RADIUS
RADIUS (Remote Authentication Dial-In User Service) is a client/server security protocol most widely known for enabling remote authentication and access. You can enable your network to use any authentication method that supports the RADIUS standard, including token cards and smartcard, simply by installing and configuring the RADIUS method. The RADIUS authentication method requires you to set the following parameters:
Element |
Description |
Host Name |
Host name of the primary RADIUS server |
Port Number |
Listening port number of the primary RADIUS server Default = 1645 |
Timeout (seconds) |
Number of seconds the Oracle server will wait for a response from the primary RADIUS server |
Number of Retries |
Number of times the Oracle database server should send messages to the primary RADIUS server Default = 3 |
Secret File | The file location of the secret key on the Oracle server. For security reasons, Oracle recommends that you change this file to root access only. |
Send Accounting | RADIUS accounting logs Oracle database server access information and stores this information in a file on the RADIUS accounting server. You can use this feature only when both the RADIUS authentication servers support this feature. Values = on or off |
Challenge Response | The value of this field is on when you want to present the user with a challenge-response GUI |
Default Keyword | Keyword that verifies the identity of a user through a challenge-response mechanism Default = challenge |
Interface Class Name | The name of the class that handles the challenge response conversation between the Oracle client and the RADIUS server. Default = DefaultRadiusInterface |
For more information, see Appendix C, Integrating Authentication Devices Using RADIUS, in the Oracle Advanced Security Administrator's Guide.
Related Topics
Oracle Advanced Security: Other Params
Copyright � 1996, 2009, Oracle. All rights reserved.