Oracle Database Advanced Security 10g Release 1, Руководство администратора

Страница: 141 / 518

Enabling RADIUS Authentication, Authorization, and Accounting
Configuring RADIUS Authentication 5-17
Task 3: Create a User and Grant Access
To grant user access:
1.
Launch SQL*Plus and execute these commands to create and grant access to a
user identified externally on the Oracle database server.
SQL> CONNECT system/manager@database_name;
SQL> CREATE USER username IDENTIFIED EXTERNALLY;
SQL> GRANT CREATE SESSION TO USER username;
SQL> EXIT
If you are using Windows, you can use the Security Manager tool in the Oracle
Enterprise Manager.
2.
Enter the same user in the RADIUS server's users file.
Task 4: Configure External RADIUS Authorization (optional)
If you require external RADIUS authorization for RADIUS users who connect to an
Oracle database, then you must perform the following steps to configure the Oracle
server, the Oracle client, and the RADIUS server:
To configure the Oracle server (RADIUS client):
1.
Add the
OS_ROLE
parameter to the
init.ora
file and set this parameter to
TRUE
as follows:
OS_ROLE=TRUE
Then restart the database so the system can read the change to the
init.ora
file.
2.
Set the RADIUS challenge-response mode to
ON
for the server if you have not
already done so by following the steps listed in "Configure
Challenge-Response" on page 5-14.
See Also:
■
Oracle Database Administrator's Guide
■
Oracle Database Heterogeneous Connectivity Administrator's Guide
See Also:
Administration documentation for the RADIUS server