Re: Connectivity

From: <Reginald.W.Bailey_at_jpmorgan.com>
Date: Tue, 3 Feb 2004 11:58:30 -0600
Message-ID: <OFF6F22647.33466BA1-ON86256E2F.0061E05E@chase.com>

I believe a cheaper solution would be to set up two listeners with different port addresses. One could use the encrypted only connection by turning on the encryption parameter in the sqlnet.ora and listener.ora files. The connection from the application server that comes in via a different port address and a different connection alias or service name. The database could be set up easily to only allow connections from a certain IP address for that service name using a trigger and the context session information available as a function call to Oracle's built in function package SYS_CONTEXT.

RWB

---

Reginald W. Bailey
IBM Global Services
JPMC Account - DCI ETS Database Management Your Friendly Neighborhood DBA
713-216-7703 (Office) 281-798-5474 (Mobile) reginald.w.bailey_at_jpmorgan.com
baileyre_at_us.ibm.com

---

                                                                                                                                    
                    discgolfdba_at_yahoo.c                                                                                             
                    om                        To:     oracle-l_at_freelists.org                                                        
                    Sent by:                  cc:                                                                                   
                    oracle-l-bounce_at_fre       Subject:     Re: Connectivity                                                         
                    elists.org                                                                                                      
                                                                                                                                    
                                                                                                                                    
                    02/03/2004 09:31 AM                                                                                             
                    Please respond to                                                                                               
                    oracle-l                                                                                                        
                                                                                                                                    
                                                                                                                                    

• "M.Godlewski" <mcgodlewski_at_yahoo.com> wrote:
  > I want to have the ability to use one listener for
  > encrypted connections to a database instance and
  > another listener to have un-encrypted connections to
  > the same database instance. The un-encrypted
  > connections I want from only one IP address (the
  > application server).
  >
  > Is this possible with only the listener files, or do
  > I need to use connection manager or some software
  > like it?
  >
  > TIA
  >
  > M.
  
  1. Advanced security option, $10,000 per cpu. (lots of RTFMing).
  2. 2 NICs and a cross-over cable < $100. (additional internal IP addresses are free).

If the business issue that you are attempting to solve is not having clear text on the wire, one could simply isolate the wire on a private network, that is not accessible from anywhere else on the network (routing disabled on each host, aka ip forwarding off).

If you're just talking about a single host for the database server and a single host for the app server, this should suffice.

hth.

Pd

---

Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it! http://webhosting.yahoo.com/ps/sb/

---

Please see the official ORACLE-L FAQ: http://www.orafaq.com

---

To unsubscribe send email to: oracle-l-request_at_freelists.org put 'unsubscribe' in the subject line.

--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------




----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to:  oracle-l-request_at_freelists.org
put 'unsubscribe' in the subject line.
--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------

Received on Tue Feb 03 2004 - 11:58:30 CST