Oracle - Oracle 10g Database Adv Security Admin Guide (2003).pdf - Oracle 10g - darekisap

Oracle

Database

Advanced Security Administrator's Guide

10 g Release 1 (10.1)

Part No. B10772-01

December 2003

Oracle Database Advanced Security Administrator's Guide, 10 g Release 1 (10.1)

Part No. B10772-01

Primary Author: Laurel P. Hale

Contributors: Rajbir Chahal, Min-Hank Ho, Michael Hwa, Sudha Iyer, Adam Lindsey Jacobs, Supriya

Kalyanasundaram, Lakshmi Kethana, Andrew Koyfman, Van Le, Nina Lewis, Stella Li, Janaki

Narasinghanallur, Vikram Pesati, Andy Philips, Richard Smith, Deborah Steiner, Philip Thornton,

Ramana Turlapati

Graphic Designer: Valarie Moore

The Programs (which include both the software and documentation) contain proprietary information of

Oracle Corporation; they are provided under a license agreement containing restrictions on use and

disclosure and are also protected by copyright, patent and other intellectual and industrial property

laws. Reverse engineering, disassembly or decompilation of the Programs, except to the extent required

to obtain interoperability with other independently created software or as speciﬁed by law, is prohibited.

The information contained in this document is subject to change without notice. If you ﬁnd any problems

in the documentation, please report them to us in writing. Oracle Corporation does not warrant that this

document is error-free. Except as may be expressly permitted in your license agreement for these

Programs, no part of these Programs may be reproduced or transmitted in any form or by any means,

electronic or mechanical, for any purpose, without the express written permission of Oracle Corporation.

If the Programs are delivered to the U.S. Government or anyone licensing or using the programs on

behalf of the U.S. Government, the following notice is applicable:

Restricted Rights Notice Programs delivered subject to the DOD FAR Supplement are "commercial

computer software" and use, duplication, and disclosure of the Programs, including documentation,

shall be subject to the licensing restrictions set forth in the applicable Oracle license agreement.

Otherwise, Programs delivered subject to the Federal Acquisition Regulations are "restricted computer

software" and use, duplication, and disclosure of the Programs shall be subject to the restrictions in FAR

52.227-19, Commercial Computer Software - Restricted Rights (June, 1987). Oracle Corporation, 500

Oracle Parkway, Redwood City, CA 94065.

The Programs are not intended for use in any nuclear, aviation, mass transit, medical, or other inherently

dangerous applications. It shall be the licensee's responsibility to take all appropriate fail-safe, backup,

redundancy, and other measures to ensure the safe use of such applications if the Programs are used for

such purposes, and Oracle Corporation disclaims liability for any damages caused by such use of the

Programs.

Oracle is a registered trademark, and Oracle Store, Oracle8 i , Oracle9 i , PL/SQL, SQL*Net, SQL*Plus, and

Secure Network Services are trademarks or registered trademarks of Oracle Corporation. Other names

may be trademarks of their respective owners.

Portions of Oracle Advanced Security have been licensed by Oracle

Corporation from RSA Data Security.

This program contains third-party code from Massachusetts Institute of Technology (M.I.T.), OpenVision

Technologies, Inc., and the Regents of the University of California. Under the terms of the Kerberos

license, Oracle is required to license the Kerberos software to you under the following terms. Note that

the terms contained in the Oracle program license that accompanied this product do not apply to the

Kerberos software, and your rights to use the software are solely as set forth below. Oracle is not

responsible for the performance of the Kerberos software, does not provide technical support for the

software, and shall not be liable for any damages arising out of any use of the Kerberos software.

Export of this software from the United States of America may require a speciﬁc license from the United

States Government. It is the responsibility of any person or organization contemplating export to obtain

such a license before exporting.

WITHIN THAT CONSTRAINT, permission to use, copy, modify, and distribute this software and its

documentation for any purpose and without fee is hereby granted, provided that the above copyright

notice appear in all copies and that both that copyright notice and this permission notice appear in

supporting documentation, and that the name of M.I.T. not be used in advertising or publicity pertaining

to distribution of the software without speciﬁc, written prior permission. Furthermore, if you modify this

software you must label your software as modiﬁed software and not distribute it in such a fashion that it

might be confused with the original M.I.T. software. M.I.T. makes no representations about the suitability

of this software for any purpose. It is provided "as is" without express or implied warranty.

THIS SOFTWARE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES,

INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTIBILITY AND

FITNESS FOR A PARTICULAR PURPOSE.

Individual source code ﬁles are copyright M.I.T., Cygnus Support, OpenVision, Oracle, Sun Soft,

FundsXpress, and others.

Project Athena, Athena, Athena MUSE, Discuss, Hesiod, Kerberos, Moira, and Zephyr are trademarks of

the Massachusetts Institute of Technology (M.I.T.). No commercial use of these trademarks may be made

without prior written permission of M.I.T.

"Commercial use" means use of a name in a product or other for-proﬁt manner. It does NOT prevent a

commercial ﬁrm from referring to the M.I.T. trademarks in order to convey information (although in

doing so, recognition of their trademark status should be given).

----

The following copyright and permission notice applies to the OpenVision Kerberos Administration

system located in kadmin/create, kadmin/dbutil, kadmin/passwd, kadmin/server, lib/kadm5, and

portions of lib/rpc:

WARNING: Retrieving the OpenVision Kerberos Administration system source code, as described

below, indicates your acceptance of the following terms. If you do not agree to the following terms, do

not retrieve the OpenVision Kerberos administration system.

You may freely use and distribute the Source Code and Object Code compiled from it, with or without

modiﬁcation, but this Source Code is provided to you "AS IS" EXCLUSIVE OF ANY WARRANTY,

INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY OR FITNESS

FOR A PARTICULAR PURPOSE, OR ANY OTHER WARRANTY, WHETHER EXPRESS OR IMPLIED.

IN NO EVENT WILL OPENVISION HAVE ANY LIABILITY FOR ANY LOST PROFITS, LOSS OF

DATA, OR COSTS OF PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES, OR FOR ANY

SPECIAL, INDIRECT, OR CONSEQUENTIAL DAMAGES ARISING OUT OF THIS AGREEMENT,

INCLUDING, WITHOUT LIMITATION, THOSE RESULTING FROM THE USE OF THE SOURCE

CODE, OR THE FAILURE OF THE SOURCE CODE TO PERFORM, OR FOR ANY OTHER REASON.

OpenVision retains all copyrights in the donated Source Code. OpenVision also retains copyright to

derivative works of the Source Code, whether created by OpenVision or by a third party. The OpenVision

OpenVision Technologies, Inc., has donated this Kerberos Administration system to M.I.T. for inclusion

in the standard Kerberos 5 distribution. This donation underscores our commitment to continuing

Kerberos technology development and our gratitude for the valuable work which has been performed by

M.I.T. and the Kerberos community.

----

Portions contributed by Matt Crawford <crawdad@fnal.gov> were work performed at Fermi National

Accelerator Laboratory, which is operated by Universities Research Association, Inc., under contract

DE-AC02-76CHO3000 with the U. S. Department of Energy.

Contents

List of Figures

List of Tables

Send Us Your Comments ............................................................................................................... xxiii

Preface ......................................................................................................................................................... xxv

What's New in Oracle Advanced Security? ...................................................................... xxxvii

Part I Getting Started with Oracle Advanced Security

1 Introduction to Oracle Advanced Security

Security Challenges in an Enterprise Environment ..................................................................... 1-1

Security in Enterprise Grid Computing Environments .......................................................... 1-2

Security in an Intranet or Internet Environment...................................................................... 1-2

Common Security Threats........................................................................................................... 1-3

Solving Security Challenges with Oracle Advanced Security ................................................... 1-4

Data Encryption ............................................................................................................................ 1-5

Strong Authentication.................................................................................................................. 1-8

Enterprise User Management ................................................................................................... 1-13

Oracle Advanced Security Architecture ....................................................................................... 1-15

Secure Data Transfer Across Network Protocol Boundaries .................................................... 1-16

System Requirements ...................................................................................................................... 1-16

Oracle Advanced Security Restrictions ........................................................................................ 1-17

Oracle - Oracle 10g Database Adv Security Admin Guide (2003).pdf

Plik z chomika:

Inne pliki z tego folderu:

Inne foldery tego chomika: