Strange services

  • From: Mladen Gogala <gogala.mladen@xxxxxxxxx>
  • To: oracle-l <oracle-l@xxxxxxxxxxxxx>
  • Date: Wed, 5 Apr 2017 17:36:49 -0400

As many of other people here, I am also experimenting with Oracle 12.2. However, I noticed some strange services:

[oracle@ora122 admin]$ lsnrctl status

LSNRCTL for Linux: Version 12.2.0.1.0 - Production on 05-APR-2017 17:07:08

Copyright (c) 1991, 2016, Oracle.  All rights reserved.

Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=ora122.home.com)(PORT=1521)))
STATUS of the LISTENER
------------------------
Alias                     LISTENER
Version                   TNSLSNR for Linux: Version 12.2.0.1.0 - Production
Start Date                05-APR-2017 16:58:10
Uptime                    0 days 0 hr. 8 min. 57 sec
Trace Level               off
Security                  ON: Local OS Authentication
SNMP                      OFF
Listener Parameter File /oracle/product/12.2.0/db_1/network/admin/listener.ora
Listener Log File /oracle/diag/tnslsnr/ora122/listener/alert/log.xml
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=ora122.home.com)(PORT=1521)))
Services Summary...
_*Service "4c6c61be472b33d3e0533301a8c0bb1f.home.com" has 1 instance(s)*__*.*_
  Instance "o122", status READY, has 1 handler(s) for this service...
_*Service "4c727ea5f2420cbce0533301a8c02d6b.home.com" has 1 instance(s*_).
  Instance "o122", status READY, has 1 handler(s) for this service...
Service "o122.home.com" has 1 instance(s).
  Instance "o122", status READY, has 1 handler(s) for this service...
Service "o122XDB.home.com" has 1 instance(s).
  Instance "o122", status READY, has 1 handler(s) for this service...
Service "orclpdb.home.com" has 1 instance(s).
  Instance "o122", status READY, has 1 handler(s) for this service...
Service "pdbtest.home.com" has 1 instance(s).
  Instance "o122", status READY, has 1 handler(s) for this service...
The command completed successfully
[oracle@ora122 admin]$

What are those services, shown in red colour? Do they introduce any insecurity? When I list services for the listener, I am not any wiser:

Services Summary...
Service "4c6c61be472b33d3e0533301a8c0bb1f.home.com" has 1 instance(s).
  Instance "o122", status READY, has 1 handler(s) for this service...
    Handler(s):
      "DEDICATED" established:1 refused:0 state:ready
         LOCAL SERVER
Service "4c727ea5f2420cbce0533301a8c02d6b.home.com" has 1 instance(s).
  Instance "o122", status READY, has 1 handler(s) for this service...
    Handler(s):
      "DEDICATED" established:1 refused:0 state:ready
         LOCAL SERVER


I tried connecting from another machine and those services do allow "connect as sysdba". When I check the conatiner id, I see the following:

SQL> show con_id

CON_ID
------------------------------
3

SQL> select con_id,name,open_mode from v$pdbs;

    CON_ID NAME        OPEN_MODE
---------- --------------- ----------
     3 ORCLPDB       MOUNTED


It looks like Oracle 12.2 allows remote administration of the containers that are not open. I have no problems connecting to the open containers, but in 12.1, I could not have connected to a closed container using Oracle*Net. Is there any way to map those containers?

--
Mladen Gogala
Oracle DBA
Tel: (347) 321-1217

Other related posts: