Understanding Windows Native Authentication
We are running Windows on both client and server (XP, Win2008R2 in the same domain, 11.2.0.2 in both ends), and have enabled Windows Native Authentication (sqlnet.authentication_services = (NTS)) for simplified logon (identified externally). We have set OSAUTH_PREFIX_DOMAIN to FALSE. This works just fine.
I hope to understand a little better what this actually means, and I can not really find all that much in the documentation.
- What auth protocol is used, kerberos/ntlm ?
- Will a local user on a XP-machine on the network be able to authenticate in any way?
- Related to that, who can really authenticate (using /), users in the same domain and/or trusted domains, anyone else?