Wednesday, March 16, 2011

externally stored users into wallet

Wallet is used to store the user credentials so that a application or batch program need not to provide them explicitly at appliction or OS level.

wallet is password protected and secure

steps to create wallet include

specifying location of wallet first

this is done at sqlnet.ora file
as
WALLET_LOCATION=(SOURCE=(METHOD=file)(METHOD_DATA=(DIRECTORY=/export/home/oracle/mywalletfolder)))
add one more as
SQLNET.WALLET_OVERRIDE=TRUE

wallet location can be any location wher wallet is stored take care of permissions to the folder
wallet_override is used to set whether it will over ssl authentication or not

ssl authentication is set using
SSL_CLIENT_AUTHENTICATION=false

save sqlnet.ora file after adding above entries and create a tns entry

remember to create tns entry for a given application or application user for example
my user is test10 then tnsentry is test10.world

then create wallet

mkstore -wrl /export/home/oracle/mywalletfolder -create

then add credentials of above user

mkstor -wrl /export/home/oracle/mywalletfolder -createCredential test10.world test10 test10

then check credentials

sqlplus /@test10.world


No comments:

Post a Comment