Page 1 of 1
Ability of secure connection with ODAC
Posted: Tue 16 Nov 2004 11:55
by kms
Hello!
Here is the problem. I have Oracle 10g database server in LAN with firewall, a "thick" client somewhere in Intrenet.
There is a strong need to establish secure connection to Oracle sever.
I can set up SSL connection with port forwarding to DB server (with stunnel daemon, for example).
But how ODAC TOraConnection component could transfere traffic through this secure conection?
Are there any possibilities or\and common solution ?
Posted: Tue 16 Nov 2004 15:22
by Paul
ODAC establishes a connection to Oracle server like other OCI application if OraSession.Options.Net=False. You can configure Oracle client and server to connect using SSL (please see Oracle documentation). ODAC does not support SSL security if TOraSession.Options.Net=True. You must use additional products in this case.
Posted: Tue 16 Nov 2004 17:30
by kms
Paul, thank you!
Can you give some more detailed link on Oracle documentation? As I understand standart Oracle client may be configured to get SSL connection.
But does it concern usual text configuration files like tnsnames.ora or somehow else?
I see that question is not straight about ODAC but close to one.
Re: Ability of secure connection with ODAC
Posted: Tue 16 Nov 2004 22:03
by Guest
kms wrote:
Are there any possibilities or\and common solution ?
The only solution I know of (and use for 8i and 9i) is using the Oracle Connection Manager. This is a separate product you'll have to install and configure (it is on your Oracle CD's). You will also need to use the Oracle client as the NET option is not able to connect to the Connection Manager.
hth,
Martin
Re: Ability of secure connection with ODAC
Posted: Thu 18 Jan 2007 21:18
by yevgeny
Hi Paul,
You wrote:
ODAC does not support SSL security if TOraSession.Options.Net=True. You must use additional products in this case.
What are those other products?
Thanks,
Yevgeny
P.S. We are currently using ODAC Net 5.55.1.26 for Delphi 7.
Posted: Sat 20 Jan 2007 22:21
by Horace
We are using this free and wonderful product to tunnel through 2 firewalls with ODAC:
http://www.hamachi.cc/
It provides secure and 0-reconfiguration solution for connecting ODAC, and other products. All you have to do is enter a new virtual IP address for your ODAC connection.
I have verified that it works quickly & reliably and securely in OCI and NET mode (encryption is built in too)
Regards,
Horace