<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Steve,</p>
<p>I believe <a class="moz-txt-link-freetext" href="https://github.com/OSGeo/gdal/pull/3784">https://github.com/OSGeo/gdal/pull/3784</a> has fixed that
(in the master branch)</p>
<p>Even<br>
</p>
<div class="moz-cite-prefix">Le 14/06/2021 à 17:18, Steve Pritchard
a écrit :<br>
</div>
<blockquote type="cite"
cite="mid:CAF7Aqmw8S3woi9nEStuNUWNKG3-87KPNF++-AQDgat56c3wKfA@mail.gmail.com">
<div dir="ltr">Oracle Wallet provides secure storage for usernames
and passwords on client devices. We use this to avoid having
usernames and passwords in scripts, etc. For details see "Using
The Secure External Password Store (Doc ID 340559.1)" on the
Oracle Support website.
<div><br>
</div>
<div>I have tried using Oracle Wallet with ogrinfo and the OCI
driver, e.g.:</div>
<div><br>
</div>
<div>
<blockquote>
<div>ogrinfo OCI:/@db_name:table_name<br>
</div>
</blockquote>
</div>
<div><br>
</div>
<div>however I always get:</div>
<div><br>
</div>
<div>
<blockquote>
<div>ERROR 1: ORA-01017: invalid username/password; logon
denied<br>
in <unnamed><br>
ERROR 1: ORA-01017: invalid username/password; logon
denied<br>
in <unnamed><br>
FAILURE:<br>
Unable to open datasource `OCI:..' with the following
drivers.<br>
</div>
</blockquote>
</div>
<div><br>
</div>
<div>I have tried this both with the bundled Oracle Instant
Client and with the latest Instant Client from the Oracle
website. I've also tested Oracle Wallet with other open source
software (e.g. Perl DBI), and that works fine.</div>
<div><br>
</div>
<div>Having looked at the source code for ogrocisession.cpp, it
looks as though a simple change might be sufficient to make
this work...</div>
<div><br>
</div>
<div>I think that the reason it doesn't work is because the
"eCred" parameter needs to be OCI_CRED_EXT for Oracle Wallet.
But eCred is set to OCI_CRED_RDBMS, except where OS
authentication is being used.</div>
<div><br>
</div>
<div>So if pszUseridIn = "" and pszPasswordIn = "", can eCred be
set to OCI_CRED_EXT?</div>
<div><br>
</div>
<div>(Notes on using Oracle Wallet with Oracle OCI can be found
in the answer to<a
href="https://stackoverflow.com/questions/21762885/using-oracle-wallet-authentication-from-oci"
moz-do-not-send="true"> this stackoverflow question</a>)</div>
<div><br>
</div>
<div>Steve</div>
<div>
<div>
<div>-- <br>
<div dir="ltr" class="gmail_signature"
data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div><span>Steve Pritchard</span></div>
<div><span>Database Developer</span></div>
<div dir="ltr"><span><br>
</span></div>
<div dir="ltr"><span>British Trust for
Ornithology, The Nunnery, Thetford, Norfolk
IP24 2PU, UK </span><br>
<span>Tel: </span><a value="+441842750050"
moz-do-not-send="true">+44 (0)1842 750050</a><span>,
fax: </span><a value="+441842750030"
moz-do-not-send="true">+44 (0)1842 750030</a><br>
<span>Registered Charity No 216652 (England
& Wales) No SC039193 (Scotland)</span><br>
<span>Company Limited by Guarantee No 357284
(England & Wales)</span><br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
gdal-dev mailing list
<a class="moz-txt-link-abbreviated" href="mailto:gdal-dev@lists.osgeo.org">gdal-dev@lists.osgeo.org</a>
<a class="moz-txt-link-freetext" href="https://lists.osgeo.org/mailman/listinfo/gdal-dev">https://lists.osgeo.org/mailman/listinfo/gdal-dev</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
<a class="moz-txt-link-freetext" href="http://www.spatialys.com">http://www.spatialys.com</a>
My software is free, but my time generally not.</pre>
</body>
</html>