Advertisement
Guest User

Untitled

a guest
Jun 17th, 2019
163
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. # Copyright (c) 1996, 2006, Oracle. ALL rights reserved.  
  2. #
  3. # NAME
  4. #   sqlnet.ora
  5. # FUNCTION
  6. #   Oracle Network Client startup parameter FILE example
  7. # NOTES
  8. #   This FILE contains examples AND instructions FOR defining ALL
  9. #   Oracle Network Client parameters. It should be possible TO read
  10. #   this FILE AND setup a Client BY uncommenting parameter definitions
  11. #   AND substituting VALUES. The comments should provide enough
  12. #   explanation TO enable a reasonable USER TO manage his TNS connections
  13. #   without HAVING TO resort TO 'real' documentation.
  14. # SECTIONS
  15. #   ONames Client
  16. #   Namesctl
  17. #   Native Naming Adpaters
  18. #   ...
  19. # MODIFIED
  20. #    nwoo       04/26/07 - ADD SDP.PF_INET_SDP parameter.
  21. #    rachacos   09/15/06 - ADD BUCKET_SIZE parameter.
  22. #    rachacos   08/10/06 - ADD ADR/DDE parameters.
  23. #    ajacobs    09/09/03 - Fix wallet_location parameter
  24. #    ajacobs    01/20/03 - CyberSafe desupport
  25. #    ajacobs    09/17/02 - remove crypto_seed
  26. #    cozhang    03/07/02 - Change connect_time TO inbound_connect_time.
  27. #    mhho       01/15/02 - UPDATE sample WITH NEW parameter changes
  28. #    cozhang    12/04/01 - ADD params FOR DoS timout handling
  29. #    ajacobs    10/23/00 - Remove identix, securid
  30. #    ajacobs    09/07/00 - UPDATE FOR Oracle Advanced Security encryption/integ
  31. #    tclarke    05/26/00 - bug 515765
  32. #    jtran      03/24/98 - ADD radius configuration
  33. #    skanjila   06/06/97 - Correct DEFAULT FOR Automatic_IPC
  34. #    eminer     05/15/97 - ADD the relevant onrsd parameters.
  35. #    asriniva   04/23/97 - Merge WITH version FROM doc
  36. #    ggilchri   03/31/97 - mods
  37. #    bvasudev   02/07/97 - Change sqlnet.authentication_services documentation
  38. #    bvasudev   11/25/96 - Merge sqlnet.ora transport related parameters
  39. #    asriniva   11/12/96 - Revise WITH NEW OSS parameters.
  40. #    asriniva   11/05/96 - ADD ANO parameters.
  41. # ____________________________________________________________________
  42.  
  43. # - ONames Client ----------------------------------------------------
  44. #
  45. #names.default_domain = world
  46. #
  47. #Syntax:  domain-name
  48. #Default: NULL
  49. #
  50. # Indicates the domain FROM which the client most often requests names. WHEN
  51. # this parameter IS SET the DEFAULT domain name (FOR example, US.ACME), the
  52. # domain name will be automatically appended TO ANY unqualified name IN an
  53. # ONAmes request (query, register, deregister, etc). ANY name which contains
  54. # an unescaped dot ('.') will NOT have the DEFAULT domain appended. Simple
  55. # names may be qualified WITH a trailing dot (FOR example 'rootserver.').
  56. #
  57. #
  58. #names.initial_retry_timeout = 30
  59. #
  60. #Syntax:  1-600 seconds
  61. #Default: 15 (OSD)
  62. #
  63. # Determines how LONG a client will wait FOR a response FROM a Names Server
  64. # before reiterating the request TO the next server IN the preferred_servers
  65. # list.
  66. #
  67. #
  68. #names.max_open_connections = 3
  69. #
  70. #Syntax:  3-64
  71. #Default: ADDRS IN preferred_servers
  72. #
  73. # Determines how many connections an ONames client may have OPEN AT one TIME.
  74. # Clients will ordinarily keep connections TO servers OPEN once they are
  75. # established until the operation (OR SESSION IN namesctl) IS complete. A
  76. # connection will be opened WHENEVER needed, AND IF the maximum would be
  77. # exceeded the LEAST recently used connection will be closed.
  78. #
  79. #
  80. #names.message_pool_start_size = 10
  81. #
  82. #Syntax:  3-256
  83. #Default: 10
  84. #
  85. # Determines the INITIAL NUMBER OF messages allocated IN the client's message
  86. # pool. This pool provides the client with pre-allocated messages to be used
  87. # for requests to ONames servers. Messages which are in the pool and unused
  88. # may be reused. If a message is needed and no free messages are available in
  89. # the pool more will be allocated.
  90. #
  91. #
  92. #names.preferred_servers = (address_list =
  93. #  (address=(protocol=ipc)(key=n23))
  94. #  (address=(protocol=tcp)(host=nineva)(port=1383))
  95. #  (address=(protocol=tcp)(host=cicada)(port=1575))
  96. # )
  97. #
  98. #Syntax:  ADDR_LIST
  99. #Default: Well-Known (OSD)
  100. #
  101. # Specifies a list of ONames servers in the client's region; requests will be
  102. # sent TO each ADDRESS IN the list until a response IS recieved, OR the list
  103. # (AND NUMBER OF retries) IS exhausted.
  104. #
  105. # Addresses OF the following form specify that messages TO the ONames server
  106. # should USE Oracle Remote Operations (RPC):
  107. #
  108. #     (description =
  109. #       (address=(protocol=tcp)(host=nineva)(port=1383))
  110. #       (connect_data=(rpc=ON))
  111. #     )
  112. #
  113. #
  114. #
  115. #names.request_retries = 2
  116. #
  117. #Syntax:  1-5
  118. #Default: 1
  119. #
  120. # Specifies the NUMBER OF times the client should try each server IN the list
  121. # OF preferred_servers before allowing the operation TO fail.
  122. #
  123. #
  124. #names.directory_path
  125. #
  126. #Syntax:  <adapter-name>
  127. #Default: TNSNAMES,ONAMES,HOSTNAME
  128. #
  129. # Sets the (ordered) list OF naming adaptors TO USE IN resolving a name.
  130. # The DEFAULT IS AS shown FOR 3.0.2 OF sqlnet onwards. The DEFAULT was
  131. # (TNSNAMES, ONAMES) before that. The VALUE can be presented without
  132. # parentheses IF only a single entry IS being specified. The parameter IS
  133. # recognized FROM version 2.3.2 OF sqlnet onward. Acceptable VALUES include:
  134. #  TNSNAMES -- tnsnames.ora lookup
  135. #  ONAMES   -- Oracle Names
  136. #  HOSTNAME -- use the hostname (or an alias of the hostname)
  137. #  NIS      -- NIS (also known as "yp")
  138. #  CDS      -- OSF DCE's Cell Directory Service
  139. #  NDS      -- Novell's Netware Directory Service
  140. #
  141. # - Client Cache (ONRSD) ---------------------------------------------
  142. #names.addresses = (ADDRESS=(PROTOCOL=IPC)(KEY=ONAMES))
  143. #
  144. #Syntax:  ADDR
  145. #Default: (ADDRESS=(PROTOCOL=IPC)(KEY=ONAMES))
  146. #
  147. # Address ON which the client cache listens (IS available TO clients).
  148. # ANY valid TNS address IS allowed. The DEFAULT should be used IF AT
  149. # ALL possible; clients have this entry hardwired AS the FIRST line
  150. # OF their server-list FILE (sdns.ora). IF the address IS SET TO a
  151. # non-DEFAULT VALUE the client's preferred_servers parameter should
  152. # be set to include the client-cache address first.
  153. #
  154. #
  155. #names.authority_required = False
  156. #
  157. #Syntax:  T/F
  158. #Default: False
  159. #
  160. # Determines whether system querys (for the root etc) require Authoritative
  161. # answers.
  162. #
  163. #
  164. #names.auto_refresh_expire = 259200
  165. #
  166. #Syntax:  Number of seconds, 60-1209600
  167. #Default: 259200
  168. #
  169. # This is the amount of time (in seconds) the server will cache the addresses
  170. # of servers listed in server-list file (sdns.ora). When this time expires the
  171. # server will issue another query to the servers in those regions to refresh
  172. # the data.
  173. #
  174. #
  175. #names.auto_refresh_retry = 180
  176. #
  177. #Syntax:  Number of seconds, 60-3600
  178. #Default: sec.  180
  179. #
  180. # This set how often the server will retry when the auto_refresh query fails.
  181. #
  182. #
  183. #names.cache_checkpoint_file = cache.ckp
  184. #
  185. #Syntax:  filename
  186. #Default: $ORACLE_HOME/network/names/ckpcch.ora
  187. #
  188. # Specifies the name of the operating system file to which the Names Server
  189. # writes its foreign data cache.
  190. #
  191. #
  192. #names.cache_checkpoint_interval = 7200
  193. #
  194. #Syntax:  Number of seconds, 10-259200
  195. #Default: 0 (off)
  196. #
  197. # Indicates the interval at which a Names Server writes a checkpoint of its
  198. # data cache to the checkpoint file.
  199. #
  200. #
  201. #names.default_forwarders=
  202. # (FORWARDER_LIST=
  203. #    (FORWARDER=
  204. #       (NAME= rootserv1.world)
  205. #       (ADDRESS=(PROTOCOL=tcp)(PORT=42100)(HOST=roothost))))
  206. #
  207. #Syntax:  Name-Value/address_list
  208. #Default: NULL
  209. #
  210. # A list (in NV form) of the addresses of other servers which should be used to
  211. # forward querys while in default_forwarder (slave) mode. NAME is the global
  212. # names for the server to which forwards whould be directed, and ADDRESS is its
  213. # address.
  214. #
  215. #
  216. #names.default_forwarders_only = True
  217. #
  218. #Syntax:  T/F
  219. #Default: False
  220. #
  221. # When set to true this server will use the servers listed in default_forwarders
  222. # to forward all operations which involve data in foreign regions. Otherwise it
  223. # will use the servers defined in the server-list file (sdns.ora) in addition
  224. # to any defined in the default_forwarders parameter.
  225. #
  226. #
  227. #names.log_directory = /oracle/network/log
  228. #
  229. #Syntax:  directory
  230. #Default: $ORACLE_HOME/network/log
  231. #
  232. # Indicates the name of the directory where the log file for Names Server
  233. # operational events are written.
  234. #
  235. #
  236. #names.log_file = names.log
  237. #
  238. #Syntax:  filename
  239. #Default: names.log
  240. #
  241. # The name of the output file to which Names Server operational events are
  242. # written.
  243. #
  244. #names.log_stats_interval = 3600
  245. #
  246. #Syntax:  Number of seconds, 10-ub4max
  247. #Default: sec.  0 (off)
  248. #
  249. #Specifies the number of seconds between statistical entries in log file.
  250. #
  251. #names.log_unique = False
  252. #
  253. #Syntax:  T/F
  254. #Default: False
  255. #
  256. # If set to true the server will guarantee that the log file will have a unique
  257. # name which will not overwrite any existing files (note that log files are
  258. # appended to, so log information will not be lost if log_unique is not true).
  259. #
  260. #names.max_open_connections = 10
  261. #
  262. #Syntax:  3-64
  263. #Default: 10
  264. #
  265. # Specifies the number of connections that the Names Server can have open at any
  266. # given time. The value is generated as the value 10 or the sum of one
  267. # connection for listening, five for clients, plus one for each foreign domain
  268. # defined in the local administrative region, whichever is greater. Any
  269. # operation which requires the server to open a network connection will use
  270. # an already open connection if it is available, or will open a connection
  271. # if not. Higher settings will save time and cost network resources; lower
  272. # settings save network resources, cost time.
  273. #
  274. #
  275. #names.max_reforwards = 2
  276. #
  277. #Syntax:  1-15
  278. #Default: 2
  279. #
  280. # The maximum number of times the server will attempt to forward a certain
  281. # operation.
  282. #
  283. #
  284. #names.message_pool_start_size = 24
  285. #
  286. #Syntax:  3-256
  287. #Default: 10
  288. #
  289. # Determines the initial number of messages allocated in the server's message
  290. # pool. This pool provides the server WITH pre-allocated messages TO be used
  291. # FOR incoming OR outgoing messages (forwards). Messages which are IN the pool
  292. # AND unused may be reused. IF a message IS needed AND no free messages are
  293. # available IN the pool more will be allocated.
  294. #
  295. #
  296. #names.no_modify_requests = FALSE
  297. #
  298. #Syntax:  T/F
  299. #Default: FALSE
  300. #
  301. # IF SET TO TRUE, the server will refuse ANY operations which MODIFY the
  302. # data IN its region (it will still save foreign info IN the cache which IS
  303. # returned FROM foreign querys).
  304. #
  305. #
  306. #names.password = 625926683431AA55
  307. #
  308. #Syntax:  encrypted string
  309. #Default: NULL
  310. #
  311. # IF SET the server will require that the USER provide a password IN his
  312. # namesctl SESSION (either WITH sqlnet.ora:namesctl.server_password OR 'set
  313. # password') IN ORDER TO DO 'sensitive' operations, LIKE STOP, restart, reload.
  314. # This parameter IS generally SET IN encrypted form, so it can NOT be SET
  315. # manually.
  316. #
  317. #names.reset_stats_interval = 3600
  318. #
  319. #Syntax:  10-ub4max
  320. #Default: 0 (off)
  321. #
  322. # Specifies the NUMBER OF seconds during which the STATISTICS collected BY the
  323. # Names Servers should accumulate. AT the frequency specified, they are reset
  324. # TO zero. The DEFAULT VALUE OF 0 means never reset STATISTICS.
  325. #
  326. #
  327. #names.trace_directory = /oracle/network/trace
  328. #
  329. #Syntax:  DIRECTORY
  330. #Default: $ORACLE_HOME/network/trace
  331. #
  332. # Indicates the name OF the DIRECTORY TO which trace files FROM a Names Server
  333. # trace SESSION are written.
  334. #
  335. #
  336. #names.trace_file = names.trc
  337. #
  338. #Syntax:  filename
  339. #Default: names.trc
  340. #
  341. # Indicates the name OF the output FILE FROM a Names Server trace SESSION.
  342. #
  343. #
  344. #names.trace_func # NA
  345. #
  346. #Syntax:  T/F
  347. #Default: FALSE
  348. #
  349. # Internal mechanism TO control tracing BY FUNCTION name.
  350. #
  351. #
  352. #names.trace_level = ADMIN
  353. #
  354. #Syntax:  T/F
  355. #Default: FALSE
  356. #
  357. #Syntax:  {OFF,USER,ADMIN,0-16}
  358. #Default: OFF (0)
  359. #
  360. # Indicates the LEVEL AT which the Names Server IS TO be traced.
  361. # Available VALUES:
  362. #   0 OR OFF - No trace output
  363. #   4 OR USER - USER trace information
  364. #   10 OR ADMIN - Administration trace information
  365. #   16 OR SUPPORT - WorldWide Customer Support trace information
  366. #
  367. #
  368. #names.trace_mask = (200,201,202,203,205,206,207)
  369. #
  370. #Syntax:  list OF numbers
  371. #Default: NULL
  372. #
  373. # Internal mechanism TO control trace behavior.
  374. #
  375. #
  376. #names.trace_unique = TRUE
  377. #
  378. #Syntax:  T/F
  379. #Default: FALSE
  380. #
  381. # Indicates whether each trace FILE has a UNIQUE name, allowing multiple trace
  382. # files TO coexist. IF the VALUE IS SET TO ON, a process identifier IS appended
  383. # TO the name OF each trace FILE generated.
  384. #
  385. #
  386. # - Namesctl ---------------------------------------------------------
  387. #
  388. #namesctl.trace_directory = /oracle/network/trace
  389. #
  390. #Syntax:  DIRECTORY
  391. #Default: $ON/trace
  392. #
  393. # Indicates the name OF the DIRECTORY TO which trace files FROM a namesctl
  394. # trace SESSION are written.
  395. #
  396. #
  397. #namesctl.trace_file = namesctl.trc
  398. #
  399. #Syntax:  filename
  400. #Default: namesctl.trc
  401. #
  402. # Indicates the name OF the output FILE FROM a namesctl trace SESSION.
  403. #
  404. #
  405. #namesctl.trace_func # NA
  406. #
  407. #Syntax:  word list
  408. #Default: NULL
  409. #
  410. # Internal mechanism TO control tracing BY FUNCTION name.
  411. #
  412. #
  413. #namesctl.trace_level = ADMIN
  414. #
  415. #Syntax:  {OFF,USER,ADMIN,0-16}
  416. #Default: OFF (0)
  417. #
  418. # Indicates the LEVEL AT which the namesctl IS TO be traced.
  419. # Available VALUES:
  420. #   0 OR OFF - No trace output
  421. #   4 OR USER - USER trace information
  422. #   10 OR ADMIN - Administration trace information
  423. #   16 OR SUPPORT - WorldWide Customer Support trace information
  424. #
  425. #
  426. #namesctl.trace_mask # NA
  427. #
  428. #Syntax:  NUMBER list
  429. #Default: NULL
  430. #
  431. # Internal mechanism TO control trace behavior.
  432. #
  433. #
  434. #namesctl.trace_unique = TRUE
  435. #
  436. #Syntax:  T/F
  437. #Default: FALSE
  438. #
  439. # Indicates whether each trace FILE has a UNIQUE name, allowing multiple trace
  440. # files TO coexist. IF the VALUE IS SET TO ON, a process identifier IS appended
  441. # TO the name OF each trace FILE generated.
  442. #
  443. #
  444. #namesctl.no_initial_server = FALSE
  445. #
  446. #Syntax:  T/F
  447. #Default: FALSE
  448. #
  449. # IF SET TO TRUE namesctl will suppress ANY error messages WHEN namesctl IS
  450. # unable TO CONNECT TO a DEFAULT names server.
  451. #
  452. #
  453. #namesctl.internal_use = TRUE
  454. #
  455. #Syntax:  T/F
  456. #Default: FALSE
  457. #
  458. # IF SET TO TRUE namesctl will enable a SET OF internal undocumented commands.
  459. # ALL internal commands are preceded BY an underscore ('_') IN ORDER TO
  460. # distinguish them AS internal. Without going INTO details, the commands
  461. # enabled are:
  462. #
  463. #     _add_data              _create_name           _delete_name          
  464. #     _full_status           _ireplace_data         _newttl_name          
  465. #     _pause                 _remove_data           _rename_name          
  466. #     _replace_data          _start                 _walk*                
  467. #
  468. # There are also a SET OF names server variables which may be SET WHEN
  469. # namesctl IS IN internal MODE:
  470. #
  471. #     _authority_required             _auto_refresh*                  
  472. #     _cache_checkpoint_interval      _cache_dump                    
  473. #     _default_autorefresh_expire     _default_autorefresh_retry      
  474. #     _default_forwarders_only        _forwarding_desired            
  475. #     _max_reforwards                 _modify_ops_enabled            
  476. #     _next_cache_checkpoint          _next_cache_flush              
  477. #     _next_stat_log                  _next_stat_reset                
  478. #     _reload                         _request_delay                  
  479. #     _restart                        _shutdown                      
  480. #
  481. #
  482. #namesctl.noconfirm = TRUE
  483. #
  484. #Syntax:  T/F
  485. #Default: FALSE
  486. #
  487. # WHEN SET TO TRUE namesctl will suppress the confirmation prompt WHEN
  488. # sensitive operations (STOP, restart, reload) are requested. This IS
  489. # quite helpful WHEN USING namesctl scripts.
  490. #
  491. #
  492. #namesctl.server_password = mangler
  493. #
  494. #Syntax:  string
  495. #Default: NULL
  496. #
  497. # Automatically sets the password FOR the names server IN ORDER TO perform
  498. # sensitive operations (STOP, restart, reload). The password may also be
  499. # SET manually during a namesctl SESSION USING 'set password'.
  500. #
  501. #
  502. #namesctl.internal_encrypt_password = FALSE
  503. #
  504. #Syntax:  T/F
  505. #Default: TRUE
  506. #
  507. # WHEN SET TO TRUE namesctl will NOT encrypt the password WHEN it IS sent TO
  508. # the names server. This would enable an unencrypted password TO be SET IN
  509. # names.ora:names.server_password
  510. #
  511. # - Native Naming Adpaters -------------------------------------------
  512. #
  513. #names.dce.prefix = /.:/subsys/oracle/names
  514. #
  515. #Syntax:  DCE cell name
  516. #Default: /.:/subsys/oracle/names
  517. #
  518. #Specifies the DCE cell (prefix) TO USE FOR name lookup.
  519. #
  520. #
  521. #names.nds.name_context = personnel.acme
  522. #
  523. #Syntax:  NDS name
  524. #Default: (OSD?)
  525. #
  526. # Specifies the DEFAULT NDS name CONTEXT IN which TO look FOR the name TO
  527. # be resolved.
  528. #
  529. #
  530. #names.nis.meta_map # NA
  531. #
  532. # Syntax:  filename
  533. # DEFAULT: sqlnet.maps
  534. #
  535. # Specifies the FILE TO be used TO map NIS attributes TO an NIS mapname.
  536. # Currently unused.
  537.  
  538. # - Oracle Advanced Security Authentication Adapters ----------------
  539.  
  540. #sqlnet.authentication_services
  541. #
  542. # Syntax: A single VALUE OR a list FROM {beq, none, ALL, kerberos5,
  543. #     radius, nts}
  544. # DEFAULT: NONE
  545. #
  546. # Enables one OR more authentication services.  IF
  547. # Oracle Advanced Security has been installed WITH Kerberos5
  548. # support, USING (beq, kerberos5) would enable authentication via
  549. # Kerberos.
  550. #
  551. #sqlnet.authentication_services=(beq, kerberos5)
  552.  
  553. ##
  554. ## Parmeters used WITH Kerberos adapter.
  555. ##
  556.  
  557. #sqlnet.kerberos5_cc_name
  558. #
  559. # Syntax: ANY valid pathname.
  560. # DEFAULT: /tmp/krb5cc_<uid>
  561. #
  562. # The Kerberos credential cache pathname.
  563. #
  564. #sqlnet.kerberos5_cc_name=/tmp/mycc
  565.  
  566. #sqlnet.kerberos5_clockskew
  567. #
  568. # Syntax: ANY POSITIVE INTEGER.
  569. # DEFAULT: 300
  570. #
  571. # The acceptable difference IN the NUMBER OF seconds BETWEEN WHEN a
  572. # credential was sent AND WHEN it was received.
  573. #
  574. #sqlnet.kerberos5_clockskew=600
  575.  
  576. #sqlnet.kerberos5_conf
  577. #
  578. # Syntax: ANY valid pathname.
  579. # DEFAULT: /krb5/krb.conf
  580. #
  581. # The Kerberos configuration pathname.
  582. #
  583. #sqlnet.kerberos5_conf=/tmp/mykrb.conf
  584.  
  585. #sqlnet.kerberos5_realms
  586. #
  587. # Syntax: ANY valid pathname
  588. # DEFAULT: /krb5/krb.realms
  589. #
  590. # The Kerberos host name TO realm translation FILE.
  591. #
  592. #sqlnet.kerberos5_realms=/tmp/mykrb.realms
  593.  
  594. #sqlnet.kerberos5_keytab
  595. #
  596. # Syntax: ANY valid pathname.
  597. # DEFAULT: /etc/v5srvtab
  598. #
  599. # The Kerberos secret KEY FILE.
  600. #
  601. #sqlnet.kerberos5_keytab=/tmp/myv5srvtab
  602.  
  603. #sqlnet.authentication_kerberos5_service
  604. #
  605. # Syntax: ANY string.
  606. # DEFAULT: A DEFAULT IS NOT provided.
  607. #
  608. # The Kerberos service name.
  609. #
  610. #sqlnet.authentication_kerberos5_service=acme
  611.  
  612. ##
  613. ## Parameters used WITH Radius adapter
  614. ##
  615.  
  616. # Need TO specify the location OF the Radius server
  617. #sqlnet.radius_authentication = localhost
  618.  
  619. # Need TO specify the port address OF the Radius server
  620. #sqlnet.radius_authentication_port = 1654
  621.  
  622. # IF your radius server support accounting, you can enable it
  623. #sqlnet.radius_accounting = off
  624.  
  625. # Turn ON/off challenge response
  626. #sqlnet.radius_challenge_response = off
  627.  
  628. # Keyword TO request a challenge FROM Radius server.  
  629. # IF you USE activcard, enter activcard
  630.  
  631. # IF you USE something ELSE, enter challenge
  632. #sqlnet.radius_challenge_keyword = challenge
  633.  
  634. # Enter the name OF the client INTERFACE you want TO USE FOR challenge response
  635. #sqlnet.radius_authentication_interface = DefaultRadiusInterface
  636.  
  637. # WHERE IS the secret FILE locate
  638. #sqlnet.radius_secret = $ORACLE_HOME/security/radius.KEY
  639.  
  640.  
  641. # - Oracle Advanced Security Network Security -------------------------
  642.  
  643. #sqlnet.crypto_checksum_client
  644. #sqlnet.crypto_checksum_server
  645. #sqlnet.encryption_client
  646. #sqlnet.encryption_server
  647. #
  648. # These four parameters are used TO specify whether a service (e.g.
  649. # crypto-checksumming OR encryption) should be active:
  650. #
  651. # Each OF the above parameters defaults TO ACCEPTED.
  652. #
  653. # Each OF the above parameters can have one OF four possible VALUES:
  654. #
  655. # VALUE     meaning
  656. #
  657. # ACCEPTED  The service will be active IF the other side OF the
  658. #       connection specifies "REQUESTED" OR REQUIRED" and
  659. #       there is a compatible algorithm available on the other
  660. #       side; it will be inactive otherwise.
  661. #
  662. # REJECTED  The service must not be active, and the connection
  663. #       will fail if the other side specifies "REQUIRED".
  664. #
  665. # REQUESTED The service will be active if the other side specifies
  666. #       "ACCEPTED", "REQUESTED", or "REQUIRED" and there is a
  667. #       compatible algorithm available on the other side; it
  668. #       will be inactive otherwise.
  669. #
  670. # REQUIRED  The service must be active, and the connection will
  671. #       fail if the other side specifies "REJECTED" or if there
  672. #       is no compatible algorithm on the other side.
  673. #
  674. #sqlnet.crypto_checksum_types_client
  675. #sqlnet.crypto_checksum_types_server
  676. #sqlnet.encryption_types_client
  677. #sqlnet.encryption_types_server
  678. #
  679. # These parameters control which algorithms will be made available for
  680. # each service on each end of a connection:
  681. #
  682. # The value of each of these parameters can be either a parenthesized
  683. # list of algorithm names separated by commas or a single algorithm
  684. # name.
  685. #
  686. # Encryption types can be: AES256, RC4_256, AES192, 3DES168, AES128,
  687. #                          RC4_128,3DES112, RC4_56, DES, RC4_40, DES40
  688. #
  689. # Encryption defaults to all the algorithms.
  690. #
  691. # Crypto checksum types can be: SHA1, MD5
  692. #
  693. # Crypto checksum defaults to all the algorithms.
  694. #
  695. #sqlnet.crypto_checksum_server = required
  696. #sqlnet.encryption_server = required
  697. #
  698. #
  699. #ssl_server_dn_match
  700. #
  701. # Systax: ON/OFF
  702. # Default: OFF
  703. #
  704. # The ssl_server_dn_match parameter determines SSL behavior when the
  705. # server's distinguished name does not match the service name. When
  706. # set to ON, the names must match for a connection to be established.
  707. # Leaving the parameter on OFF allows connection to servers where
  708. # the names do not match. However, this may potentially allow servers
  709. # to fake their identity.
  710. #
  711. #
  712. #ssl_client_authentication
  713. #
  714. # Syntax: TRUE/FALSE
  715. # Default: TRUE
  716. #
  717. # The ssl_client_authentication parameter controls whether the client
  718. # is authenticated using SSL. This parameter should be set to FALSE if
  719. # using a cipher suite that contains Diffie-Hellman anonymous
  720. # authentication (DH_anon) or if using other non-SSL authentication
  721. # methods.
  722. #
  723. #ssl_cipher_suites
  724. #
  725. # Syntax: (SSL_RSA_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_RC4_128_SHA,
  726. #          SSL_RSA_WITH_RC4_128_MD5, SSL_RSA_WITH_DES_CBC_SHA,
  727. #          SSL_DH_anon_WITH_3DES_EDE_CBC_SHA, SSL_DH_anon_WITH_RC4_128_MD5,
  728. #          SSL_DH_anon_WITH_DES_CBC_SHA, SSL_RSA_EXPORT_WITH_RC4_40_MD5,
  729. #          SSL_RSA_EXPORT_WITH_DES40_CBC_SHA,
  730. #          SSL_DH_anon_EXPORT_WITH_RC4_40_MD5,
  731. #          SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA)
  732. # Default: All cipher suites enabled
  733. #
  734. # ssl_cipher_suites defines a list of cipher suites used to negotiate
  735. # an SSL connection in order of priority. The cipher suites selected for
  736. # a server must be compatible with those required by the client.
  737. #
  738. #ssl_version
  739. #
  740. # Syntax: 0/2.0/3.0
  741. # Default: 0 (impiles 3.0)
  742. #
  743. # The ssl_version parameter defines the version of SSL that must
  744. # run on the systems with which the client communicates.
  745. #
  746. # - SSL ---------------------------------------------------------------------
  747.  
  748. #my_wallet
  749. #
  750. # Syntax: A properly formatted NLNV list.
  751. # Default: Platform specific.  Unix: $HOME/oracle/oss
  752. #
  753. # The method for retrieving and storing my identity.  
  754. #
  755. #my_wallet
  756. #   =(source
  757. #       =(method=file)
  758. #        (method_data=/dve/asriniva/oss/wallet)
  759. #     )
  760.  
  761. # - Sqlnet(v2.x) and Net3.0 Client ------------------------------------------
  762.  
  763. #
  764. # In the following descriptions, the term "client program" could mean
  765. # either sqlplus, svrmgrl or any other OCI programs written by users
  766. #
  767. ###########################
  768. #trace_level_client = ADMIN
  769. ###########################
  770. #
  771. #Possible values: {OFF,USER,ADMIN,0-16}
  772. #Default:         OFF (0)
  773. #
  774. #Purpose: Indicates the level at which the client program
  775. #         is to be traced.
  776. # Available Values:
  777. #       0 or OFF - No Trace output
  778. #   4 or USER - User trace information
  779. #   10 or ADMIN - Administration trace information
  780. #   16 or SUPPORT - Worldwide Customer Support trace information
  781. #
  782. #Supported since:  v2.0
  783. #
  784. ###############################################
  785. #trace_directory_client = /oracle/network/trace
  786. ###############################################
  787. #
  788. #Possible values: Any valid directory path with write permission
  789. #Default: $ORACLE_HOME/network/trace  ($ORACLE_HOME=/oracle at customer
  790. #         site)
  791. #
  792. #Purpose: Indicates the name of the directory to which trace files from
  793. #         the client execution are written.
  794. #
  795. #Supported since: v2.0
  796. #
  797. ###################################################
  798. #trace_file_client =  /oracle/network/trace/cli.trc
  799. ###################################################
  800. #
  801. #Possible values: Any valid file name
  802. #Default:     $ORACLE_HOME/network/trace/cli.trc ($ORACLE_HOME =
  803. #         /oracle at customer site)
  804. #
  805. #Purpose: Indicates the name of the file to which the execution trace
  806. #         of the client is written to.
  807. #
  808. #Supported since: v2.0
  809. #
  810. ###########################
  811. #trace_unique_client = ON
  812. ###########################
  813. #
  814. #Possible values: {ON, OFF}
  815. #Default: OFF
  816. #
  817. #Purpose: Used to make each client trace file have a unique name to
  818. #     prevent each trace file from being overwritten by successive
  819. #     runs of the client program
  820. #
  821. #Supported since: v2.0
  822. #
  823. ###########################################
  824. #log_directory_client = /oracle/network/log
  825. ###########################################
  826. #
  827. #Possible values: Any valid directory pathname
  828. #Default: $ORACLE_HOME/network/log  ($ORACLE_HOME = /oracle at customer
  829. #     site)
  830. #
  831. #Purpose: Indicates the name of the directory to which the client log file
  832. #     is written to.
  833. #
  834. #
  835. #Supported since: v2.0
  836. #
  837. ################
  838. #log_file_client = /oracle/network/log/sqlnet.log
  839. ################
  840. #
  841. #Possible values: This is a default value, u cannot change this
  842. #Default: $ORACLE_HOME/network/log/sqlnet.log  ($ORACLE_HOME=/oracle in
  843. #         customer site)
  844. #
  845. #Purpose: Indicates the name of the log file from a client program
  846. #
  847. #Supported since: v2.0
  848. #
  849. #############################################
  850. #log_directory_server = /oracle/network/trace
  851. #############################################
  852. #
  853. #Possible values: Any valid diretcory path with write permission
  854. #Default: $ORACLE_HOME/network/trace ( $ORACLE_HOME=/oracle at customer
  855. #     site)
  856. #
  857. #Purpose: Indicates the name of the directory to which log files from the
  858. #     server are written
  859. #
  860. #Supported since:  v2.0
  861. #
  862. ###############################################
  863. #trace_directory_server = /oracle/network/trace
  864. ###############################################
  865. #
  866. #Possible values: Any valid directory path with write permission
  867. #Default: $ORACLE_HOME/network_trace ( $ORACLE_HOME=/oracle at customer
  868. #     site)
  869. #
  870. #Purpose: Indicates the name of the directory to which trace files from
  871. #         the server are written
  872. #
  873. #Supported since:  v2.0
  874. #
  875. #######################################################
  876. #trace_file_server = /orace/network/trace/svr_<pid>.trc
  877. #######################################################
  878. #
  879. #Possible values: Any valid filename
  880. #Default: $ORACLE_HOME/network/trace/svr_<pid>.trc where <pid? stands for
  881. #         the process id of the server on UNIX systems
  882. #
  883. #Purpose: Indicates the name of the file to which the execution trace of
  884. #         the server program is written to.
  885. #
  886. #Supported since: v2.0
  887. #
  888. ###########################
  889. #trace_level_server = ADMIN
  890. ###########################
  891. #
  892. #Possible values: {OFF,USER,ADMIN,0-16}
  893. #Default:         OFF (0)
  894. #
  895. #Purpose: Indicates the level at which the server program
  896. #         is to be traced.
  897. # Available Values:
  898. #       0 or OFF - No Trace output
  899. #       4 or USER - User trace information
  900. #       10 or ADMIN - Administration trace information
  901. #       16 or SUPPORT - Worldwide Customer Support trace information
  902. #
  903. #Supported since: v2.0
  904. #
  905. ##########################
  906. #use_dedicated_server = ON
  907. ##########################
  908. #
  909. #Possible values: {OFF,ON}
  910. #Default:     OFF
  911. #
  912. #Purpose: Forces the listener to spawn a dedicated server process for
  913. #     sessions from this client program.
  914. #
  915. #Supported since: v2.0
  916. #
  917. ################
  918. #use_cman = TRUE
  919. ################
  920. #
  921. #Possible values: {TRUE, FALSE}
  922. #Default:     FALSE
  923. #
  924. #Purpose:
  925. #
  926. #Supported since: v3.0
  927. #
  928. ################################################
  929. #tnsping.trace_directory = /oracle/network/trace
  930. ################################################
  931. #
  932. #Possible values: Any valid directory pathname
  933. #Default: $ORACLE_HOME/network/trace ($ORACLE_HOME=/oracle at customer
  934. #     site)
  935. #
  936. #Purpose: Indicates the directory to which the execution trace from
  937. #     the tnsping program is to be written to.
  938. #
  939. #Supported since: v2.0
  940. #
  941. ############################
  942. #tnsping.trace_level = ADMIN    
  943. ############################
  944. #
  945. #Possible values: {OFF,USER,ADMIN,0-16}
  946. #Default:         OFF (0)
  947. #
  948. #Purpose: Indicates the level at which the server program
  949. #         is to be traced.
