Trouble with TNSNames editor

Toad for Oracle
1

Hi

I am trying to add and update an entry to my TNS ini file. It loks like this:

ABAZA =

(DESCRIPTION =

(ADDRESS_LIST =

  (ADDRESS = (PROTOCOL = TCPS)(HOST = xxx.xx.xx.xx)(PORT=nnnn))

)

(CONNECT_DATA =

  (SERVICE_NAME = abaza)

)

(SECURITY=

  (SSL_SERVER_CERT_DN="C=xx,L=xxxx,O=xxxx d.o.o.,OU=xxxx,CN=xx.xx.xx")

)

)

If I use TOAD TNSnames editor, my TNS entry looks like this:

ABAZA=

(DESCRIPTION=

(ADDRESS=

  (PROTOCOL=TCPS)

  (HOST=xxx.xx.xx.xx)

  (PORT=xxxx)

)

(CONNECT_DATA=

  (SERVICE_NAME=abaza)

)

)

TOAD TNSnames editor ignores complete SECURITY section and also after update,

there is no SECURITY section any more and my database soes not work.

Any ideas ??

Regards!

2

Hey Aci,

It looks like that was a bug. The Security tag was being parsed correctly, but was not being added to the formatted output. This has been fixed for the next
beta (which should be Wednesday). I don’t see you in any of the Toad for Oracle beta discussions. If you’re not already on the beta program, you can download the latest beta here.

Here you’ll be able to get a snapshot of the latest development effort, including new features and any bug fixes. You’ll also be able to be part of the development
process by providing direct feedback on new features as they’re being added and help shape Toad into how it would work best for you and other users.

In the meanwhile, you may have to add the entry manually outside of Toad’s TNS Names editor.

Thanks for bringing this issue to our attention! Feel free to let me know if you have any questions.

Thanks!

-John

3

John, thank you for quick response. It might be a pretty dangerous bug.

Regards!

4

It looks like this has returned, at least for me, in 16.x. I have OCI ADB databases and need to use the Oracle Wallet to connect. The TOAD TNSNames Editor always strips the security section when formatting and complains about the entries when doing a syntax check.

These are the entries I need:

(SECURITY =
  (SSL_SERVER_DN_MATCH = YES)
  (MY_WALLET_DIRECTORY = "path_to_wallet")
)
5

Hi @jferrer,

Thanks for the specific example. I can reproduce this and will fix it for the next beta.

For what it's worth, this is slightly different than the original problem. SSL_SERVER_CERT_DN vs SSL_SERVER_DN_MATCH. We didn't add support for SSL_SERVER_DN_MATCH. I will fix this for the next beta, along with whatever other parameters may be missing in the SECURITY section.

Seems like we should maybe add a "parameter not recognized" warning in there, or something, so that settings that Toad doesn't know about aren't lost.

John

6

@jferrer

Hi Joe,

Uh, actually, I don't see SSL_SERVER_DN_MATCH in the documentation for TNSNames entries. Am I missing something?

I do see it mentioned in SQLNet.ora documentation.

-John

7

I don't know what to tell you. This is what Oracle provides in their connection strings for ADB connections.

(description= (retry_count=20)(retry_delay=3)(address=(protocol=tcps)(port=1521)(host=hostname.adb.us-phoenix-1.oraclecloud.com))(connect_data=(service_name=service.adb.oraclecloud.com))(security=(ssl_server_dn_match=no)))

Joe

8

Ok, I'll take your word for it. I wish they'd document it though. :frowning: