Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: Oracle Web Application Server

Re: Oracle Web Application Server

From: Chris Kimpton <chris.kimpton_at_btalexbrown.com>
Date: Thu, 30 Jul 1998 13:27:24 +0100
Message-ID: <35C066AC.F758C979@btalexbrown.com>

bons001_at_my-dejanews.com wrote:

> > >1. Normal web Form which prompts for username and password.
> > >2. Lookup username and password in password table and verify.
> > >3. Set a cooky with the users ID.
> >

What version of OWS are you using - under version 3 onwards, there is the option of Basic Oracle authentication - which looks like Basic Authentication - but it checks the user/password are valid oracle accounts (optionally have a specified DB role). All this without modifying owa_init.

Although its only as secure as basic authentication - the username/password is practically sent in the clear - base64 encoding is not encrypted.

But definitely easier to manage than basic authentication - you can easily write forms to create users, allow them to modify their passwords, get them reset etc.

Regards,
Chris Received on Thu Jul 30 1998 - 07:27:24 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US