8 Configuring Naming Methods

This chapter describes how to configure connectivity information for client connections to the database server.

This chapter contains these topics:

Naming Method Configuration Overview
About Connect Descriptors
Configuring the Local Naming Method
Configuring the Directory Naming Method
Using the Easy Connect Naming Method
Configuring External Naming Methods

See Also:
"Naming" for an overview of naming methods

Naming Method Configuration Overview

To connect to a service, clients use a connect identifier in the connect string to connect to a service. The connect identifier can be a connect descriptor or a simple name that maps to a connect descriptor. The connect descriptor contains:

Network route to the service, including the location of the listener through a protocol address
Oracle8i or later release database service name or Oracle release 8.0 database Oracle System Identifier (SID)

A simple name is resolved to a connect descriptor by a naming method. Naming method configuration consists of the following steps:

Select a naming method.
Map connect descriptors to simple names.
Configure clients to use the naming method.

About Connect Descriptors

A connect descriptor is comprised of one or more protocol addresses of the listener and connect data information for the destination service.

The following example shows a connect descriptor mapped to simple name called sales:

sales=
 (DESCRIPTION= 
  (ADDRESS= (PROTOCOL=tcp)(HOST=sales-server)(PORT=1521))
  (CONNECT_DATA= 
     (SERVICE_NAME=sales.us.acme.com)))

The ADDRESS section contains the listener protocol address, and the CONNECT_DATA section contains the destination service information. In this example, the destination service is a database service named sales.us.acme.com.

When creating a connect descriptor to an Oracle9i or Oracle8i database service, you must identify the service with the SERVICE_NAME parameter. Optionally, you can identify an instance with the INSTANCE_NAME parameter, as shown in the following:

sales=
 (DESCRIPTION= 
  (ADDRESS=(PROTOCOL=tcp)(HOST=sales-server)(PORT=1521)) 
  (CONNECT_DATA= 
     (SERVICE_NAME=sales.us.acme.com)
     (INSTANCE_NAME=sales)))

The values for these parameters come from the SERVICE_NAMES (with an S) and INSTANCE_NAME parameters in the initalization parameter file. The SERVICE_NAMES parameter in the initialization parameter file is typically the global database name, a name comprising the database name and domain name, entered during installation or database creation. For example, sales.us.acme.com has a database name of sales and a domain of us.acme.com. The INSTANCE_NAME parameter in the initialization parameter file defaults to the SID entered during installation or database creation.

When creating a connect a descriptor for an Oracle release 8.0 database, you identify the service with the SID parameter. The following example shows a connect descriptor for an Oracle release 8.0 database with a SID of sales:

sales=
 (DESCRIPTION= 
  (ADDRESS=(PROTOCOL=tcp)(HOST=sales-server)(PORT=1521)) 
  (CONNECT_DATA= 
     (SID=sales)))

Naming Methods

Table 8-1 describes the naming methods that Oracle Net supports.

Table 8-1 Naming Methods

Naming Method	Description
Local Naming	Resolves a net service name stored in a `tnsnames.ora` file stored on a client Local naming is most appropriate for simple distributed networks with a small number of services that change infrequently. See Also: "Configuring the Local Naming Method"
Directory Naming	Resolves a database service name, net service name, or net service alias stored in a centralized LDAP-compliant directory server See Also: "Configuring the Directory Naming Method"
Easy Connect Naming	Enables clients to connect to a database server without any configuration. Clients use a connect string for a simple TCP/IP address, consisting of a host name and optional port and service name: `CONNECT` `username/password@host[:port][/service_name]` This method is recommended for simple TCP/IP environments. See Also: "Using the Easy Connect Naming Method"
External Naming	Resolves service information stored in an a third-party naming service See Also: "Configuring External Naming Methods"

See Also:

"Naming"

Configuring the Local Naming Method

The local naming method adds net service names to the tnsnames.ora file. Each net service name maps to a connect descriptor. The following example shows a net service name mapped to a connect descriptor:

sales=
(DESCRIPTION= 
  (ADDRESS=(PROTOCOL=tcp)(HOST=sales-server)(PORT=1521))
  (CONNECT_DATA= 
     (SERVICE_NAME=sales.us.acme.com)))

In this example, the net service name sales is mapped to the connect descriptor contained in DESCRIPTION. DESCRIPTION contains the protocol address and identifies the destination database service.

You can configure local naming during or after installation, as described in these topics:

Configuring the tnsnames.ora File During Installation
Configuring the tnsnames.ora File After Installation

Configuring the tnsnames.ora File During Installation

Oracle Net Configuration Assistant enables you to configure net service names for clients. Oracle Universal Installer launches Oracle Net Configuration Assistant after software installation. The configuration varies depending on the installation mode.

Administrator or Runtime Installation

Oracle Net Configuration Assistant prompts you to configure net service names in the tnsnames.ora file to connect to an Oracle database service.

Custom Installation

Oracle Net Configuration Assistant prompts you to select naming methods to use. If Local is selected, then Oracle Net Configuration Assistant prompts you to configure net service names in a tnsnames.ora file to connect to an Oracle database service.

Configuring the tnsnames.ora File After Installation

You can add net service names to the tnsnames.ora file at any time after installation. To configure the local naming method, perform the following tasks:

Task 1: Configure Net Service Names

Task 2: Configure TNSNAMES as the First Naming Method

Task 3: Distribute Configuration

Task 4: Configure the Listener

Task 5: Connect to the Database

Note:

The underlying network connection must be operational before attempting to configure connectivity with Oracle Net.

