Oracle 9iAS Security Tips

Whilst we're on the subject of security, there's a couple of useful papers available on OTN that detail how security on 9iAS works.

First up is a detailed technical paper giving best practises for security for Oracle 9iAS 1.0.2.x, which is worth taking a look through if you're supporting this first release of 9iAS.

For 9iAS 9.0.2, there's a FAQ, white paper and presentation on security within this release; lastly, there's a paper on Oracle's implementation of JAAS (Java Authentication and Authorisation Service), which extends the basic service to include integration with SSO and J2EE Container Security.