Task 2: Create And Name Externally Authenticated Accounts - Oracle Database B10772-01 Administrator's Manual

Configuring Oracle Database and Oracle Net Services for Oracle DCE Integration
2.

Task 2: Create and Name Externally Authenticated Accounts

To use DCE authentication for logging on to an Oracle database, you must create
database accounts that are authenticated externally. To enable secure external
authentication, do the following:
10-10 Oracle Database Advanced Security Administrator's Guide
For servers in distributed systems that require database link connections to
other servers, configure the sqlnet.ora and protocol.ora files with DCE
address information.
In this release, the configuration files listener.ora,
Note:
sqlnet.ora, tnsnames.ora, and protocol.ora are located
in the $ORACLE_HOME/network/admin directory.
For a database server to receive connections from Oracle Net clients in a DCE
environment, there must be an Oracle Net listener active on the server platform.
This process listens for connections on a network address that is defined in the
configuration file.
listener.ora
The SERVER_PRINCIPAL parameter designates what DCE principal the
listener should be running under. In the following sample, the listener is
running under principal oracle.
The following is a sample DCE address as it would appear in the
file.
LSNR_DCE=
(ADDRESS=
(PROTOCOL=DCE)
(SERVER_PRINCIPAL=oracle)
(CELL_NAME=cell1)
(SERVICE=dce_svc))
SID_LIST_LSNR_DCE=
(SID_DESC=
(SID_NAME=ORASID)
(ORACLE_HOME=/private/oracle9))
The privileges shown in this section are the minimum access
Note:
privileges necessary. The actual set of privileges needed depends
upon the instance or application.
listener.ora