Task 1: Configure Net Service Names

To configure with the local naming method, use one of the following tools:

Oracle Enterprise Manager
Oracle Net Manager
Oracle Net Configuration Assistant

Oracle Enterprise Manager

To configure net service names in the tnsnames.ora file with Oracle Enterprise Manager:

Access the Net Services Administration page in Oracle Enterprise Manager.

See Also:
"Oracle Enterprise Manager"
Select Local Naming from the Administer list, and then select the Oracle home that contains the location of the configuration files.
Click Go.

The Local Naming page appears.
Click Create.

The Create Net Service Name page appears.
Enter any name in the Net Service Name field.

You can qualify the net service name with the client's domain. The net service name is automatically domain qualified if the sqlnet.ora file parameter NAMES.DEFAULT_DOMAIN is set.

See Also:
"Configuring a Default Domain for Clients"
In the Database Information section, configure service support:
1. Enter a destination service.
  
  If the destination service is an Oracle8i or later release database, then select Use Service Name, and enter a service name in the Service Name field. If the destination service is an Oracle release 8.0 database, then select Use SID, and enter an Oracle System Identifier for an instance in the SID field.
  
  See Also:
  "About Connect Descriptors" for further information about the service name string to use
2. Select a database connection type
  
  Oracle Corporation recommends that you use the default setting of Database Default for the connection type. If shared server is configured in the initialization parameter file, you can select Dedicated Server to force the listener to spawn a dedicated server, bypassing shared server configuration. If shared server is configured in the initialization parameter file and you want to guarantee the connection always uses shared server, select Shared Server.
  
  See Also:
  Chapter 12, "Configuring Dispatchers" for further information about shared server configuration
In the Addresses section, configure protocol support:
1. Click Add.
  
  The Add Address page appears.
2. From the Protocol list, select the protocol on which the listener is configured to listen. This protocol must also be installed on the client.
3. Enter the appropriate parameter information for the selected protocol in the fields provided.
  
  See Also:
  Oracle Database Net Services Reference for protocol parameter settings
4. Optionally, in the Advanced Parameters section, specify the I/O buffer space limit for send and receive operations of sessions in the Total Send Buffer Size and Total Receive Buffer Size fields.
  
  See Also:
  "Configuring I/O Buffer Space" for further information
5. Click OK.
  
  The protocol address is added to the Addresses section.
Click OK to add the net service name.

The net service name is added to the Local Naming page.
See Also:
- "Creating a List of Listener Protocol Addresses" to configure multiple protocol addresses
- "Configuring Advanced Connect Data Parameters" to configure additional CONNECT_DATA options

Oracle Net Manager

To configure net service names in the tnsnames.ora file with Oracle Net Manager:

Start Oracle Net Manager.

See Also:
"Oracle Net Manager"
In the navigator pane, expand Local > Service Naming.
Click plus (+) from the toolbar, or choose Edit > Create from the menu bar.

The Welcome page of the Net Service Name Wizard appears.
Enter any name in the Net Service Name field.

You can qualify the net service name with the client's domain. The net service name is automatically domain qualified if the sqlnet.ora file parameter NAMES.DEFAULT_DOMAIN is set.

See Also:
"Configuring a Default Domain for Clients"
Click Next.

The Protocol page appears.
Select the protocol on which the listener is configured to listen. Note that this protocol must also be installed on the client.
Click Next.

The Protocol Settings page appears.
Enter the appropriate parameter information for the selected protocol in the fields provided.

See Also:
Oracle Database Net Services Reference for protocol parameter settings
Click Next.

The Service page appears.
Select a release, enter a destination service, and optionally, select a database connection type.

If the destination service is an Oracle8i or later release database, then select Oracle8i or later, and enter a service name in the Service Name field. If destination service is an Oracle release 8.0 database, then select Oracle8 or Previous, and enter an Oracle System Identifier for an instance in the Database SID field.

See Also:
"About Connect Descriptors" for further information about the service name string to use

Oracle Corporation recommends that you use the default setting of Database Default for the connection type. If shared server is configured in the initialization parameter file, you can select Dedicated Server to force the listener to spawn a dedicated server, bypassing shared server configuration. If shared server is configured in the initialization parameter file and you want to guarantee the connection always uses shared server, select Shared Server.

See Also:
Chapter 12, "Configuring Dispatchers" for further information about shared server configuration
Click Next.

The Test page appears.
Click Test to verify that the net service name works, or click Finish to dismiss the Net Service Name Wizard.

If you click Test, then Oracle Net connects to the database server by using the connect descriptor information you configured. Therefore, the database and the listener must be running for a successful test. If they are not, see "Starting Oracle Net Services Components" to start components before testing. During testing, a Connection Test dialog box appears, providing status and test results. A successful test results in the following message:
```
The connection test was successful.
```
If the test was successful, click Close to dismiss the Connect Test dialog box, and proceed to Step 13.

If the test was not successful:
1. Ensure that the database and listener are running, and then click Test.
2. Click Change Login to change the username and password for the connection, and then click Test.
Click Finish to dismiss the Net Service Name Wizard.
Choose File > Save Network Configuration.
See Also:
- "Creating a List of Listener Protocol Addresses" to configure multiple protocol addresses
- "Configuring Advanced Connect Data Parameters" to configure additional CONNECT_DATA options

Oracle Net Configuration Assistant

To configure net service names in the tnsnames.ora file with Oracle Net Configuration Assistant:

Start Oracle Net Configuration Assistant.

See Also:
"Oracle Net Configuration Assistant"

The Welcome page appears.
Select Local Net Service Name Configuration, and then click Next.

The Net Service Name Configuration page appears.
Click Add, and then click Next.

The Service Name Configuration page appears.
Enter a service name in the Service Name field.
Click Next.
Follow the prompts in the wizard and online help to complete net service name creation.

Task 2: Configure TNSNAMES as the First Naming Method

Configure local naming as the first method specified in the NAMES.DIRECTORY_PATH parameter in the sqlnet.ora file. This parameter specifies the order of naming methods Oracle Net uses to resolve connect identifiers to connect descriptors.

To specify local naming as the first naming method:

Start Oracle Net Manager.

See Also:
"Oracle Net Manager"
In the navigator pane, expand Local > Profile.
From the list in the right pane, select Naming.
Click the Methods tab.
From the Available Methods list, select TNSNAMES, and then click the right-arrow button.
From the Selected Methods list, select TNSNAMES, and then use the Promote button to move the selection to the top of the list.
Choose File > Save Network Configuration.

The sqlnet.ora file updates with the NAMES.DIRECTORY_PATH parameter, listing tnsnames first:
```
NAMES.DIRECTORY_PATH=(tnsnames, hostname)
```

Task 3: Distribute Configuration

After one client is configured, it is best to simply copy the tnsnames.ora and sqlnet.ora configuration files to the same location on the other clients. This ensures that the files are consistent. Alternatively, you can use Net8 Assistant or Net8 Configuration Assistant on every client.

Task 4: Configure the Listener

Ensure that the listener (located on the server) is configured to "listen on" the same protocol address you configured for the net service name. By default, the listener should already be configured for the TCP/IP protocol on port 1521.

See Also:

Chapter 10, "Configuring and Administering the Listener" for listener configuration details

Task 5: Connect to the Database

Clients can connect to the database using the following syntax:

CONNECT username/password@net_service_name

Configuring the Directory Naming Method

With the directory naming method, connect identifiers are mapped to connect descriptors contained in an LDAP-compliant directory server, including Oracle Internet Directory and Microsoft Active Directory. A directory provides central administration of database services and net service names, making it easier to add or relocate services.

A database service entry is created with Database Configuration Assistant during installation; net service name and net service alias entries can be created with Oracle Enterprise Manager or Oracle Net Manager. To modify Oracle Net attributes of a database service entry and the net service name entries, use Oracle Enterprise Manager or Oracle Net Manager.

Clients can use these entries to connect to the database.

This section contains these topics:

Directory Naming Method Configuration Steps
Administering the OracleNetAdmins Group
Exporting Local Naming Entries to a Directory Naming Server
Creating Multiple Default Contexts in a Directory Naming Server
Exporting Directory Naming Entries to a tnsnames.ora File

Directory Naming Method Configuration Steps

To configure the directory naming method, perform the following tasks:

Task 1: Verify Directory Version Compatibility

Task 2: Create or Modify Net Entries

Task 3: Configure LDAP as the First Naming Method for Client Lookups

Task 4: Configure the Listener

Task 5: Connect to the Database

Task 1: Verify Directory Version Compatibility

On the computer from which you plan to create net service names, perform the following verification steps:

Ensure that computer has the latest version of Oracle Net Services software.
Run Oracle Internet Directory Configuration Assistant to verify directory server, Oracle Context, and Oracle schema versions.

See Also:
Oracle Internet Directory Administrator's Guide for further information about configuring directory server usage

Task 2: Create or Modify Net Entries

This section covers the following topics:

Creating Net Service Names in the Directory
Modifying Connectivity Information for Database Service Entries
Creating Net Service Aliases

Creating Net Service Names in the Directory

Notes:

Only users that are members of either the OracleNetAdmins or OracleContextAdmins group can create net service name entries in a directory. To add or remove users from the OracleNetAdmins group, see "Adding Users To the OracleNetAdmins Group".
You can export existing net service names from a tnsnames.ora file. See "Exporting Local Naming Entries to a Directory Naming Server".

You can configure clients to use a net service name rather than the database service entry created by Database Configuration Assistant. To create net service names, use Oracle Enterprise Manager.

Access the Net Services Administration page in Oracle Enterprise Manager.

See Also:
"Oracle Enterprise Manager"
Select Directory Naming from the Administer list, and then select the Oracle home that contains the location of the directory server.
Click Go.

The Directory Naming page appears.
Click the Net Service Names tab.
In the Results section, click Create.

The Create Net Service Name page with the General tab appears.
Enter any name in the Net Service Name field.
In the Database Information section, configure service support:
1. Enter a destination service.
  
  If the destination service is for an Oracle9i or Oracle8i database, then select Use Service Name, and enter a service name in the Service Name field. If destination service is an Oracle release 8.0 database, then select Use SID, and enter an Oracle System Identifier for an instance in the SID field.
  
  See Also:
  "About Connect Descriptors" for further information about the service name string to use
2. Select a database connection type
  
  Oracle Corporation recommends that you use the default setting of Database Default for the connection type. If shared server is configured in the initialization parameter file, you can select Dedicated Server to force the listener to spawn a dedicated server, bypassing shared server configuration. If shared server is configured in the initialization parameter file and you want to guarantee the connection always uses shared server, select Shared Server.
  
  See Also:
  Chapter 12, "Configuring Dispatchers" for further information about shared server configuration
In the Addresses section, configure protocol support:
1. Click Add.
  
  The Add Address page appears.
2. From the Protocol list, select the protocol on which the listener is configured to listen. This protocol must also be installed on the client.
3. Enter the appropriate parameter information for the selected protocol in the fields provided.
  
