Skip to Main Content

RADIUS authentication

markdba123May 14 2020 — edited May 21 2020

If I'm not in the correct discussion group, please let me know.

I'm running a X5-2 ODA box with DB=12.1.0.2, GRID=18.3.0.0.0 in a 2-node RAC configuration.

We are working on a project where we will authenticate database access via a RADIUS server (I'm on the db side and another coworker is on the windows side).

After initial testing, it seems that Oracle is not communicating with RADIUS.

Below is my example radius sqlnet.ora file

##

## For RADIUS/DUO/MFA

##

SQLNET.AUTHENTICATON_SERVICES=RADIUS

SQLNET.RADIUS_AUTHENTICATION=RADIUS_server_<ip address>

SQLNET.RADIUS_AUTHENTICATION_PORT=<port>

SQLNET.RADIUS_AUTHENTICATION_TIMEOUT=60

SQLNET.RADIUS_AUTHENTICATION_RETRIES=3

SQLNET.RADIUS_SECRET=/u01/app/oracle/product/12.1.0.2/dbhome_1/network/security/radius.key

SQLNET.RADIUS_CLASSPATH=/u01/app/oracle/product/12.1.0.2/dbhome_1/network/jlib/netradius6.jar

SQLNET.RADIUS_CHALLENGE_RESPONSE=OFF

##SQLNET.RADIUS_CHALLENGE_KEYWORD=()

SQLNET.RADIUS_SEND_ACCOUNTING=OFF

One question is:  which sqlnet.ora file should be modified?  The one under GRID ownership or the one under ORACLE ownership?

Has anyone successfully implemented this?

Any help would be greatly appreciated.


Cheer,
Mark

Comments
Post Details
Added on May 14 2020
17 comments
316 views