor and nearly got the desired result except that it is represented in multiple rows instead of one: Example:
    Company A;03566789;;;
    Company A;;03566790;;;
    Company A;;;03566795;;
    Company A;;;;03566798;
    Any idea how to do the mapping? I'm kind of stuck here and it sounds like an easy problem but i could not find any example to the solution that I need here. Table looping and table extractor is ok to map from single node flat file to multiple nodes but not
    the reverse like in this example.
    rgds,
    sportivo

    Hi,
    Please refer to below links where similar issue has been answered.
    http://social.msdn.microsoft.com/Forums/en-US/biztalkgeneral/thread/ecdff241-6795-4a95-bad7-48fca4410dfb
    http://www.epinaki.com/2011/05/other-options-to-using-biztalk-table-looping-functoid-par-i/
    I hope this helps you.
    Thanks With Regards,
    Shailesh Kawade
    MCTS BizTalk Server
    Please Mark This As Answer If This Helps You.
    http://shaileshbiztalk.blogspot.com/

  • CS3: Saving or Outputting .AI File as Multiple Files

    There must be a way to save or output a single Adobe Illustrator file into multiple files based on the "pages" I have created in the document?
    For example, if I have tiled 10 tabloid-sized pages onto a single Illustrator CS3 .AI file, is it possible to save the file in a manner that will allow all of those tiled pages to be saved as a seperated or individual files?
    I guess it would be a similar concept to how in newer versions (like CS4) you can export multiple jpegs of an illustrator file that contains several artboards and it automatically assigns a number suffix to the filename since multiple files were outputted from the single ai file.
    Any help is MUCH appreciated. Thanks!

    There must be a way to save or output a single Adobe Illustrator file into multiple files based on the "pages" I have created in the document?
    For example, if I have tiled 10 tabloid-sized pages onto a single Illustrator CS3 .AI file, is it possible to save the file in a manner that will allow all of those tiled pages to be saved as a seperated or individual files?
    I guess it would be a similar concept to how in newer versions (like CS4) you can export multiple jpegs of an illustrator file that contains several artboards and it automatically assigns a number suffix to the filename since multiple files were outputted from the single ai file.
    Any help is MUCH appreciated. Thanks!

  • Validate a XML file against multiple schema files

    Hello everybody!
    How can I validate a XML file against multiple schema files?
    I have the following XML file:
    <?xml version="1.0" encoding="UTF-8"?>
    <bulkCmConfigDataFile xmlns:es="SpecificAttributes.3.0.xsd"
                             xmlns:xn="genericNrm.xsd"
    xmlns="configData.xsd">
    <fileHeader fileFormatVersion="32.615 V4.2" vendorName=""/>
    <configData dnPrefix="Undefined">
    <xn:SubNetwork id="3G">
    <xn:SubNetwork id="RNC01">
    <xn:MeContext id="RNC01">
    <xn:VsDataContainer id="RNC01">
    <xn:attributes>
    <xn:vsDataType>vsDataMeContext</xn:vsDataType>
    <xn:vsDataFormatVersion>SpecificAttributes.3.0</xn:vsDataFormatVersion>
    <es:vsDataMeContext>
    <es:userLabel>RNC01</es:userLabel>
    <es:ipAddress>172.21.3.17</es:ipAddress>
    <es:neMIMversion>vF.5.0</es:neMIMversion>
    </es:vsDataMeContext>
                                  </xn:attributes>
    </xn:VsDataContainer>
    </xn:MeContext>
    </xn:SubNetwork>
    </xn:SubNetwork>
    </configData>
    <fileFooter dateTime="2006-11-24T11:56:07Z"/>
    </bulkCmConfigDataFile>
    I want to load this file into a table, validate it (against SpecificAttributes.3.0.xsd, genericNrm.xsd and configData.xsd) and query that table. How would the INSERT .. and the SELECT ... for userLabel attribute look like?
    Many thanks!

    Hi Peter,
    Please use the validateXML BPEL Property : This property validates incoming and outgoing XML documents. If set to true, the Oracle BPEL Process Manager applies schema validation for incoming and outgoing XML documents. This property is applicable to both durable and transient processes. The default value is false.
    Cheers
    A

  • Single Workflow to trigger from multiple business objects

    Can a single workflow be triggered for multiple business objects. We already have a workflow which triggers when there is error in the document. Can we use same workflow for other objects (Opportunity, lead etc..) or do we have to create separate workflows for each objects?

