Oracle-L: Re: O/S Authentication

From: <Jared.Still_at_radisys.com>
Date: Tue, 29 Oct 2002 13:53:54 -0800
Message-ID: <F001.004F6D61.20021029135354@fatcity.com>

Christine,

Pretty simple really.

On your database:

select '|' || value || '|'
from v$parameter
where name = 'os_authent_prefix';

The reason for the enclosing '|' will be apparent if the value is an empty string.

Assuming you logon to the box as 'administrator', and that os_authent_prefix = '' you do the following in your database:

create user administrator identified externally default tablespace users
temporary tablespace temp;

grant dba to administrator;

The administrator account will now be able to logon to the database without a password.

e.g. sqlplus /

If the os_authent_prefix has some value, say OPS$, then use that to create the account:

create user ops$administrator identified externally default tablespace users
temporary tablespace temp;

grant dba to ops$administrator;

The administrator account will still be able to logon with sqlplus /

The fine docs will offer more detail

HTH Jared

"Turner, Christine" <christine.turner_at_ips-sendero.com> Sent by: root_at_fatcity.com
10/29/2002 08:49 AM
Please respond to ORACLE-L

        To:     Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
        cc: 
        Subject:        O/S Authentication

Greetings ALL......

I have been assigned a security research project by my boss. Really simple topic, o/s authentication vs. password file authentication. Currently we use
a password file, and the boss wants to know what it would take to convert to
o/s authentication instead. However, I'm not familiar with o/s authentication. Can anyone assist?

Currently we are using Oracle 81730 - Standard edition - on a windows platform. Suggestions are welcome.

thanks,
C-
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Turner, Christine
INET: christine.turner_at_ips-sendero.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author:
INET: Jared.Still_at_radisys.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------