Data Encryption And Integrity Parameters; Algorithm Type Selection - Oracle Database B10772-01 Administrator's Manual

RADIUS
#Radius
sqlnet.authentication_services = (beq, RADIUS )
sqlnet.radius_authentication_timeout = (10)
sqlnet.radius_authentication_retries = (2)
sqlnet.radius_authentication_port = (1645)
sqlnet.radius_send_accounting = OFF
sqlnet.radius_secret = /orant/network/admin/radius.key
sqlnet.radius_authentication = radius.us.oracle.com
sqlnet.radius_challenge_response = OFF
sqlnet.radius_challenge_keyword = challenge
sqlnet.radius_challenge_interface =
oracle/net/radius/DefaultRadiusInterface
sqlnet.radius_classpath = /jre1.1/

Data Encryption and Integrity Parameters

If you do not specify any values for Server Encryption, Client Encryption, Server
Checksum, or Client Checksum, the corresponding configuration parameters do not
appear in the
ACCEPTED.
For both data encryption and integrity algorithms, the server selects the first
algorithm listed in its sqlnet.ora file that matches an algorithm listed in the
client sqlnet.ora file, or in the client installed list—if the client lists no algorithms
in its sqlnet.ora file. If there are no entries in the server sqlnet.ora file, the
server sequentially searches its installed list to match an item on the client
side—either in the client sqlnet.ora file or in the client installed list. If no match
can be made and one side of the connection REQUIRED the algorithm type (data encryption
or integrity), the connection fails. Otherwise, the connection succeeds with the
algorithm type inactive.
Data encryption and integrity algorithms are selected independently of each other;
encryption can be activated without integrity, and integrity can be activated
without encryption, as shown by
Table A–1 Algorithm Type Selection
Encryption Selected? Integrity Selected?
Yes
Yes
No
file. However, Oracle Advanced Security defaults to
sqlnet.ora
Table
No
Yes
Yes
Data Encryption and Integrity Parameters
A–1:
Data Encryption and Integrity Parameters A-3