Oracle Database Advanced Security 10g Release 1, Руководство администратора

Страница: 373 / 518

Administering Enterprise Domains
Administering Enterprise User Security 13-23
4.
Enter the name of the database schema for which this Mapping will be made
into the Schema field, and choose OK. This must be a valid name, for a schema
that already exists on that database.The new database schema mapping appears
in the database schema mappings window (
Figure 13–8 ).
5.
Choose Apply. The new database schema mapping is added to the selected
database or domain in the realm.
To remove a mapping from the list of database schema mappings in an
enterprise domain:
1.
Select a mapping by selecting from the Database Schema Mapping tabbed
window.
2.
Choose Remove. The selected Mapping is removed from the list.
3.
Choose Apply. The mapping is removed from the enterprise domain.
Managing Password Accessible Domains
There are three requirements for a database to accept a connection from a
password-authenticated user:
■
The database must be a member of a domain configured to accept Password
authentication (See:
Table 13–4 on page 13-19).
■
The domain must be a member of a password-accessible domains group, called
the
Password-Accessible Domains List , added by a member of either the
OracleContextAdmins or the OracleDBSecurityAdmins directory administrator
groups. Domain members (databases) of this list can read the user's password
verifier in the directory, while those excluded from this list cannot.
■
The user entry must be in a directory subtree of users that has been enabled for
Oracle database access.
To configure password accessibility:
1.
Select the enterprise domain in the left navigator pane.
2.
Choose the Databases tabbed window and select Password or All Types from
the User Authentication methods listed. (See
Figure 13–6 on page 13-17)
3.
Click Apply.
To add a domain to the Password-Accessible Domains List:
1.
Select the identity management realm in the left navigator pane.