  See Also:
  Oracle Database Net Services Reference for protocol parameter settings
4. Optionally, in the Advanced Parameters section, specify the I/O buffer space limit for send and receive operations of sessions in the Total Send Buffer Size and Total Receive Buffer Size fields.
  
  See Also:
  "Configuring I/O Buffer Space" for further information
5. Click OK.
  
  The protocol address is added to the Addresses section.
Click OK to add the net service name.

The net service name is added to the Results section of the Net Service Names tab.
See Also:
- "Creating a List of Listener Protocol Addresses" to configure multiple protocol addresses
- "Configuring Advanced Connect Data Parameters" to configure additional CONNECT_DATA options

Modifying Connectivity Information for Database Service Entries

Notes:

Only users that are members of either the OracleNetAdmins or OracleContextAdmins group can modify network information for a database service in a directory. To add or remove users from these groups, see "Adding Users To the OracleNetAdmins Group".

When database registration with the directory completes, Database Configuration Assistant creates a database service entry in the directory. By default, this entry contains network route information that includes the location of the listener through a protocol address. You can re-create this information, if it has been removed, or modify the existing network route information.

To create or modify network route information for a database service, use Oracle Enterprise Manager.

Access the Net Services Administration page in Oracle Enterprise Manager.

See Also:
"Oracle Enterprise Manager"
Select Directory Naming from the Administer list, and then select the Oracle home that contains the location of the directory server.
Click Go.

The Directory Naming page appears.
Click the Database Services tab.
In the Simple Search section, select Oracle Context and search criteria to see the net service names for a particular Oracle Context.

The database service names display in the Results section.
In the Results section, select a database service, and then click Edit.

Creating Net Service Aliases

Notes:

Only users that are members of either the OracleNetAdmins or OracleContextAdmins group can create or modify net service alias entries in a directory. To add or remove users from the OracleNetAdmins group, see "Adding Users To the OracleNetAdmins Group".
To create or access net service aliases, ensure that the Oracle home is upgraded to at least 9.2.
Net service aliases are not supported using Microsoft Active Directory.

Net service aliases in a directory server enable clients to refer to a database service or a net service name by an alternative name. For example, a net service alias of salesalias can be created for a net service name of sales. When salesalias is used to connect to a database, as in CONNECT scott/tiger@salesalias, it will actually resolve to and use the connect descriptor information for sales.

There are two main uses of net service aliases:

Use a net service alias as a way for clients to refer to a database service or net service name by another name.
Use a net service alias in one Oracle Context for a database service or net service name in a different Oracle Context. This enables a database service or net service name to be defined once in the directory server, but referred to by clients that use other Oracle Contexts.

See Also:
"Net Service Alias Entries" for an overview of net service aliases

To create or modify network route information for a database service, use Oracle Enterprise Manager.

Access the Net Services Administration page in Oracle Enterprise Manager.

See Also:
"Oracle Enterprise Manager"
Select Directory Naming from the Administer list, and then select the Oracle home that contains the location of the directory server.
Click Go.

The Directory Naming page appears.
Click the Net Service Aliases tab.
In the Results section, click Create.

The Create Net Service Alias page appears.
Enter a name for the alias in the Net Service Alias Name field.
In the Referenced Service Detail section, enter the information in the fields described in Table 8-2.

Table 8-2 Reference Service Detail Fields in Create Net Service Alias

Field	Description
Oracle Context	Select the Oracle Context of the database service or net service name by selecting one from the list or entering one in the field.
Referenced Service Name	Select the DN of the database service or net service name.

Click OK to add the net service alias.

The net service alias is added to the Directory Naming page.

Task 3: Configure LDAP as the First Naming Method for Client Lookups

Configure directory naming as the first method specified in the NAMES.DIRECTORY_PATH parameter in the sqlnet.ora file. This parameter specifies the order of naming methods Oracle Net uses to resolve connect identifiers to connect descriptors.

To specify directory naming as the first naming method:

Start Oracle Net Manager.

See Also:
"Oracle Net Manager"
In the navigator pane, expand Local > Profile.
From the list in the right pane, select Naming.
Click the Methods tab.
From the Available Methods list, select LDAP, and then click the right-arrow button.
From the Selected Methods list, select LDAP, and then use the Promote button to move the selection to the top of the list.
Choose File > Save Network Configuration.

The sqlnet.ora file updates with the NAMES.DIRECTORY_PATH parameter, listing ldap first:
```
NAMES.DIRECTORY_PATH=(ldap, tnsnames, hostname)
```

Task 4: Configure the Listener

Ensure that the listener (located on the server) is configured to listen on the same protocol address configured for the net service name. By default, the listener is configured to listen on the TCP/IP protocol, port 1521.

See Also:

Chapter 10, "Configuring and Administering the Listener" for listener configuration details

Task 5: Connect to the Database

Clients that are configured with a default directory entry that matches the directory location of the database service or net service name can connect to the database using the following syntax:

CONNECT username/password@connect_identifier

Clients that are configured with a default directory entry that does not match the entry's directory location cannot use the connect identifier in the connect string. Instead, these connections require the entry's distinguished name or its absolute name.

See Also:

"Connect Identifier and Connect Descriptor Syntax Characteristics" for connect identifier syntax rules
"Absolute Name Specification for Directory Naming" for absolute name usage

Administering the OracleNetAdmins Group

Members of OracleNetAdmins (cn=OracleOracleNetAdmins,cn=OracleContext,...) have create, modify, and read access to Oracle Net objects and attributes. Oracle Net Configuration Assistant establishes these access rights for this group during Oracle Context creation.

This section contains the following topics:

Establishing Access For the OracleNetAdmins Group
Adding Users To the OracleNetAdmins Group
Removing Users From the OracleNetAdmins Group

Note:
Members of the OracleContextAdmins groups can also add and delete members of the OracleNetAdmins group.

Establishing Access For the OracleNetAdmins Group

The owner of the OracleNetAdmins group can perform the following functions:

Add or delete members from the OracleNetAdmins group
Add or delete groups which are owners of the OracleNetAdmins group

By default, the owner of the OracleNetAdmins group is the OracleNetAdmins group itself. This means that any member of the OracleNetAdmins group can add or delete other members from the OracleNetAdmins group. If you prefer that another group other than OracleNetAdmins add or delete other OracleNetAdmins members, you can change the owner attribute of the OracleNetAdmins group to another group.

The owner cannot be an individual user entry, such as cn=scott, but must be a group entry, where the group entry is one comprised of the LDAP schema object classes GroupOfUniqueNames and orclPriviledgeGroup.

To add a group as an owner of an OracleNetAdmins group:

Create an LDAP Data Interchange Format (LDIF) file:
1. Specify the group you want to add as an owner.
  
  You can use the following sample LDIF file. Enter the appropriate distinguished name (DN) for cn=OracleNetAdmins and the DN of the group that you want to add.
```
dn: cn=OracleNetAdmins,cn=OracleContext,... 
    changetype: modify 
    add: owner 
    owner: <DN of group to add> 
```
2. Optionally, specify the group to delete as an owner.
```
dn: cn=OracleNetAdmins,cn=OracleContext,... 
    changetype: modify 
    add: owner 
    owner: <DN of group to add> 
```
  For example, the following LDIF syntax changes the ownership from the OracleNetAdmins group to another group named cn=AcmeSecurityAdmins. The group can be either be inside or outside the Oracle Context; in this case, it is outside the Oracle Context.
```
dn: cn=OracleNetAdmins,cn=OracleContext,... 
     changetype: modify 
     add: owner 
     owner: cn=AcmeSecurityAdmins 

dn: cn=OracleNetAdmins,cn=OracleContext,... 
     changetype: modify 
     delete: owner 
     owner: cn=OracleNetAdmins,cn=OracleContext,... 
```

Use the following ldapmodify syntax to delete the user:

ldapmodify -h directory_host -p port -D binddn -w password -f ldif_file

Table 8-3 ldapmodify Arguments

Argument	Description
`-h` `directory_host`	Specify the directory server host.
`-p` `port`	Specify the listening TCP/IP port for the directory server. If you do not specify this option, the default port (389) is used.
`-D` `binddn`	Specify the directory administrator or user DN.
`-w` `password`	Specify the password for the directory administrator or directory user.
`-f` `ldif_file`	Specify the input file name.

Adding Users To the OracleNetAdmins Group

To add a user to the OracleNetAdmins group with ldapmodify:

Create an LDIF file that specifies that you want to add a user to the OracleNetAdmins group.

You can use the following sample LDIF file. Use the appropriate DN for cn=OracleNetAdmins and the user that you want to add.
```
dn: cn=OracleNetAdmins,cn=OracleContext,...
changetype: modify
add: uniquemember
uniquemember: <DN of user being added to group>
```

Enter the following ldapmodify syntax to add a user:

ldapmodify -h directory_host -p port -D binddn -w password -f ldif_file

Removing Users From the OracleNetAdmins Group

To remove a user from the OracleNetAdmins group with ldapmodify:

Create an LDIF file that specifies that you want to add a user to the OracleNetAdmins group.

You can use the following sample LDIF file. Enter the appropriate DN for cn=OracleNetAdmins and the user that you want to delete.
```
dn: cn=OracleNetAdmins,cn=OracleContext,...
changetype: modify
delete: uniquemember
uniquemember: <DN of user being deleted from group>
```

Use the following ldapmodify syntax to delete the user:

ldapmodify -h directory_host -p port -D binddn -w password -f ldif_file

Exporting Local Naming Entries to a Directory Naming Server

This section explains how to export data stored in a tnsnames.ora file to a directory server.

Exporting Net Service Names from a tnsnames.ora File

Exporting Net Service Names from a tnsnames.ora File

If a tnsnames.ora file already exists, then its net service names can be exported to a directory server. The export is performed for one domain at a time.

The tasks to export data from a tnsnames.ora file are as follows:

Task 1: Create Structure in Directory Server

Task 2: Create Oracle Contexts

Task 3: Configure Directory Server Usage

Task 4: Export Objects To a Directory Server

Note:

These tasks assume that you have a directory server installed and running.

Task 1: Create Structure in Directory Server

In the directory server, create the directory information tree (DIT) with the structure in which you want to import net service names. Create the structure leading up to the top of the Oracle Context.

For example, if the tnsnames.ora file supports a domain structure acme.com and you want to replicate this domain in the directory, then create domain component entries of dc=com and dc=acme in the directory, as depicted in Figure 8-1.

Figure 8-1 acme.com in Directory Server

Description of "Figure 8-1 acme.com in Directory Server"

You can replicate the domain structure you currently use with tnsnames.ora, or you can develop an entirely different structure. Introducing an entirely different structure can change the way in which clients enter the net service name in the connect string. Therefore, Oracle Corporation recommends considering relative and absolute naming issues prior to changing the structure.

See Also:

Directory server vendor documentation for directory entry configuration instructions
"Client Connections Using Directory Naming"

Task 2: Create Oracle Contexts

Create an Oracle Context under each DIT location that you created in Task 1. The Oracle Context has a relative distinguished name (RDN) of cn=OracleContext. The Oracle Context stores network object entries, as well as other entries for other Oracle components. In Figure 8-2, cn=OracleContext is created under dc=acme,dc=com.

To create the Oracle Context, use Oracle Internet Directory Configuration Assistant to create a DIT structure that looks similar to the one in Figure 8-2.

Figure 8-2 Oracle Context

Description of "Figure 8-2 Oracle Context"

See Also:

Chapter 4, "Configuration Management Concepts" for further information about the Oracle Context
Oracle Internet Directory Administrator's Guide for instructions on creating an Oracle Context

Task 3: Configure Directory Server Usage

If not already done as a part of creating the Oracle Contexts, configure the Oracle home for directory server usage. The Oracle home you configure should be the one that will perform the export.

See Also:

Oracle Internet Directory Administrator's Guide for further information about configuring directory server usage

Task 4: Export Objects To a Directory Server

To export net service names contained in a tnsnames.ora file to a directory, use either Oracle Enterprise Manager or Oracle Net Manager.

Oracle Enterprise Manager

Access the Net Services Administration page in Oracle Enterprise Manager.

See Also:
"Oracle Enterprise Manager"
Select Directory Naming from the Administer list, and then select the Oracle home that contains the location of the directory server.
Click Go.

The Directory Naming page appears.
Click the Net Service Names tab.
In the Related Links section, click Import Net Service Names To Directory Server.

The Import Net Service Names To Directory Server page appears.
From the Oracle Context list in the Oracle Internet Directory Server Destination section, select the Oracle Context to which you want to export the selected net service names.
In the Net Service Names to Import section, select the net service names.
Click Add to add the net service names to the directory.

The net service name is added to the Directory Naming page.

Oracle Net Manager

Start Oracle Net Manager.

See Also:
"Oracle Net Manager"
If the tnsnames.ora file you want to export is not the one loaded into Oracle Net Manager, then use File > Open Network Configuration to select the tnsnames.ora file to export to the directory.
Choose Command > Directory > Export Net Service Names from the menu bar.

The Directory Server Migration Wizard starts.
Click Next.

If net service names with multiple domain were detected in the tnsnames.ora file, then the Select Domain page appears. Continue to Step 5.

If the net service names are not domain qualified, the Select Net Service Names page appears. Skip to Step 6.
Select the network domain whose net service names you want to export, and then click Next.

The Select Net Service Names page appears.
Select the net service names from the list to export, and then click Next.

The Select Destination Context page appears.
In the Select Destination Context page, perform the following:
1. From the Directory Naming Context list, select the directory entry that contains the Oracle Context. The directory naming context is part of a directory subtree that contains one or more Oracle Contexts.
2. From the Oracle Context list, select the Oracle Context to which you want to export the selected net service names.
3. Click Next.
The Directory Server Update page appears with the status of the export operation.
Click Finish to dismiss the Directory Server Migration Wizard.

Creating Multiple Default Contexts in a Directory Naming Server

If you would like clients to use discovery in directories which have more than one oracleContext, you can define the orclCommonContextMap attribute in the base admin context; this will override the orclDefaultSubscriber attribute. During name lookup the discovery operation will return both values, and the client will decide based on these which oracleContext to use.

If the orclCommonContextMap attribute is not defined the orclDefaultSubscriber will be used as the default. If orclCommonContextMap is defined, then the client will find the default oracleContext which is associated with its DNS domain in the orclCommonContextMap. To enable multiple default contexts, define the orclCommonContextMap with a list of associations between a domain and a DN to be used as the default oracleContext. A sample LDIF file entry is shown here:

$ ldapmodify -v -h nineva -p 1389 -D cn=orcladmin -w juliet#
 dn: cn=Common,cn=Products,cn=OracleContext
 replace: orclCommonContextMap
 orclCommonContextMap:
 (contextMap=
   (domain_map=(domain=us.acme.com)(DN="dc=acme,dc=com"))
   (domain_map=(domain=uk.acme.com)(DN="dc=sales,dc=com"))
  )

In practice, the contextMap entry must be entered without line breaks, as in the following example:

orclCommonContextMap:(contextMap=(domain_map=(domain=us.acme.com)(DN=" dc=acme,dc=com"))(domain_map=(domain=uk.acme.com)(DN="dc=sales,dc=com")))

See Also:

Oracle Internet Directory Administrator's Guide for further information on how to configure the directory for context mapping

Exporting Directory Naming Entries to a tnsnames.ora File

Once you create the directory naming entries, consider exporting the entries to a local tnsnames.ora file, and distributing that files to clients. Clients can use the locally saved file when a directory server is temporarily unavailable.

To export directory naming entries to a local tnsnames.ora file, use Oracle Enterprise Manager:

Access the Oracle Net Administration page in Oracle Enterprise Manager.

See Also:
"Oracle Enterprise Manager"
Select Directory Naming from the Administer list, and then select the Oracle home that contains the location of the directory server.
Click Go.

The Directory Naming page appears.
Click the Net Service Names tab.
In the Simple Search section, select Oracle Context and search criteria to see the net service names for a particular Oracle Context.

The net service names display in the Results section.
In the Results section, click Save to tnsnames.ora.

The Processing: Create tnsnames.ora File page appears, informing you of the creation process.

Using the Easy Connect Naming Method

The easy connect naming method eliminates the need for service name lookup in the tnsnames.ora files for TCP/IP environments; in fact, no naming or directory system is required if you use this method.

