Table of Contents

• Title and Copyright Information
• Preface
  • Audience
  • Documentation Accessibility
  • Diversity and Inclusion
  • Conventions
• 1 Listener Control Utility
  • 1.1 Listener Control Utility Overview
  • 1.2 SET and SHOW Listener Control Utility Commands
  • 1.3 Understanding Distributed Operations
  • 1.4 Understanding Oracle Net Listener Security
  • 1.5 Listener Control Utility Commands
    • 1.5.1 EXIT
    • 1.5.2 HELP
    • 1.5.3 QUIT
    • 1.5.4 RELOAD
    • 1.5.5 SAVE_CONFIG
    • 1.5.6 SERVICES
    • 1.5.7 SET
    • 1.5.8 SET CURRENT_LISTENER
    • 1.5.9 SET DISPLAYMODE
    • 1.5.10 SET INBOUND_CONNECT_TIMEOUT
    • 1.5.11 SET LOG_DIRECTORY
    • 1.5.12 SET LOG_FILE
    • 1.5.13 SET LOG_STATUS
    • 1.5.14 SET SAVE_CONFIG_ON_STOP
    • 1.5.15 SET TRC_DIRECTORY
    • 1.5.16 SET TRC_FILE
    • 1.5.17 SET TRC_LEVEL
    • 1.5.18 SHOW
    • 1.5.19 SPAWN
    • 1.5.20 START
    • 1.5.21 STATUS
    • 1.5.22 STOP
    • 1.5.23 TRACE
    • 1.5.24 VERSION
• 2 Oracle Connection Manager Control Utility
  • 2.1 Connection Manager Control Utility Command Modes and Syntax
  • 2.2 Oracle Connection Manager Control Utility Overview
  • 2.3 Oracle Connection Manager Control Utility Commands
    • 2.3.1 ADMINISTER
    • 2.3.2 CLOSE CONNECTIONS
    • 2.3.3 CLOSE NON_ADMIN_ENDPOINTS
    • 2.3.4 EXIT
    • 2.3.5 HELP
    • 2.3.6 QUIT
    • 2.3.7 RELOAD
    • 2.3.8 RESUME GATEWAYS
    • 2.3.9 SAVE_PASSWD
    • 2.3.10 SET
    • 2.3.11 SET ASO_AUTHENTICATION_FILTER
    • 2.3.12 SET CONNECTION_STATISTICS
    • 2.3.13 SET EVENT
    • 2.3.14 SET IDLE_TIMEOUT
    • 2.3.15 SET INBOUND_CONNECT_TIMEOUT
    • 2.3.16 SET LOG_DIRECTORY
    • 2.3.17 SET LOG_LEVEL
    • 2.3.18 SET OUTBOUND_CONNECT_TIMEOUT
    • 2.3.19 SET PASSWORD
    • 2.3.20 SET SESSION_TIMEOUT
    • 2.3.21 SET TRACE_DIRECTORY
    • 2.3.22 SET TRACE_LEVEL
    • 2.3.23 SHOW
    • 2.3.24 SHOW ALL
    • 2.3.25 SHOW CONNECTIONS
    • 2.3.26 SHOW DEFAULTS
    • 2.3.27 SHOW EVENTS
    • 2.3.28 SHOW GATEWAYS
    • 2.3.29 SHOW PARAMETERS
    • 2.3.30 SHOW RULES
    • 2.3.31 SHOW SERVICES
    • 2.3.32 SHOW STATUS
    • 2.3.33 SHOW VERSION
    • 2.3.34 SHUTDOWN
    • 2.3.35 STARTUP
    • 2.3.36 SUSPEND GATEWAY
• 3 Syntax Rules for Configuration Files
  • 3.1 Overview of Configuration File Syntax
  • 3.2 Syntax Rules for Configuration Files
  • 3.3 Network Character Set for Keywords
