In addition to the standard Java configuration for Kerberos, there are a few steps that needs to be done to connect to Oracle with Kerberos. The following shows a basic setup for Kerberos with the Oracle JDBC driver. Tested with: 

  • DbVisualizer 11 
  • Oracle 19c
  • Oracle JDBC driver 19.3
  • Oracle Instant Client 19.3

TABLE OF CONTENTS


Due to an issue in the Oracle JDBC driver, the OCI protocol must be used when connecting to the database with Kerberos. The OCI JDBC driver requires native libraries and these are available in the Oracle Instant Client package which needs to be installed on the client. Download the package that match your operating system and install it.


Set Java properties

In DbVisualizer open Tools->Tool Properties select the General tab and then the General category. In Specify overridden Java VM Properties here enter the following. 


-Djava.security.krb5.conf=<path-to>\krb5.conf
-Djava.library.path=<path-to-oracle-instant-client>\instantclient_19_3


Click OK and then Restart DbVisualizer.


Setup JDBC driver


In DbVisualizer open Tools->Driver Manager and select the Oracle OCI driver entry. Duplicate that driver using Driver->Duplicate Driver and give it a good name ("Oracle OCI (Oracle Instant Client)" in the screenshot below).


In the list of driver jar files, remove the pre-defined ojdbc8.jar file and instead load the same file from the instantclient_19_3 folder. Let the driver manager identify the driver classes and then close the window.


Connection setup

In the DbVisualizer main window, open the connection details for your Oracle connection and make sure the JDBC (Driver) is set to the new driver entry, "Oracle OCI (Oracle Instant Client)". Specify the other details for the connection.



Driver Properties for Kerberos

At least the following driver properties needs to be set:


oracle.net.authentication_services = KERBEROS5
oracle.net.kerberos5_mutual_authentication = true



Please note that this overview guides through the basic setup of Kerberos with Oracle. If connect fails please check the Kerberos related driver properties.