Oracle Database Advanced Security 10g Release 1, Administrator'S Manual

Page: 143 / 518

Enabling RADIUS Authentication, Authorization, and Accounting
Configuring RADIUS Authentication 5-19
Ensure that RADIUS groups which map to Oracle roles adhere to the
ORACLE_
ROLE
syntax.
For example:
USERNAME USERPASSWD="user_password",
SERVICE_TYPE=login_user,
VENDOR_SPECIFIC=ORACLE,
ORACLE_ROLE=ORA_ora920_sysdba
Task 5: Configure RADIUS Accounting
RADIUS accounting logs information about access to the Oracle database server
and stores it in a file on the RADIUS accounting server. Use this feature only if both
the RADIUS server and authentication server support it.
Set RADIUS Accounting on the Oracle Database Server
Use Oracle Net Manager to enable or disable RADIUS accounting (See "Starting
Oracle Net Manager" on page 2-2):
1.
Navigate to the Oracle Advanced Security profile. (See "Navigating to the
Oracle Advanced Security Profile" on page 2-3) The Other Params window
appears ( Figure 5–5 ).
2.
From the Authentication Service list, select RADIUS.
3.
In the Send Accounting field, enter ON to enable accounting or OFF to disable
accounting.
4.
Choose File > Save Network Configuration.
The
sqlnet.ora
file is updated with the following entry:
SQLNET.RADIUS_SEND_ACCOUNTING= ON
Configure the RADIUS Accounting Server
RADIUS Accounting consists of an accounting server residing on either the same
host as the RADIUS authentication server or on a separate host.
See Also:
The RADIUS server administration documentation for
information about configuring the server.
See Also:
Administration documentation for the RADIUS server,
for information about configuring RADIUS accounting