-- Index

activating

checksumming, 1-6

encryption, 1-6

adding new service name and address

to CDS with tnnfg utility, 11-15

assigning new pincode

to SecurID card, 5-14

authenticated RPC

protocol adapter includes, 9-3

benefits

of using the Advanced Networking Option, 1-4

Biometric Authentication Server, 7-14

Biometric Manager

using, 7-13

CDS

using to perform name lookup, 11-12

CDS naming adapter

components of, 9-4

cds_attributes file

modifying for name resolution in CDS, 11-13

Cell Directory Service (CDS)

naming adapter includes, 9-4

CELL_NAME

DCE address parameter, 11-2

configuration files

CyberSAFE, B-2

Kerberos, B-2

needed for servers in DCE, 11-3

configuring a server

configuring client

configuring clients

configuring Oracle

for SQL*Net/DCE, 11-1

configuring Oracle client

to use SecurID authentication, 5-12

connect to database

to verify roles, 11-8

connecting across cells, 11-5

connecting to another cell, 11-6

connecting to Oracle database

in DCE, 12-1

connecting to Oracle server

in DCE, 12-3

with username/password, 12-3

without username and password, 12-3

connecting with username/password

with authentication configured, 6-2

creating an Oracle server account, 7-11

creating Oracle directories

in CDS, 10-3

creating principals and accounts, 10-2

CyberSAFE benefits, 1-9

data encryption

global, 1-4

Data Encryption Standard (DES)

V1.1 and later, 1-5

data integrity, 1-4

data privacy and integrity

component of, 9-3

data,authentication, 1-1

data,authorization, 1-1

data,integrity, 1-1

data,privacy, 1-1

DCE address

sample for LISTENER.ORA, 11-4

DCE address parameter

example, 11-2

DCE address parameters

description of, 11-2

DCE groups to Oracle roles

syntax for mapping, 11-7

DCE GSSAPI authentication adapter, 8-1

when to use, 8-1

DCE parameter SERVICE, 11-14

DCE principal

for DCE GSSAPI authentication, 8-2

DCE roles, external

setting up, 11-7

DCE Secure Core services, 9-4

DCE.LOCAL_CELL_USERNAMES parameter, 11-11

DCE.TNS_ADDRESS.OID

parameter in PROTOCOL.ORA, 11-13

DCE.TNS_ADDRESS_OID parameter, 11-11

dce_service_name

verifying, 12-2

DEFAULT security policy

for the BiometricAuthentication Service, 7-14

defaults

encryption and checksumming, A-2

defining users

in multi-cell environment, 11-5

DES encryption algorithm

56-bit key, 1-5

Distributed Computing Environment

overview, 9-2

encrypted data

across protocols, 1-5

encryption module

in V1.0, 1-4

Enrollment Accuracy, 7-17

Enterprise Manager, 7-3, 7-5

export guidelines

U.S. government, 1-5

external authentication, 9-3

external roles, SQL*Net/DCE

configuring, 11-7

externally-authenticated accounts

creating and naming, 11-4

failure of fingerprint authentication, 7-13

false finger threshold, 7-2

fingerprint accuracy, 7-2, 7-4

fingerprint authentication failure, 7-13

Global Directory Service (GDS), 9-4

hash

used by the Biometric Authentication Adapter, 7-3

used in the Biometric Authentication Service, 7-2

high security threshold, 7-2

Identix TouchNet II Desktop Sensor, 7-13

Identix TouchNet II Hardware Interface, 7-4

installing key of server, 10-2

Internet Domain Service (DNS), 9-4

Kerberos

description, 1-10

Kerberos support

through third-party support, 1-10

LAN environments

vulnerabilities of, 1-4

listener

starting, 12-2

LISTENER.ORA

parameters, description, 11-4

loading Oracle service names

into CDS, 11-15

logging in

when SecurID is in next code mode, 5-15

with PINPAD card, 5-17

with standard card, 5-16

logging into Oracle

using DCE authentication, 12-3

logging into Oracle server

using SecurID authentication, 5-13

mapping DCE groups

to Oracle roles, 11-7

MD5

used by the Biometric Authentication Service, 7-2

message digest, 1-4

MultiProtocol Interchange

not supported, 9-5

multi-threaded server

not supported, 9-5

naegen

generating Diffie-Hellman parameters, 2-4

NO AUTHENTICATION

configuring, 6-2

Object Tree window

for Biometric Manager, 7-15

Oracle Enterprise Manager, 7-5, 7-13

Oracle parameter SID, 11-14

Oracle parameters

necessary for authentication, 1-11

Oracle service names

registering in CDS, 9-4

OS_AUTHENT_PREFIX

parameter, 1-13

OS_AUTHENT_PREFIX parameter, 1-12

OS_ROLES parameter

setting, 11-7

overview

product, 1-1

parameters

specifying configuration, 1-6

PINPAD cards

using SecurID, 5-14

preface

PT PrefaceTitle, iii

Send Us Your Comments, xi

prerequisites, 1-3

for Biometric Authentication Service installation, 7-5

products

not yet supported, 1-5

Properties window

for Biometric Manager, 7-16

PROTOCOL

DCE address parameter, 11-2

protocol adapter

components of, 9-3

PROTOCOL.ORA

DCE address parameters in, 11-10

parameter for CDS, 11-11

RC4 encryption algorithm, 1-4

rejected PIN code

reasons for, 5-15

REMOTE_OS_AUTHENT

parameter, 1-12

REMOTE_OS_AUTHENT parameter, 1-12

setting, 11-4

roles, external

mapping to DCE groups, 11-7

sample DCE address

in TNSNAMES.ORA, 11-14

secret key, 7-5, 7-12

SecurID

system requirements, 1-3

SecurID cards

types of, 5-13

SecurID smart card

description of, 1-11

security

protocol adapter includes, 9-3

security policy, 7-2

for Biometric Authentication Adapter, 7-11

SERVER_PRINCIPAL

DCE address parameter, 11-2

DCE parameter, 11-14

SERVICE

DCE address parameter, 11-2

single sign-on, 9-3, 12-3

smart cards

benefits of, 1-11

smit utility

restarting cdsadv service, 11-13

SQL*Net, 7-8

level required by Biometric Athentication Service, 7-5

SQL*Net Native Authentication, 7-13

SQLNET.ORA, 7-7, 7-8

modifying so CDS can resolve names, 11-16

SQLNET.ORA file

sample, A-2

standard cards

using SecurID, 5-13

System Environment Variable, 7-12

system requirements, 9-2

threshold level, 7-2, 7-4

tnnfg utility

sample of usage, 11-15

TNSNAMES.ORA, 7-8

loading into CDS using tnnfg, 11-15

modifying to load connect descriptors into CDS, 11-14

renaming, 11-15

TouchNet II, 7-4

user account, 7-11

verifying DCE groups

are mapped to OS roles, 11-9

viewing mapping in CDS namespace

for listener endpoint, 12-2

WAN environments

vulnerabilities of, 1-4