Question

Create oracle acl for Extended server install in linux

  • 4 March 2020
  • 3 replies
  • 465 views

Badge +5

Hi all

After installing one extended server in Linux Apps10 upd 6 oracle database 19c. I have realized plsqlap access provider is not working well due to one oracle acl problem. I was trying to create new acls but the problems is not solved. I got this error ORA-24247: network access denied by access control list (ACL). Any help about how create the acls. I thought recreating the instance of the extended server will resolve the problem but not.

Any help will be welcome?

Regards


3 replies

Userlevel 6
Badge +18

Hi,

What is the ACL going to be used for?

Is this an SMTP based ACL? Here is a simple example on how to add one - 

begin 
dbms_network_acl_admin.create_acl(
acl => 'utl_mail.xml',
description => 'Email Access',
principal => 'IFSAPP',
is_grant => TRUE,    
privilege => 'connect');    

dbms_network_acl_admin.add_privilege(
acl => 'utl_mail.xml',
principal => 'IFSAPP',    
is_grant => TRUE,
privilege => 'resolve');
    
dbms_network_acl_admin.assign_acl(
acl => 'utl_mail.xml',    
host => '<your_sever_name>');        

end;
/
commit;

 

You can use the above example to add other type of ACLs.

You also need to make sure the necessary ACL level Grants are in place in the Oracle database.

Badge +5

Hi SriKanth

I was connect as sys and  I made this processes but something is not OK.

Could you help with this “You also need to make sure the necessary ACL level Grants are in place in the Oracle database”.

I need to add privile resolve and connect to ifsapp an ifssys

Regards

 

 

Userlevel 6
Badge +18

If I understood you correctly, here are few examples on how to add grants (as SYS user):

grant execute on utl_http to ifsinfo;

grant execute on utl_http to ifsapp;

grant execute on utl_tcp to ifsapp;

grant execute on utl_tcp to ifsinfo;

grant execute on utl_smtp to ifsinfo;

grant execute on utl_smtp to ifsapp;

Reply