home bbs files messages ]

Forums before death by AOL, social media and spammers... "We can't have nice things"

   comp.databases.oracle      Overblown overpriced overengineered SHIT      2,288 messages   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]

   Message 1,355 of 2,288   
   Carolyn to All   
   Odp.net and Proxy (n-tier) Authenticatio   
   28 Apr 04 15:01:52   
   
   From: postreply@dontemail.com   
      
   We are investigating using Proxy Authentication from asp.net web forms. The   
   idea is that we could preserve the identity of individual users in Oracle   
   without maintaining separate Oracle passwords for each of them.   
      
   This connection (odp.net) does just that:   
   con.ConnectionString ="Data Source=DB1;User Id=RealUser;Proxy User   
   Id=TechnicalUser; Proxy Password=TechnicalUser"   
      
   The concern is how to protect the Proxy Password. Leaving it in clear text   
   in code is not acceptable. I am looking for suggestions of secure methods of   
   handling this password. I know this is not an 'Oracle server' issue but it   
   is an issue that must be resolved before we can adopt an attractive feature   
   of Oracle.   
      
   Today we do not store any passwords, each user is prompted to enter his own   
   password which is then authenticated by Oracle. We do not have Oracle   
   Advanced Security. We do have more than one Oracle database and the goal is   
   to reduce the number of passwords each user has to remember and change on a   
   regular basis.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]


(c) 1994,  bbs@darkrealms.ca