os authentication (nt and vms)

Hello, I have 2 os authentication questions:

• in a Windows NT environment (oracle8+), is it considered secure to use sqlnet.authentication_services = (nts) ? Are there any known security holes using this (Remote_os_authent is false, and osauth_prefix_domain = true) ?

I would think that someone could set up a pdc outside of my network with the same domain name, and then connect to the database and become any externally identified user in the db. I guess firewalls, etc come into play, but assuming a user could gain tcpip access to the server, is this possible ? Would oracle know that I was authenticated by a pdc different from the one in it's network ?

• in a vms environment (7.3.3.6.0), is there a similiar authentication adapter that can be used (ie use vms authentication services) ? I know that kerberos and identix are available. The only type of connection that seems to work without an authentication adapter specified is bequeath. I have an application requirement that forces me to specify a sql*net alias. I cannot use 2: (which works), because the app connects to multiple databases. On nt I can add a tnsnames entry for a beq connection. Can this be done on vms (syntax) ? Again, remote_os_authent is set to false, and cannot be changed because of the obvious security hole.

Thanks,
--
Corey Gill
corey_gill_at_my-deja.com

Sent via Deja.com http://www.deja.com/
Before you buy. Received on Mon Nov 29 1999 - 09:53:04 CST