Networking And Gateways :: Authentication For Connected User Database Links
Jun 15, 2013
I know how to use database links in various forms, but I've been trying to think through how the authentication works for a connected user link in 11g. If I create the link like this,
create public database link using 'orcl';
then any user can use the link, provided they have an identical username/password in the two databases. With pre-11g passwords, it was understandable: the password was salted with the username, so the hash of the password would be the same in both databases, and I assumed that the logon through the link used some sort of IDENTIFIED BY VALUES mechanism. But in 11g, the salt will different in the two databases. So the hash will be different. And of course Oracle never stores the actual password. So I don't see how the authentication works.
I know how to use database links in various forms, but I've been trying to think through how the authentication works for a connected user link in 11g. If I create the link like this,create public database link using 'orcl';then any user can use the link, provided they have an identical username/password in the two databases. With pre-11g passwords, it was understandable: the password was salted with the username, so the hash of the password would be the same in both databases, and I assumed that the logon through the link used some sort of IDENTIFIED BY VALUES mechanism. But in 11g, the salt will different in the two databases. So the hash will be different. And of course Oracle never stores the actual password. So I don't see how the authentication works.
I am facing difficulty in connecting Oracle 10g client to Oracle 10g database. Both the machines are in windows xp with service pack-2. The following observations are made in server machine
1. The loopback test of the server is successful. 2. One net service name created in the server end. 3. Database connection is successful with above service name. 4. tnsping <server ip address> is successful
# This file is actually generated by netca. But if customers choose to # install "Software Only", this file wont exist and without the native # authentication, they will not be able to connect to the database on NT.
# This file is actually generated by netca. But if customers choose to # install "Software Only", this file wont exist and without the native # authentication, they will not be able to connect to the database on NT.
I have set password on the listener and set the local_os_authentication parameter to "OFF", whenever i start/stop listener through "lsnrctl" ,it works fine and asks for password but i can stop/start listener through windows services without giving any password.
what is the use of setting password on listener if any body can start/stop it through services utility in windows xp sp3.
I get the above error while trying to connect using sqlplus.
I know that I have got all the setting correct, as this server is set up exactly the same as another 3 server that I have set up, and those server work ok.
I have placed wire-shark (while the radius server is on another m/c as wire-shark on windows can not monitor the loop-back) onto the Oracle server, too see what it is saying too the Radius server, but it is not talking too it at all, so how can it get a error of ORA-28035, when it not even talking too the Radius server.
I have also set TRACE_LEVEL_CLIENT and TRACE_LEVEL_SERVER too 16, but I can not see anything useful in the log file.
I installed Oracle Express on my Windows 2003 Enterprise server. And right off the bat I cannot connect to it via command line. I have googled and read many sites, but am still getting the same error, no matter what I do. I am newbie again (was a DBA in 1990...when I used to have the same error and fix it in seconds...not sure why this problem still lingers in Oracle) so most likely I am overlooking something. Below are my tnsnames.ora and liserner.ora files
# This file is actually generated by netca. But if customers choose to # install "Software Only", this file wont exist and without the native # authentication, they will not be able to connect to the database on NT.
i want to restrict particular ips ,for that i specified
TCP.VALIDNODE_CHECKING= YES AND TCP.INVITED_NODES=(IPADDRESS)
in sqlnet.ora file but whenever i connect to database from the particular specified IPADDRESS , the database allows the connection to happen ( doesnot restrict it),
i have a inventory system and trying to connect remote database one by one throught two static ips. If first ip is not ping then go to 2nd ip only when open the login.fmx page
I am getting beloww error very frequently in database log and not able to connect to the database.
************************ Fatal NI connect error 12170.
VERSION INFORMATION: TNS for 64-bit Windows: Version 11.2.0.2.0 - Production Oracle Bequeath NT Protocol Adapter for 64-bit Windows: Version 11.2.0.2.0 - Production Windows NT TCP/IP NT Protocol Adapter for 64-bit Windows: Version 11.2.0.2.0 - Production Time: 01-FEB-2012 18:00:34 Tracing not turned on. Tns error struct: ns main err 12535
TNS-12535: TNS:operation timed out ns secondary err 12606 nt main err 0 nt secondary err 0 nt OS err 0 Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=10.179.1.24)(PORT=65503)) WARNING: inbound connection timed out (ORA-3136) Wed Feb 01 18:00:44 2012 *****************
Database version:10.2.0.3 Operating System:Microsoft Windows XP
I have two database TEST and TEST2 on same windows machine. In TEST database i have created one database link that access one schema in other TEST2 database. but when i passed select command to access object in TEST2 through Database link it is hanging indefinitely.
command that i have used to create Database link: create database link scott connect to scott identified by tiger using 'TEST2'
I don't believe it is using the TNSNAMES.ora entry for this, because when I take it out of there it still connects. I create a 10.1.0.5 database and copied the tables,etc to there. But I'm having problem connecting, getting "ORA-12154:TNS Could not resolve service name". Tried the following:
I new to this, but my guess is the other entry had the full path name..and this SERVICE_NAME does not. But then again I don't believe it looks at the TNSNAMES file. This NJZTEST is the 2nd instance on the NJZAINETTEST machine.
am getting this message when am connecting to a database :
ora-12519:Message 12519 not found;product=RDBMS80 facility = ORA
am not getting this message all the time, sometimes am connected without any problem sometimes i get this message and i have to try again several times until am connected
i searched the net and my database provider guided me to this log URL.....
I'm trying to connect Oracle 11g database from Oracle 9i database, by creating dblink on Oracle 9i database. But my session got hang while i perform this. Here i'm giving the steps i followed on my both the database. Here Oracle 9i database is my source db and Oracle 11g is my target db.
