7 Managing Oracle Net Services

Using Oracle Enterprise Manager to Configure Oracle Net Services

Oracle Enterprise Manager enables you to configure Oracle Net Services for any Oracle home across multiple file systems. It also provides common administration functions for listeners. Oracle Enterprise Manager provides an integrated environment for configuring and managing Oracle Net Services.

You can use Oracle Enterprise Manager to configure and administer the following from multiple Oracle homes:

• Listeners: Configure listeners to receive client connections.

• Naming: Define connect identifiers and map them to connect descriptors to identify the network location of a service. Oracle Net Manager supports configuration of connect descriptors in local tnsnames.ora files or a centralized directory service.

• File Location: Specify the file location of the Oracle Net configuration files.

Using Oracle Net Manager to Configure Oracle Net Services

Oracle Net Manager enables you to configure Oracle Net Services for an Oracle home on a local client or server host.

You can use Oracle Net Manager to configure the following network components:

• Listeners: Create and configure listeners to receive client connections.

• Naming: Define connect identifiers and map them to connect descriptors to identify the network location and identification of a service. Oracle Net Manager supports configuration of connect descriptors in local tnsnames.ora files or a centralized directory service.

• Naming Methods: Configure the ways connect identifiers are resolved to connect descriptors.

• Profiles: Configure preferences for enabling and configuring Oracle Net features on the client or server.

This section introduces the features of Oracle Net Manager. However, the primary documentation for using Oracle Net Manager is online Help. It contains the following topics:

• Starting Oracle Net Manager

• Navigating Oracle Net Manager

• Using Oracle Net Manager Wizards

Deciding When to Use Oracle Enterprise Manager and Oracle Net Manager

In Oracle Database 11g, much of the functionality previously available only in Oracle Net Manager has been integrated with Oracle Enterprise Manager. Oracle Enterprise Manager provides the ability to manage configuration for multiple Oracle homes across multiple file systems. Oracle Net Manager only enables you to manage configuration for one Oracle home on a local host computer. Table 7-2 describes the key differences between the tools.

Using Oracle Net Configuration Assistant to Configure Network Components

Oracle Net Configuration Assistant is provided to configure basic network components during installation, including:

• Listener names and protocol addresses

• Naming methods the client uses to resolve connect identifiers to connect descriptors

• Net service names in a tnsnames.ora file

• Directory server usage

Oracle Net Configuration Assistant runs automatically during software installation, as described in your Oracle installation guide. It can also be run after installation in standalone mode to configure naming methods, the listener, net service names in the tnsnames.ora file, and directory server usage.

To start Oracle Net Configuration Assistant do the following:

• On Linux and UNIX, run netca from the ORACLE_HOME/bin directory.

• On Microsoft Windows, select Programs from the Start menu, and then select Oracle - HOME_NAME. Next, select Configuration and Migration Tools, and then Oracle Net Configuration Assistant.

Table 7-3 describes the configuration options on the Oracle Net Configuration Assistant Welcome page:

Adding Users To the OracleNetAdmins Group

To add a user to the OracleNetAdmins group with ldapmodify, do the following:

1. Create an LDIF (Lightweight Directory Interchange Format) file that specifies that you want to add a user to the OracleNetAdmins group.

   You can use the following sample LDIF file. Use the appropriate DN for cn=OracleNetAdmins and the user that you want to add.

   dn: cn=OracleNetAdmins,cn=OracleContext,...
   changetype: modify
   add: uniquemember
   uniquemember: DN of user being added to group
   

2. Enter the following syntax at the command line to refresh the file:

   $ ldapmodify -h directory_host -p port -D binddn -q -f ldif_file
   

   In the preceding command, directory_host is the directory server host, port is the listening TCP/IP port for the directory server, binddn is the directory administrator or user DN, and ldif_file is the input file name. If the port is not specified, then the default port of 389 is used. The -q option prompts for a single bind password to be entered.

Removing Users From the OracleNetAdmins Group

To remove a user from the OracleNetAdmins group with ldapmodify, do the following:

1. Create an LDIF file that specifies that you want to delete a user to the OracleNetAdmins group.

   You can use the following sample LDIF file. Enter the appropriate DN for cn=OracleNetAdmins and the user that you want to delete.

   dn: cn=OracleNetAdmins,cn=OracleContext,...
   changetype: modify
   delete: uniquemember
   uniquemember: DN of user being deleted from group
   

2. Enter the following ldapmodify syntax at the command line to delete the user:

   $ ldapmodify -h directory_host -p port -D binddn -q -f ldif_file
   

   In the preceding command, directory_host is the directory server host, port is the listening TCP/IP port for the directory server, binddn is the directory administrator or user DN, and ldif_file is the input file name. If the port is not specified, then the default port of 389 is used. The -q option prompts for a single bind password to be entered.

Changing Ownership of the OracleNetAdmins Group

By default, the owner of the OracleNetAdmins group is the OracleNetAdmins group itself. Any member of the OracleNetAdmins group can add or delete other members from the OracleNetAdmins group. If you prefer another group to add or delete OracleNetAdmins members, then you can change the owner attribute of the OracleNetAdmins group to another group.

The owner cannot be an individual user entry but must be a group entry, and the group entry is one comprised of the LDAP schema object classes GroupOfUniqueNames and orclPriviledgeGroup.

To add a group as an owner of an OracleNetAdmins group, do the following:

1. Create an LDIF file, as follows:

   1. Specify the group you want to add as an owner.

      You can use the following sample LDIF file. Enter the appropriate DN for cn=OracleNetAdmins and the DN of the group that you want to add.

      dn: cn=OracleNetAdmins,cn=OracleContext,... 
          changetype: modify 
          add: owner 
          owner: DN of group to add
      

      For example, the following LDIF syntax changes the ownership from the OracleNetAdmins group to another group named cn=ExampleSecurityAdmins. The group can be either inside or outside Oracle Context.

      dn: cn=OracleNetAdmins,cn=OracleContext,... 
           changetype: modify 
           add: owner 
           owner: cn=ExampleSecurityAdmins 
      

   2. Optionally, specify the group to delete as an owner.

      dn: cn=OracleNetAdmins,cn=OracleContext,... 
          changetype: modify 
          delete: owner 
          owner: DN of group to delete
      

2. Enter the following syntax at the command line to refresh the file:

   $ ldapmodify -h directory_host -p port -D binddn -q -f ldif_file
   

   In the preceding command, directory_host is the directory server host, port is the listening TCP/IP port for the directory server, binddn is the directory administrator or user DN, and ldif_file is the input file name. If the port is not specified, then the default port of 389 is used. The -q option prompts for a single bind password to be entered.