Oracle Database Advanced Security 10g Release 1, Administrator'S Manual

Page: 146 / 518

Using RADIUS to Log In to a Database
5-22 Oracle Database Advanced Security Administrator's Guide
Using RADIUS to Log In to a Database
If you are using the synchronous authentication mode, launch SQL*Plus and enter
the following command at the prompt:
CONNECT username/password@database_alias
Note that you can log in with this command only when challenge-response is not
turned to ON.
If you are using the challenge-response mode, launch SQL*Plus and, at the prompt,
enter the command that follows:
CONNECT /@database_alias
Note that you can log in with this command only when challenge-response is
turned to ON.
RSA ACE/Server Configuration Checklist
If you are using an RSA ACE/Server as a RADIUS server, check the following items
before making your initial connection:
■
Ensure that the host agent in the RSA ACE/Server is set up to send a node
secret. In version 5.0, this is done by leaving the SENT Node secret box
unchecked. If the RSA ACE/Server fails to send a node secret to the agent, then
a node verification failure message will be written to the RSA ACE/Server log.
■
If you are using RSA SecurID tokens, then ensure that the token is synchronized
with the RSA ACE/Server.
See Also:
■
Challenge-Response (Asynchronous) Authentication Mode on
page 5-5
■
Configure Challenge-Response on page 5-14
These sections describe how to configure challenge-response mode.
Note:
The challenge-response mode can be configured for all
login cases.