Forum Discussion
Upgrade Function domain - keytab
Current we are using keytab to configure authenticate oracle 12c and windows AD 2012 R2 (Domain and Forest function level to 2008 r2) and all working normal . But when we upgrade only Domain and Fore...
Hello,
Normally no, your upgrade is not major, like from 2k8 to 2k19 or 22 which mostly affect the encryption.
Check the following link from Microsoft and keep in mind the attributes of "-crypto all". I have facing issues, when I upgrade from 2k12 to 2k19 and I have enable the gpo for the crypto AES and above.
Before you change anything create a small dev/test environment. Also klist command i very helpful for debugging or else wireshark.
https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/ktpass
https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/klist?source=recommendations
Normally no, your upgrade is not major, like from 2k8 to 2k19 or 22 which mostly affect the encryption.
Check the following link from Microsoft and keep in mind the attributes of "-crypto all". I have facing issues, when I upgrade from 2k12 to 2k19 and I have enable the gpo for the crypto AES and above.
Before you change anything create a small dev/test environment. Also klist command i very helpful for debugging or else wireshark.
https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/ktpass
https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/klist?source=recommendations
- Thanks , I am know problem , because keytab file difference version between AD and Oracle DB . This can because we generate keytab again that not copy to Oracle DB after upgrade Function level in Test and error should things upgrade Function Level make error . Confirm is upgrade Function level not effect to Keytab kerbeross
