C
Configuration Parameters

Purpose:  

Defines a protocol address. This parameter may be embedded under ADDRESS_LIST or DESCRIPTION. A DESCRIPTION is typically only used in a TNSNAMES.ORA or LISTENER.ORA file.

Additional Information: Each protocol has its own required parameters needed in the address, as explained on "Configuring Protocol Addresses".  

Example:  

(address=
 (protocol=tcp)
 (host=sales-pc)
 (port=1521)
)

Purpose:  

Defines lists of addresses that share a set of common characteristics.

This parameter may be embedded under DESCRIPTION or DESCRIPTION_LIST. A DESCRIPTION or DESCRIPTION_LIST is typically only used in a TNSNAMES.ORA or LISTENER.ORA file.

Note: If there is only one list in a TNSNAMES.ORA or a LISTENER.ORA file, ADDRESS_LIST is not necessary.  

Example:  

 (address_list=
  (address=
   (protocol=tcp)
   (host=sales-pc)
   (port=1521)
  )  
  (address=
   (protocol=tcp)
   (host=hr-pc)
   (port=1521)
  ) 
 ) 
 (address_list=
  (address=
   (protocol=tcp)
   (host=finance-pc)
   (port=1521)
  )  
  (address=
   (protocol=tcp)
   (host=sales-pc)
   (port=1521)
  ) 
 ) 

Purpose:  

Turn on/off signal handling in Net8 on UNIX systems.  

Default:  

NO which leaves signal handling on.  

Values:  

• YES - Turns off signal handling

• NO - Leaves signal handling on

Example:  

bequeath_detach=yes

Purpose:  

Turns tracing on/off to a certain specified level for the Oracle Enterprise Manager daemon.  

Default:  

OFF  

Values  

• OFF - No trace output

• USER - User trace information

• ADMIN - Administration trace information

• SUPPORT - WorldWide Customer Support trace information

Example:  

daemon.trace_level=user

Purpose:  

Specifies that only the Oracle Enterprise Manager daemon trace entries are logged into the trace file.  

Default:  

$ORACLE_HOME/network/trace on UNIX platforms and ORACLE_HOME/network/trace on Windows platforms  

Example:  

daemon.trace_mask=(106)

Purpose:  

Disables out of band breaks.  

Default:  

OFF  

Usage Notes:  

Disable out of band breaks if the underlying transport protocol does not support the feature.  

Example:  

disable_oob=off

Purpose:  

Controls the directory for where the log file is written.  

Default:  

Current directory where executable is started from.  

Example:  

log_directory_client=/oracle/network/log

Purpose:  

Controls the directory for where the log file is written.  

Default:  

Current directory where executable is started from.  

Example:  

log_directory_server=/oracle/network/log

Purpose:  

Controls the log output file name for an Oracle client.  

Default:  

SQLNET.LOG  

Example:  

log_file_client=client

Purpose:  

Controls the log output file name for an Oracle server.  

Default:  

SQLNET.LOG  

Example:  

log_file_server=svr.log

Purpose:  

Specifies the DCE cell name (prefix) to use for name lookup.  

Default:  

/.:/subsys/oracle/names

Example:  

names.dce.prefix=/.:/subsys/oracle/names

Purpose:  

Indicates the domain from which the client most often requests names. When this parameter is set, the default domain name will be automatically appended to any unqualified service name. Any name which contains an unescaped dot ('.') will not have the default domain appended. Simple names may be qualified with a trailing dot (for example, 'rootserver.').  

Default:  

NULL  

Example:  

names.default_domain=com

Purpose:  

Indicates the order of the naming methods, such as TNSNAMES or Oracle Names, that will be used for client name requests.  

Default:  

TNSNAMES, ONAMES, HOSTNAME  

Values:  

• TNSNAMES

• ONAMES

• HOSTNAME

• DCE

• NIS

• NOVELL

Example:  

names.directory_path=(tnsnames, onames)

Purpose:  

Determines how long a client will wait for a response from an Oracle Names server before reiterating the request to the next server in the preferred servers list.  

Default:  

15  

Minimum Value:  

1  

Maximum Value:  

600  

Example:  

names.initial_retry_timeout=20

Purpose:  

Determines how many connections an Oracle Names client may have open at one time.  

Default:  

10  

Minimum Value:  

3  

Maximum Value:  

64  

Example:  

names.max_open_connections=3

Purpose:  

Determines the initial number of messages allocated in the client's message pool which are used for forwarded message requests.  

Default:  

10  

Minimum Value:  

3  

Maximum Value:  

256  

Example:  

names.message_pool_start_size=10

Purpose:  

Specifies the file to be used to map NIS attributes to an NIS mapname.  

Default:  

SQLNET.MAPS  

Example:  

names.nis.meta_map=sqlnet.maps

Purpose:  

Indicates the name, addresses, and order of Oracle Names servers that will be used for a client's name requests.  

Default:  

None  

Example:  

names.preferred_servers= (address_list=
  (address=(protocol=ipc)(key=n23))
  (address=(protocol=tcp)(host-nineva)(key=1575))
  (address=(protocol=tcp)(host=cicada)(key=1575)))

Purpose:  

Specifies the number of times the client should try each server in the list of preferred servers before allowing the operation to fail.  

Default:  

1  

Minimum Value:  

1  

Maximum Value:  

5  

Example:  

names.request_retries=5

Purpose:  

If set to TRUE, NAMESCTL encrypts the password when it is sent to the Oracle Names server.

If set to FALSE, NAMESCTL does not encrypt the password when it is sent to the Oracle Names server. This enables unencrypted passwords to be set in the NAMES.ORA file with the NAMES.PASSWORD parameter.  

Default:  

FALSE  

Values:  

TRUE | FALSE  

Example:  

namesctl.internal_encrypt_password=true

Purpose  

If set to TRUE, NAMESCTL enables a set of internal undocumented commands. All internal commands are preceded by an underscore in order to distinguish them as internal.  

Purpose:  

If set to TRUE, NAMESCTL suppresses any error messages when unable to connect to a default Oracle Names server.  

Default:  

FALSE  

Values  

TRUE | FALSE  

Example:  

namesctl.no_initial_server=true

Purpose:  

Indicates whether sensitive commands (STOP, RELOAD, RESTART) should be prompted with a confirmation when running the NAMESCTL utility.  

Default:  

OFF  

Values  

ON | OFF  

Example:  

namesctl.noconfirm=on

Purpose:  

Indicates the value that matches the configured password set in the NAMES.ORA file with the NAMES.PASSWORD parameter. This eliminates the need to enter the password with the SET PASSWORD command each time you use the NAMESCTL utility to perform secure options, such as STOP, RESTART and RELOAD.  

Example:  

namesctl.server_password=secret

Purpose:  

Indicates the level at which the NAMESCTL program should be traced.  

Default:  

OFF  

Values:  

OFF, USER, ADMIN, SUPPORT  

Example:  

namesctl.trace_level=admin

Purpose:  

Indicates the file in which the NAMESCTL trace output is placed.  

Default:  

NAMESCTL_PID.TRC  

Example:  

namesctl.trace_file=nmsctl

Purpose:  

Indicates the directory where trace output from the NAMESCTL utility is placed.  

Default:  

$ORACLE_HOME/network/trace on UNIX and ORACLE_HOME/network/trace on Windows NT  

Example:  

namesctl.trace_directory=/oracle/trace

Purpose:  

Indicates whether a process identifier is appended to the name of each trace file generated, so that several can co-exist.  

Default:  

ON  

Values:  

ON | OFF  

Example:  

namesctl.trace_unique=on

Purpose:  

Enter the location of wallets. Wallets are certificates, keys and trustpoints processed by SSL.  

Default:  

None  

Example:  

oss.source.my_wallet=  
   (source=
      (method=file)
      (method_data=  
        (directory=/home/smalladi/oss)))

Purpose:  

Defines the method for retrieving encrypted private keys.  

Default:  

None  

Example:  

oss.source.location= 
(source= 
 (method=oracle) 
 (method_data=
    (sqlnet_address=oss)))

Purpose:  

Enables one or more authentication services. If authentication has been installed, it is recommended that this parameter be set to either NONE or to one of the authentication methods.  

Default:  

None  

Values:  

NONE - the database will use the user name and password to log in

ALL - Enables all authentication methods to be used.

BEQ - always used in conjunction with one or more of the following items:

NDS - use NetWare Directory Services (NDS)

NTS - use Windows NT Native

KERBEROS5 - use Kerberos

SECURID - use SecurID

CYBERSAFE - use Cybersafe

IDENTIX - use Identix

DCEGSSAPI - use DCE GSSAPI

RADIUS - use RADIUS  

Example:  

sqlnet.authentication_services =(beq, kerberos5, cybersafe)

Purpose:  

Defines the name of the service used to obtain a Kerberos service ticket  

Default:  

None  

Example:  

sqlnet.authentication_kerberos5_service= oracle

Purpose:  

Defines the CyberSAFE service principal  

Purpose:  

Sets a unique identifier for this client machine. This identifier will be passed to the listener with any connection request and will be included in the Audit Trail. The identifier can be any alphanumeric string up to 128 characters long.  

Default:  

None  

Example:  

sqlnet.client_registration 1432

Purpose:  

Specifies the desired checksum behavior when this client is connecting to a server  

Default:  

ACCEPTED  

Values:  

• ACCEPTED

• REJECTED

• REQUESTED

• REQUIRED

Example:  

sqlnet.crypto_checksum_client=accepted

Purpose:  

Specifies the desired checksum behavior when a client is connecting to this server  

Default:  

ACCEPTED  

Values:  

• ACCEPTED

• REJECTED

• REQUESTED

• REQUIRED

Example:  

sqlnet.crypto_checksum_server=accepted

Purpose:  

Specifies a list of crypto-checksum algorithms this client is allowed to use  

Default:  

MD5  

Values:  

MD5 - RSA Data Security's MD5 algorithm  

Example:  

sqlnet.crypto_checksum_types_client=(md5)

Purpose:  

Specifies a list of crypto-checksum algorithms this server is allowed to use  

Default:  

MD5  

Values:  

MD5 - RSA Data Security's MD5 algorithm  

Example:  

sqlnet.crypto_checksum_types_server=(md5)

Purpose:  

Specifies the characters used when generating cryptographic keys. The more random the characters are, the stronger the keys are. This is required whenever encryption or checksumming is turned on. The string should be 10-70 random characters.  

Default:  

qwertyuiopasdfghjkl;zxcvbnm,.s1  

Example:  

sqlnet.crypto_seed="qwertyuiopasdfghjkl;zxcvbnm,.s1"

Purpose:  

Specifies the desired behavior when this client is connecting to a server  

Default:  

ACCEPTED  

Values:  

• ACCEPTED

• REJECTED

• REQUESTED

• REQUIRED

Example:  

sqlnet.encryption_client=accepted

Purpose:  

Specifies the desired behavior when a client is connecting to this server  

Default:  

ACCEPTED  

Values:  

• ACCEPTED

• REJECTED

• REQUESTED

• REQUIRED

Example:  

sqlnet.encryption_server=accepted

Purpose:  

Specifies a list of encryption algorithms this client is allowed to use  

Default:  

All algorithms are used if none are specified.  

Values:  

One or more of the following:

RC4_40 - RSA RC4 (40 bit key size) Domestic & International

RC4_56 - RSA RC4 (56 bit key size) Domestic only

RC4_128 - RSA RC4 (128 bit key size) Domestic only

DES - Standard DES (56 bit key size) Domestic only

DES40 - (40 bit key size) Domestic & International  

Example:  

sqlnet.encryption_types_client=(rc4_40)

Purpose:  

Specifies a list of encryption algorithms this server is allowed to use when acting as a server  

Default:  

All algorithms are used if none are specified.  

Values:  

RC4_40 - RSA RC4 (40 bit key size) Domestic & International

RC4_56 - RSA RC4 (56 bit key size) Domestic only

RC4_128 - RSA RC4 (128 bit key size) Domestic only

DES - Standard DES (56 bit key size) Domestic only

DES40 - (40 bit key size) Domestic & International  

Example:  

sqlnet.encryption_types_server=(rc4_40, des, ...)

Purpose:  

Determines time interval to send a probe to verify the session is alive  

Default:  

None  

Minimum Value:  

0 minutes  

Recommended Value:  

10 minutes  

Example:  

sqlnet.expire_time=10

Purpose:  

Specifies the service name or alias for the authentication fingerprint database  

Default:  

None  

Example:  

sqlnet.identix_fingerprint_database=fingrdb

Purpose:  

Specifies the well known user name for the fingerprint database  

Default:  

None  

Example:  

sqlnet.identix_fingerprint_database_user=manager

Purpose:  

Specifies the well known password for the fingerprint database  

Default:  

None  

Example:  

sqlnet.identix_fingerprint_database_password=password

Purpose:  

Specifies the method name for the fingerprint database. The method name must be ORACLE  

Default:  

None  

Example:  

sqlnet.identix_fingerprint_method=oracle

Purpose:  

Specifies the complete path name to the Kerberos credentials cache file.  

Default:  

/usr/tmp/krbcache on UNIX and c:\tmp\krbcache on Windows platforms  

Example:  

sqlnet.kerberos5_cc_name= /usr/tmp/krbcache

Purpose:  

Specifies how many seconds can pass before a Kerberos credential is considered out of date.  

