A few additions.  The extproc_listener should be initiated by a non-privileged 
account; for instance, the nobody account in UNIX.

If you are using Intermedia, then be sure that you have LD_LIBRARY_PATH set to include 
the proper library directory, or you won't be able to the inso_filter.  I have heard 
that later
versions of Intermedia do not require external procedures, but I cannot vouch for that 
nor do I know when the change may have taken place.

Do not give create library  privileges to anyone.

Ian macGregor
Stanford Linear Accelerator Center
[EMAIL PROTECTED]

-----Original Message-----
Sent: Tuesday, August 20, 2002 8:53 AM
To: Multiple recipients of list ORACLE-L


John & Dennis,

    First off I do use this feature & have the DB's isolated from the Internet. 
Also, NEVER set up an extproc listener with "protocol=tcp".  It may be
unsupported, but I did manage to get one working that way.  OH, talk about
dangerous!!

    Next the extproc process does use TNSNAMES.  You have to have
"extproc_connection_data" in your tnsnames.ora file on the server.  Having it on
the client is totally useless.  The only allowed permutation to that name is
having your domain attached, as in "extproc_connection_data.vicr.com" if
"NAMES.DEFAULT_DOMAIN = vicr.com" in sqlnet.ora.  At this point the key in
tnsnames.ora must match the key in the sid_list section of listener.ora and the
sid in sid_list_listener must match the connection_data.sid in tnsnames. 
Otherwise it does not work.  Also on a Unix host you'll need appriopriate
priviledges on the shared library file.  Using a symbolic link is neat, until
the duhveloper who created the shared library decides to change the permissions.

Dick Goulet

____________________Reply Separator____________________
Author: DENNIS WILLIAMS <[EMAIL PROTECTED]>
Date:       8/20/2002 7:18 AM

John - If you decide to use this feature, be sure to read the security
vulnerabilities carefully.
http://www.ciac.org/ciac/bulletins/m-047.shtml

Dennis Williams
DBA
Lifetouch, Inc.
[EMAIL PROTECTED]


-----Original Message-----
Sent: Tuesday, August 20, 2002 9:43 AM
To: Multiple recipients of list ORACLE-L


Hi all,

Does anybody know how Oracle determines what extproc to use when 
making an external call through a listener?  I've got one working,
which is great, but nowhere in the listener or tnsnames is there
any kind of binding to a particular sid, other than to a HOME,
and the library def and c code don't seem to be making use of 
tnsnames in the traditional since, in that I can change the
identifier to anything and it just keeps running.  If I have
multiple HOMES and differing releases, how can I be sure that
a call is picking the right listener.

I'm really hoping I'm missing something obvious, but I haven't 
worked these things before and am not seeing it in the M or the
code I have access too.

TIA, 

John P Weatherman
Database Administrator
Replacements Ltd.
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: John Weatherman
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: DENNIS WILLIAMS
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: MacGregor, Ian A.
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to