RE: OS authenticated from Outside Domain/Firewall: PLS. IGNORE

From: George Hofilena <GHofilena_at_cnv.org>
Date: Wed, 27 Feb 2002 10:24:07 -0800
Message-ID: <F001.0041A0A0.20020227102407@fatcity.com>

Please ignore this for now. I think I've found something.

George

-----Original Message-----
Sent: Wednesday, February 27, 2002 10:15 AM To: LazyDBA.com Discussion

We have a jsmith account that is OS authenticated in our TEST database. This account also exists in server X which is outside our domain and protected by a firewall. We've set up our firewall to allow Oracle connections to our TEST database to get through. This setup works fine. One day jsmith logs into server X, tries to connect to the TEST database using ODBC and the database let him in without asking for a password! We also did this on a local machine and it came through as well.

Obviously, the database wasn't validating the DOMAIN NAME when it evaluated the user and since the username had an OPS$ account it let it through. Is there some setting that I needed to configure to force Oracle to validate both the Domain and User names?

Thanks,
George

---

Oracle documentation is here:
http://tahiti.oracle.com/pls/tahiti/tahiti.homepage To unsubscribe: send a blank email to oracledba-unsubscribe_at_LAZYDBA.com To subscribe: send a blank email to oracledba-subscribe_at_LAZYDBA.com Visit the list archive: http://www.LAZYDBA.com/odbareadmail.pl Tell yer mates about http://www.farAwayJobs.com By using this list you agree to these
terms:http://www.lazydba.com/legal.html
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: George Hofilena
  INET: GHofilena_at_cnv.org

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Wed Feb 27 2002 - 12:24:07 CST