The following tasks must be performed on the Windows 2000 domain controller:
Create the Oracle Database Principal in Microsoft Active Directory
This creates a new user for the database in Microsoft Active Directory.
Use the ktpass command-line utility to create a kerberos keytab file
The ktpass utility is a part of the Windows 2000 Support Tools. The keytab file is required to use a Windows 2000 domain controller as a KDC.
Copy the keytab file created in the previous step to the computer on which the database server is installed
See Also:
Oracle Database Security Guide for a detailed listing of the preceding steps.