Oracle7 Server Distributed Systems Volume I: Distributed Data

Introduction to Network Security

The network security provided in Secure Network Services version 2.0 and Oracle7 Server release 7.2 and higher extended the Oracle7 Server's current operating system authentication mechanisms to include network authentication services. Like the Oracle Protocol Adapters, authentication adapters are designed for a specific service, such as Kerberos, Cybersafe Challenger and SecureID Smart Cards. A site has a choice of which ones to link into their SQL*Net configuration.

Note: Authentication adapters are a part of Secure Network Services version 2.0. Availability of specific adapters will be tied to the release of Secure Network Services, which is scheduled for phased introduction throughout the lifetime of SQL*Net release 2.2.

The major features related to network security in Oracle7 Server release 7.2 and Secure Network Services version 2.0 are:

Network encryption and message digests. Secure Network Services allows for encryption of all network traffic, and for sequenced, cryptographic message digests to provide data integrity and defend against replay attacks.

Secure external authentication. For connections made using authentication services, the database will trust the authentication service for authorization.

Network roles. The database recognizes roles granted by network services, similar to the way operating system roles are recognized (where supported by the underlying authentication system).

Network SYSDBA/SYSOPER privilege. Remote internal connections can be authorized by the network service instead of by the Oracle7 password file utility as in release 7.1.

Note: The following feature will be supported in a future release of Secure Network Services.

Secure database links. Any user who is authenticated by a network service that supports proxy logins will be authenticated using that service when calling a remote database using an anonymous database link.

New security features in release 7.2 are described in more detail below. See Understanding SQL*Net and Secure Network Services Administrator's Guide for more information on network security in release 7.2.