RE: external authentication

2002-07-17 Thread Toepke, Kevin M 



Don't 
do it unless the application is running locally on the same physical server as 
the database. It is (or at least was) extremely easy to break into a system that 
uses external authentication across a network. (...don't 
ask:)
 
The 
following example shows how to connect to the PLAY database using external 
authentication
$ORACLE_SID=play 
$export ORACLE_SID
$sqlplus /
 
Kevin

  -Original Message-From: Lyuda Hoska 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, July 17, 2002 3:24 
  PMTo: Multiple recipients of list ORACLE-LSubject: 
  external authentication
  
  Does anyone here have experience working with database 
  that supports external authentication application 
  users?
  My question is how would application know which 
  database to connect to if there are multiple databases on the 
  server?
  Does it have to be hard-coded in 
  application?
  Thank 
you.

RE: external authentication

2002-07-17 Thread Karniotis, Stephen 








If you have multiple databases and you are using
external user authentication, the connect string would need to identify the SID
or TNSNames entry that they must connect to.  We wrote a front-end application that the user invoked via a
menu or API.  They passed in the
English name of the app and we passed the entry back to them.

 

Thank
You

 

Stephen
P. Karniotis

Product Architect

Compuware Corporation

Direct:   (248)
865-4350

Mobile:  (248)
408-2918

Email:  [EMAIL PROTECTED]

Web:    www.compuware.com

 

-Original
Message-
From: Lyuda Hoska
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 17, 2002
3:24 PM
To: Multiple recipients of list
ORACLE-L
Subject: external authentication

 

Does anyone
here have experience working with database that supports external
authentication application users?

My question
is how would application know which database to connect to if there are
multiple databases on the server?

Does it have
to be hard-coded in application?

Thank you.










The contents of this e-mail are intended for the named addressee only. It contains information that may be confidential. Unless you are the named addressee or an authorized designee, you may not copy or use it, or disclose it to anyone else. If you received it in error please notify us immediately and then destroy it.