topic Re: JDBC connection through firewall in Operating System - HP-UX

JDBC connection through firewall

Paolo_22 — Thu, 06 Mar 2003 14:19:36 GMT

I need to establish a JDBC connection from a Java application using JDBC Thin
driver to an Oracle DB passing through a firewall.
If the firewall rules are set to use IP authentication the connection works
fine, but if firewall rules are set to enable the communication only on port
1521 the connection doesn't work.
I have already read a document saying to place the parameter
"USE_SHARED_SOCKET = TRUE" in the Windows Registry of DB server, I tested it but without success.
The connection string I'm using is:
("jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=dbho
stname)(PORT=1521)))(CONNECT_DATA=(SERVICE_NAME=sid)))", user, password)

Re: JDBC connection through firewall

Tom Jackson — Thu, 06 Mar 2003 15:39:30 GMT

Hi Paolo:

Could the thin driver be causing a problem? The OCI driver is supposed to be more secure and have more capability. In fact I remember reading that you should not use the thin driver for production systems due to security reasons.

Tom

Re: JDBC connection through firewall

Indira Aramandla — Fri, 07 Mar 2003 07:47:28 GMT

After set the parameter
"USE_SHARED_SOCKET = TRUE" in the Windows Registry of DB server, did you Restart Oracle and the listener? You need to do this for the parameter to take effect or the listener will not run properly.

Make sure that the script is written in the right directory of the registry.

if there are more than 1 Oracle Home:
- the first version installed will always looks for the parameter in: HKEY_Local_machine\software\oracle, while the second version will looks in HKEY_Local_machine\software\oracle\home#
- 8i always looks in HKEY_Local_machine\software\oracle\home#

Re: JDBC connection through firewall

Rob Frisch — Wed, 23 Apr 2003 18:50:04 GMT

In the connect string for the client, you also need to have (SERVER=DEDICATED). With USE_SHARED_SOCKET=TRUE on the server, this will allow two way communication over port 1521.