Transcript Document
Controlling Access to the Oracle Listener Copyright © 2004, Oracle. All rights reserved. Objectives After completing this lesson, you should be able to do the following: • Secure the listener • Enable TCP valid node checking • Remove default EXTPROC entry • 3-2 Add a separate listener to handle external procedure calls Copyright © 2004, Oracle. All rights reserved. Oracle Net Services Review Application Oracle Net Listener TCP/IP network Client sqlnet.ora 3-3 RDBMS Oracle Net Database server tnsnames.ora listener.ora Copyright © 2004, Oracle. All rights reserved. Listener Password Authentication • • • In Oracle Database 10g, the listener is secure by default. Operating system authentication is used. Listener passwords are still supported if needed. – Use listener control utility lsnrctl – Use EM Database Control – Use Oracle Net Manager 3-4 Copyright © 2004, Oracle. All rights reserved. Setting Listener Password Using Enterprise Manager 3-5 Copyright © 2004, Oracle. All rights reserved. Setting Listener Password with Net Manager 3-6 Copyright © 2004, Oracle. All rights reserved. Set Password with lsnrctl Utility Using the lsnrctl CHANGE_PASSWORD command: $ lsnrctl LSNRCTL> CHANGE_PASSWORD Old password: ******* New Password: 1tsaSafe1 Reenter new password: 1tsaSafe1 LSNRCTL> SAVE_CONFIG 3-7 Copyright © 2004, Oracle. All rights reserved. Controlling Database Access 3-8 Copyright © 2004, Oracle. All rights reserved. Oracle Net Services External Procedures • • • • 3-9 External procedures that are called from a program, but are written in a different language The listener must be configured to listen for external procedure calls Listener starts an external procedure agent Default agent name is EXTPROC Copyright © 2004, Oracle. All rights reserved. Overview of the EXTPROC Agent • • • • 3-10 It services execution of external procedures for the duration of the session until the user logs off. Each session uses a different EXTPROC agent to execute external procedures. The listener must be configured to allow the server to be associated with the EXTPROC agent. The listener must be on the same machine as the server. Copyright © 2004, Oracle. All rights reserved. PL/SQL Calling a C External Procedure 3 2 Listener process 4 6 EXTPROC agent 7 5 PL/SQL Alias subprogram library BEGIN myproc 1 3-11 User process External procedure Copyright © 2004, Oracle. All rights reserved. Shared library Default Configuration for External Procedure Calls • • Listener is configured to accept requests for external procedures by Oracle Net Configuration Assistant during installation. A net service name is configured in the tnsnames.ora file. EXTPROC_CONNECTION_DATA= (DESCRIPTION= (ADDRESS=(PROTOCOL=ipc)(KEY=extproc)) (CONNECT_DATA= (SID=plsextproc))) 3-12 Copyright © 2004, Oracle. All rights reserved. Modifying the Configuration for External Procedure Calls 1. Remove the external procedure entries for the default listener. 2. Configure a separate listener dedicated to servicing external procedures. 3. Configure listener to run with privileges lower than those of the listener for the database. 4. Restrict the DLLs that the EXTPROC agent can load. 3-14 Copyright © 2004, Oracle. All rights reserved. Remove Default EXTPROC Entry Using Enterprise Manager: 3-15 Copyright © 2004, Oracle. All rights reserved. Remove Default EXTPROC Entry Using Net Manager 3-16 Copyright © 2004, Oracle. All rights reserved. Configure a Dedicated Listener for External Procedure Calls Using Enterprise Manager 3-17 Copyright © 2004, Oracle. All rights reserved. Configure a Dedicated Listener for External Procedure Calls Using Enterprise Manager 3-18 Copyright © 2004, Oracle. All rights reserved. Configure a Dedicated Listener for External Procedure Calls Using Net Manager 3-19 Copyright © 2004, Oracle. All rights reserved. Summary In this lesson, you should have learned how to: • Secure the listener • Enable TCP valid node checking • Remove default EXTPROC entry • 3-21 Add a separate listener to handle external procedure calls Copyright © 2004, Oracle. All rights reserved. Practice 3 Overview: Controlling Access to the Listener This practice covers the following topics: • Password protecting listener management tasks • Removing the default EXTPROC listener service • • 3-22 Creating a dedicated listener for external procedures Controlling database access Copyright © 2004, Oracle. All rights reserved.