Beth, can you give a specific example of how you did this? It was my
understanding that using external authentication was inherently a security
hole, given that a person could create any user on any node in your network
(e.g. a DBA username on some PC or Unix workstation) and connect to your DB
as that user. Or is this just not applicable in your situation? I'm not up
to speed on Windows authentication...
Rich Jesse System/Database Administrator
Rich.Jesse_at_qtiworld.com Quad/Tech International, Sussex, WI USA
> -----Original Message-----
> From: Seefelt, Beth [mailto:Beth.Seefelt_at_TetleyUSA.com]
> Sent: Thursday, August 15, 2002 4:14 PM
> To: Multiple recipients of list ORACLE-L
> Subject: RE: Using Microsoft Windows 2000 Active Directory userid to
> logon to
>
>
>
> I have it working and am pretty happy with it. It doesn't
> allow a user
> to connect to the database without entering anything, they
> still have to
> enter a / for username, but they don't have to enter a password.
>
> One tip - for security reasons you should preface the usernames with
> your domain name and not OPS$ or some such nonsense.
>
> You will occaissionally run into older products that don't support OS
> authentication - eg. Oracle Reports 6.0.
>
> Beyond user ease, the other reason I like it is that I can script DBA
> tasks in .bat files without hardcoding username/password
>
> HTH,
>
> Beth
>
> -----Original Message-----
> Sent: Thursday, August 15, 2002 4:04 PM
> To: Multiple recipients of list ORACLE-L
> to
>
>
>
> I have some users who use both Oracle and Microsoft SQL Server. They
> like
> the fact they don't have to type in a userid and password when they
> logon to
> SQL server, they are authenticated with their Windows logon.
>
> They'd like the same thing when they logon to Oracle.
>
> I seem to recall that Oracle can use the userid and password from the
> operating system but has anyone got this working under NT?
>
> Thanks John
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Jesse, Rich
INET: Rich.Jesse_at_qtiworld.com
Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
San Diego, California -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
Received on Thu Aug 15 2002 - 17:23:26 CDT
