Re: SQL*Net protocol

From: an416965_at_anon.penet.fi <(an416965_at_anon.penet.fi)>
Date: 1995/12/24
Message-ID: <4bjub7$ovk_at_ixnews8.ix.netcom.com>#1/1


shohami_at_cuug.ab.ca (Shoham) wrote:

>Does anyone have any information about the SQL*NET protocol?
 

>In particular, I'm interested in information about how it authenticates
>a user, and how it does (or doesn't) protect transmissions against
>eavesdropping and unauthorized insertion of data.
 

>-- Idan

SQL*Net doesn't do the authentication, the database you connect to does. SQL*Net V2.1 and higher will ship your password in an encrypted form to the database, and the database will authenticate it.

For high levels of security, you'd want to use Secure Network Services (AKA, SNS). This product, a SQL*Net add-on, will encrypt the entire SQL*Net conversation, and ensure that noone substitutes any packets. SNS also lets you integrate network authentication with Oracle via Kerberos.

I think the Oracle home page has some info on this. http://www.oracle.com. Received on Sun Dec 24 1995 - 00:00:00 CET

Original text of this message