Oracle Database Advanced Security 10g Release 1, Руководство администратора

Страница: 250 / 518

Configuring Multiple Authentication Methods
9-4 Oracle Database Advanced Security Administrator's Guide
Configuring Multiple Authentication Methods
Many networks use more than one authentication method on a single security
server. Accordingly, Oracle Advanced Security lets you configure your network so
that Oracle clients can use a specific authentication method, and Oracle database
servers can accept any method specified.
You can set up multiple authentication methods on both client and server systems
either by using Oracle Net Manager, or by using any text editor to modify the
sqlnet.ora
file.
Use Oracle Net Manager to add authentication methods to both clients and servers
(See
"Starting Oracle Net Manager" on page 2-2):
1.
Navigate to the Oracle Advanced Security profile. (See "Navigating to the
Oracle Advanced Security Profile" on page 2-3) The Oracle Advanced Security
tabbed window appears ( Figure 9–1 ).
2.
Choose the Authentication tab.
3.
Select a method listed in the Available Methods list.
4.
Sequentially move selected methods to the Selected Methods list by choosing
the right arrow [>].
5.
Arrange the selected methods in order of desired use. To do this, select a
method in the Selected Methods list, and choose Promote or Demote to position
it in the list.
6.
Choose File > Save Network Configuration.
The
sqlnet.ora
file is updated with the following entry, listing the selected
authentication methods:
SQLNET.AUTHENTICATION_SERVICES = (RADIUS|KERBEROS5)
Note:
■
SecurID functionality is available through RADIUS; RADIUS
support is built into the RSA ACE/Server.
■
See Also: Chapter 5, "Configuring RADIUS Authentication"