Oracle Database Advanced Security 10g Release 1, Administrator'S Manual

Page: 484 / 518

Glossary-2
authentication
The process of verifying the identity of a user, device, or other entity in a computer
system, often as a prerequisite to granting access to resources in a system. A
recipient of an authenticated message can be certain of the message's origin (its
sender). Authentication is presumed to preclude the possibility that another party
has impersonated the sender.
authentication method
A security method that verifies a user's, client's, or server's identity in distributed
environments. Network authentication methods can also provide the benefit of
single sign-on (SSO)
for users. The following authentication methods are
supported in Oracle Database when Oracle Advanced Security is installed:
■
Kerberos
■
RADIUS
■
Secure Sockets Layer (SSL)
■
Windows NT native authentication
authorization
Permission given to a user, program, or process to access an object or set of objects.
In Oracle, authorization is done through the role mechanism. A single person or a
group of people can be granted a role or a group of roles. A role, in turn, can be
granted other roles. The set of privileges available to an authenticated entity.
auto login wallet
An Oracle Wallet Manager feature that enables PKI- or password-based access to
services without providing credentials at the time of access. This auto login access
stays in effect until the auto login feature is disabled for that wallet. File system
permissions provide the necessary security for auto login wallets. When auto login
is enabled for a wallet, it is only available to the operating system user who created
that wallet. Sometimes these are called "SSO wallets" because they provide single
sign-on capability.
base
The root of a subtree search in an LDAP -compliant directory.
CA
See certificate authority