rpc_server_authentication_method

Description

rpc_server_authentication_method specifies the security authentication method for the RPC server.

For the sys tenant, you only need to set the authentication method on the client and server.

Privilege requirements

• Query the parameter

  The sys tenant and all user tenants can use the SHOW PARAMETERS statement or the GV$OB_PARAMETERS view to query this parameter.

• Modify the parameter

  Only the sys tenant can modify this parameter. User tenants cannot modify this parameter.

Attributes

Considerations

1. On the client, set the rpc_client_authentication_method parameter. For more information, see rpc_client_authentication_method.

2. The server supports multiple authentication methods. When multiple authentication methods are set, they are separated by commas. This parameter is not case-sensitive.

   ALTER SYSTEM SET rpc_server_authentication_method = 'NONE, SSL_NO_ENCRYPT';
   

3. If all parameters are set correctly, the latest configuration is used. Otherwise, the original authentication method is retained, and the current configuration does not take effect. For example, the original authentication method is NONE. You set the rpc_server_authentication_method parameter to alter system set rpc_server_authentication_method = 'SSL_NO_ENCRYPT, ANY'; (but ANY is not in the value range). In this case, the current configuration does not take effect, and the server authentication method remains NONE.

4. The allowed client types vary based on the server configuration value:

   Server configuration value	Allowed client types
   NONE	Old clients that have not been upgraded (including unauthenticated clients) New clients with the NONE authentication method
   SSL_NO_ENCRYPT	New clients with the SSL_NO_ENCRYPT authentication method
   ALL	The sum of the above two cases

Examples

Set the RPC server authentication method to ALL.

obclient> ALTER SYSTEM SET rpc_server_authentication_method = 'ALL';

References

RPC connection authentication