Following steps/setting on Oralce 11g Database
SQL> SHOW PARAMETER SEC_CASE_SENSITIVE_LOGON
NAME TYPE VALUE ------------------------------------ ----------- ------------------------------ sec_case_sensitive_logon boolean TRUE
SQL> alter user SSA identified by SSA;
User altered.
Password File recreted on Oracle 11g Database Server
DROP DATABASE LINK "SSA11G.SSA_DB1.WBTEA.COM"; CREATE DATABASE LINK "SSA11G.SSA_DB1.WBTEA.COM" CONNECT TO SSA IDENTIFIED BY SSA USING 'DEVDATA.DEV11G';
I have client and database on same machine, when I will connect to the instance , it will use IPC, suppose If I will use connection string then which process will handle this request?
I have created two database one for production and another one for test.I created both database in shared_server mode(by using dbca),after than I did not change anything.My problem is when i connect to test database from outside lan through static ip its working well,but when i connect to production database which is not connected. I checked and compared two databases,then I find there are some changes in dispatcher and mts_ dispatcher parameters.And I used this query to check the shared_server status,
ie.select * from v$shared_server,
the output of this query is attached with this post.
Attempting to create Database Link which talks to SQL Server 2008R2 system
Database: 11.1.0.7 Oracle Standard Edition Server: Windows Server Enterprise, Service Pack 2 (2008)
I do not have the Oracle Gateway product installed, as this was not configured on my working 10G system.
I tried configuring the link with both the SQL Server ODBC Driver (GMSRES) and the SQL Server Native Client 10.0 (GMSGAS). Returning errors when SQL command is executed.
Everything tests out fine (tnsping, listener configured OK, test connect in Database Link setup). When SQL statement is executed it fails.
Setup:
1. Created ODBC Driver (GMSRES). This tested successfull. Created SQL Native Driver (GMSGAS). This tested successfull.
2. Created initiGMSRES.ora file C:Oracleproduct11.1.0db_1hsadmin folder.
HS_FDS_CONNECT_INFO = GMSGAS HS_FDS_TRACE_LEVEL = OFF HS_LANGUAGE = AMERICAN_AMERICA.WE8ISO8859P15 HS_FDS_CONNECT_INFO = GMSRES HS_FDS_TRACE_LEVEL = OFF HS_LANGUAGE = AMERICAN_AMERICA.WE8ISO8859P15
Our Team is planning to find a new architecture for our new project. In which we have to fire query to multiple database and then we have to collect all responses from them.(Suppose there are 10databases on which we have to fire query)
I searched a lot,the only thing I got is...It could be possible only through Database link(DbLink),Is there any other way to fire query on distributed databases...?
I'm trying to connect from Oracle 11g (11.2.0.1.0) to Sybase Adaptive Server Anywhere (9.0.2.3527). My Oracle environment is running on Linux Centos 5.3, the sybase database runs on a Windows Server.
All my attempts have failed so far - both through Oracle Database Gateway for Sybase and via Oracle Database Gateway for ODBC in combination with freeTDS. Using either way I'm ending up with apparently the same error:
ASA Error -611: Transact-SQL feature not supported
When I use db link created via dg4sybs (Oracle Database Gateway for Sybase) I get this: SQL> SELECT * FROM aaa@hvx; SELECT * FROM aaa@hvx * ERROR at line 1: ORA-28500: connection from ORACLE to a non-Oracle system returned this message:
[code]....
When I use db link created via dg4odbc (Oracle Database Gateway for ODBC) and freeTDS driver I get this:
SQL> SELECT * FROM aaa@hvx1; SELECT * FROM aaa@hvx1 * ERROR at line 1: ORA-28511: lost RPC connection to heterogeneous remote agent using SID=ORA-28511: lost RPC connection to heterogeneous remote agent using
[code]....
It seems both drivers use Transact-SQL instructions which are then denied by ASA. I'm not familiar with Sybase products at all, but as far as what my googling revealed the Transact-SQL is only supported in Adaptive Server Enterprise (enterprise-class version of Sybase's database). I couldn't figure out if there's a way how to disable Transact-SQL in the driver configuration. how to connect from Oracle (10g or 11g) to Sybase Adaptive Server Anywhere?
I have one query related to database connection from server to client.I have one database in the server and I want to connect from client.I set the tnsnames in client system as follows.
when i am connecting to my database in command prompt,sql * plus editor is it successfully connecting to the database but not connecting with the oracle client OEM.
but after connecting the LAN it is not connecting and also in the case when i am connecting to the internet through the USB datacard it is not connecting with the oracle client OEM.
how can i connect to database when the LAN,USB datacard connection.
We are using Oracle 10g on linux 64 bit, client is on XP, using Oracle sql developer to connect to database through vpn, we have only allowed access to 1521 port of database
Client is frequently disconnecting
Initially client connected, then start disconnecting after 20 minutes.
Client side sqlnet.ora has following entry SQLNET.AUTHENTICATION_SERVICES = (NTS)
VERSION INFORMATION: TNS for Linux: Version 10.2.0.3.0 - Production Oracle Bequeath NT Protocol Adapter for Linux: Version 10.2.0.3.0 - Production TCP/IP NT Protocol Adapter for Linux: Version 10.2.0.3.0 - Production Time: 11-MAR-2010 16:25:16 Tracing not turned on. Tns error struct: ns main err 12535 TNS-12535: TNS:operation timed out ns secondary err 12560 nt main err 505 TNS-00505: Operation timed out nt secondary err 110 nt OS err 0 Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=172.14.0.31)(PORT=3934))
connecting two oracle database in two different server.I installed Oracle 10g XE in both system.Both system act as Server.I need to connect both server using database link concept.
how to use the tnsnames,ora and listener.ora file for connecting both system.