Default:  

300  

Example:  

sqlnet.kerberos5_clockskew=1200

Purpose:  

Specifies the complete path name to the Kerberos configuration file, which contains the realm for the default KDC and maps realms to KDC hosts.  

Default:  

/krb5/krb.conf on UNIX and c:\krb5\krb.conf on Windows platforms  

Example:  

sqlnet.kerberos5_conf=/krb5/krb.conf

Purpose:  

Specifies the complete path name to the Kerberos principal/secret key mapping file, which is used to extract keys and decrypt incoming authentication information.  

Default:  

/etc/v5srvtab on UNIX and c:\krb5\v5srvtab on Windows platforms  

Example:  

sqlnet.kerberos5_keytab=/etc/v5srvtab

Purpose:  

Specifies the complete pathname to the Kerberos realm translation file, which provides a mapping from a host name or domain name to a realm.  

Default:  

/krb5/krb.realms on UNIX and c:\krb5\krb.realms on Windows platforms  

Example:  

sqlnet.kerberos5_realms= /krb5/krb.realms

Purpose:  

Specifies an alternate RADIUS server used in case the primary server is unavailable. The value can be either the IP address or host name of the server.  

Default:  

None  

Example:  

sqlnet.radius_alternate=radius2

Purpose:  

Listening port of the alternate RADIUS server.  

Default:  

1645  

Example:  

sqlnet.radius_alternate_port= 1667

Purpose:  

Times to resend  

Default:  

3  

Example:  

sqlnet.radius_alternate_retries=4

Purpose:  

Time to wait for response.  

Default:  

5 seconds  

Example:  

sqlnet.radius_authenetication_timeout= 10

Purpose:  

Specifies the location of the primary RADIUS server, either by its host name or IP address.  

Default:  

local host  

Example:  

sqlnet.radius_authenetication= officeacct

Purpose:  

Specifies the class containing the user interface used to interact with the user.  

Default:  

DefaultRadiusInterface  

Example:  

sqlnet.radius_authenetication_interface= 

Purpose:  

Listening port of the primary RADIUS server.  

Default:  

1645  

Example:  

sqlnet.radius_authenetication_port= 1667

Purpose:  

Times to resend.  

Default:  

3  

Example:  

sqlnet.radius_authenetication_retries=4

Purpose:  

Time to wait for response.  

Default:  

5 seconds  

Example:  

sqlnet.radius_authenetication_timeout= 10

Purpose:  

Turns challenge response ON or OFF.  

Default:  

OFF  

Values:  

ON | OFF  

Example:  

sqlnet.radius_challenge_response=ON

Purpose:  

Specifies the full path to the file containing the RADIUS shared secret.  

Default:  

$ORACLE_HOME/network/security/radius.key on UNIX and ORACLE_HOME/network/security/radius.key on Windows NT  

Example:  

sqlnet.radius_secret= oracle/bin/admin/radiuskey

Purpose:  

Turns accounting ON and OFF. If enabled, packets will be sent to the active RADIUS server at listening port plus one. The default port is 1646.  

Default:  

OFF  

Values:  

ON | OFF  

Example:  

sqlnet.radius_send_accounting=ON

Purpose:  

Controls whether or not a client--in addition to the server--is authenticated using SSL.  

Default:  

TRUE  

Values:  

TRUE | FALSE  

Example:  

ssl_cipher_suite=(ssl_dh_dss_with_des_cdc_sha)

Purpose:  

Controls the destination directory of the trace file.  

Default:  

$ORACLE_HOME/network/trace  

Example:  

tnsping.trace_directory=/oracle/traces

Purpose:  

Turns tracing on/off to a certain specified level.  

Default:  

OFF  

Values  

• OFF - No trace output

• USER - User-induced error conditions trace information

• ADMIN - Administration trace information

• SUPPORT - WorldWide Customer Support trace information

Example:  

tnsping.trace_level=admin

Purpose:  

Controls the destination directory of the trace file.  

Default:  

$ORACLE_HOME/network/trace  

Example:  

trace_directory_client=/oracle/traces

Purpose:  

Controls the destination directory of the trace file.  

Default:  

$ORACLE_HOME/network/trace  

Example:  

trace_directory_server=/oracle/traces

Purpose:  

Controls the name of the client trace file.  

Default:  

SQLNET.TRC  

Example:  

trace_file_client=clientsqlnet.trc