Task 9: Configure Mapping Roles - Oracle Database B10772-01 Administrator's Manual

Task 9: Configure Mapping Roles
If the RADIUS server supports vendor type attributes, you can manage roles by
storing them in the RADIUS server. The Oracle database server downloads the roles
when there is a CONNECT request using RADIUS.
To use this feature, configure roles on both the Oracle database server and the
RADIUS server.
Perform these steps to configure roles on the Oracle database server:
1.
2.
3.
Table 5–2 RADIUS Configuration Parameters
Parameter
DatabaseName
DatabaseDomainName
RoleName
4.
Use a text editor to set the OS_ROLES parameter in the initialization parameters
file on the Oracle database server.
Stop and restart the Oracle database server.
Create each role the RADIUS server is to manage on the Oracle database server
with IDENTIFIED EXTERNALLY.
To configure roles on the RADIUS server, refer to
following syntax:
ORA_DatabaseName.DatabaseDomainName_RoleName
Example:
ORA_USERDB.US.ORACLE.COM_MANAGER
Configure RADIUS challenge-response mode.
Enabling RADIUS Authentication, Authorization, and Accounting
Description
The name of the Oracle database server for which the role is
being created. This is the same as the value of the DB_NAME
initialization parameter.
The name of the domain to which the Oracle database server
belongs. The value is the same as the value of the DB_
DOMAIN initialization parameter.
The name of the role created in the Oracle database server.
Configuring RADIUS Authentication 5-21
Table 5–1 and use the