RE: Authentication with Active Directory

2002-09-20 Thread Kirsh, Gary

Henry,

I've been looking into something similar at a client.  I think you want to
look at external authentication.  This will use your OS authentication,
which in turn uses AD.  The problem is that OS authentication is not very
secure when using PC clients, so we are using Kerberos as well, which does
make it secure.  In order to use Kerberos, you'll need the Advanced Security
Option.  I think you'll also need to upgrade your NT's to W2K, as W2K uses
Kerberos by default.

I don't know what the Enterprise Login Asst. is, I assume it assists you in
creating Enterpise Users.  Enterpise Users allow you to create a user once
and have it shared by multiple instances, and only works if you have
external authentication.  Haven't tried that yet, but it's on the list.

OID is Oracle's version of AD.  We're not using it here - using MS AD
instead.

HTH,
Gary

Gary Kirsh
Next Extent Consulting

-Original Message-
Sent: Wednesday, September 18, 2002 5:58 PM
To: Multiple recipients of list ORACLE-L



We have several databases spread out over Unix and NT Servers.

I have been given the task to find out what it will take for our users to
log in to the databases with their AD Id/password.  Has anybody out there
done this?

Here are some questions I have:

   1)  Do I need to have Advanced Security Option?
   2)  Does Enterprise Login Asst. factor into this?
   3)  Does Oracle internet directory factor into this?

Keith H.
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Henry, Keith
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Kirsh, Gary
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).



Re: Authentication with Active Directory

2002-09-18 Thread Gene Sais



 [EMAIL PROTECTED] 09/18/02 05:58PM 

We have several databases spread out over Unix and NT Servers.

I have been given the task to find out what it will take for our users to
log in to the databases with their AD Id/password.  Has anybody out there
done this?

Here are some questions I have:

   1)  Do I need to have Advanced Security Option? No, its an extra option.
   2)  Does Enterprise Login Asst. factor into this? Not sure.
   3)  Does Oracle internet directory factor into this?  OID is similar to LDAP.

Keith H.
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com 
-- 
Author: Henry, Keith
  INET: [EMAIL PROTECTED] 

Fat City Network Services-- 858-538-5051 http://www.fatcity.com 
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Gene Sais
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).