Re: need help setting up test of global users

Mark D Powell wrote:
> On Oct 19, 4:54 pm, "EdStevens" <quetico_..._at_yahoo.com> wrote:
> > General questions, think Oracle 9.2 and 10.2
> >
> > For the last week I've been trying to read up on 'global' or
> > 'enterprise' users, looking to play around with schema-independent
> > global users. This is purely an academic exercise at this point. My
> > problem is that I've really been spinning my wheels trying to get all
> > the specifics together. Started by searching the doc set at tahiti
> > for 'global user'. From there went to the Administrator's Guide,
> > which gave me a good overview, then pointed me to Database Advanced
> > Security Administrator's Guide (broken link at tahiti, which I posted
> > about last week), then off into some iAS docs, until I've gotten
> > completely lost in the forest.
> >
> > What I'd *like* to find is a step-by-step identifying what has to be
> > installed and how to configure it. Most of what I've read so far
> > hints at some of it in a larger context and gives yet another link for
> > 'more information'. At this point I'm not interested in a lot of
> > bells and whistles. I just want to get a minimal setup to define and
> > test with global users. All testing has to be on my own laptop (XP
> > Pro, 1.6gh Pentium, 1.0gb ram).
> >
> > Can someone give me a short list of what has to be done, with pointers
> > to where I can find the necessary detail for each item?
> >
> > Thanks.
>
> Ed, I could be wrong but I believe the use of Global users requires the
> Advanced Security Option. Do you have ADO?
>
> >From the Oracle9i Database Administrator's Guide Release 2 (9.2) Part
> Number A96521-01 Ch 24 Managing Users and Resources >>
> Global Authentication and Authorization
> Oracle Advanced Security enables you to centralize management of
> user-related information, including authorizations, in an LDAP-based
> directory service. Users can be identified in the database as global
> users, meaning that they are authenticated by SSL <snip> <<
>
> The DBA Admin manual is not that clear in that you might be able to use
> LDAP without ADO. I think the manuals you want to review are:
>
> Oracle Advanced Security Administrator's Guide
> Oracle Internet Directory Administrator's Guide
>
> I know someone who was working on using LDAP with the db. I will try
> to inquire to see if 1- they got it to work and 2- if ADO was required
> or not.
>
> HTH -- Mark D Powell --

Mark,

Thanks for the response. Since this is purely an educational exercise for me, running everything on my own laptop, we can assume that ADO is or will be available. If I get to the point of trying to implement, I'll note that requirement.

I'll make another pass through the Advanced Security and Internet Directory Admin Guides.. Received on Fri Oct 20 2006 - 12:33:12 CDT