Comments on: Oracle Proxy Users by example

By: Proxy-User « Oraculix

Proxy-User « Oraculix — Thu, 14 May 2009 23:03:37 +0000

[...] http://www.it-eye.nl/weblog/2005/09/12/oracle-proxy-users-by-example/ [...]

By: Jaffrin

Jaffrin — Thu, 11 Dec 2008 15:20:55 +0000

We are implementing Proxy authentication in our project.We are using Oracle Clinet9.0.4.0.1, I am using OracleOCIConnecionPooling to establish proxy connection,However I am getting some ecxeption that i dont understand. Here is the code
OracleOCIConnectionPool cpool=new OracleOCIConnectionPool(“username”,”password”,”jdbc:oracle:oci:@(description=(address=(host=hostname)(protocol=tcp)(port=1529))(connect_data=(sid=databasename)))”,poolConfig);
Properties prop=new Properties();
prop.out(OracleOCIConnectionPool.PROXY_USER_NAME,username);
prop.put9ORACLEOCIConnectionPool.PROXY_PASSWORD,password);
Connection conn=pool.getProxyConnection(OracleOCIConnectionPool.PROXY_USER_NAME,prop);

Intially I got some erros while establishing a OracleOCIConection and I resoved those. But I am getting

java.sql.SQLException: invalid proxy type specified : null properties

Any Help??

By: Thinhbk

Thinhbk — Fri, 11 Jan 2008 22:37:42 +0000

Hi,
I want to ask one thing,that’s implement VPD using proxy_user to grant access for user.My trouble is that user from remote connect to database using database link,in which the user in database link is different from this current user,(certainly on server,this user have role to access data).I want to ask:how can we paypass this?how to implementation authentication that transparent to location of the user(because i’m using database link).
Thanks for all answer!

By: Saso Stojanovski

Saso Stojanovski — Thu, 20 Dec 2007 12:53:39 +0000

I just tried out your code, and I get an error saying that

OracleConnection.PROXYTYPE_USER_NAME cannot be resolved

and

The method isProxySession() is undefined for the type OracleConnection

i am using ojdbc14.jar in my classpath. please help

By: Peter Meiller

Peter Meiller — Tue, 20 Nov 2007 16:06:07 +0000

Just an update

The authentication required clause works fine

By: Peter Meiller

Peter Meiller — Tue, 10 Apr 2007 19:29:25 +0000

Responding to dfc:

In the oracle 10.2 sql doc, there is an “authentication required” clause on the “alter user pu_user_1″ which forces a password to be supplied when the proxy user switches over to the other user

I haven’t ever done it but that is what is in the docs

By: Andrej Koelewijn

Andrej Koelewijn — Tue, 10 Apr 2007 06:20:23 +0000

I think that there’s no difference when using proxy users or not in this respect. A user needs to be able to access objects in another schema, so you need either public synonyms, private synonyms or a fully qualified naming and the required privileges.

By: paly

paly — Fri, 30 Mar 2007 15:51:13 +0000

Hi,

Suppose we have a “owner schema” that owns all the objects of the application.

How are defined the users pu_user_1 ? They must have synonyms to the owner schema ?
What would you recommand ?

By: doug

doug — Fri, 09 Feb 2007 00:28:23 +0000

What about roles does the biguser need to be granted a union of all the roles of the users it proxies or can it have none and not be priviledged beyon create session?

By: Andrej Koelewijn

Andrej Koelewijn — Fri, 10 Nov 2006 16:02:41 +0000

A proxy user is authenticated by the application server. The database trusts the application to have authenticated the user.