148 | Chapter 6: Oracle Security, Auditing, and Compliance
Using multiple tiers, as with large applications or web-based applications, can also
call for proxy authentication. The application connects to code in the middle tier,
which accesses the database through a proxy, frequently through shared connections.
Some databases associate security with a session, which means that sessions
must be reestablished when the user identity changes. This limitation makes the multitier
approach harder.
Oracle separates authentication from sessions, so the use of a proxy in the middle
tier is feasible. A single session can support different users with different identities.
Prior to Oracle 10g Release 2, the only way to take advantage of this capability was
by using the OCI interface, which was code-intensive. With Release 2, this limitation
was lifted, so standard SQL and SQL tools, such as SQL*Plus, could use proxy
authentication.
Advanced Security Option
The Oracle Advanced Security Option (ASO), formerly known as the Advanced Networking
Option (ANO), is used in distributed environments linked via Oracle Net in
which there are concerns regarding secure access and transmission of data.
Pages:
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335