...

• JS7 offers two levels of integration with an Oracle DBMS:
  • JS7 supports use of Oracle as the JS7 - Database, for this scenario see JS7 - How to connect JOC Cockpit to an Oracle database without using passwords.
  • JS7 offers job templates from JS7 - JITL Database Jobs that can be used to access Oracle databases.
    • Such jobs are executed with Agents, therefore the below explanations apply to servers for which Agents are operated.

• For both scenarios users might prefer not to provide a user account and password for authentication with the DBMS.

  • Use of passwords is considered insecure when passwords are stored in clear text in external files or in job parameters.
  • JS7 offers JS7 - Use of Credential Store with JITL Jobs as an alternative way to store and to retrieve passwords.
• The Oracle Wallet® provides a means to connect to an Oracle database without specifying a user account and password.

Oracle Wallet®

...

• The following JITL Jobs can be used with Oracle Wallet®

...

• :
  • JS7 - JITL SQLExecutorJob: Standard JDBC Job for any DBMS
  • JS7 - JITL PLSQLJob: PL/SQL JDBC job for Oracle DBMS
  • JS7 - JITL SQLPLUSJob: SQL*Plus Command Line Client

Oracle Wallet®

The Oracle Wallet® configuration is explained with the Oracle documentation:

• Configuring clients to use the External Password Store e.g. in http://docs.oracle.com/cd/B19306_01/network.102/b14266/cnctslsh.htm#CBHEHGCE
• Or as a more condensed version from the Oracle-Base web site e.g. in https://oracle-base.com/articles/10g/secure-external-password-store-10gr2
• The location of the docs depends on the specific Oracle version in use.

...

Anchor
wallet wallet

Oracle Wallet®

No Except for use of the JS7 - JITL SQLPLUSJob no Oracle Client installation is required at run-time for use of a wallet with JS7 componentsAgents. However, users need an Oracle Client to set up and to configure the wallet.

• The wallet does not necessarily have to be created on the machine machines where JS7 components such as JOC Cockpit or Agents are located. Technically the The wallet preferably consists of a number of keystores keystore and truststores truststore files that can be copied from a remote machine to the server servers that hosts the JS7 componentAgents.

• Typical commands to create a wallet include for example:
  
  

  Code Block
  title Example how to set up a wallet linenumbers true
  # create the wallet in an arbitrary location

  
  

  mkstore -wrl /home/js7/wallet -create

  
  

  # add credentials to the wallet; specify key, user account and password for database access

  
  

  mkstore -wrl /home/js7/wallet/ -createCredential js7 some_account some_password

Anchor
jdbc jdbc

Oracle JDBC Driver

The JS7 - JITL SQLExecutorJob and JS7 - JITL PLSQLJob make use of the Oracle JDBC Driver.

• Check the Oracle JDBC Driver version that ships with the JS7 release, see JS7 - Database, chapter: Individual JDBC Driver Versions. A newer Oracle JDBC Driver might be available for download as included with the JS7 releasefrom Oracle.
• Oracle JDBC Drivers that ship for release 18c of the DBMS are reported to work. Previous JDBC Driver releases, for example 12c, are reported not to work with Oracle Wallet® when used by JS7. If in doubt use the Oracle JDBC Driver version that matches the version of the DBMS.

...

• The following Oracle Java libraries are required that have to match the Users who want to use a specific version of the Oracle DBMS and Oracle JDBC Driver .
• The .jar files are available from an Oracle Client installation and are offered by Oracle for download:
  • ORACLE_HOME/jlib/oraclepki.jar
  • ORACLE_HOME/jlib/osdt_cert.jar
  • ORACLE_HOME/jlib/osdt_core.jar

Using Oracle Wallet® for JOC Cockpit

Prerequisites

• can apply the following steps:
  • For on premises installations store the libraries in the JS7_AGENT_HOME/lib/user_lib directory of the Agent installation directory.
  • When running Agent containers for Docker® consider to store the Oracle JDBC Driver and libraries in the JS7_AGENT_CONFIG_DIR/lib directory.

Anchor
pki pki

Oracle PKI Libraries

• A number of Oracle Java libraries are required that have to match the version of the Oracle DBMS and Oracle JDBC Driver.
• The .jar files are available from an Oracle Client installation and are offered by Oracle for download:
  • ORACLE_HOME/jlib/oraclepki.jar
  • ORACLE_HOME/jlib/osdt_cert.jar
  • ORACLE_HOME/jlib/osdt_core.jar
• For on premises installations store the libraries in the JS7_AGENT
• The Oracle Wallet® is required, see Prerequisites: Oracle Wallet
• The JDBC Driver is required, see Prerequisites: Oracle JDBC Driver
  • To apply version of the JDBC Driver that is different from the version that ships with JS7, see JS7 - Database, chapter: Individual JDBC Driver Versions.
• The Oracle PKI Libraries are requires, see Prerequisites: Oracle PKI LibrariesStore the libraries to the JETTY_HOME/lib/user_lib directory of the JOC Cockpit Agent installation directory respectively.
• When running JOC Cockpit Agent containers for Docker® consider to store the Oracle JDBC Driver and libraries in the JETTY_BASE/resources/joc/JS7_AGENT_CONFIG_DIR/lib directory.

Anchor
configuration configuration

Configuration

JOC Cockpit is Som JITL  configured to connect to an Oracle database by use of Hibernate. In addition the Oracle database without specifying a user account and password, instead, at run-time JOC Cockpit makes use of a walletlocations of Oracle configuration files and of the wallet have to be specified.

Anchor
hibernate_cfg_xml hibernate_cfg_xml

Hibernate hibernate.cfg.xml Configuration File

...

Both template jobs are running with Agents, therefore the wallet configuration is applied to the respective Agent.

Prerequisites

• The Oracle Wallet® is required, see Prerequisites: Oracle Wallet
• The JDBC Driver is required, see Prerequisites: Oracle JDBC Driver
  • To apply a version of the JDBC Driver that is different from the version that ships with JS7 Agents, see JS7 - Database, chapter: Individual JDBC Driver Versions.
• The Oracle PKI Libraries are requires, see Prerequisites: Oracle PKI Libraries
  • Store the libraries in the JS7_AGENT_HOME/lib/user_lib directory of the Agent installation directory. When running Agents for Docker® consider to store the JDBC Driver and libraries in the JS7_AGENT_CONFIG_DIR/lib directory.

...

The template job is running with Agents and makes use of the sqlplus Command Line Client, therefore the wallet configuration is applied to the respective Agent.

Prerequisites

Prerequisites to execute SQL*Plus with Oracle Wallet® include that

...