Re: proxy authentication and passwords

From: Jonathan Lewis <jonathan_at_jlcomp.demon.co.uk>
Date: Fri, 23 Feb 2007 07:23:58 -0000
Message-ID: <ro6dnTubk_EaC0PYnZ2dnUVZ8vWdnZ2d@bt.com>

"foothillbiker" <foothillbiker_at_gmail.com> wrote in message news:1172195190.580328.175720_at_v33g2000cwv.googlegroups.com...
>
> So, again, it would seem that anybody who knows a userid can login,
> unless we do something OTHER authentication along the way.
>
> REgards,
> Chas.
>

That is correct.

There is a built-in assumption with this approach that the end user first has to authenticate himself/herself to the application server. (This may make proxy user seem an odd implementation in the days of LDAP and SSO, but proxy user has been around for a long time).

-- 
Regards

Jonathan Lewis
http://jonathanlewis.wordpress.com

Author: Cost Based Oracle: Fundamentals
http://www.jlcomp.demon.co.uk/cbo_book/ind_book.html

The Co-operative Oracle Users' FAQ
http://www.jlcomp.demon.co.uk/faq/ind_faq.html

Received on Fri Feb 23 2007 - 01:23:58 CST