This naming method provides out-of-the-box TCP/IP connectivity to databases. It extends the functionality of the host naming method by enabling clients to connect to a database server with an optional port and service name in addition to the host name of the database:

CONNECT username/password@[//]host[:port][/service_name]

where:

If you have performed Oracle Database server install in Typical mode, the default service name used by oracle instance is ORCL, and the following easy connect syntax can be used to connect to that instance:

CONNECT username/password@host/ORCL

Table 8-4 Connect Identifier for Easy Connection Naming Method

Syntax Element	Description
`//`	Optional. Specify `//` for a URL.
`host`	Required. Specify the host name or IP address of the database server computer. The host name is domain-qualified if the local operating system configuration specifies a domain.
`port`	Optional. Specify the listening port. The default is 1521.
`service_name`	Optional. Specify the service name of the database. The default is the host of the database server computer. Note that this might not be the same value that you entered in the connect string for the host. For example, for the host `emp`, the service name might be `emp.acme.com`. If the host does not match the database service name, then enter a valid service name value rather than accepting the default.

(DESCRIPTION= 
  (ADDRESS=(PROTOCOL=tcp)(HOST=host)(PORT=port))
  (CONNECT_DATA=
    (SERVICE_NAME=service_name)))

The connect identifier converts into the following connect descriptor:For example, the following connect strings connect the client to database service sales.us.acme.com with a listening endpoint of 1521 on database server sales-server.

CONNECT username/password@sales-server:1521/sales.us.acme.com
CONNECT username/password@//sales-server/sales.us.acme.com
CONNECT username/password@//sales-server.us.acme.com/sales.us.oracle.com

These connect strings convert into the following connect descriptor:

(DESCRIPTION= 
  (ADDRESS=(PROTOCOL=tcp)(HOST=sales-server)(PORT=1521))
  (CONNECT_DATA=
    (SERVICE_NAME=sales.us.acme.com)))

For URL or JDBC connections, prefix the connect identifier with a double-slash (//):

CONNECT username/password@[//][host][:port][/service_name]

For URL or JDBC connections, prefix the connect identifier with a double-slash (//):

CONNECT username/password@[//][host][:port][/service_name]

Using Easy Connect Naming on the Client

Clients can connect to a database server using easy connect naming if the following conditions are met:

Oracle Database 10g Net Services software installed on the client.
Oracle TCP/IP protocol support on both the client and database server
No features requiring a more advanced connect descriptor are required

For large or complex environments where advanced features, such as connection pooling, external procedure calls, or Heterogeneous Services, which require additional connect information, are desired, easy connect naming is not suitable. In these cases, another naming method is recommended.

Easy connect naming is automatically configured at installation. Prior to using it, you may want to ensure that EZCONNECT is specified by the NAMES.DIRECTORY_PATH parameter in the sqlnet.ora file. This parameter specifies the order of naming methods Oracle Net can use to resolve connect identifiers to connect descriptors.

To verify that the easy connect naming method is configured:

Start Oracle Net Manager.

See Also:
"Oracle Net Manager"
In the navigator pane, expand Local > Profile.
From the list in the right pane, select Naming.
Click the Methods tab.

Check that EZCONNECT listed in the Selected Methods list. If it is not, then proceed to Step 5.
From the Available Methods list, select EZCONNECT, and then click the right-arrow button.
From the Selected Methods list, select EZCONNECT, and then use the Promote button to move the selection to the top of the list.
Choose File > Save Network Configuration.

The sqlnet.ora file updates with the NAMES.DIRECTORY_PATH parameter, listing hostname first:
```
NAMES.DIRECTORY_PATH=(ezconnect, tnsnames)
```

Optionally Configuring Easy Connect Naming to Use a DNS Alias

You can optionally configure a DNS alias for the host name, as provided with the host naming method in Oracle Database 10g. With host naming, clients use a connect string of:

CONNECT username/password@DNSalias

To configure an alias, perform these tasks:

Task 1: Ensure Database Service is Registered with the Listener

Task 2: Establish Host Name Resolution Environment

Task 3: Connect to the Database

Task 1: Ensure Database Service is Registered with the Listener

You must register database service information with the listener. If the database can find the listener, then information about the database service is dynamically registered with the listener during service registration, including the service name. The listener is found if:

The default listener named LISTENER running on TCP/IP, port 1521 is running
The LOCAL_LISTENER parameter is set in the initialization file

If the database cannot find the listener, then configure the listener.ora file with the GLOBAL_DBNAME parameter, as shown next:

SID_LIST_listener=
(SID_LIST=
 (SID_DESC=
  (GLOBAL_DBNAME=sales.acme.com)
  (SID_NAME=sales)
  (ORACLE_HOME=/u01/app/oracle))

Task 2: Establish Host Name Resolution Environment

The service name must be resolved through an IP address translation mechanism, such as Domain Name System (DNS), NIS, or a centrally-maintained TCP/IP host file, /etc/hosts.

For example, if a service name of sales.us.acme.com for a database exists on a computer named sales-server, the entry in the /etc/hosts file would look like the following:

#IP address of server     host name       alias
10.10.150.35              sales-server    sales.us.acme.com

Note that the domain section of the service name must match the network domain.

Task 3: Connect to the Database

Clients can connect to the database using the alias. Using the example in "Task 2: Establish Host Name Resolution Environment", the client can use sales.acme.com in the connect string:

CONNECT username/password@sales.us.acme.com

If the client and server are in the same domain of us.acme.com, the client needs to enter only sales in the connect string.

Configuring External Naming Method s

External naming refers to the method of resolving a net service name, stored in a non-Oracle naming service, to a network address. External naming services include:

Network Information Service (NIS)
Distributed Computing Environment (DCE) Cell Directory Service (CDS)

Network Information Service (NIS)

Organizations and corporations already using NIS as part of their systems infrastructure have the option to store net service names and addresses in NIS, using NIS external naming.

