Page History
...
- Configuring clients to use the External Password Store e.g. in http://docs.oracle.com/cd/B19306_01/network.102/b14266/cnctslsh.htm#CBHEHGCE
- Or as a more condensed version from the Oracle-Base web site e.g. in https://oracle-base.com/articles/10g/secure-external-password-store-10gr2
- The location of the docs depends on the specific Oracle version in use.
Using Oracle Wallet® for JOC Cockpit
Anchor | ||||
---|---|---|---|---|
|
Anchor | ||||
---|---|---|---|---|
|
No Oracle Client installation is required
...
at run-time for use of a wallet with JS7 components. However, users need an Oracle Client to set up and to configure the wallet.
- The wallet does not necessarily have to be created on the machine where JS7 components such as JOC Cockpit is or Agents are located. Technically the wallet preferably consists of a number of keystores and truststores that can be copied from a remote machine to the server that hosts JOC Cockpitthe JS7 component.
- Typical commands to create a wallet include for example:
# create the wallet in an arbitrary location
mkstore -wrl /home/js7/wallet -create
# add credentials to the wallet; specify key, user account and password for database access
mkstore -wrl /home/js7/wallet/ -createCredential js7 some_account some_password
Anchor | ||||
---|---|---|---|---|
|
...
- Check the Oracle JDBC Driver version that ships with the JS7 release, see JS7 - Database, chapter: Individual JDBC Driver Versions. A newer Oracle JDBC Driver might be available for download as included with the JS7 release.
- Oracle JDBC Drivers that ship for release 18c of the DBMS are reported to work. Previous JDBC Driver releases, for example 12c, are reported not to work with Oracle Wallet® when used by JS7. If in doubt use the JDBC Driver version that matches the version of the DBMS.
Anchor | ||||
---|---|---|---|---|
|
- The following Oracle Java libraries are required that have to match the version of the Oracle DBMS and Oracle JDBC Driver.
- The .jar files are available from an Oracle Client installation and are offered by Oracle for download:
- $ORACLE
ORACLE_HOME/jlib/oraclepki.jar
- $ORACLE
ORACLE_HOME/jlib/osdt_cert.jar
- $ORACLE
ORACLE_HOME/jlib/osdt_core.jar
- $ORACLE
Using Oracle Wallet® for JOC Cockpit
Prerequisites
- The Oracle Wallet® is required, see Prerequisites: Oracle Wallet
- The JDBC Driver is required, see Prerequisites: Oracle JDBC Driver
- To apply version of the JDBC Driver that is different from the version that ships with JS7, see JS7 - Database, chapter: Individual JDBC Driver Versions.
- The Oracle PKI Libraries are requires, see Prerequisites: Oracle PKI Libraries
- Store the libraries to the
JETTY_HOME/lib/user_lib
directory of the JOC Cockpit installation directory respectively. When running JOC Cockpit for Store the libraries in theJETTY_HOME/lib/user_lib
directory of the JOC Cockpit installation directory respectively. When running JOC Cockpit for Docker® consider to store the JDBC Driver and libraries in theJETTY_BASE/resources/joc/lib
directory.
- Store the libraries to the
...
The hibernate configuration should look like this:
Code Block title Hibernate configuration file for Oracle® database <?xml version="1.0" encoding="UTF-8" standalone="no"?> <hibernate-configuration> <session-factory> <property name="hibernate.connection.driver_class">oracle.jdbc.OracleDriver</property> <property name="hibernate.connection.password"></property> <property name="hibernate.connection.url">jdbc:oracle:thin:@/js7?tns_admin=/home/js7/wallet</property> <property name="hibernate.connection.username"></property> <property name="hibernate.dialect">org.hibernate.dialect.Oracle12cDialect</property> <property name="hibernate.show_sql">false</property> <property name="hibernate.connection.autocommit">false</property> <property name="hibernate.format_sql">true</property> <property name="hibernate.temp.use_jdbc_metadata_defaults">false</property> <property name="hibernate.connection.provider_class">org.hibernate.hikaricp.internal.HikariCPConnectionProvider</property> <property name="hibernate.hikari.maximumPoolSize">10</property> </session-factory> </hibernate-configuration>
- Consider the empty elements that are used for the account and password. Do not delete the respective elements from the hibernate configuration file.
- The connection URL specifies
js7
as the key to an entry in the wallet.- The URL parameter
tns_admin
is used to specify the directory of thetnsnames.ora
configuration file. JDBC Connections usually would not need this configuration file as connection details (Listener, Service Name, Service ID) are specified with the URL. However, due to use of thejs7
key to the wallet in the URL it is preferable to manage connection details from atnsnames.ora
configuration file. - In the above example this file is located in the
/home/js7/wallet
directory that in fact is the directory where the wallet is located. This location not required as the file can reside in any directory that is accessible to JOC Cockpit. - Consider that an
sqlnet.ora
configuration file is not used with the above setup for of a JDBC connection.
- The URL parameter
Anchor | ||||
---|---|---|---|---|
|
...
The JS7 offers the following job templates for use with a Oracle Wallet®:
- JS7 - JITL SQLExecutorJob : Standard JDBC Job for any DBMS
- JS7 - JITL PLSQLJob : PL/SQL JDBC job for Oracle DBMS
Both template jobs are running with Agents, therefore the wallet configuration is applied to the respective Agent.
Prerequisites
- The Oracle Wallet® is required, see Prerequisites: Oracle Wallet
- The JDBC Driver is required, see Prerequisites: Oracle JDBC Driver
- To apply a version of the JDBC Driver that is different from the version that ships with JS7 Agents, see JS7 - Database, chapter: Individual JDBC Driver Versions.
- The Oracle PKI Libraries are requires, see Prerequisites: Oracle PKI Libraries prerequisites for setting up the wallet and use of the Oracle JDBC Driver are the same as explained above with chapter Prerequisites.The following Oracle Java libraries are required that have to match the version of the Oracle DBMS and Oracle JDBC Driver.
- The .jar files are available from an Oracle Client installation and are offered by Oracle for download:
$ORACLE_HOME/jlib/oraclepki.jar
$ORACLE_HOME/jlib/osdt_cert.jar
- Store the libraries in the
JS7_AGENT_HOME/lib/user_lib
directory of the Agent installation directory. When running Agents for Docker® consider to store the JDBC Driver and libraries in theJS7_AGENT_CONFIG_DIR/lib
directory.
$ORACLE_HOME/jlib/osdt_core.jar
...
JS7 offers the following job templates for use with a Oracle Wallet®:
- JS7 - JITL SQLPLUSJob : SQL*Plus Command Line Client
The template job is running with Agents and makes use of the sqlplus
Command Line Client, therefore the wallet configuration is applied to the respective Agent.
Prerequisites
Prerequisites to execute SQL*Plus with Oracle Wallet® include that
...