Skip to Main Content
  • Questions
  • Authenticate proxy user from windows credentials

Breadcrumb

Question and Answer

Chris Saxon

Thanks for the question, Mike.

Asked: August 03, 2018 - 8:24 am UTC

Last updated: August 03, 2018 - 9:21 am UTC

Version: 12c

Viewed 1000+ times

You Asked

I am trying to work out how to connect using a proxy but passing a windows credential in - like this:

SQL> CONN proxy_user[domain\windows_user]/proxy_pass

So far it doesn't seem possible. Do you know how this can happen?

Thanks

and Chris said...

I'm not sure what you're trying to do here. The point of proxy users is it allows you to connect as another database user. Without knowing their password!

For example, data_owner is allowed to create tables, but proxy_user isn't:

grant create session, create table, unlimited tablespace 
  to data_owner identified by data_owner;
  
grant create session to proxy_user identified by proxy_user;

alter user data_owner grant connect through proxy_user;


So if you connect to proxy_user, create table will fail:

conn proxy_user/proxy_user

create table t (
  c1 int
);

ORA-01031: insufficient privileges


But it can proxy through data_owner! Allowing it to create tables as data_owner:

conn proxy_user[data_owner]/proxy_user

create table t (
  c1 int
);

select owner, table_name from all_tables
where  table_name = 'T';

OWNER        TABLE_NAME   
DATA_OWNER   T            


So what's the Windows credential got to do with it being a proxy user? How is this helping you connect as another database user?

Is this answer out of date? If it is, please let us know via a Comment

More to Explore

Security

All of the vital components for a secure database are covered in the Security guide.