Unix Technical Forum

Oracle password security?

This is a discussion on Oracle password security? within the Oracle Database forums, part of the Database Server Software category; --> Hi All, I am wondering what other method people use for oracle login-authentication. 1) sqlplus login-name/password 2) use OS ...


Go Back   Unix Technical Forum > Database Server Software > Oracle Database

Register FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 02-24-2008, 02:52 PM
dominica@gmail.com
 
Posts: n/a
Default Oracle password security?

Hi All,


I am wondering what other method people use for oracle
login-authentication.

1) sqlplus login-name/password

2) use OS authentication method (I used it before, it is fine.)

But is there any other method in 10g??


Thanks,


Dominica

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 02-24-2008, 02:52 PM
IANAL_VISTA
 
Posts: n/a
Default Re: Oracle password security?

"dominica@gmail.com" <dominica@gmail.com> wrote in
news:1121121681.364879.93150@g49g2000cwa.googlegro ups.com:

> Hi All,
>
>
> I am wondering what other method people use for oracle
> login-authentication.
>
> 1) sqlplus login-name/password
>
> 2) use OS authentication method (I used it before, it is fine.)
>
> But is there any other method in 10g??
>
>
> Thanks,
>
>
> Dominica
>
>


LDAP
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 02-24-2008, 02:54 PM
Rick Wessman
 
Posts: n/a
Default Re: Oracle password security?

In article <1121121681.364879.93150@g49g2000cwa.googlegroups. com>,
dominica@gmail.com says...
>
>Hi All,
>
>
>I am wondering what other method people use for oracle
>login-authentication.
>
>1) sqlplus login-name/password
>
>2) use OS authentication method (I used it before, it is fine.)
>
>But is there any other method in 10g??
>
>
>Thanks,
>
>
>Dominica
>

Oracle Advanced Security offers quite a few, including Kerberos. The
administrator's guide lists them.

Rick


--
Rick Wessman
Oracle Corporation
The opinions expressed above are mine and do not necessarily reflect
those of Oracle Corporation.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 02-24-2008, 02:58 PM
DA Morgan
 
Posts: n/a
Default Re: Oracle password security?

dominica@gmail.com wrote:
> Hi All,
>
>
> I am wondering what other method people use for oracle
> login-authentication.
>
> 1) sqlplus login-name/password
>
> 2) use OS authentication method (I used it before, it is fine.)
>
> But is there any other method in 10g??
>
>
> Thanks,
>
>
> Dominica


Depends on how much security you need and can afford. Userid/password,
either in Oracle or the operating system is very little security indeed.

Other options to explore:
Logon Triggers
FGAC
LDAP
Label Security
SQLNET.ORA ... invited/excluded nodes parameters
Oblix (now part of Oracle and providing the Identity Management piece)
--
Daniel A. Morgan
http://www.psoug.org
damorgan@x.washington.edu
(replace x with u to respond)
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #5 (permalink)  
Old 02-24-2008, 02:58 PM
Sybrand Bakker
 
Posts: n/a
Default Re: Oracle password security?

On Sat, 16 Jul 2005 10:55:28 -0700, DA Morgan <damorgan@psoug.org>
wrote:

>Depends on how much security you need and can afford. Userid/password,
>either in Oracle or the operating system is very little security indeed.


Most vendors I work with don't password protect their application at
all, and usually expressly forbid to change that situation.


--
Sybrand Bakker, Senior Oracle DBA
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #6 (permalink)  
Old 02-24-2008, 02:58 PM
DA Morgan
 
Posts: n/a
Default Re: Oracle password security?

Sybrand Bakker wrote:
> On Sat, 16 Jul 2005 10:55:28 -0700, DA Morgan <damorgan@psoug.org>
> wrote:
>
>
>>Depends on how much security you need and can afford. Userid/password,
>>either in Oracle or the operating system is very little security indeed.

>
>
> Most vendors I work with don't password protect their application at
> all, and usually expressly forbid to change that situation.
>
>
> --
> Sybrand Bakker, Senior Oracle DBA


You are correct. Here, due to changes in the law, some of those vendors
are discovering the need to change some of their policies.
--
Daniel A. Morgan
http://www.psoug.org
damorgan@x.washington.edu
(replace x with u to respond)
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


All times are GMT. The time now is 09:49 AM.


Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0
www.UnixAdminTalk.com