RE: sqlnet.ora Issues

From: Scott Canaan <srcdco_at_rit.edu>
Date: Thu, 22 Sep 2022 11:39:13 +0000
Message-ID: <MN2PR16MB2973F3FA3BC21491341DBD2FC54E9_at_MN2PR16MB2973.namprd16.prod.outlook.com>

That’s my thought. With most people working from home, I can’t go and physically look at their PCs to see what is installed.

I told him to install an Oracle 19c client.

Scott Canaan ‘88
Sr Database Administrator
Information & Technology Services
Finance & Administration
Rochester Institute of Technology
o: (585) 475-7886 | f: (585) 475-7520
srcdco_at_rit.edu<mailto:srcdco_at_rit.edu> | c: (585) 339-8659

CONFIDENTIALITY NOTE: The information transmitted, including attachments, is intended only for the person(s) or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this information.

From: Ali Alizadeh <rali.alizadeh_at_gmail.com> Sent: Wednesday, September 21, 2022 6:27 PM To: Scott Canaan <srcdco_at_rit.edu>
Cc: oracle-l_at_freelists.org
Subject: Re: sqlnet.ora Issues

Sometimes users have more than one client installed on their workstation. Make sure you modify sqlnet.ora that is being used. It might be a case if one user can connect without any issue.

Thanks,
Ali

On Wed, Sep 21, 2022 at 12:24 PM Scott Canaan <srcdco_at_rit.edu<mailto:srcdco_at_rit.edu>> wrote: We are in the process of updating the sqlnet.ora files on all our databases and clients from:

SQLNET.CRYPTO_CHECKSUM_CLIENT = REQUESTED
SQLNET.ENCRYPTION_CLIENT = REQUESTED
SQLNET.ENCRYPTION_TYPES_CLIENT= (AES256)
SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT= (SHA1,MD5)

To

SQLNET.CRYPTO_CHECKSUM_CLIENT = REQUIRED
SQLNET.ENCRYPTION_CLIENT = REQUIRED
SQLNET.ENCRYPTION_TYPES_CLIENT= (AES256)
SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT= (SHA512,SHA1,MD5)

With the ultimate goal of only having SHA512. We just changed the dev servers and I have one customer that can’t connect to the dev server with the second set of entries above. His co-workers can. I can’t figure out what is different with his Oracle client install that won’t allow this to work. He has an Oracle 12.2 32-bit client. The database is Oracle 19c on Linux. A tnsping works, but sqlplus does not. He gets an ORA-12650: No common encryption or data integrity algorithm.

The database server has the following sqlnet.ora:

SQLNET.CRYPTO_CHECKSUM_CLIENT = REQUIRED
SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT= (SHA512)
SQLNET.CRYPTO_CHECKSUM_SERVER = REQUIRED
SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER= (SHA512)

SQLNET.ENCRYPTION_CLIENT = REQUIRED
SQLNET.ENCRYPTION_TYPES_CLIENT= (AES256)

SQLNET.ENCRYPTION_SERVER = REQUIRED
SQLNET.ENCRYPTION_TYPES_SERVER= (3DES168,AES256) I can’t see why he gets the error.

Scott Canaan ‘88
Sr Database Administrator
Information & Technology Services
Finance & Administration
Rochester Institute of Technology
o: (585) 475-7886 | f: (585) 475-7520
srcdco_at_rit.edu<mailto:srcdco_at_rit.edu> | c: (585) 339-8659 CONFIDENTIALITY NOTE: The information transmitted, including attachments, is intended only for the person(s) or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this information.

--
http://www.freelists.org/webpage/oracle-l

Received on Thu Sep 22 2022 - 13:39:13 CEST