| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> RE: Authentication with Active Directory
Henry,
I've been looking into something similar at a client. I think you want to look at external authentication. This will use your OS authentication, which in turn uses AD. The problem is that OS authentication is not very secure when using PC clients, so we are using Kerberos as well, which does make it secure. In order to use Kerberos, you'll need the Advanced Security Option. I think you'll also need to upgrade your NT's to W2K, as W2K uses Kerberos by default.
I don't know what the Enterprise Login Asst. is, I assume it assists you in creating Enterpise Users. Enterpise Users allow you to create a user once and have it shared by multiple instances, and only works if you have external authentication. Haven't tried that yet, but it's on the list.
OID is Oracle's version of AD. We're not using it here - using MS AD instead.
HTH,
Gary
Gary Kirsh
Next Extent Consulting
-----Original Message-----
Sent: Wednesday, September 18, 2002 5:58 PM
To: Multiple recipients of list ORACLE-L
We have several databases spread out over Unix and NT Servers.
I have been given the task to find out what it will take for our users to log in to the databases with their AD Id/password. Has anybody out there done this?
Here are some questions I have:
Keith H.
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Henry, Keith
INET: henryk_at_email.uky.edu
Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services ---------------------------------------------------------------------To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services ---------------------------------------------------------------------To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Fri Sep 20 2002 - 16:43:35 CDT
 |
 |