Home » RDBMS Server » Security » radius configuration for oracle 9iR2/10g
icon9.gif  radius configuration for oracle 9iR2/10g [message #142664] Mon, 17 October 2005 02:38 Go to next message
wuyan921
Messages: 3
Registered: October 2005
Junior Member
I have tested radius authentication for oracle 9i successfully according to the OAS document.But the same configuration did not work for oracle 9iR2/10g.Moreover,the radius server received nothing when testing 9iR2/10g.
Has someone tested it successfully?Please help me.

[Updated on: Mon, 17 October 2005 02:43]

Report message to a moderator

Re: radius configuration for oracle 9iR2/10g [message #142671 is a reply to message #142664] Mon, 17 October 2005 03:04 Go to previous messageGo to next message
wuyan921
Messages: 3
Registered: October 2005
Junior Member
My oracle server's configuration lists below:

1 sqlnet.ora
# SQLNET.ORA Network Configuration File: e:\oracle\ora92\network\admin\sqlnet.ora
# Generated by Oracle configuration tools.
SQLNET.AUTHENTICATION_SERVICES=radius
SQLNET.RADIUS_SECRET=e:\oracle\ora92\network\security\radius.key
SQLNET.RADIUS_AUTHENTICATION=192.168.1.198
SQLNET.RADIUS_AUTHENTICATION_PORT=1645
SQLNET.RADIUS_AUTHENTICATION_TIMEOUT=2
SQLNET.RADIUS_AUTHENTICATION_RETRIES=4

sqlnet.radius_accounting = off
sqlnet.radius_challenge_response = off
sqlnet.radius_authentication_interface = DefaultRadiusInterface

2 I have added the following lines to the bottom of init.ora:
REMOTE_OS_AUTHENT=FALSE
OS_AUTHENT_PREFIX=""

3 Restart oracle service and connect to the server:
SQL> CREATE USER AAA IDENTIFIED EXTERNALLY;
SQL> GRANT CREATE SESSION TO AAA;
SQL> CONNECT AAA/AAApassword@ORCL;

But the radius server received nothing.What's wrong with my configuration?
Re: radius configuration for oracle 9iR2/10g [message #150431 is a reply to message #142671] Wed, 07 December 2005 18:52 Go to previous messageGo to next message
jtomaski
Messages: 2
Registered: December 2005
Junior Member
Hi;

I'm having the same trouble, I had an itar opened for over 11 days when I finally gave up and I'm reloading my system from scratch. I never got any packets sent to my RADIUS server either. Please let me know if you get this to work. A couple of things Oracle had me do was change my RADIUS secret, first from greater then 16 characters to less then 7, they also had me turn on full tracing but that didn't help much at all. I had to run the RDA scripts which didn't provide any answer's. I have a feeling this isn't being supported.

-Jeff
icon9.gif  Re: radius configuration for oracle 9iR2/10g [message #150892 is a reply to message #142664] Sun, 11 December 2005 18:39 Go to previous messageGo to next message
wuyan921
Messages: 3
Registered: October 2005
Junior Member
I haven't solved the problem yet.

I don't know if Oracle modified the radius module since Oracle 9iR2.
Re: radius configuration for oracle 9iR2/10g [message #172708 is a reply to message #150892] Wed, 17 May 2006 13:07 Go to previous message
jtomaski
Messages: 2
Registered: December 2005
Junior Member
Hi;

Any update on this? I'm still having the same problem as before, the adapter's show that RADIUS authentication is installed, the sqlnet.ora file is configured properly yet running a sniffer indeeds shows NO TRAFFIC what so ever going to the RADIUS server. All I get is the good old

ORA-01017: invalid username/password; logon denied

OF interest I see no rad10.so in the lib directory as there was in 9i, I wonder if this library is needed but is missing in 10g? Anyways if anyone has this working I could use some help.

Regards,

-Jeff
Previous Topic: Patch and version numbers
Next Topic: Connect to Database
Goto Forum:
  


Current Time: Wed Apr 24 03:31:50 CDT 2024