2.4.6 Configure Oracle Wallet

This section provides details to configure the Oracle Wallet for Oracle Enterprise Risk and Finance Insurance Products Container Pack. To create a Wallet directory, it is mandatory to have an Oracle 19c client or have the Wallet and credentials directory pre-populated by an Oracle DBA.

Note:

The Wallet configuration steps apply if you have Oracle 19c client installed as ORACLE_HOME.

To configure Oracle Wallet, perform the following steps:

  1. Log in as a user created for the Docker run.
  2. Create the wallet by using the create_wallet.sh File. The following example shows the default values. Where values are shown in brackets <>, update as required to fit your implementation. #!/bin/ksh # This script creates on new wallet on an Oracle db/client sever WALLETPASS=<Password123>WALLET_HOME=/scratch/ofsaa811/ftpshare/walletTNS_ADMIN=/scratch/ofsaa811/ftpshare/walletORACLE_HOME=</scratch/ofsaa811/app/product/19.3.0/client_1> # create wallet directory/bin/mkdir -p $WALLET_HOME # create wallet/usr/bin/printf "$WALLETPASS\n$WALLETPASS" | $ORACLE_HOME/bin/mkstore -wrl $WALLET_HOME -create # create SQLNET.ora locally for wallet entry if [ ! -w $TNS_ADMIN ] ; then echo "You don't have write access to create sqlnet.ora !";echo "Modify manually as per Documents. Exiting";exit -1 ;fi > $TNS_ADMIN/sqlnet.oraecho "# sqlnet.ora Network Configuration File: $ORACLE_HOME/network/admin/sqlnet.ora" >> $TNS_ADMIN/sqlnet.oraecho "# Generated by Oracle configuration tools." >> $TNS_ADMIN/sqlnet.oraecho "" >> $TNS_ADMIN/sqlnet.oraecho "SQLNET.WALLET_OVERRIDE = TRUE" >> $TNS_ADMIN/sqlnet.oraecho "SSL_CLIENT_AUTHENTICATION = FALSE" >> $TNS_ADMIN/sqlnet.oraecho "SSL_VERSION = 0" >> $TNS_ADMIN/sqlnet.oraecho "" >> $TNS_ADMIN/sqlnet.oraecho "NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)" >> $TNS_ADMIN/sqlnet.oraecho "" >> $TNS_ADMIN/sqlnet.oraecho "WALLET_LOCATION = " >> $TNS_ADMIN/sqlnet.oraecho " (SOURCE =" >> $TNS_ADMIN/sqlnet.oraecho " (METHOD = FILE)" >> $TNS_ADMIN/sqlnet.oraecho " (METHOD_DATA =" >> $TNS_ADMIN/sqlnet.oraecho " (DIRECTORY = $WALLET_HOME )" >> $TNS_ADMIN/sqlnet.oraecho " )" >> $TNS_ADMIN/sqlnet.oraecho " )" >> $TNS_ADMIN/sqlnet.ora echo "" >> $TNS_ADMIN/sqlnet.ora
  3. Modify the script for the following values:WALLETPASS=<Password123>WALLET_HOME=/scratch/ofsaa811/ftpshare/walletTNS_ADMIN=/scratch/ofsaa811/ftpshare/wallet ORACLE_HOME=</scratch/ofsaa811/app/product/19.3.0/client_1>
  4. Execute the script.The script execution creates a Wallet directory and Wallet-related files into the ftpshare mount along with sqlnet.ora.For example: $./create_wallet.sh
  5. Create credentials and set the tns by using the following load_wallet_tns.sh File. This step applies to the config, all atomic, and all sandbox schemas that are in the Oracle Enterprise Risk and Finance Insurance Products Container Pack instance.#!/bin/ksh # This script adds an entry to the wallet and adds an entry to tnsnames.ora# on an oracle db/client server if [ "$#" != "3" ]; then echo "" echo "Usage: $0 DB_ALIAS DB_USER DB_PASS " echo "example: $0 ABIHOFSAAATM abih_ofsaaatm password123" echo "" exit 2fi WALLETPASS=<Password123>WALLET_HOME=/scratch/ofsaa811/ftpshare/walletTNS_ADMIN=/scratch/ofsaa811/ftpshare/walletORACLE_HOME=</scratch/ofsaa811/app/product/19.3.0/client_1> DBALIAS=$1DBUSER=$2DBPWD=$3DBHOST=<Server Hostname>DBSID=<Service ID> # add entry to walletecho $WALLETPASS | $ORACLE_HOME/bin/mkstore -wrl $WALLET_HOME -createCredential -nologo $DBALIAS $DBUSER $DBPWD # add entry to tnsnames.oratouch $TNS_ADMIN/tnsnames.oraecho " " >> $TNS_ADMIN/tnsnames.oraecho "$DBALIAS = " >> $TNS_ADMIN/tnsnames.oraecho " (DESCRIPTION = " >> $TNS_ADMIN/tnsnames.oraecho " (ADDRESS = (PROTOCOL = TCP)(HOST =" $DBHOST")(PORT = 1521))" >> $TNS_ADMIN/tnsnames.oraecho " (CONNECT_DATA=(SERVICE_NAME="$DBSID"))" >> $TNS_ADMIN/tnsnames.ora echo " )" >> $TNS_ADMIN/tnsnames.ora
  6. Modify the script load_wallet_tns.sh for the following environment values:WALLETPASS=<Password123>WALLET_HOME=/scratch/ofsaa811/ftpshare/walletTNS_ADMIN=/scratch/ofsaa811/ftpshare/wallet ORACLE_HOME=</scratch/ofsaa811/app/product/19.3.0/client_1>
  7. Additionally, modify the Database Server Host, PORT, and Service Name. Adjust the contents if your database has more than one database node. You must also create an alias for the ATOMIC schema without an underscore (_) by using the following format: <Setup Info Name>ofsaaatm.DBHOST=<Server Host>PDBSERVICE=<Service Name>Usage: load_wallet_tns.sh DB_ALIAS DB_USER DB_PASSFor example:$./load_wallet_tns.sh CONFIG ppiy_ofsaaconf password123$./load_wallet_tns.sh ATOMIC ppiy_ofsaaatm password123$./load_wallet_tns.sh ppiyofsaaatm ppiy_ofsaaatm password123 $./load_wallet_tns.sh SYS Password123

    Note:

    • The out-of-box schema names OFSAACONF and OFSAAATM cannot be changed.
    • SYS admin credentials for the database are mandatory for running schema creator scripts
    • Passwords must contain special characters and at least 2 capital letters.