  • 3.4 Permitted Listener and Net Service Name Character Set
• 4 Protocol Address Configuration
  • 4.1 Protocol Addresses
    • 4.1.1 ADDRESS
    • 4.1.2 ADDRESS_LIST
  • 4.2 Protocol Parameters
  • 4.3 Recommended Port Numbers
  • 4.4 Port Number Limitations
• 5 Parameters for sqlnet.ora Files
  • 5.1 Overview of Profile Configuration Files
  • 5.2 Profile Parameters in sqlnet.ora Files
    • 5.2.1 ACCEPT_MD5_CERTS
    • 5.2.2 ACCEPT_SHA1_CERTS
    • 5.2.3 ADD_SSLV3_TO_DEFAULT
    • 5.2.4 EXADIRECT_FLOW_CONTROL
    • 5.2.5 EXADIRECT_RECVPOLL
    • 5.2.6 DEFAULT_SDU_SIZE
    • 5.2.7 DISABLE_INTERRUPT
    • 5.2.8 DISABLE_OOB
    • 5.2.9 DISABLE_OOB_AUTO
    • 5.2.10 IPC.KEYPATH
    • 5.2.11 NAMES.DEFAULT_DOMAIN
    • 5.2.12 NAMES.DIRECTORY_PATH
    • 5.2.13 NAMES.LDAP_AUTHENTICATE_BIND
    • 5.2.14 NAMES.LDAP_AUTHENTICATE_BIND_METHOD
    • 5.2.15 NAMES.LDAP_CONN_TIMEOUT
    • 5.2.16 NAMES.LDAP_PERSISTENT_SESSION
    • 5.2.17 NAMES.NIS.META_MAP
    • 5.2.18 RECV_BUF_SIZE
    • 5.2.19 SDP.PF_INET_SDP
    • 5.2.20 SEC_USER_AUDIT_ACTION_BANNER
    • 5.2.21 SEC_USER_UNAUTHORIZED_ACCESS_BANNER
    • 5.2.22 SEND_BUF_SIZE
    • 5.2.23 SQLNET.ALLOW_WEAK_CRYPTO
    • 5.2.24 SQLNET.ALLOW_WEAK_CRYPTO_CLIENTS
    • 5.2.25 SQLNET.ALLOWED_LOGON_VERSION_CLIENT
    • 5.2.26 SQLNET.ALLOWED_LOGON_VERSION_SERVER
    • 5.2.27 SQLNET.AUTHENTICATION_SERVICES
    • 5.2.28 SQLNET.CLIENT_REGISTRATION
    • 5.2.29 SQLNET.CLOUD_USER
    • 5.2.30 SQLNET.COMPRESSION
    • 5.2.31 SQLNET.COMPRESSION_ACCELERATION
    • 5.2.32 SQLNET.COMPRESSION_LEVELS
    • 5.2.33 SQLNET.COMPRESSION_THRESHOLD
    • 5.2.34 SQLNET.CRYPTO_CHECKSUM_CLIENT
    • 5.2.35 SQLNET.CRYPTO_CHECKSUM_SERVER
    • 5.2.36 SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT
    • 5.2.37 SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER
    • 5.2.38 SQLNET.DBFW_PUBLIC_KEY
    • 5.2.39 SQLNET.DOWN_HOSTS_TIMEOUT
    • 5.2.40 SQLNET.ENCRYPTION_CLIENT
    • 5.2.41 SQLNET.ENCRYPTION_SERVER
    • 5.2.42 SQLNET.ENCRYPTION_TYPES_CLIENT
    • 5.2.43 SQLNET.ENCRYPTION_TYPES_SERVER
    • 5.2.44 SQLNET.EXPIRE_TIME
    • 5.2.45 SQLNET.IGNORE_ANO_ENCRYPTION_FOR_TCPS
    • 5.2.46 SQLNET.INBOUND_CONNECT_TIMEOUT
    • 5.2.47 SQLNET.FALLBACK_AUTHENTICATION
    • 5.2.48 SQLNET.KERBEROS5_CC_NAME
    • 5.2.49 SQLNET.KERBEROS5_CLOCKSKEW
    • 5.2.50 SQLNET.KERBEROS5_CONF
    • 5.2.51 SQLNET.KERBEROS5_CONF_LOCATION
    • 5.2.52 SQLNET.KERBEROS5_KEYTAB
    • 5.2.53 SQLNET.KERBEROS5_REALMS
    • 5.2.54 SQLNET.KERBEROS5_REPLAY_CACHE
    • 5.2.55 SQLNET.OUTBOUND_CONNECT_TIMEOUT
    • 5.2.56 SQLNET.RADIUS_ALTERNATE
    • 5.2.57 SQLNET.RADIUS_ALTERNATE_PORT
    • 5.2.58 SQLNET.RADIUS_ALTERNATE_RETRIES
    • 5.2.59 SQLNET.RADIUS_ALTERNATE_TIMEOUT
    • 5.2.60 SQLNET.RADIUS_AUTHENTICATION
    • 5.2.61 SQLNET.RADIUS_AUTHENTICATION_INTERFACE
    • 5.2.62 SQLNET.RADIUS_AUTHENTICATION_PORT
    • 5.2.63 SQLNET.RADIUS_AUTHENTICATION_RETRIES
    • 5.2.64 SQLNET.RADIUS_AUTHENTICATION_TIMEOUT
    • 5.2.65 SQLNET.RADIUS_CHALLENGE_KEYWORD
    • 5.2.66 SQLNET.RADIUS_CHALLENGE_RESPONSE
    • 5.2.67 SQLNET.RADIUS_CLASSPATH
    • 5.2.68 SQLNET.RADIUS_SECRET
    • 5.2.69 SQLNET.RADIUS_SEND_ACCOUNTING
    • 5.2.70 SQLNET.RECV_TIMEOUT
    • 5.2.71 SQLNET.SEND_TIMEOUT
    • 5.2.72 SQLNET.URI
    • 5.2.73 SQLNET.USE_HTTPS_PROXY
    • 5.2.74 SQLNET.WALLET_OVERRIDE
    • 5.2.75 SSL_CERT_REVOCATION
    • 5.2.76 SSL_CRL_FILE
    • 5.2.77 SSL_CRL_PATH
    • 5.2.78 SSL_CIPHER_SUITES
    • 5.2.79 SSL_CLIENT_AUTHENTICATION
    • 5.2.80 SSL_EXTENDED_KEY_USAGE
    • 5.2.81 SSL_SERVER_DN_MATCH
    • 5.2.82 SSL_VERSION
    • 5.2.83 TCP.ALLOWED_PROXIES
    • 5.2.84 TCP.CONNECT_TIMEOUT
    • 5.2.85 TCP.EXCLUDED_NODES
    • 5.2.86 TCP.INVITED_NODES
    • 5.2.87 TCP.NODELAY
    • 5.2.88 TCP.QUEUESIZE
    • 5.2.89 TCP.VALIDNODE_CHECKING
    • 5.2.90 TNSPING.TRACE_DIRECTORY
    • 5.2.91 TNSPING.TRACE_LEVEL
    • 5.2.92 USE_CMAN
    • 5.2.93 USE_DEDICATED_SERVER
    • 5.2.94 WALLET_LOCATION
    • 5.2.95 BEQUEATH_DETACH
  • 5.3 ADR Diagnostic Parameters in sqlnet.ora
    • 5.3.1 About ADR Diagnostic Parameters
    • 5.3.2 ADR_BASE
    • 5.3.3 DIAG_ADR_ENABLED
    • 5.3.4 TRACE_LEVEL_CLIENT
    • 5.3.5 TRACE_LEVEL_SERVER
    • 5.3.6 TRACE_TIMESTAMP_CLIENT
    • 5.3.7 TRACE_TIMESTAMP_SERVER
  • 5.4 Non-ADR Diagnostic Parameters in sqlnet.ora Files
    • 5.4.1 LOG_DIRECTORY_CLIENT
    • 5.4.2 LOG_DIRECTORY_SERVER
    • 5.4.3 LOG_FILE_CLIENT
    • 5.4.4 LOG_FILE_SERVER
    • 5.4.5 TRACE_DIRECTORY_CLIENT
    • 5.4.6 TRACE_DIRECTORY_SERVER
    • 5.4.7 TRACE_FILE_CLIENT
    • 5.4.8 TRACE_FILE_SERVER
    • 5.4.9 TRACE_FILEAGE_CLIENT
    • 5.4.10 TRACE_FILEAGE_SERVER
    • 5.4.11 TRACE_FILELEN_CLIENT
    • 5.4.12 TRACE_FILELEN_SERVER
    • 5.4.13 TRACE_FILENO_CLIENT
    • 5.4.14 TRACE_FILENO_SERVER
    • 5.4.15 TRACE_UNIQUE_CLIENT
• 6 Local Naming Parameters in the tnsnames.ora File
  • 6.1 Overview of Local Naming Parameters
  • 6.2 General Syntax of tnsnames.ora
  • 6.3 Using Multiple Descriptions in tnsnames.ora Files
  • 6.4 Multiple Address Lists in tnsnames.ora Files
  • 6.5 Connect-Time Failover and Client Load Balancing with Oracle Connection Managers
  • 6.6 Connect Descriptor Descriptions
    • 6.6.1 DESCRIPTION_LIST
    • 6.6.2 DESCRIPTION
  • 6.7 Protocol Addresses
    • 6.7.1 ADDRESS
    • 6.7.2 HTTPS_PROXY
    • 6.7.3 HTTPS_PROXY_PORT
    • 6.7.4 ADDRESS_LIST
  • 6.8 Optional Parameters for Address Lists
    • 6.8.1 ENABLE
    • 6.8.2 EXPIRE_TIME
    • 6.8.3 FAILOVER
    • 6.8.4 LOAD_BALANCE
    • 6.8.5 RECV_BUF_SIZE
    • 6.8.6 SDU
    • 6.8.7 SEND_BUF_SIZE
    • 6.8.8 SOURCE_ROUTE
    • 6.8.9 TYPE_OF_SERVICE
  • 6.9 Connection Data Section
    • 6.9.1 COLOCATION_TAG
    • 6.9.2 CONNECT_DATA
    • 6.9.3 CONNECTION_ID_PREFIX
    • 6.9.4 FAILOVER_MODE
    • 6.9.5 GLOBAL_NAME
    • 6.9.6 HS
    • 6.9.7 INSTANCE_NAME
    • 6.9.8 KERBEROS5_PRINCIPAL
    • 6.9.9 POOL_CONNECTION_CLASS
    • 6.9.10 POOL_PURITY
    • 6.9.11 RDB_DATABASE
    • 6.9.12 SHARDING_KEY
    • 6.9.13 SUPER_SHARDING_KEY
    • 6.9.14 SERVER
    • 6.9.15 SERVICE_NAME
    • 6.9.16 TUNNEL_SERVICE_NAME
  • 6.10 Security Section
    • 6.10.1 AUTHENTICATION_SERVICE
    • 6.10.2 IGNORE_ANO_ENCRYPTION_FOR_TCPS
    • 6.10.3 KERBEROS5_CC_NAME
    • 6.10.4 SECURITY
    • 6.10.5 SSL_SERVER_CERT_DN
    • 6.10.6 SSL_SERVER_DN_MATCH
    • 6.10.7 SSL_VERSION
    • 6.10.8 WALLET_LOCATION
  • 6.11 Timeout Parameters
    • 6.11.1 CONNECT_TIMEOUT
    • 6.11.2 RETRY_COUNT
    • 6.11.3 RETRY_DELAY
    • 6.11.4 TRANSPORT_CONNECT_TIMEOUT
    • 6.11.5 RECV_TIMEOUT
  • 6.12 Compression Parameters
    • 6.12.1 COMPRESSION
    • 6.12.2 COMPRESSION_LEVELS
• 7 Oracle Net Listener Parameters in the listener.ora File
  • 7.1 Overview of Oracle Net Listener Configuration File
  • 7.2 Protocol Address Parameters
    • 7.2.1 ADDRESS
    • 7.2.2 DESCRIPTION
    • 7.2.3 Firewall
    • 7.2.4 IP
    • 7.2.5 QUEUESIZE
    • 7.2.6 RECV_BUF_SIZE
    • 7.2.7 SEND_BUF_SIZE
  • 7.3 Connection Rate Limiter Parameters
    • 7.3.1 CONNECTION_RATE_listener_name
    • 7.3.2 RATE_LIMIT
  • 7.4 Control Parameters
    • 7.4.1 ADMIN_RESTRICTIONS_listener_name
    • 7.4.2 ALLOW_MULTIPLE_REDIRECTS_listener_name
    • 7.4.3 ENABLE_EXADIRECT_listener_name
    • 7.4.4 CRS_NOTIFICATION_listener_name
    • 7.4.5 DEDICATED_THROUGH_BROKER_LISTENER
    • 7.4.6 DEFAULT_SERVICE_listener_name
    • 7.4.7 INBOUND_CONNECT_TIMEOUT_listener_name
    • 7.4.8 LOCAL_REGISTRATION_ADDRESS_listener_name
    • 7.4.9 MAX_ALL_CONNECTIONS_listener_name
    • 7.4.10 MAX_REG_CONNECTIONS_listener_name
    • 7.4.11 REGISTRATION_EXCLUDED_NODES_listener_name
    • 7.4.12 REGISTRATION_INVITED_NODES_listener_name
    • 7.4.13 REMOTE_REGISTRATION_ADDRESS_listener_name
    • 7.4.14 SAVE_CONFIG_ON_STOP_listener_name
    • 7.4.15 SERVICE_RATE_listener_name
    • 7.4.16 SSL_CIPHER_SUITES
    • 7.4.17 SSL_CLIENT_AUTHENTICATION
    • 7.4.18 SSL_VERSION
    • 7.4.19 SUBSCRIBE_FOR_NODE_DOWN_EVENT_listener_name
    • 7.4.20 USE_SID_AS_SERVICE_listener_name
    • 7.4.21 VALID_NODE_CHECKING_REGISTRATION_listener_name
    • 7.4.22 WALLET_LOCATION
  • 7.5 ADR Diagnostic Parameters for Oracle Net Listener
    • 7.5.1 ADR_BASE_listener_name
    • 7.5.2 DIAG_ADR_ENABLED_listener_name
    • 7.5.3 LOG_FILE_NUM_listener_name
    • 7.5.4 LOG_FILE_SIZE_listener_name
    • 7.5.5 LOGGING_listener_name
    • 7.5.6 TRACE_LEVEL_listener_name
    • 7.5.7 TRACE_TIMESTAMP_listener_name
  • 7.6 Non-ADR Diagnostic Parameters for Oracle Net Listener
    • 7.6.1 LOG_DIRECTORY_listener_name
    • 7.6.2 LOG_FILE_listener_name
    • 7.6.3 TRACE_DIRECTORY_listener_name
    • 7.6.4 TRACE_FILE_listener_name
    • 7.6.5 TRACE_FILEAGE_listener_name
    • 7.6.6 TRACE_FILELEN_listener_name
    • 7.6.7 TRACE_FILENO_listener_name
  • 7.7 Class of Secure Transports Parameters
    • 7.7.1 SECURE_REGISTER_listener_name
    • 7.7.2 Using COST Parameters in Combination
    • 7.7.3 DYNAMIC_REGISTRATION_listener_name
    • 7.7.4 SECURE_PROTOCOL_listener_name
    • 7.7.5 SECURE_CONTROL_listener_name
• 8 Oracle Connection Manager Parameters
  • 8.1 Overview of Oracle Connection Manager Configuration File
  • 8.2 Oracle Connection Manager Parameters
    • 8.2.1 ADDRESS
    • 8.2.2 ADMIN_GROUP
    • 8.2.3 ASO_AUTHENTICATION_FILTER
    • 8.2.4 BANDWIDTH
    • 8.2.5 CLIENT_DN_RULE_MATCH
    • 8.2.6 COMPRESSION
    • 8.2.7 COMPRESSION_LEVELS
    • 8.2.8 COMPRESSION_THRESHOLD
    • 8.2.9 CONNECTION_STATISTICS
    • 8.2.10 DN_LIST
    • 8.2.11 ENABLE_IP_FORWARDING
    • 8.2.12 EVENT_GROUP
    • 8.2.13 EXPIRE_TIME
    • 8.2.14 GROUP
    • 8.2.15 IDLE_TIMEOUT
    • 8.2.16 INBOUND_CONNECT_TIMEOUT
    • 8.2.17 LOG_FILE_NUM
    • 8.2.18 LOG_FILE_SIZE
    • 8.2.19 LOG_SUPPRESS_NODES
    • 8.2.20 MAX_ALL_CONNECTIONS
    • 8.2.21 MAX_BANDWIDTH_GROUP
    • 8.2.22 MAX_CMCTL_SESSIONS
    • 8.2.23 MAX_CONNECTIONS
    • 8.2.24 MAX_GATEWAY_PROCESSES
    • 8.2.25 MAX_REG_CONNECTIONS
    • 8.2.26 MIN_GATEWAY_PROCESSES
    • 8.2.27 NEXT_HOP
    • 8.2.28 OUTBOUND_CONNECT_TIMEOUT
    • 8.2.29 PASSWORD_instance_name
    • 8.2.30 REGISTRATION_EXCLUDED_NODES
    • 8.2.31 REGISTRATION_INVITED_NODES
    • 8.2.32 REST_ADDRESS
    • 8.2.33 RULE
    • 8.2.34 SDU
    • 8.2.35 SERVICE_RATE
    • 8.2.36 SESSION_TIMEOUT
    • 8.2.37 SSL_CIPHER_SUITES
    • 8.2.38 SSL_CLIENT_AUTHENTICATION
    • 8.2.39 SSL_VERSION
    • 8.2.40 TRACE_FILE
    • 8.2.41 USE_SERVICE_AS_TNSNAMES_ALIAS
    • 8.2.42 USE_SID_AS_SERVICE
    • 8.2.43 VALID_NODE_CHECKING_REGISTRATION
    • 8.2.44 WALLET_LOCATION
  • 8.3 Oracle Connection Manager in Traffic Director Mode Parameters
    • 8.3.1 SERVICE_AFFINITY
    • 8.3.2 TDM
    • 8.3.3 TDM_BIND_THREAD
    • 8.3.4 TDM_DATATYPE_CHECK
    • 8.3.5 TDM_PRCP_MAX_CALL_WAIT_TIME
    • 8.3.6 TDM_PRCP_MAX_TXN_CALL_WAIT_TIME
    • 8.3.7 TDM_SHARED_THREADS_MAX
    • 8.3.8 TDM_SHARED_THREADS_MIN
    • 8.3.9 TDM_THREADING_MODE
  • 8.4 ADR Diagnostic Parameters for Oracle Connection Manager
    • 8.4.1 ADR_BASE
    • 8.4.2 DIAG_ADR_ENABLED
    • 8.4.3 LOG_LEVEL
    • 8.4.4 TRACE_LEVEL
    • 8.4.5 TRACE_TIMESTAMP
  • 8.5 Non-ADR Diagnostic Parameters for Oracle Connection Manager
    • 8.5.1 LOG_DIRECTORY
    • 8.5.2 TRACE_DIRECTORY
    • 8.5.3 TRACE_FILELEN
    • 8.5.4 TRACE_FILENO
  • 8.6 Oracle Connection Manager Tunneling Parameters
    • 8.6.1 TUNNELING
    • 8.6.2 TUNNEL_CAPACITY
    • 8.6.3 MAX_TUNNELS
    • 8.6.4 TUNNEL_PROBE_INTERVAL
    • 8.6.5 NON_TUNNEL_GATEWAYS
    • 8.6.6 TUNNEL_ADDRESS
    • 8.6.7 GATEWAY_PROCESSES
• 9 Directory Usage Parameters in the ldap.ora File
  • 9.1 Overview of Directory Server Usage File
  • 9.2 Directory Usage Parameters
    • 9.2.1 DEFAULT_ADMIN_CONTEXT
    • 9.2.2 DIRECTORY_SERVER_TYPE
    • 9.2.3 DIRECTORY_SERVERS
• Appendices
  • A Upgrade Considerations for Oracle Net Services
    • A.1 Anonymous Access to Oracle Internet Directory
  • B LDAP Schema for Oracle Net Services
    • B.1 Structural Object Classes
    • B.2 Attributes