  950. # Available Values:
  951. #       0 or OFF - No Trace output
  952. #       4 or USER - User trace information
  953. #       10 or ADMIN - Administration trace information
  954. #       16 or SUPPORT - Worldwide Customer Support trace information
  955. #
  956. #
  957. #Supported since: v2.0
  958. #
  959. ########################
  960. #sqlnet.expire_time = 10
  961. ########################
  962. #
  963. #Possible values: 0-any valid positive integer! (in minutes)
  964. #Default: 0 minutes
  965. #Recommended value: 10 minutes
  966. #
  967. #Purpose: Indicates the time interval to send a probe to verify the
  968. #     client session is alive (this is used to reclaim watseful
  969. #     resources on a dead client)
  970. #
  971. #Supported since: v2.1
  972. #
  973. #######################################
  974. #sqlnet.client_registration = <unique_id>
  975. #######################################
  976. #
  977. #Possible values:
  978. #Default:     OFF
  979. #
  980. #Purpose: Sets a unique identifier for the client machine. This
  981. #     identifier is then passed to the listener with any connection
  982. #     request and will be included in the Audit Trail. The identifier
  983. #     can be any alphanumeric string up to 128 characters long.
  984. #
  985. #Supported since: v2.3.2
  986. #
  987. ######################
  988. #bequeath_detach = YES
  989. ######################
  990. #
  991. #Possible values: {YES,NO}
  992. #Default:         NO
  993. #
  994. #Purpose: Turns off signal handling on UNIX systems. If signal handling
  995. #     were not turned off and if client programs written by users make
  996. #     use of signal handling they could interfere with Sqlnet/Net3.
  997. #
  998. #Supported since: v2.3.3
  999. #
  1000. ####################
  1001. #automatic_ipc = OFF
  1002. ####################
  1003. #
  1004. #Possible values: {ON,OFF}
  1005. #Default: OFF
  1006. #
  1007. #Purpose: Force a session to use or not to use IPC addresses on the
  1008. #     client's node.
  1009. #
  1010. #Supported since: v2.0
  1011. #
  1012. ####################
  1013. #disable_oob = ON
  1014. ####################
  1015. #
  1016. #Possible values: {ON,OFF}
  1017. #Default: OFF
  1018. #
  1019. #Purpose: If the underlying transport protocol (TCP, DECnet,...) does
  1020. #         not support Out-of-band breaks, then disable out-of-band
  1021. #     breaks
  1022. #
  1023. #Supported since: v2.0
  1024. #
  1025. ####################
  1026. #sqlnet.inbound_connect_timeout = 3
  1027. ########################
  1028. #
  1029. #Possible values: 0-any valid positive integer (in seconds)
  1030. #Default: 0
  1031. #Recommended value: 3 seconds (note: this is highly application dependent)
  1032. #
  1033. #Purpose: Indicates the time interval within which database authentication
  1034. #         for a client must be completed. If the client fails to complete
  1035. #         authentication within the given time period, then the database
  1036. #         server will drop the client connection. This can be used to
  1037. #         counter Denial of Service attacks in which malicious clients may
  1038. #         cause numerous servers to be spawn without fully establishing DB
  1039. #         sessions.
  1040. #
  1041. #         A value of 0 turns off the timeout feature. If a spurious
  1042. #         timeout error occurs (e.g. due to a slow network/system),
  1043. #         reconfigure this parameter to a larger value.
  1044. #
  1045. #Supported since: v9.2
  1046. #
  1047.  
  1048. # ORACLE NETWORK V11.0
  1049.  
  1050. #######################
  1051. #diag_adr_enabled = OFF
  1052. #######################
  1053. #
  1054. #Possible values: {OFF,ON}
  1055. #Default:         ON
  1056. #
  1057. #Purpose: Indicates whether Automatic Diagnostic Repository (ADR) tracing is
  1058. #         to be enabled.
  1059. #
  1060. # Available Values:
  1061. #       OFF - Use pre-11g file tracing
  1062. #       ON  - Use ADR tracing
  1063. #
  1064. #Supported since:  11.0
  1065. #
  1066. #################################
  1067. #adr_base = /oracle/network/trace
  1068. #################################
  1069. #
  1070. #Possible values: Any valid directory path with write permission
  1071. #Default: $ORACLE_HOME ($ORACLE_HOME=/oracle at customer site)
  1072. #
  1073. #Purpose: This is the ADR base directory into which tracing, logging, and
  1074. #         DDE first failure incidents are stored.
  1075. #
  1076. #Supported since:  11.0
  1077. #
  1078. #######################
  1079. #diag_dde_enabled = OFF
  1080. #######################
  1081. #
  1082. #Possible values: {OFF,ON}
  1083. #Default:         ON
  1084. #
  1085. #Purpose: Indicates whether Diagnostic Data Extractor (DDE) first failure is
  1086. #         to be enabled.
  1087. #
  1088. # Available Values:
  1089. #       OFF - No DDE incident dumping
  1090. #       ON  - Enable DDE incident dumping
  1091. #
  1092. #Supported since:  11.0
  1093. #
  1094. #######################
  1095. #diag_bucket_size = 8192
  1096. #######################
  1097. #
  1098. #Possible values: 8192 to UB4MAXVAL
  1099. #Default: 0
  1100. #
  1101. #Purpose: Unified Trace Service (UTS) in-memory default bucket size (in bytes)
  1102. #
  1103. #Supported since:  11.0
  1104. #
  1105. #######################
  1106. #sdp.pf_inet_sdp = 27
  1107. #######################
  1108. #
  1109. #Possible values: positive integer
  1110. #Default: 27
  1111. #
  1112. #Purpose: Use parameter SDP.PF_INET_SDP to specify the protocol family or
  1113. #         address family constant for the SDP protocol on your system.
  1114. #
  1115. #Supported since:  11.0
  1116. #
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement