Oracle Database Advanced Security 10g Release 1, Руководство администратора

Страница: 257 / 518

Introduction to Oracle DCE Integration
Configuring Oracle DCE Integration 10-3
DCE Communication/Security
This component has three principal features:
Authenticated RPC Oracle DCE Integration provides authenticated Remote Procedure
Call (RPC) as the transport mechanism that enables multi-vendor interoperability.
RPC also uses some of the other DCE services, including directory and security
services, to provide location transparency and secure distributed computing.
Integrated Security and Single Sign-On
Oracle DCE Integration works with the DCE
Security service to provide security within DCE cells. It enables a user logged onto
DCE to securely access any Oracle database without having to specify a user name
or password. This is sometimes called
external authentication to the database, or
single sign-on (SSO) . Clients and servers that are not running DCE authentication
services can interoperate with systems that have DCE security by specifying an
Oracle password.
Data Privacy and Integrity Oracle DCE Integration uses the multiple levels of security
that DCE provides to ensure data authenticity, privacy, and integrity. Users have a
range of choices, from no protection to full encryption for each connection, with a
guarantee that no data is modified in transit.
DCE Cell Directory Services Native Naming
The DCE Cell Directory Services (CDS) Native Naming component includes
naming and location transparency.
DCE Integration registers Oracle Database connect descriptors in the DCE CDS,
letting them be transparently accessed across the entire DCE environment. Users
can connect to Oracle database servers in a DCE environment using familiar Oracle
service names.
Note:
For parts of the network that do not use DCE, you can use
the other security and authentication services that are part of Oracle
Advanced Security. These services work with SQL*Net release 2.1
and later or with Oracle Net Services. They provide message
integrity and data encryption services in non-DCE environments,
letting administrators ensure that all network traffic is protected
against unauthorized viewing or modification, regardless of the
start or end point.