RE: listener for external procedure
- From: Feighery Raymond <Raymond.Feighery@xxxxxxxxxxxxx>
- To: "'oracle-l@xxxxxxxxxxxxx'" <oracle-l@xxxxxxxxxxxxx>
- Date: Thu, 11 Mar 2004 15:54:42 -0000
David
It depends on the version. Extproc is used in 8.1.7 and 9i in interMedia. In
9i, many formats are handled without extproc using java in the database.
If you do need to run the extproc listener, patch your security. Don't
configure the standard Oracle Listener to use extproc. Instead have two
listeners and ensure that the Oracle Listener created for PL/SQL EXTPROC
runs as an unprivileged OS user (e.g., "nobody" on Unix).
Good Metalink article on this at Oracle Security Alert #57
http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_datab
ase_id=NOT&p_id=244523.1
Ray
-----Original Message-----
From: David Boyd [mailto:davidb158@xxxxxxxxxxx]
Sent: Thursday, March 11, 2004 2:24 PM
To: oracle-l@xxxxxxxxxxxxx
Subject: listener for external procedure
Hi List,
Our application development team is trying to use InterMedia Text for text
searching against a CLOB field that requires calling external procedure to
create domain index. So we need to configure the listener for external
procedure (extproc). However, our administrator says that it's NOT a good
idea because this opens a security hole on the machine. The interface had
been removed as part of addressing security issues in previous patches. I
was wondering how you use external procedure. If you don't use external
procedure, how do you search text against CLOB field?
Thanks in advance for any input.
_________________________________________________________________
FREE pop-up blocking with the new MSN Toolbar - get it now!
http://clk.atdmt.com/AVE/go/onm00200415ave/direct/01/
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
___________________________________________________________________________
This email and any attached to it are confidential and intended only for the
individual or entity to which it is addressed. If you are not the intended
recipient, please let us know by telephoning or emailing the sender. You
should also delete the email and any attachment from your systems and should
not copy the email or any attachment or disclose their content to any other
person or entity. The views expressed here are not necessarily those of
Churchill Insurance Group plc or its affiliates or subsidiaries. Thank you.
Churchill Insurance Group plc. Company Registration Number - 2280426.
England.
Registered Office: Churchill Court, Westmoreland Road, Bromley, Kent BR1
1DP.
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
Other related posts:
