Oracle9i Security and Network Integration Guide -- Index

authentication

automatically enabling during installation, 1-8

enhancements, 1-4

OSAUTH_PREFIX_DOMAIN parameter, 2-31

overview, 1-2

using Windows native methods, 1-2

viewing parameter settings, 2-12

when to use enterprise users, 1-5

when to use external users, 1-5

Authentication Adapters

using, A-4

authentication protocols

default protocol used, 1-3

with Windows 2000, 1-2

with Windows NT 4.0, 1-2

authorization

when to use enterprise roles, 1-5

when to use external roles, 1-5

configuration parameters

LOCAL, A-3

TNS_ADMIN, A-3

USE_SHARED_SOCKET, A-4

configuring

Authentication Adapters, A-4

Named Pipes Protocol Adapter, A-4

CONNECT /AS SYSDBA

connecting without a password, 1-8

connecting

LOCAL parameter, A-3

database administrator privileges

for a single database on a computer, 2-26

for all databases on a computer, 2-5, 2-7

database operator privileges

for a single database on a computer, 2-28

for all databases on a computer, 2-5, 2-7

database privileges

in Windows NT local groups, 2-42, 2-44

DisplayName parameter, A-2

enterprise roles

authorizing in Windows 2000 domains, 3-2, 3-3

environments in which to use, 1-5

enterprise users

environments in which to use, 1-5

external OS user

creating, 2-13, 2-30

external roles

administering, 2-2, 2-30

creating, 2-22

environments in which to use, 1-5

external users

administering, 2-2, 2-30

creating, 2-13, 2-30

environments in which to use, 1-5

ImagePath parameter, A-2

initialization parameters

OS_ROLES, 1-4, 3-3

Kerberos, 3-2

default use of, 1-3

features, 1-2

local database role

creating with Oracle Administration Assistant for Windows NT, 2-18

local groups

with database privileges, 2-42, 2-44

LOCAL networking parameter, A-3

Microsoft Certificate Services, 5-3

Microsoft Certificate Stores, 5-3

Microsoft Management Console

requirements, 2-3

Named Pipes Protocol Adapter

with an Oracle Names Server, A-4

networking parameters

LOCAL, A-3

TNS_ADMIN, A-3

USE_SHARED_SOCKET, A-4

NTLM, 3-2

default use of, 1-3

features, 1-2

NTS. See Windows native authentication

ObjectName parameter, A-2

operating system authentication

automatically enabling during installation, 1-8

connecting as SYSDBA without a password, 1-8

OSAUTH_PREFIX_DOMAIN parameter, 2-31

operating systems

authentication overview, 1-2

ORA_DBA local group

adding users to, 1-8

Oracle Administration Assistant for Windows NT

adding a computer to the navigation tree, 2-4

connecting to a database, 2-8

creating a local database role, 2-18

creating an external OS user, 2-13

creating an external role, 2-22

database connection issues, 2-10

granting administrator privileges, 2-26

granting operator privileges, 2-28

managing remote computers, 2-3

saving a navigation tree configuration, 2-4

setting OS_AUTHENT_PREFIX, 2-12

using, 2-2

viewing authentication settings, 2-12

Oracle Enterprise Security Manager

using, 1-7

Oracle Names

Named Pipes Protocol Adapter, A-4

Oracle public key infrastructure, 5-2

Oracle Wallet Manager, 4-3

Oracle Wallets, 4-2

storing in the registry, 4-2

storing private keys and trust points, 4-2

Oracle9i Database Administrator's Guide, 2-19

OracleHOME_NAMEClientCache, A-2

OracleHOME_NAMECMAdminService, A-2

OracleHOME_NAMECManService, A-2

OracleHOME_NAMETNSListener, A-2

OracleHOME_NAMETNSListener service, A-4

OS_AUTHENT_PREFIX parameter

case insensitivity, 2-31

defined, 2-12

using, 2-31

OS_ROLES parameter

defined, 2-12

not required in Windows 2000 domains, 3-3

using with external roles, 1-4

OSAUTH_PREFIX_DOMAIN, 2-31

OSAUTH_PREFIX_DOMAIN parameter, 2-3, 2-31

OSAUTH_X509_NAME parameter, 3-2

parameters

DisplayName, A-2

ImagePath, A-2

LOCAL, A-3

ObjectName, A-2

OS_AUTHENT_PREFIX, 2-12

OS_ROLES, 2-12

OSAUTH_PREFIX_DOMAIN, 2-3, 2-31

OSAUTH_X509_NAME, 3-2

TNS_ADMIN, A-3

USE_SHARED_SOCKET, A-4

passwords

not needed with SYSDBA, 1-8

privileges

in Windows NT local groups, 2-42, 2-44

registry

DisplayName, A-2

ImagePath, A-2

ObjectName, A-2

OracleHOME_NAMEClientCache, A-2

OracleHOME_NAMECMAdminService, A-2

OracleHOME_NAMECManService, A-2

OracleHOME_NAMETNSListener, A-2

OSAUTH_PREFIX_DOMAIN, 2-31

remote computers

managing with Oracle Administration Assistant for Windows NT, 2-3

role authorization

description, 1-4

in Windows 2000 domains, 3-2

method enhancements, 1-4

roles

authorized in Windows 2000 domains, 3-3

creating, 2-22

creating a local database role with Oracle Administration Assistant for Windows NT, 2-18

when to use enterprise roles, 1-5

when to use external roles, 1-5

SET INSTANCE command, 2-40, 2-45

sqlnet.ora file

and Windows native authentication, 2-39, 2-41

location of, 2-39, 2-41

storing private keys and trust points

Oracle Wallets, 4-2

SYSDBA privileges

connecting without a password, 1-8

for a single database on a computer, 2-26

for all databases on a computer, 2-5, 2-7

SYSOPER privileges

for a single database on a computer, 2-28

for all databases on a computer, 2-5, 2-7

TNS_ADMIN networking parameter, A-3

USE_SHARED_SOCKET networking parameter, A-4

user authentication

description, 1-4

enhancement methods, 1-4

when to use enterprise users, 1-5

when to use external users, 1-5

Wallet Resource Locator, 5-4

Windows 2000 domains

administering external users and roles with Oracle Administration Assistant for Windows NT, 2-2

role authorization, 3-2

Windows authentication protocols

default protocol used, 1-3

with Windows 2000, 1-2

with Windows NT 4.0, 1-2

Windows native authentication

benefits, 1-2

enhancements, 1-4

installation of, 1-2

methods and use of, 1-2

overview, 1-2

role authorization enhancements, 1-4

setting the sqlnet.ora file, 2-39, 2-41

user and role requirements, 1-4

user authentication enhancements, 1-4

Windows NT 4.0 domains

administering external users and roles manually, 2-30

basic features, 1-4

Windows NT local groups

with database privileges, 1-8, 2-42, 2-44

Windows NT-specific

role syntax, 2-44