« More happy tales from the modern world | Main | Tycho Brahe's moose »
August 21, 2006
IIS and Oracle delegation
The Great NDB project at work is a three-tier chemical registration system built on top of Oracle and MDL Software's ISIS server and Chemical Oracle cartridge. The middle tier is a series of web services hosted as ISAPI DLLs on IIS, which the client connects to. I thought it would be good to use external Oracle account authentication to simplify the account creation process, and to ensure that user permissioning and auditing in Oracle will work correctly. Actually setting up the external authentication in Oracle 9i is easy enough ; getting IIS 6.0 to kick off the Oracle connection as the connecting user is something else. I seem to have got it working by using "Basic Authentication", which is not exactly ideal, seeing as it's plain text passwords. However, wrapping the connection up with SSL was easy enough, so perhaps that will do for now. I was hoping to be using Kerberos ("Integrated Windows Authentication"), but I guess there is a configuration step I missed somewhere. All advice kindly received.
Posted by daen at August 21, 2006 10:38 PM
Comments
Post a comment
Thanks for signing in, . Now you can comment. (sign out)
(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)