Oracle Database Advanced Security 10g Release 1, Руководство администратора

Страница: 57 / 518

Solving Security Challenges with Oracle Advanced Security
Introduction to Oracle Advanced Security 1-13
Enterprise User Management
Enterprise user management is provided by the Enterprise User Security feature of
Oracle Advanced Security. Enterprise User Security enables storing database users
and their corresponding administrative and security information in a centralized
directory server.
Figure 1–4 shows how a directory server can be used to provide centralized storage
and management of user account, user role, and authentication information.
1.
A database server authenticates a user by accessing information stored in the
directory.
2.
- 4. Once authenticated, a user can access the databases, which are configured
for enterprise user security.
Figure 1–4 Centralized User Management with Enterprise User Security
This centralized configuration enables the administrator to modify information in
one location, the directory. It also lowers the cost of administration and makes the
enterprise more secure because there is only one set of user information to manage
and track.
Enterprise User Security supports the following authentication methods:
Intranet
1
4
3
2
Database Database
Client
LDAP Compliant
Directory Server
Database
Stores user account,
password, and role
information