Steve,

I believe https://github.com/OSGeo/gdal/pull/3784 has fixed that (in the master branch)

Even

Le 14/06/2021 à 17:18, Steve Pritchard a écrit :
Oracle Wallet provides secure storage for usernames and passwords on client devices. We use this to avoid having usernames and passwords in scripts, etc. For details see "Using The Secure External Password Store (Doc ID 340559.1)" on the Oracle Support website.

I have tried using Oracle Wallet with ogrinfo and the OCI driver, e.g.:

    ogrinfo OCI:/@db_name:table_name


however I always get:

    ERROR 1: ORA-01017: invalid username/password; logon denied
     in <unnamed>
    ERROR 1: ORA-01017: invalid username/password; logon denied
     in <unnamed>
    FAILURE:
    Unable to open datasource `OCI:..' with the following drivers.


I have tried this both with the bundled Oracle Instant Client and with the latest Instant Client from the Oracle website. I've also tested Oracle Wallet with other open source software (e.g. Perl DBI), and that works fine.

Having looked at the source code for ogrocisession.cpp, it looks as though a simple change might be sufficient to make this work...

I think that the reason it doesn't work is because the "eCred" parameter needs to be OCI_CRED_EXT for Oracle Wallet. But eCred is set to OCI_CRED_RDBMS, except where OS authentication is being used.

So if pszUseridIn = "" and pszPasswordIn = "", can eCred be set to OCI_CRED_EXT?

(Notes on using Oracle Wallet with Oracle OCI can be found in the answer tothis stackoverflow question <https://stackoverflow.com/questions/21762885/using-oracle-wallet-authentication-from-oci>)

Steve
--
Steve Pritchard
Database Developer

British Trust for Ornithology, The Nunnery, Thetford, Norfolk IP24 2PU, UK
Tel: +44 (0)1842 750050, fax: +44 (0)1842 750030
Registered Charity No 216652 (England & Wales) No SC039193 (Scotland)
Company Limited by Guarantee No 357284 (England & Wales)

_______________________________________________
gdal-dev mailing list
gdal-dev@lists.osgeo.org
https://lists.osgeo.org/mailman/listinfo/gdal-dev

--
http://www.spatialys.com
My software is free, but my time generally not.

_______________________________________________
gdal-dev mailing list
gdal-dev@lists.osgeo.org
https://lists.osgeo.org/mailman/listinfo/gdal-dev

Reply via email to