Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Oracle Security >> Oracle Security >> OID Security
        
(Message started by: Pete Finnigan on Dec 2^nd, 2005, 9:18am)

Title: OID Security
Post by Pete Finnigan on Dec 2^nd, 2005, 9:18am

Hi all,

I am new to OID and have found that as installed there are quite priveledges for "everyone" or "anonymous binds" I have not found a way to restrict access by hosts ips as there are in other Ldaps servers.

I have read the docs and see how acls are defined in OID and I am going to restrict anonymous and everyone rights but there is no much info about the impact of doing so related with other Oracle modules. For example, we are using EUS for managing access to DBs using Ldap users instead of declaring each one on DB. I do not know if anonymous binds or anonymous searchs are neccesary for this kind of use of EUS or AppServer checks and seeks.

Any idea or advice will be highly appreciatted

Regards

Carlos