Oracle OID or Database 19C and Microsoft AD authentication
From: Lyall Barbour <lyallbarbour_at_sanfranmail.com>
Date: Fri, 4 Jun 2021 22:02:03 +0200
Message-ID: <trinity-8a1054c3-fd67-49a5-94c8-c9bf5c151c4b-1622836923714_at_msvc-mesg-gmxus007>
The Insurance company I work for was purchased by AllState, for our IT department and applications. My job is safe! ....for now.
But the mandates are flowing down. Encryption is being implemented everywhere. We've purchased Advanced Security and are creating Wallets all over the place and encrypting tablespaces left and right.
The latest Project is being pushed unto the app teams. Application authentication into databases must be tighter.
I've setup Oracle internet directory 10g in 2010, 11. Now with Oracle 18c seems like I can skip the Identity Manager stuff and straight use
- an AD manager account
- Oracle wallet, ldap.ora, dsi.ora on db server
- configure those files to see AD with the manager account
- create AD account, groups wanting access to Oracle db
- create Oracle db accounts, roles GLOBALLY
And Bob's my Uncle...?
Anyone do this in the 18/19c Security Guide yet? Can confirm?
TIA
Lyall Barbour
--
Sent from my Android phone with mail.com Mail. Please excuse my brevity. -- http://www.freelists.org/webpage/oracle-l Received on Fri Jun 04 2021 - 22:02:03 CEST
Date: Fri, 4 Jun 2021 22:02:03 +0200
Message-ID: <trinity-8a1054c3-fd67-49a5-94c8-c9bf5c151c4b-1622836923714_at_msvc-mesg-gmxus007>
Hello,
The Insurance company I work for was purchased by AllState, for our IT department and applications. My job is safe! ....for now.
But the mandates are flowing down. Encryption is being implemented everywhere. We've purchased Advanced Security and are creating Wallets all over the place and encrypting tablespaces left and right.
The latest Project is being pushed unto the app teams. Application authentication into databases must be tighter.
I've setup Oracle internet directory 10g in 2010, 11. Now with Oracle 18c seems like I can skip the Identity Manager stuff and straight use
- an AD manager account
- Oracle wallet, ldap.ora, dsi.ora on db server
- configure those files to see AD with the manager account
- create AD account, groups wanting access to Oracle db
- create Oracle db accounts, roles GLOBALLY
And Bob's my Uncle...?
Anyone do this in the 18/19c Security Guide yet? Can confirm?
TIA
Lyall Barbour
--
Sent from my Android phone with mail.com Mail. Please excuse my brevity. -- http://www.freelists.org/webpage/oracle-l Received on Fri Jun 04 2021 - 22:02:03 CEST