Publishing Reports to the Web - Downloads - Oracle

Configuring OracleAS Reports Services Security
The Oracle HTTP Server processes requests from the client browser.
■ Reports Servlet
■ Oracle Application Server Containers for J2EE
The Reports Servlet is a component of OracleAS Reports Services that runs inside
of the Oracle HTTP Server's Oracle Application Server Containers for J2EE (OC4J).
When a report request comes to the Oracle HTTP Server, the Reports Servlet
passes the job request to the Reports Server.
■ Reports Server
The Reports Server processes client requests, which includes ushering them
through authentication and authorization checking, scheduling, caching, and
distribution.
■ OracleAS Single Sign-On
OracleAS Single Sign-On is responsible for managing users' Single Sign-On
sessions. It verifies users' login credentials by looking them up in the Oracle
Internet Directory.
■ Oracle Internet Directory
Oracle Internet Directory is Oracle’s highly scalable, native LDAP version 3 service
and hosts the Oracle common user identity. OracleAS Single Sign-On authenticates
users against the information stored in Oracle Internet Directory. As noted in
earlier sections, when Single Sign-On is enabled for OracleAS Reports Services, it
checks the Oracle Internet Directory for user and group privilege information. It
also retrieves data source connection information from the Oracle Internet
Directory.
■ Oracle Delegated Administration Services
The Delegated Administration Service provides a comprehensive interface for
making updates to the Oracle Internet Directory. OracleAS Reports Services
displays Oracle Delegated Administration Services when it encounters a Single
Sign-On key that does not already have a data source connection string associated
with it in the Oracle Internet Directory.
For more information, refer to Chapter 10, "Configuring and Administering OracleAS
Single Sign-On".
9.2 Configuring OracleAS Reports Services Security
This section provides an overview of configuration considerations for OracleAS
Reports Services.
9.2.1 Configuring OracleAS Reports Services Security Options
The out-of-the-box implementation of OracleAS Reports Services security includes all
of the Oracle components described in Resources Protected pre configured to work
with your OracleAS Reports Services installation. If you choose to implement your
own security configuration, you can follow the steps in Chapter 10, "Configuring and
Administering OracleAS Single Sign-On" and Chapter 11, "Deploying Reports in
OracleAS Portal" to use all or only some of these components. For example, you can
choose to use OracleAS Single Sign-On without implementing data source security or
OracleAS Portal. In another configuration, you might choose to use a different Internet
directory to store user and group information. If you prefer to implement none of the
9-8 Oracle Application Server Reports Services Publishing Reports to the Web