    Yes you check.Check the business object by passing test data in the function module.
    check with import and export parameters and check with the business object with the transaction
    after testing of business object check the status at transaction swel for event trace.
    Multiple Events & Triggering of Workflow
    Thanks,
    AMS

  • How do I create a single PDF file with multiple pages?

    Hi, I occasionally need merge several jpg images into a single pdf file with multiple pages (one Jpg per page). I have tried doing this on Preview, and by selecting all the pages I want to include in my document and trying to save to Pdf through the "Print" function, but every time it only saves the first page.
    Can anyone tell me if there is a way to save multple-page pdf files without having to purchase a specific program (i to this too infrequently to justify the cost)?
    Thanks very much,

    This works for me...
    Open first image in Preview View > Sidebar. Drag the other images into Sidebar, then select all.
    From File menu > print selected images. Choose PDF > Save as PDF
    -mj

  • Single File to multiple IDoc

    I am working on single XML file input to multiple IDoc scenario. Single file contains multiple set of data for Customer and Vendor for example 20 Customer and 40 vendor together in one file between <CMData>...</CMdata> tag individually. I have to map Customer and Vendor based on one of the tag value. I seen the IDoc structure does not allow multiple records and occurrence shows only one. What is the best way to establish this scenario. I know ccBPM is required and Transformation Step picks respective mapping based on XML tag value for Customer or Vendor, but I have doubt how can I send one by one IDoc by identifying correct mapping based on XML tag. Thanks and appreciate your help.
    --PKT

    Thanks Paul for prompt response and support.
    I changed the Occurrence of both IDOC TAG to "9999" through "xsd" and upload the same in XI and I created two mapping one for Customer and one for Vendor i.e.
    File--->Customer with multiple IDoc tag attribute
    File--->Vendor with multiple IDoc tag attribute
    Now in BPM I have to apply loop and look to the tag XMLType and where it is "C" I have to call Customer mapping and where it is "V" I have to call Vendor mapping. How I can do this . Please help me on this. Thanks.

  • ARLockbox-Is it possible to proces single lockbox file with multiple LB#s

    Hi,
    Can we have/process mutiple lockbox numbers in the single lockbox transmission data file?
    Thanks!

    Hi
    I am not sure about the answer to your question, however i found the below information in metalink:
    Q) Can a file have multiple batches for the same Lockbox number, origination, and account?
    Ans) There is no benchmark for the number receipt batches in one Lockbox transmission file.
    Yes the standard functionality allows you to import multiple receipt batches (with different batch names) in one Lockbox transmission file for the same Lockbox number, origination and bank account combination.
    Could you please confirm if the above information matches your requirement?
    Thanks
    Manish

Maybe you are looking for

  • Obtaining PersistenceManager from Session Bean in JBoss 3.0.4

    Hi, I'm attempting to use the JCA for JBoss with Kodo 2.4.0. The kodo.rar seems to deploy ok: 2002-12-18 11:19:43,640 INFO [com.solarmetric.kodo.impl.jdbc.ee.ManagedConnectionFactoryImpl.kodo] Bound connection factory for resource adapter 'KodoJDO' t

  • IDVD picture problem on home DVD

    I make iDVD slideshow.Everything is O.K. except that there is a red underline below the slideshow text. And playing with my home DVD player the slideshow pictures are extremely wide and depressed,flat.(I tried to change the TV screen size correction

  • IPad, mac and iCloud

    hello folks! is there any way to transfer PDF files from MAC to iPad via iCloud? i am able to do that with .doc files and .ppt files but PDF. please help me out! many thanks!

  • Export Cache Rules

    Is there a way to export the caching rules and load the same rules into another webcache? This would seem like an obviously useful thing to be able to do but I haven't seen a way of achieving this. I don't especially want to backup/restore the entire

  • Changing Schedule Line Category after checking Item availability

    Hi Expert,    I would like to change the schedule line category according to the result of item availability check, i.e. change to another self defined schedule line category in case confirmed qty < order qty.    Could any one please suggest where I