When a user gives a command such as

     sqlplus scott/tiger@payroll

(where payroll is an Oracle service) NIS external naming on the node running the client program (or database server acting as a client program) contacts an NIS server located somewhere in the network, and passes the net service name to the NIS server. The NIS server resolves the net service name into a Oracle Net address and returns this address to the client program (or server acting as a client program). The client program then uses this address to connect to the Oracle database.

A computer that acts as an NIS server runs a program called ypserv, which handles name requests. The ypserv program stores different types of data in special files called maps. For example, passwords are stored in a map called passwd.byname. Oracle database service names are stored in a map called tnsnames.

When a user issues a connect string, NIS external naming uses an RPC call to contact the ypserv program and passes the Oracle net service name payroll and the name of the map—tnsnames. The ypserv program looks in the tnsnames map for the name payroll and its corresponding value, which is the address for the net service name. The address is returned to the client, and the client program (or server acting as a client program) uses this address to contact the database server.

Task 1: Configure NIS Servers to Support the NIS External Naming

Before configuring servers to support the NIS external naming, make sure that NIS is configured and running on the NIS servers that need to resolve Oracle database net service names. Consult your NIS documentation for specifics.

Adding the "tnsnames" Map to the Existing Set of NIS Maps

To add the tnsnames map to the existing set of NIS maps:

Create a tnsnames.ora file, as specified in "Configuring the Local Naming Method".

Note:
Keep a copy of the tnsnames.ora file, preferably in $ORACLE_HOME/network/admin directory. You may need to use this file again later to load net service names into the NIS map.
Convert the contents of the tnsnames.ora file to a tnsnames map using the tns2nis program.

Note:
The tns2nis program is supplied with NIS External Naming.

For example, run tns2nis on the command line with one argument:
```
tns2nis tnsnames.ora
```
The tns2nis program reads the tnsnames.ora file from the current directory. (If tnsnames.ora file is not located in the current directory, you can use a full path name to specify its location—for example, /etc/tnsnames.ora or $ORACLE_HOME/network/admin/tnsnames.ora).

The tnsnames map is then written into the current working directory.
Copy tnsnames to the NIS server, if it is not already there.
Install the tnsnames map using makedbm, which is an NIS program.

Note:
This step should be performed by the person in charge of NIS administration.

The makedbm program converts the tnsnames map into two files that the NIS server can read. The location of these files is operating system specific.

See Also:
Oracle operating system-specific documentation for details

For example, to generate and install a tnsnames map on the Solaris Operating System, as the root user, enter the following at the command line:
```
# makedbm tnsnames /var/yp/'domainname'/tnsnames 
```

Verifying that the tnsnames Map Has Been Properly Installed

You can test the NIS server to see if the map has been installed properly by typing a command with the format:

ypmatch net_service_name tnsnames

For example, you might enter:

ypmatch payroll.com tnsnames

This returns the length of the address (in characters) followed by the address; for example:

99 (description=(address=(protocol=tcp)
 (host=garlic)(port=1999)))
 (connect_data=(service_name=dirprod)))

Task 2: Configure Clients

To configure clients, configure NIS as the first method specified in the NAMES.DIRECTORY_PATH parameter in the sqlnet.ora file. This parameter specifies the order of naming methods Oracle Net can use to resolve connect identifiers to connect descriptors.

Start Oracle Net Manager.

See Also:
"Oracle Net Manager"
In the navigator pane, expand Local > Profile.
From the list in the right pane, select Naming.
Click the Methods tab.
From the Available Methods list, select NIS, and then click the right-arrow button.
In the Selected Methods list, select NIS, and then use the Promote button to move the selection to the top of the list.
Choose File > Save Network Configuration.

The sqlnet.ora file updates with the NAMES.DIRECTORY_PATH parameter, listing nis first:
```
NAMES.DIRECTORY_PATH=(nis, hostname, tnsnames)
```

Distributed Computing Environment (DCE) Cell Directory Service (CDS)

See Also:

Oracle Database Advanced Security Administrator's Guide for instructions about how to configure Cell Directory Services (CDS)

8 Configuring Naming Methods

Naming Method Configuration Overview

About Connect Descriptors

Naming Methods

Configuring the Local Naming Method

Configuring the tnsnames.ora File During Installation

Administrator or Runtime Installation

Custom Installation

Configuring the tnsnames.ora File After Installation

Task 1: Configure Net Service Names

Task 2: Configure TNSNAMES as the First Naming Method

Task 3: Distribute Configuration

Task 4: Configure the Listener

Task 5: Connect to the Database

Configuring the Directory Naming Method

Directory Naming Method Configuration Steps

Task 1: Verify Directory Version Compatibility

Task 2: Create or Modify Net Entries

Task 3: Configure LDAP as the First Naming Method for Client Lookups

Task 4: Configure the Listener

Task 5: Connect to the Database

Administering the OracleNetAdmins Group

Exporting Local Naming Entries to a Directory Naming Server

Exporting Net Service Names from a tnsnames.ora File

Creating Multiple Default Contexts in a Directory Naming Server

Exporting Directory Naming Entries to a tnsnames.ora File

Using the Easy Connect Naming Method

Configuring External Naming Methods

Network Information Service (NIS)

Task 1: Configure NIS Servers to Support the NIS External Naming

Adding the "tnsnames" Map to the Existing Set of NIS Maps

Verifying that the tnsnames Map Has Been Properly Installed

Task 2: Configure Clients

Distributed Computing Environment (DCE) Cell Directory Service (CDS)

Configuring External Naming Method s