Page History

...

• JS7 offers two levels of integration with an Oracle DBMS:
  • JS7 supports use of Oracle as the JS7 - Database.
  • JS7 offers job templates from JS7 - JITL Database Jobs that can be used to access Oracle databases, for this scenario see JS7 - How to connect make JITL Jobs connect to an Oracle database without using passwords.

• For both scenarios users might prefer not to provide a user account and password for authentication with the DBMS.

  • Use of passwords is considered insecure when passwords are stored in clear text in external files or in job parameters.
  • JS7 offers JS7 - Use of Credential Store with JITL Jobs as an alternative way to store and to retrieve passwords.
• The Oracle Wallet® provides a means to connect to an Oracle database without specifying a user account and password.

...

• Check the Oracle JDBC Driver version that ships with the JS7 release, see JS7 - Database, chapter: Individual JDBC Driver Versions. A newer JDBC Driver might be available for download from Oracle.
• Oracle JDBC Drivers that ship for release 18c of the DBMS are reported to work. Previous Oracle JDBC Driver releases, for example 12c, are reported not to work with Oracle Wallet® when used by JS7. If in doubt use the Oracle JDBC Driver version that matches the version of the DBMS.
• To apply a version of the Oracle JDBC Driver that is different from the version that ships with JS7, see JS7 - Database, chapter: Individual JDBC Driver Versions.

...

• The Oracle PKI libraries are required and have to match the version of the Oracle DBMS and Oracle JDBC Driver.
• The .jar files are offered by Oracle for download and are available from an Oracle Client installation and are offered by Oracle for downloadfor example from:
  • ORACLE_HOME/jlib/oraclepki.jar
  • ORACLE_HOME/jlib/osdt_cert.jar
  • ORACLE_HOME/jlib/osdt_core.jar
• For on premises installations store the Oracle PKI libraries to the JETTY_HOME/lib/user_lib directory of the JOC Cockpit installation directory respectively.
• When running JOC Cockpit containers for Docker® consider to store the Oracle PKI libraries in to the JETTY_BASE/resources/joc/lib directory.

...

• The Hibernate configuration file can look like this:
  
  

  Code Block
  title Example of a Hibernate configuration file linenumbers true collapse true
  <?xml version="1.0" encoding="UTF-8" standalone="no"?> <hibernate-configuration> <session-factory> <property name="hibernate.connection.driver_class">oracle.jdbc.OracleDriver</property> <property name="hibernate.connection.password"></property> <property name="hibernate.connection.url">jdbc:oracle:thin:@/js7?tns_admin=/home/js7/wallet</property> <property name="hibernate.connection.username"></property> <property name="hibernate.dialect">org.hibernate.dialect.Oracle12cDialect</property> <property name="hibernate.show_sql">false</property> <property name="hibernate.connection.autocommit">false</property> <property name="hibernate.format_sql">true</property> <property name="hibernate.temp.use_jdbc_metadata_defaults">false</property> <property name="hibernate.connection.provider_class">org.hibernate.hikaricp.internal.HikariCPConnectionProvider</property> <property name="hibernate.hikari.maximumPoolSize">10</property> </session-factory> </hibernate-configuration>

  
  
  

• Consider the empty elements that are used for the account and password. Do not delete the respective elements from the Hibernate configuration file.
• The connection URL specifies js7 as the key to an entry in the wallet.
• The URL parameter tns_admin is used to specify the directory of the tnsnames.ora configuration file. JDBC Connections usually do not need require this configuration file as connection details (Listener, Service Name, Service ID) are specified with the URL. However, due to use of the js7 key to the wallet in the URL it is preferable to manage connection details from a tnsnames.ora configuration file.
• In the above example this file is located in the /home/js7/wallet directory that in fact is the directory where the wallet is located. This location is not required authoritative as the file can reside in any directory that is accessible to JOC Cockpit.
• Consider that an sqlnet.ora configuration file is not used with the above setup of a JDBC connection.

...

Anchor
wallet_location wallet_location

Wallet Location for Java

The wallet location is identified from a Java define.

• Configure the location of the wallet by use of a Java define like this: 
  -Doracle.net.wallet_location=/home/js7/wallet. This setting should point to the directory where the wallet files are located. This setting can be specified with one of the following options:
  • specify the Java define with the jettyOptions setting of the joc_install_xml installer response file like this:
    <entry key="jettyOptions" value="-Doracle.net.wallet_location=/home/js7/wallet"/>
    
  • alternatively, for Unix use one of the following options:
    • specify the JAVA_OPTIONS environment variable before running the JOC Cockpit jetty.sh start script.
    • create/modify and make executable the /home/js7/.jocrc file, assuming that js7 is the JOC Cockpit run-time account. This file should export the JAVA_OPTIONS environment variable like this:
      export JAVA_OPTIONS="-Doracle.net.wallet_location=/home/js7/wallet"
      
    • add the JAVA_OPTIONS environment variable to the systemd service file, see JS7 - systemd Service Files for automated Startup / Shutdown with Unix Systems
  • Find further details from JS7 - How To - Apply Java Options.

...