I am not an Oracle guy but a sysadmin who had users that required the ability to do database queries. My company has a user management system that is fine for Linux where they go in to a web site in the company and request access, and their access is based off of roles. Normally there is a read only and read write role that you can request from. On the linux system those roles are defined as unix groups and sudo access is assigned to those groups accordingly. This makes it easy to distinguish who has read only and who has read write. I then wrote an app called sqlrun that simply looks at the user, and then checks that user's permissions against the unix group they belong to. Then what it does is assign an Oracle user that is read-only or read-write depending. After authentication it passes the query on to Oracle and formats the output, and the output is a lot easier to use than Oracle's SQL Plus and I can output in HTML, CSV, Excel, JSON, and a very MySQL like grid output.
The advantage for me of doing it this way is that I don't have to control who has access to Oracle. The actual passwords are not known by the users, and access is controlled by the companies own user management system, so if John changes jobs, the company user management takes his access to that linux system away, thus removing his oracle access as well. On Saturday, April 22, 2017 at 3:21:30 AM UTC-4, Didier Spezia wrote: > > > The OP probably means connecting to Oracle from an "externally identified" > user. > Oracle can delegate the authentication to the OS providing the connection > is done from > a given OS user (already authenticated by the system). > > Normally, with OCI, you can connect by passing empty strings for user and > passwd. > See https://oracle-base.com/articles/misc/os-authentication > > Regards, > Didier. > > On Friday, April 21, 2017 at 11:35:04 PM UTC+2, Tamás Gulácsi wrote: >> >> What do you mean on "os authentication"? >> (rana/ora dev here) > > -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To unsubscribe from this group and stop receiving emails from it, send an email to golang-nuts+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
