[gdal-dev] OCI vector driver - could support be added for Oracle Wallet? (simple change?)

[Steve Pritchard]

Many thanks Even.

This fix doesn't seem to be in a release yet, but I've managed to build
GDAL from master, and this works correctly with Oracle Wallet.

Steve
-- 
Steve Pritchard
Database Developer

British Trust for Ornithology, The Nunnery, Thetford, Norfolk IP24 2PU, UK
Tel: +44 (0)1842 750050, fax: +44 (0)1842 750030
Registered Charity No 216652 (England & Wales) No SC039193 (Scotland)
Company Limited by Guarantee No 357284 (England & Wales)


> Date: Mon, 14 Jun 2021 17:23:34 +0200
> From: Even Rouault <even.rouault at spatialys.com>
> To: gdal-dev at lists.osgeo.org
> Subject: Re: [gdal-dev] OCI vector driver - could support be added for
>         Oracle Wallet? (simple change?)
> Message-ID: <402aeda2-9b94-c1d8-0788-ac7187bacffe at spatialys.com>
> Content-Type: text/plain; charset="utf-8"; Format="flowed"
>
> Steve,
>
> I believe https://github.com/OSGeo/gdal/pull/3784 has fixed that (in the
> master branch)
>
> Even
>
> Le 14/06/2021 ? 17:18, Steve Pritchard a ?crit?:
> > Oracle Wallet provides secure storage for usernames and passwords on
> > client devices. We use this to avoid having usernames and passwords in
> > scripts, etc. For details see "Using The Secure External Password
> > Store (Doc ID 340559.1)" on the Oracle Support website.
> >
> > I have tried using Oracle Wallet with ogrinfo and the OCI driver, e.g.:
> >
> >     ogrinfo OCI:/@db_name:table_name
> >
> >
> > however I always get:
> >
> >     ERROR 1: ORA-01017: invalid username/password; logon denied
> >     ?in <unnamed>
> >     ERROR 1: ORA-01017: invalid username/password; logon denied
> >     ?in <unnamed>
> >     FAILURE:
> >     Unable to open datasource `OCI:..' with the following drivers.
> >
> >
> > I have tried this both with the bundled Oracle Instant Client and with
> > the latest Instant Client from the Oracle website. I've also tested
> > Oracle Wallet with other open source software (e.g. Perl DBI), and
> > that works fine.
> >
> > Having looked at the source?code for?ogrocisession.cpp, it looks as
> > though a simple change might be sufficient to make this work...
> >
> > I think that the reason it doesn't work is because the "eCred"
> > parameter needs to be OCI_CRED_EXT for Oracle Wallet. But eCred is set
> > to?OCI_CRED_RDBMS, except where OS authentication is being used.
> >
> > So if?pszUseridIn = "" and?pszPasswordIn = "", can eCred be set to
> > OCI_CRED_EXT?
> >
> > (Notes on using Oracle Wallet with Oracle OCI can be found in the
> > answer tothis stackoverflow question
> > <
> https://stackoverflow.com/questions/21762885/using-oracle-wallet-authentication-from-oci
> >)
> >
> > Steve
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/gdal-dev/attachments/20210623/fbdd8a11/attachment.html>