Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!swrinde!elroy.jpl.nasa.gov!sdd.hp.com!ucsd!pacbell.com!pacbell!well!anderson From: anderson@well.sf.ca.us (David E. Anderson) Newsgroups: comp.databases Subject: Re: Using auto-login feature of Oracle Summary: autologin over the net with security requires sqlnet v1.2 Keywords: Oracle sql*net autologin Message-ID: <22232@well.sf.ca.us> Date: 18 Dec 90 09:36:17 GMT References: <912@attc.UUCP> <143900013@occrsh.ATT.COM> <90350.090721IAN@SLACVM.SLAC.STANFORD.EDU> Followup-To: comp.databases Organization: Whole Earth 'Lectronic Link, Sausalito, CA Lines: 23 In article <90350.090721IAN@SLACVM.SLAC.STANFORD.EDU> IAN@SLACVM.SLAC.STANFORD.EDU writes: >What you are requesting is to log on to the database with no password veri- >fication whats-so-ever. If your database server is connected to internet >you are allowing anyone (well actually any system manager to access your >data). In the near future this may be possible under VMS. Note I say may! >That's if I understand how proxy logins work!? But you will at least be able You are correct. SQL*Net version 1.2 provides "proxy login" security control. This mechanism allows control over which nodes and which users can access the database over the net. The idea is that the server sysadmin can control remote users' access. Currently the server OS account which runs the shadow task (the user task on the server machine) determines the OPS$. If you create such an account any network user can invoke it because this is the account which /@t:node refers to, no matter which client node or account makes the request. This single-mindedness is replaced in 1.2 by a control file and a control language for access security. Thanks to Cyril Scott... ******************************************************************************** David E. Anderson, Redwood City, CA (415) 592-1101 Independent Database Consultant (formerly with Oracle kernel Support Group) anderson@well.sf.ca.us ******************************************************************************** First learn your horn and all the theory. Next develop a style. Then forget all that and just play. Charlie Parker [?]