Oracle Database Advanced Security 10g Release 1, Руководство администратора

Страница: 264 / 518

Configuring Oracle Database and Oracle Net Services for Oracle DCE Integration
10-10 Oracle Database Advanced Security Administrator's Guide
2.
For servers in distributed systems that require database link connections to
other servers, configure the
sqlnet.ora
and
protocol.ora
files with DCE
address information.
For a database server to receive connections from Oracle Net clients in a DCE
environment, there must be an Oracle Net listener active on the server platform.
This process listens for connections on a network address that is defined in the
listener.ora
configuration file.
The
SERVER_PRINCIPAL
parameter designates what DCE principal the
listener should be running under. In the following sample, the listener is
running under principal
oracle
.
The following is a sample DCE address as it would appear in the
listener.ora
file.
LSNR_DCE=
(ADDRESS=
(PROTOCOL=DCE)
(SERVER_PRINCIPAL=oracle)
(CELL_NAME=cell1)
(SERVICE=dce_svc))
SID_LIST_LSNR_DCE=
(SID_DESC=
(SID_NAME=ORASID)
(ORACLE_HOME=/private/oracle9))
Task 2: Create and Name Externally Authenticated Accounts
To use DCE authentication for logging on to an Oracle database, you must create
database accounts that are authenticated externally. To enable secure external
authentication, do the following:
Note: In this release, the configuration files
listener.ora,
sqlnet.ora, tnsnames.ora,
and
protocol.ora
are located
in the $ORACLE_HOME/network/admin directory.
Note:
The privileges shown in this section are the minimum access
privileges necessary. The actual set of privileges needed depends
upon the instance or application.