Re: RE: Oracle OID or Database 19C and Microsoft AD authentication

Lyall,

"Gettysburg ng"

Four score and seven versions ago?

Paul

On Mon, Jun 7, 2021, 11:22 <lyallbarbour_at_sanfranmail.com> wrote:

> Awesome. Did my description below sound like the right process? I think
> I'm Gettysburg ng the understanding from the documentation.
>
> Lyall
>
> --
> Sent from my Android phone with mail.com Mail. Please excuse my brevity.
> On 6/7/21, 11:12 AM Matt Shelton <mvshelton_at_chartermi.net> wrote:
>
>> Yes, We integrate password authentication with Oracle 18c and 19c with
>> Microsoft Active Directory ran into a bug with Oracle 18c that they have
>> fixed.
>>
>>
>>
>> Thank You
>>
>> Matt
>>
>>
>>
>> *From:* oracle-l-bounce_at_freelists.org [mailto:
>> oracle-l-bounce_at_freelists.org] *On Behalf Of *Lyall Barbour
>> *Sent:* Friday, June 4, 2021 4:02 PM
>> *To:* oracle-l_at_freelists.org
>> *Subject:* Oracle OID or Database 19C and Microsoft AD authentication
>>
>>
>>
>> Hello,
>> The Insurance company I work for was purchased by AllState, for our IT
>> department and applications. My job is safe! ....for now.
>>
>> But the mandates are flowing down. Encryption is being implemented
>> everywhere. We've purchased Advanced Security and are creating Wallets all
>> over the place and encrypting tablespaces left and right.
>>
>> The latest Project is being pushed unto the app teams. Application
>> authentication into databases must be tighter.
>> I've setup Oracle internet directory 10g in 2010, 11. Now with Oracle 18c
>> seems like I can skip the Identity Manager stuff and straight use
>>
>> - an AD manager account
>> - Oracle wallet, ldap.ora, dsi.ora on db server
>> - configure those files to see AD with the manager account
>> - create AD account, groups wanting access to Oracle db
>> - create Oracle db accounts, roles GLOBALLY
>>
>> And Bob's my Uncle...?
>>
>> Anyone do this in the 18/19c Security Guide yet? Can confirm?
>>
>> TIA
>> Lyall Barbour
>>
>> --
>> Sent from my Android phone with mail.com Mail. Please excuse my brevity.
>>
>> -- http://www.freelists.org/webpage/oracle-l
>>
> -- http://www.freelists.org/webpage/oracle-l

--
http://www.freelists.org/webpage/oracle-l