Security issues using Linked Servers

  • Hi - I'd like to set up at work a linked server configuration between a local SQL 2000 and a remote Oracle server. Both are on a LAN/WAN behind a firewall (accessible only within our company). The goal is to use openquery on the SQL side to pull data from the Oracle side.

    I've been told this is against policy due to security risks, that the static ID/PW linking the two would be passed through the network as open text. I've searched the web but have yet to see any mention of this; can anyone lend any insight and/or point to any references regarding this?

    Thanks! 

  • SQL Server is going to use the Oracle client in order to do this. If that's the case with a linked server connection, it's going to be true of a client connection.

    Also, if it is that great of a concern, you can set up an IPSEC policy (I'm assuming both are NT but you can set IPSEC up even if both servers aren't) such that traffic between the two servers always is encrypted. You'll have about a 20% performance hit from what some quote, but it will not be going across the wire in plaintext.

    K. Brian Kelley
    @kbriankelley

Viewing 2 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply