Data Engineering Administrator Guide

10.5.2
- 10.5.7
- 10.5.6
- 10.5.1
- 10.5
- 10.4.1
- 10.4.0
- 10.2.2 HotFix 1
- 10.2.2 Service Pack 1
- 10.2.2
- 10.2.1

Back Next

Configuring Sqoop Connectivity to an SSL-Enabled Oracle Database

The secure Oracle database that you want to connect to must use the PKCS12 wallet with the keystore and truststore, TLS_RSA_WITH_AES_256_CBC_SHA cipher algorithm, and TLS version 1.2.

To configure Sqoop connectivity to the Oracle database, add the dependant jars for using Oracle wallets and enable the Oracle PKI provider. Create a parameter file with the SSL properties required to connect to the secure Oracle database and specify the location of this file through the Sqoop argument in the JDBC connection.

Create a parameter file and include the following SSL properties in the file:

oracle.jdbc.J2EE13Compliant=true
javax.net.ssl.trustStore=/tmp/truststore.p12
javax.net.ssl.trustStoreType=PKCS12
javax.net.ssl.trustStorePassword=informatica
javax.net.ssl.keyStore=/tmp/ewallet.p12
javax.net.ssl.keyStoreType=PKCS12
javax.net.ssl.keyStorePassword=oracle4u

Place the parameter file in a common path in the Data Integration Service machine and in all the nodes of the Hadoop cluster. For example,

/tmp/param_file

Open the

java.security

file in the following location of the Data Integration Service machine and in all the nodes in the Hadoop cluster:

<JAVA_HOME>/jre/lib/security

To enable the Oracle PKI provider, add the following property at position 3 in the

java.security

file:

security.provider.3=oracle.security.pki.OraclePKIProvider

When you add the property at position 3, the rest of the existing properties from position 3 shifts to subsequent positions.

Copy the following dependent .jar files to use the Oracle wallet from the Oracle web site:

ojdbc*.jar

oraclepki.jar

osdt_cert.jar

osdt_core.jar

Paste the .jar files to the following directory on the machine where the Data Integration Service runs:

<Informatica installation directory>/externaljdbcjars

Paste the following .jar files at:

<Informatica installation directory>/java/jre/lib/ext/

oraclepki.jar

osdt_cert.jar

osdt_core.jar

In the JDBC connection, provide the connection string for the JDBC driver:

Sample connection string for DataDirect Oracle JDBC driver:

jdbc:informatica:oracle://<host_name>:<port>;CatalogOptions=6;
ServiceName=<service_name>;
trustStorePassword=<truststore_password>;
keyStorePassword=<keystore_password>;CryptoProtocolVersion=TLSv1.2;
keyStore=<keystore_location_of_ewallet.p12_file>;
trustStore=<truststore_location_of_truststore.p12_file>;
HostNameInCertificate=<database_host_name>;encryptionMethod=SSL;
ValidateServerCertificate=True;

Sample connection string for Oracle JDBC driver:

odbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=TCPS)
(HOST=<host>)(PORT=<port_number>))
(CONNECT_DATA=(SERVICE_NAME=<service_name>)))"

Specify the following Sqoop argument in the JDBC connection to connect to an SSL-enabled Oracle database:

--connect jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=TCPS)(HOST=<host>)(PORT=<port_number>))
(CONNECT_DATA=(SERVICE_NAME=<service_name>)))"

Specify the following Sqoop argument in the JDBC connection to use the SSL properties defined in parameter file:

--connection-param-file <parameter_file_location>,

where

parameter_file_location

is the path of the configured parameter file that contains the SSL properties:

Recycle the Data Integration Service.

Configuring Access to an SSL-Enabled Database

Download Guide

Watch

Comments

Communities

Knowledge Base

Success Portal

0 COMMENTS

We’d like to hear from you! Log in to comment.

Rename Saved Search

Table of Contents

Data Engineering Administrator Guide

Data Engineering Administrator Guide

Configuring Sqoop Connectivity to an SSL-Enabled Oracle Database

Configuring Sqoop Connectivity to an SSL-Enabled Oracle Database