Oracle Advanced Networking Option Administrator's Guide
Library
Product
Oracle
®
Advanced Networking Option
(tm)
Preface
Oracle Advanced Networking Option-- Security and Single Sign-On
Overview of Network Security and Single Sign-On
Protection from Tampering and Unauthorized Viewing
How Encryption and Checksumming are Activated
The Advanced Networking Option Provides Enhanced Client/Server Authentication
How Oracle Authentication Adapters Provide Enhanced Security
Configuring Encryption and Checksumming
Where to Get Information on Installing the Advanced Networking Option
Known Limitations
Benefits of the Advanced Networking Option Encryption and Checksum Algorithms
Overview of Encryption and Checksumming Configuration Parameters
Configuring Servers and Clients to Use Encryption and Checksumming
Choosing and Combining Authentication Services
Connect with a Username/Password When Authentication has been Configured
Setting Up an Oracle Server With Multiple Authentication Services
Setting Up an Oracle Client to Use Multiple Authentication Services
Configuring the CyberSAFE Authentication Adapter
Steps to Perform to Enable CyberSAFE Authentication
CyberSAFE Configuration Parameters Required on the Oracle Server and Client
Troubleshooting the Configuration of the CyberSAFE Authentication Adapter
Configuring the Kerberos Authentication Adapter
Steps to Perform to Enable Kerberos Authentication
Description of Configuration File Parameters on Oracle Server and Client
Troubleshooting the Configuration of the Kerberos Authentication Adapter
Configuring Oracle for Use with SecurID Adapter
System Requirements
Known Limitations
Steps to Perform to Enable SecurID Authentication
Create Users for the SecurID Adapter
Troubleshooting the Configuration of the SecurID Authentication Adapter
Using the SecurID Authentication Adapter
Configure the Oracle Client to Use the SecurID Authentication Adapter
Configuring and Using the Biometric Authentication Adapter
Overview of the Biometric Authentication Service
Architecture of the Biometric Authentication Service
Prerequisites
Configuring the Biometric Authentication Service
Administering the Oracle Biometric Authentication Service
Authenticating Users With the Oracle Biometric Authentication Service
Using the Biometric Manager
Configuring the DCE GSSAPI Authentication Adapter
Create the DCE Principal
Set Up Parameters to Use the New DCE Principal, and Turn On DCE GSSAPI Authentication
Set Up the Account You Will Use to Authenticate to the Database
Connect to an Oracle Server Using DCE GSSAPI Authentication
Oracle Advanced Networking Option--Oracle DCE Integration
Overview of Oracle DCE Integration
System Requirements
Backward Compatibility
Overview of Distributed Computing Environment (DCE)
Overview of Oracle DCE Integration
Configuring DCE for Oracle DCE Integration
Configuring DCE to Use the Oracle DCE Integration Adapter
Configuring DCE CDS for Use by Oracle DCE Integration
Configuring Oracle for Oracle DCE Integration
Configuring Clients to Use the DCE CDS Naming Adapter
Connecting to an Oracle Database in DCE
Starting the SQL*Net Version 2 Listener
Connecting to an Oracle Database Server in the DCE Environment
DCE and Non-DCE Interoperability
Clients Outside DCE Can Still Connect to Oracle Servers in DCE
Sample Parameter Files
Using TNSNAMES.ORA for Name Lookup When CDS is Inaccessible
Oracle Advanced Networking Option-- Native Naming
Overview of Native Naming Adapters
Why Use Native Naming Adapters?
Native Name Services and Oracle Names
How to Configure Native Name Services in Your SQL*Net Network
Individual Native Naming Adapters
Configuring the DCE CDS Naming Adapter
Using DCE's CDS (Cell Directory Service) to Perform Name Lookup
Clients Outside DCE Can Still Connect to Oracle Servers in DCE
Configuring the NIS Naming Adapter
What the NIS Adapter Does for You
System Requirements
Installing the NIS Naming Adapter
How the NIS Naming Adapter Interacts with SQL*Net and Oracle
Oracle Database Service Names are Stored in a Separate NIS Map
Configuring Clients to Use the NIS Naming Adapter
Configuring the NDS Naming Adapter
What the NDS Naming Adapter Does for You
System Requirements
Installing the NDS Adapter
How the NDS Adapter Interacts with SQL*Net and Oracle
Configuring the NDS Naming Adapter on Clients and Servers
Known Limitations
Encryption and Checksum Parameters
Sample SQLNET.ORA Configuration Files for Clients and Servers
Encryption Enhancements
System Requirements
Known Limitations
Overview of Site-Specific Diffie-Hellman Encryption Enhancement
Overview of Authentication Key Fold-in Encryption Enhancement
Strong 128-bit Encryption
Authentication Parameters
Sample Configuration Files
GLOSSARY FOR SECURITY AND SINGLE SIGN-ON
Copyright © 1996 Oracle Corporation
500 Oracle Parkway, Redwood City, CA 94065
Library
Product