Weblog

Oracle 11g Access Control Lists

Today i was using utl_http package on my 11g db and I encountered the following error:

ORA-29273: HTTP request failed
ORA-06512: at "SYS.UTL_HTTP", line 1577
ORA-24247: network access denied by access control list (ACL)
ORA-06512: at line 1

His is the result of the improved security in 11g. When you want to create a connection to a remote server with one of the util packages: TCP,HTTP,SMTP besides the privileges on the package you need to configure the connection in a Access Control List (ACL). In a ACL you can configure in detail the allowed connections by entering the following parameters:

  • Server name or IP
  • Port number range
  • Database user/role
  • Start date
  • End date

The package DBMS_NETWORK_ACL_ADMIN enables you to create and configure ACL’s.

The ACL is a nice security feature but when migrating applications to 11g it’s something you will encounter.

More information:

Share and Enjoy:
  • del.icio.us
  • Google Bookmarks
  • DZone
  • LinkedIn
  • SphereIt
  • StumbleUpon
  • Technorati

Leave a Reply

Technology