Forums before death by AOL, social media and spammers... "We can't have nice things"
|    comp.databases.oracle    |    Overblown overpriced overengineered SHIT    |    2,288 messages    |
[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]
|    Message 1,355 of 2,288    |
|    Carolyn to All    |
|    Odp.net and Proxy (n-tier) Authenticatio    |
|    28 Apr 04 15:01:52    |
      From: postreply@dontemail.com              We are investigating using Proxy Authentication from asp.net web forms. The       idea is that we could preserve the identity of individual users in Oracle       without maintaining separate Oracle passwords for each of them.              This connection (odp.net) does just that:       con.ConnectionString ="Data Source=DB1;User Id=RealUser;Proxy User       Id=TechnicalUser; Proxy Password=TechnicalUser"              The concern is how to protect the Proxy Password. Leaving it in clear text       in code is not acceptable. I am looking for suggestions of secure methods of       handling this password. I know this is not an 'Oracle server' issue but it       is an issue that must be resolved before we can adopt an attractive feature       of Oracle.              Today we do not store any passwords, each user is prompted to enter his own       password which is then authenticated by Oracle. We do not have Oracle       Advanced Security. We do have more than one Oracle database and the goal is       to reduce the number of passwords each user has to remember and change on a       regular basis.              --- SoupGate-Win32 v1.05        * Origin: you cannot sedate... all the things you hate (1:229/2)    |
[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]
(c) 1994, bbs@darkrealms.ca