The SYSDBA & SYSOPER authentication gets stronger from 11g; Oracle now extended support for PKI, Kerberos and Radius to SYSDBA and SYSOPER connections. Earlier, this was limited to all users except SYSDBA and SYSOPER. A new initialization parameter LDAP_DIRECTORY_SYSAUTH has been introduced which needs to be set along with LDAP_DIRECTORY_ACCESS for stronger SYSDBA authentication.
You login as SYSDBA the following way if you configure Directory authentication (OID) :-
CONNECT user@11glab AS SYSDBA
Enter password: password
If you have used Kerberos or SSL then connect as SYSDBA the following way :-
CONNECT /@11glab AS SYSDBA
References: Oracle® Database Security Guide 11g Release 1 (11.1) Part Number B28531-04
Thursday, May 8, 2008
11g New Feature - SYSDBA authentication gets stronger
Labels:
Authentication,
Kerberos,
Oracle 11g,
Oracle 11g New Features,
PKI,
Security
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment