08_les_07_Strong_auth.pptVIP

Using Strong Authentication Objectives After completing this lesson, you should be able to do the following: Describe strong authentication that uses: Certificates Kerberos Remote authentication dial-in service (RADIUS) Describe a setup for strong authentication that uses: Certificates Kerberos Key Distribution Center (KDC) Implement the secure external password store User Authentication Identify the user in the following ways: Basic authentication Database user identified by a password Database user identified by the operating system Strong authentication Enterprise User Security Proxy authentication Strong User Authentication Strong authentication: Is stronger than password authentication Often includes the single sign-on functionality Is supported by the following authentication technologies: Certificates, public key infrastructure (PKI) RADIUS, token, and smart cards Kerberos Integrates with Oracle Net Services Requires Oracle Advanced Security (ASO) Full Notes Page Single Sign-On Single sign-on is a centralized authentication service. The user has a single username and password. Servers authenticate users through the central service. Public Key Infrastructure (PKI) Tools The Oracle database PKI implementation includes: Components: Oracle Wallet Oracle Advanced Security Oracle Identity Management infrastructure Management tools: Oracle Wallet Manager Certificates Certificates: Are digital documents Provide proof of identity Are stored in Oracle Wallets Certificate authority: Is a trusted organization (trust point) Attests the identity of the certificate Issues trusted certificates X.509 v3 Certificate use: Requires a secure sockets layer (SSL) Requires a level of trust in the signing authority How to Use Certificates for Authentication Install the required components. Configure the server for SSL. Configure the server-side Oracle Net files: listener.ora sqlnet.ora Configure the client for SSL. Configure the client-side Oracle Net files: sqlnet.ora tnsnames