Corporation Network Router User Manual

Introduction to Enterprise User Security

Getting Started with Enterprise User Security 11-9

How Enterprise Users Access Database Resources with Database Links

Database links are network objects stored in the local database or in the network

deﬁnition that identify a remote database, a communication path to that database,

and optionally, a username and password. Once deﬁned, the database link is used

to access the remote database. Oracle Database supports connected user links, ﬁxed

user links, and current user links.

Enterprise users can use all three types of database links. Connected user links are

accessed by a local user who has an account on the remote server. Fixed user links

contain a username and password as part of the link deﬁnition. Current user

database links allow enterprise users to access objects on remote databases without

passing authentication information during link execution, or storing authentication

information in the link deﬁnition. They require SSL for the database network

connections, which means public key infrastructure (PKI) credentials must be

obtained and maintained for the databases. Current user database links can be used

to connect to the remote database only as an enterprise user.

How Enterprise Users Are Authenticated

Enterprise User Security supports the following authentication methods:

■ Password-based authentication

■ SSL-based authentication

■ Kerberos-based authentication

Each authentication method has advantages and disadvantages. Table 11–1

summarizes the criteria for selecting which authentication method is best for your

Enterprise User Security implementation.

See Also: "About Using Shared Schemas for Enterprise User

Security" on page 11-19 for more information about creating and

using shared schemas for enterprise users.