SqlNet Configuration for 2 Different domains

Discussion:

MNaser

2002-12-15 01:47:22 UTC

Hello,

I have 2 different oracle databases one is Oracle.8.1.6 and the other is
Oracle 9 R1
and I have the following Sqlnet.ora file:
1-Trace_level_Client = off
2-Ora_Encrypt_login = true
3-names.directory_path = (tnsnames)
4-names.default_domain = world
5-names.default_Zone = world

6-SQLNET.AUTHENTICATION_SERVICES= (none)

7-NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME)

My original sqlnet.ora file had line 6,and 7 to connect to oracle 9 from a
client system, but when I added line 1-5 to connect to oracle 8i my
connection to oracle 9 is failing with ORA-12154 TNS:could not resolve
service name . The two databases are on two different domains.
I can connect to oracle 8i with the above file but what do I need to do to
also connect to oracle 9.

Thanks,
mn

---------------------------------------------------------------------
To unsubscribe, e-mail: suse-oracle-***@suse.com
For additional commands, e-mail: suse-oracle-***@suse.com
Please see http://www.suse.com/oracle/ before posting

Barry Johnson

2002-12-15 18:01:38 UTC

Permalink

Post by MNaser
...
2-Ora_Encrypt_login = true
...

I hope you realize it controls the software at *client* end of the connection.
In the server's sqlnet.ora, it controls how credentials are sent from "this"
instance to another across a DB link. There is an equivalent option that
needs to be set for your "desktop" clients to ensure that they will never try
to send a password "in the clear" to your server. And, of course, many of
those desktops will be running an operating system that will allow anyone to
easily UNset the option before putting a sniffer on the wire. (GPLed
Ethereal, for example, has some support for the [SQL*]Net[8] TNS protocol.)

There is no way for an Administrator to set an option at the server end that
will have it tell a client that the server will refuse to accept unencoded
passwords and, therefore, the client should not even try sending it that way.
Which, of course, would be the *correct* option for Oracle to have provided
if this was intended as a security feature.

That leaves you having to pay extra for the Advanced Security option if you
want to try to do things properly.

Unless something has changed since I last looked at this.

Barry J.

---------------------------------------------------------------------
To unsubscribe, e-mail: suse-oracle-***@suse.com
For additional commands, e-mail: suse-oracle-***@suse.com
Please see http://www.suse.com/oracle/ before posting

MNaser

2002-12-15 23:14:46 UTC

Permalink

yes it does.

-----Original Message-----
From: Hollis, Les [mailto:***@ps.net]
Sent: Saturday, December 14, 2002 9:51 PM
To: 'MNaser'
Subject: RE: [suse-oracle] SqlNet Configuration for 2 Different domains

does your tnsnames.ora file also contain world?/

alias.world

?????

-----Original Message-----
From: MNaser [mailto:***@attbi.com]
Sent: Saturday, December 14, 2002 7:47 PM
To: Suse-***@Suse.Com
Subject: [suse-oracle] SqlNet Configuration for 2 Different domains

Hello,

I have 2 different oracle databases one is Oracle.8.1.6 and the other is
Oracle 9 R1
and I have the following Sqlnet.ora file:
1-Trace_level_Client = off
2-Ora_Encrypt_login = true
3-names.directory_path = (tnsnames)
4-names.default_domain = world
5-names.default_Zone = world

6-SQLNET.AUTHENTICATION_SERVICES= (none)

7-NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME)

My original sqlnet.ora file had line 6,and 7 to connect to oracle 9 from a
client system, but when I added line 1-5 to connect to oracle 8i my
connection to oracle 9 is failing with ORA-12154 TNS:could not resolve
service name . The two databases are on two different domains.
I can connect to oracle 8i with the above file but what do I need to do to
also connect to oracle 9.

Thanks,
mn

---------------------------------------------------------------------
To unsubscribe, e-mail: suse-oracle-***@suse.com
For additional commands, e-mail: suse-oracle-***@suse.com
Please see http://www.suse.com/oracle/ before posting

---------------------------------------------------------------------
To unsubscribe, e-mail: suse-oracle-***@suse.com
For additional commands, e-mail: suse-oracle-***@suse.com
Please see http://www.suse.com/oracle/ before posting

Alexandre Gorbatchev

2002-12-16 07:58:09 UTC

Permalink

I had a similar problem with 9i client when names.default_domain is
specified.
This way if you have say ORCL in your tnsnames.ora than you get ORA-012154
for connection string "orcl" because client adds this domain (world in your
case ) to the connection descriptor you enter in case you didn't specify
domain explicitly.

Solution may be to remove default_domain or make connection string in
tnsnames.ora like ORCL.world.

HTH,
Alex

Post by MNaser
-----Original Message-----
Sent: Sunday, December 15, 2002 2:47 AM
Subject: [suse-oracle] SqlNet Configuration for 2 Different domains
Hello,
I have 2 different oracle databases one is Oracle.8.1.6 and the other is
Oracle 9 R1
1-Trace_level_Client = off
2-Ora_Encrypt_login = true
3-names.directory_path = (tnsnames)
4-names.default_domain = world
5-names.default_Zone = world
6-SQLNET.AUTHENTICATION_SERVICES= (none)
7-NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME)
My original sqlnet.ora file had line 6,and 7 to connect to oracle 9 from a
client system, but when I added line 1-5 to connect to oracle 8i my
connection to oracle 9 is failing with ORA-12154 TNS:could not resolve
service name . The two databases are on two different domains.
I can connect to oracle 8i with the above file but what do I need to do to
also connect to oracle 9.
Thanks,
mn
---------------------------------------------------------------------
Please see http://www.suse.com/oracle/ before posting

---------------------------------------------------------------------
To unsubscribe, e-mail: suse-oracle-***@suse.com
For additional commands, e-mail: suse-oracle-***@suse.com
Please see http://www.suse.com/oracle/ before posting

MNaser

2002-12-18 04:40:56 UTC

Permalink

I got it fixed and here is how:
remove the .world from the tnsnames, and delete names.default_domain=world
from sqlnet.ora.
or
Don't delete names.default_domain=world from sqlnet.ora file, but add the
.world to all of tnsnames instances?

I thought names.default_domain=world will add .world automatically to you
tnsnames for each instance?

-----Original Message-----
From: Alexandre Gorbatchev [mailto:***@avermann.de]
Sent: Sunday, December 15, 2002 11:58 PM
To: MNaser; Suse-***@Suse.Com
Subject: RE: [suse-oracle] SqlNet Configuration for 2 Different domains

I had a similar problem with 9i client when names.default_domain is
specified.
This way if you have say ORCL in your tnsnames.ora than you get ORA-012154
for connection string "orcl" because client adds this domain (world in your
case ) to the connection descriptor you enter in case you didn't specify
domain explicitly.

Solution may be to remove default_domain or make connection string in
tnsnames.ora like ORCL.world.

HTH,
Alex