Radius Authentication Modes; Synchronous Authentication Mode; Radius Authentication Components - Oracle Database B10772-01 Administrator's Manual

Table 5–1
Component
Oracle client
Oracle database
server/RADIUS
client
RADIUS server
Authentication
server or servers
A RADIUS server vendor is often the authentication server vendor as well, in which
case authentication can be processed on the RADIUS server. For example, the RSA
ACE/Server is both a RADIUS server and an authentication server. It thus
authenticates the user's pass code.

RADIUS Authentication Modes

User authentication can take place in either of two ways:

Synchronous Authentication Mode

In the synchronous mode, RADIUS lets you use various authentication methods,
including passwords and SecurID token cards.
which synchronous authentication occurs:

RADIUS Authentication Components

Stored Information
Configuration setting for communicating through RADIUS.
Configuration settings for passing information between the Oracle
client and the RADIUS server.
The secret key file.
Authentication and authorization information for all users.
Each client's name or IP address.
Each client's shared secret.
Unlimited number of menu files enabling users already authenticated
to select different login options without reconnecting.
User authentication information such as pass codes and PINs,
depending on the authentication method in use.
Note: The RADIUS server can also be the authentication server.
Oracle Net Services Administrator's Guide, for
See Also:
information about the sqlnet.ora file
Synchronous Authentication Mode
Challenge-Response (Asynchronous) Authentication Mode
RADIUS Authentication Modes
Figure 5–2 shows the sequence in
Configuring RADIUS Authentication 5-3