4.2.10.3 Login to the Graph Server Using Kerberos Ticket
The following are the steps to login to the graph server (PGX) using Kerberos
ticket:
Create a new Kerberos ticket using the okinit command:
$ okinit <username>
This will prompt for your password and then create a new Kerberos ticket.
Connect to a remote graph server with only the base URL parameter using JShell:
$ opg4j -b https://localhost:7007
Or using Python client:
$ opg4py -b https://localhost:7007
On Linux, JShell and Python interactive client shells automatically detect the Kerberos ticket on your local file system and use that to authenticate with the graph server.
In case the auto-detection is not working, you can also explicitly pass in the ticket to the shell. Run the oklist command, to find the location of the ticket on the local file system.
$ oklist
Kerberos Utilities for Linux: Version 19.0.0.0.0 - Production on 31-MAR-2021 15:26:46
Copyright (c) 1996, 2019 Oracle. All rights reserved.
Configuration file : /etc/krb5.conf.
Ticket cache: FILE:/tmp/krb5cc_54321
Default principal: oracle@realm
Specify your Kerberos ticket path using the --kerberos_ticket parameter. For example, using JShell: