Oracle® Database Net Services Administrator’s Guide 10 g Release (10.1) Part No B10775-01 January 2004 Oracle Database Net Services Administrator’s Guide, 10g Release (10.1) Part No B10775-01 Copyright © 2002, 2004 Oracle All rights reserved Primary Author: Jennifer Polk Contributing Author: Henry Abrecht Contributors: Robert Achacoso, Gaurav Agarwal, Omar Bellal, David Chen, Howard Cohen, Toby Close, Pramodini Gattu, Harvey Eneman, Stella Kister, Shuvayu Kanjila, Cynthia Kibbe, Vincent Lee, Catherine Luu, Scot McKinley, Ed Miner, Peter Povinec, Richard Smith, Deborah Steiner, Juliet Ta, Norman Woo, Jose Wong The Programs (which include both the software and documentation) contain proprietary information; they are provided under a license agreement containing restrictions on use and disclosure and are also protected by copyright, patent, and other intellectual and industrial property laws Reverse engineering, disassembly, or decompilation of the Programs, except to the extent required to obtain interoperability with other independently created software or as specified by law, is prohibited The information contained in this document is subject to change without notice If you find any problems in the documentation, please report them to us in writing This document is not warranted to be error-free Except as may be expressly permitted in your license agreement for these Programs, no part of these Programs may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose If the Programs are delivered to the United States Government or anyone licensing or using the Programs on behalf of the United States Government, the following notice is applicable: U.S GOVERNMENT RIGHTS Programs, software, databases, and related documentation and technical data delivered to U.S Government customers are "commercial computer software" or "commercial technical data" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations As such, use, duplication, disclosure, modification, and adaptation of the Programs, including documentation and technical data, shall be subject to the licensing restrictions set forth in the applicable Oracle license agreement, and, to the extent applicable, the additional rights set forth in FAR 52.227-19, Commercial Computer Software Restricted Rights (June 1987) Oracle Corporation, 500 Oracle Parkway, Redwood City, CA 94065 The Programs are not intended for use in any nuclear, aviation, mass transit, medical, or other inherently dangerous applications It shall be the licensee's responsibility to take all appropriate fail-safe, backup, redundancy and other measures to ensure the safe use of such applications if the Programs are used for such purposes, and we disclaim liability for any damages caused by such use of the Programs Oracle is a registered trademark of Oracle Corporation and/or its affiliates Other names may be trademarks of their respective owners The Programs may provide links to Web sites and access to content, products, and services from third parties Oracle is not responsible for the availability of, or any content provided on, third-party Web sites You bear all risks associated with the use of such content If you choose to purchase any products or services from a third party, the relationship is directly between you and the third party Oracle is not responsible for: (a) the quality of third-party products or services; or (b) fulfilling any of the terms of the agreement with the third party, including delivery of products or services and warranty obligations related to purchased products or services Oracle is not responsible for any loss or damage of any sort that you may incur from dealing with any third party Contents Send Us Your Comments xv Preface xvii Audience Organization Related Documentation Conventions Documentation Accessibility xvii xviii xx xxi xxvi What’s New in Oracle Net Services? xxvii Oracle Database 10g Release (10.1) New Features in Oracle Net Services xxvii Oracle9i Release (9.2) New Features in Oracle Net Services xxx Oracle9i Release (9.0.1) New Features in Oracle Net Services xxxii Oracle8i New Features in Oracle Net Services xxxv Part I Getting Started with Oracle Net Services Networking Challenges in the Internet Age What Is the Big Picture for Networking? Oracle’s Solution to Networking Issues Connectivity Client/Server Application Connections Web Client Application Connections Web Client Connections Without an Application Web Server 1-1 1-2 1-2 1-3 1-5 1-7 iii Manageability Location Transparency Centralized Configuration and Management Quick Installation and Configuration Internet and Intranet Scalability Shared Server Connection Pooling Performance Between the Middle Tier and Oracle Database Network Security Firewall Access Control Protocol Access Control A Suite of Networking Components Oracle Net Oracle Net Foundation Layer Oracle Protocol Support Oracle Net Listener Oracle Connection Manager Networking Tools Oracle Advanced Security Connectivity Concepts Database Service and Database Instance Identification Database Services Database Instances Service Accessibility Enhanced Service Accessibility with Multiple Listeners Connect-Time Failover Transparent Application Failover Client Load Balancing Connection Load Balancing Service Handlers Dispatchers Dedicated Server Processes Naming iv 1-8 1-9 1-10 1-12 1-12 1-12 1-14 1-17 1-18 1-18 1-20 1-20 1-21 1-21 1-22 1-22 1-23 1-24 1-24 2-1 2-1 2-3 2-5 2-7 2-8 2-8 2-8 2-9 2-9 2-9 2-12 2-14 Configuration Management Concepts Configuration Models Localized Configuration File Support Directory Server Support Directory Naming Overview Naming Configuration Storage in a Directory Server Net Service Alias Entries Directory Entries Adding or Modifying Entries in the Directory Server Client Connections Using Directory Naming Using the Entry’s Relative Name Using the Entry’s Absolute Name Oracle Net Configuration and Directory Server Design Performance Security Schema Limitations of Directory Naming Support with Microsoft Active Directory Architecture of Oracle Net Services Oracle Net Stack Communication Architecture Stack Communication for Client/Server Application Connections Stack Communication for Java Application Connections Stack Communication for Web Client Connections Listener Architecture Database Server Process Architecture Shared Server Processes Dedicated Server Processes Oracle Connection Manager Architecture A Complete Architecture 3-1 3-1 3-3 3-4 3-5 3-7 3-9 3-10 3-11 3-12 3-13 3-14 3-14 3-14 3-16 3-17 4-1 4-2 4-6 4-8 4-8 4-12 4-12 4-13 4-14 4-16 Configuration and Administration Tools Overview User Interface Tools Oracle Enterprise Manager Oracle Net Manager 5-1 5-1 5-3 v Selecting When to Use Oracle Enterprise Manager and Oracle Net Manager Oracle Net Configuration Assistant Oracle Net Control Utilities Listener Control Utility Oracle Connection Manager Control Utility Duties of a Network Administrator Quick Start to Oracle Net Connections Prerequisites to Establishing Connectivity Task 1: Confirm Network Availability Task 2: Start the Listener and the Database Server Task 3: Configure the Client for Connection to a Database Task 4: Connect to the Database Part II 6-1 6-2 6-3 6-4 6-7 Configuration and Administration of Oracle Net Services Planning the Network Deploying a Network Inside an Organization Scalability Shared Server Connection Pooling Session Multiplexing Availability Connect-Time Failover Client Load Balancing Naming Methods JDBC Drivers Security Tuning and Performance Listener Queue Size Session Data Unit (SDU) Size Protocol Conversion Deploying a Network for the Internet Scalability vi 5-9 5-10 5-12 5-12 5-13 5-14 7-1 7-3 7-3 7-3 7-3 7-5 7-5 7-5 7-6 7-6 7-6 7-6 7-7 7-7 7-7 7-7 7-8 Availability Naming Methods JDBC Drivers Security Access Control Listener and Database Server Connection Limits Tuning and Performance Naming Considerations Performance Considerations Listener Queue Size Session Data Unit Size for Data Transfer Optimization Persistent Buffer Flushing for TCP/IP Planning Summary 7-9 7-9 7-9 7-9 7-9 7-9 7-10 7-10 7-11 7-11 7-11 7-12 7-12 Configuring Naming Methods Naming Method Configuration Overview About Connect Descriptors Naming Methods Configuring the Local Naming Method Configuring the tnsnames.ora File During Installation Administrator or Runtime Installation Custom Installation Configuring the tnsnames.ora File After Installation Task 1: Configure Net Service Names Task 2: Configure TNSNAMES as the First Naming Method Task 3: Distribute Configuration Task 4: Configure the Listener Task 5: Connect to the Database Configuring the Directory Naming Method Directory Naming Method Configuration Steps Task 1: Verify Directory Version Compatibility Task 2: Create or Modify Net Entries Task 3: Configure LDAP as the First Naming Method for Client Lookups Task 4: Configure the Listener Task 5: Connect to the Database 8-1 8-2 8-3 8-4 8-4 8-4 8-4 8-4 8-5 8-10 8-10 8-11 8-11 8-11 8-11 8-12 8-12 8-21 8-22 8-22 vii Administering the OracleNetAdmins Group Exporting Local Naming Entries to a Directory Naming Server Exporting Net Service Names from a tnsnames.ora File Creating Multiple Default Contexts in a Directory Naming Server Exporting Directory Naming Entries to a tnsnames.ora File Using the Easy Connect Naming Method Configuring External Naming Methods Network Information Service (NIS) Task 1: Configure NIS Servers to Support the NIS External Naming Task 2: Configure Clients Distributed Computing Environment (DCE) Cell Directory Service (CDS) 8-23 8-25 8-26 8-29 8-30 8-31 8-35 8-35 8-36 8-37 8-38 Configuring Profiles Profile Configuration Overview Profile Configuration During Installation Configuring Client Attributes for Names Resolution Configuring a Default Domain for Clients Prioritizing Naming Methods Routing Connection Requests Configuring Database Access Control Configuring Advanced Profile Information Configuring External Naming Methods Configuring Oracle Advanced Security 10 Configuring and Administering the Listener Listener Configuration Overview Listener Configuration During Installation Customizing Listener Configuration Configuring Listening Protocol Addresses Configuring Access to Oracle JServer Handling Large Volumes of Concurrent Connection Requests Configuring Static Service Information Configuring Password Authentication for the Listener Configuring Service Registration Configuring Service Registration viii 9-1 9-2 9-2 9-2 9-3 9-5 9-5 9-6 9-10 9-11 10-2 10-3 10-4 10-5 10-6 10-7 10-8 10-10 10-12 10-13 ... Features in Oracle Net Services xxxii Oracle8i New Features in Oracle Net Services xxxv Part I Getting Started with Oracle Net Services Networking Challenges in the Internet Age What... your local Oracle Support Services xv xvi Preface The Oracle Database Net Services Administrator’s Guide provides the information you need to understand and use Oracle Net Services and its related... Oracle Net Services Troubleshooting Directory Naming Errors Troubleshooting Tips from the Field for Oracle Net Services Questions to Ask When Troubleshooting Oracle Net Services