<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
		>
<channel>
	<title>Comments on: Proxy Users</title>
	<atom:link href="http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/feed/" rel="self" type="application/rss+xml" />
	<link>http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/</link>
	<description>Just another Oracle weblog</description>
	<lastBuildDate>Wed, 19 Jun 2013 16:07:17 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
	<item>
		<title>By: ram</title>
		<link>http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-45136</link>
		<dc:creator><![CDATA[ram]]></dc:creator>
		<pubDate>Thu, 23 Feb 2012 22:17:43 +0000</pubDate>
		<guid isPermaLink="false">http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-45136</guid>
		<description><![CDATA[Dennis, what is your Oracle version ?]]></description>
		<content:encoded><![CDATA[<p>Dennis, what is your Oracle version ?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dennis</title>
		<link>http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-45102</link>
		<dc:creator><![CDATA[Dennis]]></dc:creator>
		<pubDate>Mon, 20 Feb 2012 13:38:36 +0000</pubDate>
		<guid isPermaLink="false">http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-45102</guid>
		<description><![CDATA[I did as below but I am getting while connecting thrugh proxy, Anyone can help?
[sourcecode]
SQL&gt; create user          proxy_user
  2  identified by        pw_proxy
  3  default tablespace   users
  4  temporary tablespace temp;

User created.

SQL&gt; create user          target_user
  2  identified by        pw_target
  3  default tablespace   users
  4  temporary tablespace temp
  5  quota unlimited on   users;

User created.

SQL&gt; alter user target_user grant connect through proxy_user;

User altered.

SQL&gt; grant create session,
  2        create table
  3  to    target_user;

Grant succeeded.

SQL&gt; connect target_user/pw_target@dev
Connected.
SQL&gt; create table targets_table (
  2    col  varchar2(10)
  3  );

Table created.

SQL&gt; insert into targets_table values (&#039;foo&#039;);

1 row created.

SQL&gt; connect proxy_user[target_user]/pw_proxy@dev
ERROR:
ORA-01017: invalid username/password; logon denied 


Warning: You are no longer connected to ORACLE.
[/sourcecode]
==========================

Thanks]]></description>
		<content:encoded><![CDATA[<p>I did as below but I am getting while connecting thrugh proxy, Anyone can help?</p>
<pre class="brush: plain; title: ; notranslate">
SQL&gt; create user          proxy_user
  2  identified by        pw_proxy
  3  default tablespace   users
  4  temporary tablespace temp;

User created.

SQL&gt; create user          target_user
  2  identified by        pw_target
  3  default tablespace   users
  4  temporary tablespace temp
  5  quota unlimited on   users;

User created.

SQL&gt; alter user target_user grant connect through proxy_user;

User altered.

SQL&gt; grant create session,
  2        create table
  3  to    target_user;

Grant succeeded.

SQL&gt; connect target_user/pw_target@dev
Connected.
SQL&gt; create table targets_table (
  2    col  varchar2(10)
  3  );

Table created.

SQL&gt; insert into targets_table values ('foo');

1 row created.

SQL&gt; connect proxy_user[target_user]/pw_proxy@dev
ERROR:
ORA-01017: invalid username/password; logon denied 


Warning: You are no longer connected to ORACLE.
</pre>
<p>==========================</p>
<p>Thanks</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: tas_gibbs</title>
		<link>http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-40898</link>
		<dc:creator><![CDATA[tas_gibbs]]></dc:creator>
		<pubDate>Thu, 30 Jun 2011 16:04:08 +0000</pubDate>
		<guid isPermaLink="false">http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-40898</guid>
		<description><![CDATA[Can you have a proxy user that owns objects?  If so, will this proxy user allow users to query their own data in addition to the proxied id?]]></description>
		<content:encoded><![CDATA[<p>Can you have a proxy user that owns objects?  If so, will this proxy user allow users to query their own data in addition to the proxied id?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: BI Publisher 10.1.3.2 and VPD &#171; Business Intelligence - Oracle</title>
		<link>http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-15948</link>
		<dc:creator><![CDATA[BI Publisher 10.1.3.2 and VPD &#171; Business Intelligence - Oracle]]></dc:creator>
		<pubDate>Mon, 23 Jul 2007 14:27:08 +0000</pubDate>
		<guid isPermaLink="false">http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-15948</guid>
		<description><![CDATA[[...] on July 23rd, 2007. I was going through an interesting post by Jonathan Lewis on Proxy Authentication that is available for end users via Sql Plus in 10g R2. This post made me think about the [...]]]></description>
		<content:encoded><![CDATA[<p>[...] on July 23rd, 2007. I was going through an interesting post by Jonathan Lewis on Proxy Authentication that is available for end users via Sql Plus in 10g R2. This post made me think about the [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Philip Douglass</title>
		<link>http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-15170</link>
		<dc:creator><![CDATA[Philip Douglass]]></dc:creator>
		<pubDate>Fri, 13 Jul 2007 17:39:46 +0000</pubDate>
		<guid isPermaLink="false">http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-15170</guid>
		<description><![CDATA[Is it possible to use SQL*Plus to connect to an &quot;authentication required&quot; proxy user? The form &#039;sqlplus appuser[enduser]/apppassword&#039; works for normal proxy users, but if proxy authentication is required, the form &#039;sqlplus appuser[enduser/endpassword]/apppassword&#039; is a syntax error.]]></description>
		<content:encoded><![CDATA[<p>Is it possible to use SQL*Plus to connect to an &#8220;authentication required&#8221; proxy user? The form &#8216;sqlplus appuser[enduser]/apppassword&#8217; works for normal proxy users, but if proxy authentication is required, the form &#8216;sqlplus appuser[enduser/endpassword]/apppassword&#8217; is a syntax error.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jonathan Lewis</title>
		<link>http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-617</link>
		<dc:creator><![CDATA[Jonathan Lewis]]></dc:creator>
		<pubDate>Tue, 19 Dec 2006 21:03:14 +0000</pubDate>
		<guid isPermaLink="false">http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-617</guid>
		<description><![CDATA[Michel, Good point about the end_user account not needing a valid password. My strategy for blocking the end-user from any access to the data is to have an application role protected by a call to a packaged procedure that checks the &lt;b&gt;sys_context(&#039;userenv&#039;,&#039;proxy_user&#039;)&lt;/b&gt; to check that a user had connected legally through the application.
I&#039;ve left the application_user with the ability to create a session so that it could prepare (global) contexts for the end_user before creating a session for them.]]></description>
		<content:encoded><![CDATA[<p>Michel, Good point about the end_user account not needing a valid password. My strategy for blocking the end-user from any access to the data is to have an application role protected by a call to a packaged procedure that checks the <b>sys_context(&#8216;userenv&#8217;,'proxy_user&#8217;)</b> to check that a user had connected legally through the application.<br />
I&#8217;ve left the application_user with the ability to create a session so that it could prepare (global) contexts for the end_user before creating a session for them.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Laurent Schneider &#187; Blog Archive &#187; su in sqlplus</title>
		<link>http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-594</link>
		<dc:creator><![CDATA[Laurent Schneider &#187; Blog Archive &#187; su in sqlplus]]></dc:creator>
		<pubDate>Tue, 19 Dec 2006 09:25:06 +0000</pubDate>
		<guid isPermaLink="false">http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-594</guid>
		<description><![CDATA[[...] Thanks to Jonathan Lewis post today Proxy Users, I could imagine using the proxy functionality in sqlplus to do a su [...]]]></description>
		<content:encoded><![CDATA[<p>[...] Thanks to Jonathan Lewis post today Proxy Users, I could imagine using the proxy functionality in sqlplus to do a su [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mathew Butler</title>
		<link>http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-593</link>
		<dc:creator><![CDATA[Mathew Butler]]></dc:creator>
		<pubDate>Tue, 19 Dec 2006 08:57:32 +0000</pubDate>
		<guid isPermaLink="false">http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-593</guid>
		<description><![CDATA[I forgot to thank you for sharing this one!   Its good  to see we can now do this directly from sql. 

Ive just started working with 10.2 and still have the new features guide on my to do list. Notes like this enthuse me to read the docs again. 

mat.]]></description>
		<content:encoded><![CDATA[<p>I forgot to thank you for sharing this one!   Its good  to see we can now do this directly from sql. </p>
<p>Ive just started working with 10.2 and still have the new features guide on my to do list. Notes like this enthuse me to read the docs again. </p>
<p>mat.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mathew Butler</title>
		<link>http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-591</link>
		<dc:creator><![CDATA[Mathew Butler]]></dc:creator>
		<pubDate>Tue, 19 Dec 2006 08:50:29 +0000</pubDate>
		<guid isPermaLink="false">http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-591</guid>
		<description><![CDATA[I&#039;ve typically seen this feature talked about in an n-tier environment when the application connects to the database via an application server and the application server connects to the database as the same user for all connections. Using this feature  means that proper auditing of the real connecting user may take place as you suggest. It also makes for more efficient re-use of JDBC pooled connections and may simplify the pooled connection setup. 

As Michel says; I believe that your demo may also  work with less privileges for the reasons stated. 

You allude to another possible use; testing performance for a specific user without requiring their password. Is this just a convenience or is there more to this? Would you care to say a few more words?     

Regards.]]></description>
		<content:encoded><![CDATA[<p>I&#8217;ve typically seen this feature talked about in an n-tier environment when the application connects to the database via an application server and the application server connects to the database as the same user for all connections. Using this feature  means that proper auditing of the real connecting user may take place as you suggest. It also makes for more efficient re-use of JDBC pooled connections and may simplify the pooled connection setup. </p>
<p>As Michel says; I believe that your demo may also  work with less privileges for the reasons stated. </p>
<p>You allude to another possible use; testing performance for a specific user without requiring their password. Is this just a convenience or is there more to this? Would you care to say a few more words?     </p>
<p>Regards.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Michel Cadot</title>
		<link>http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-589</link>
		<dc:creator><![CDATA[Michel Cadot]]></dc:creator>
		<pubDate>Tue, 19 Dec 2006 08:13:26 +0000</pubDate>
		<guid isPermaLink="false">http://jonathanlewis.wordpress.com/2006/12/18/proxy-users/#comment-589</guid>
		<description><![CDATA[Great to know that we can now do it in SQL*Plus.
Just two remarks: application_user does not need to have been granted &quot;create session&quot;, just end_user needs to; end_user does not need to have a valid password. 
I think this is one of the purposes of proxy users: end_user can connect only through application which is the only one to know the password of application_user.]]></description>
		<content:encoded><![CDATA[<p>Great to know that we can now do it in SQL*Plus.<br />
Just two remarks: application_user does not need to have been granted &#8220;create session&#8221;, just end_user needs to; end_user does not need to have a valid password.<br />
I think this is one of the purposes of proxy users: end_user can connect only through application which is the only one to know the password of application_user.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
