3
Post-Installation Configuration Tasks

This chapter describes post-installation configuration tasks for Oracle COM Automation feature. Specific topics discussed are:

Optimal Flexible Architecture for Oracle8i

When you install Oracle8i Enterprise Edition utilizing the Optimal Flexible Architecture (OFA), all subdirectories are under a top-level directory called oracle_base that is of the form x:\oracle where X is any hard drive. If you install an OFA-compliant database using Oracle Universal Installer defaults, oracle_base is c:\oracle. \oracle_home directories are located under oracle_base. \oradata and \admin directories that contains the database files and database administration files are also located under oracle_base.

The following configuration instructions reference directory trees that assume that you have installed an OFA-compliant Oracle database.

Configuring Oracle COM Automation Feature

To configure Oracle COM Automation feature:

Change to the following directory from the MS-DOS command prompt:
```
C:\> cd oracle_base\oracle_home\com
```
where oracle_base\oracle_home represents your drive letter and the Oracle home directory where Oracle COM Automation feature was installed.
Start Server Manager:
```
C:\> svrmgrl
```
Connect to the Oracle database instance as SYSTEM.
```
SVRMGR> CONNECT SYSTEM/PASSWORD[@DB_ALIAS]
```
Grant the CREATE LIBRARY privilege to the database users that will use Oracle COM Automation feature. For example:
```
SVRMGR> GRANT CREATE LIBRARY TO SCOTT;
```
Connect to the user that will use Oracle COM Automation and run the comwrap.sql script at the Server Manager prompt:
```
SVRMGR> CONNECT SCOTT/TIGER
SVRMGR> @ORACLE_BASE\ORACLE_HOME\COM\COMWRAP.SQL
```
You will receive several "ORA-04043: object XXXX does not exist" messages when you run this script for the first time. These messages are normal.

Configuring the Listener

Oracle COM Automation feature relies on external procedure callouts and you must configure the listener and Net8 remote procedure call (RPC) mechanism for the feature to work.

The following examples demonstrate how to configure the listener.ora and tnsnames.ora files to use inter-process communication (IPC) to invoke external stored procedures. This is the default configuration for both files for this release.

See Also:
For additional information on how to configure the listener.ora and tnsnames.ora files for external procedures, see the Net8 Administrator's Guide.

listener.ora Configuration File

LISTENER =
	(ADDRESS_LIST =
        (ADDRESS=
          (PROTOCOL= IPC)
          (KEY= EXTPROC0)
        )
	)
STARTUP_WAIT_TIME_LISTENER = 0
CONNECT_TIMEOUT_LISTENER = 10
TRACE_LEVEL_LISTENER = OFF
SID_LIST_LISTENER =
  (SID_LIST =
    (SID_DESC =
      (SID_NAME = ORCL)
    )
    (SID_DESC =
      (SID_NAME = extproc)
      (PROGRAM=extproc)
    )
  )
PASSWORDS_LISTENER = (oracle)

tnsnames.ora Configuration File

extproc_connection_data.world =
  (DESCRIPTION =
    (ADDRESS =
        (PROTOCOL=IPC)
	(KEY=EXTPROC0)
    )
    (CONNECT_DATA = (SID=extproc)
    )
  )

ORA-28575: Error Message

An "ORA-28575: unable to open RPC connection to external procedure agent" error message indicates one of two possible problems:

Problem 1

Problem: The listener is not started.

Action: You must start the Oraclehome_nameTNSListener service from the Control Panel or the MS-DOS command prompt.

To start Oracle services from the Control Panel:

Choose Start > Settings > Control Panel.

The Control Panel window appears.
Double-click Services.

The Services dialog box appears.
Find OracleHOME_NAMETNSListener in the list and verify that it has a status of Started. If it does not, select it and click Start.

To start Oracle services from the MS-DOS command prompt:

Enter the following command to start an Oracle service at the MS-DOS command prompt:

C:\> net start service

where service is a specific service name, such as OracleHOME_NAMETNSListener.

Problem 2

Problem: The listener is not configured correctly.

Action: You must modify the listener.ora and tnsnames.ora files. See "Configuring the Listener" for information on how to configure these files.

Configuring DCOM

Oracle COM Automation feature supports the use of DCOM to access remote COM objects over a network. However, in order to use DCOM, you must configure both the computer that is running the Oracle database instance and the computer that contains the remote COM object.

For security purposes, the Oracle listener must run with the same security privileges as a domain user that has access to the remote computer. In order to authenticate that the client has access to the remote computer, DCOM passes the security credentials of the Oracle listener to the remote computer. The remote computer validates the security credentials and allows DCOM to proceed. Normally, the Oracle listener runs as the System account rather than a specific user account. Because the System account has no remote privileges, the system administrator must perform the following steps.

To change the Oracle listener to run as a domain user:

Choose Start > Settings > Control Panel. The Control Panel window appears.
Double-click Services. The Services dialog box appears.
Select the OracleHOME_NAMETNSListener service and click Startup.
Click the This Account radio button. The Service dialog box appears.
Enter the name or browse for a domain user. The Oracle listener runs with the security privileges of this user.
Enter and confirm the password of the domain user that was selected.

Click OK to save the changes.

Note:
After you change the Oracle listener's security privilege to a domain user, you must also change the security privilege of the Oracle database to the same domain user or a domain user that has the compatible security privilege; otherwise, no one will be able to connect to Oracle.

The next step is to configure the DCOM security settings of the remote computer. The system administrator must set the DCOM security privileges such that the Oracle listener, operating as a domain user, has sufficient privileges to instantiate and manipulate the remote COM object.

The remote COM object executes with the same privileges as the Oracle listener. If the COM object attempts to perform an action for which it does not have permission, DCOM denies the operation and returns a security violation back to Oracle COM Automation feature. It is essential that the system administrator configure the DCOM security properly and provide Oracle with the necessary permissions.

DCOM enables the administrator to configure the default security for the entire computer or define specific security permissions for a specific COM object. Microsoft provides the dcomcnfg.exe tool to configure DCOM security. This tool enables the system administrator to set the access permissions, launch permissions, and configuration permissions for a specific COM object or all COM objects on a computer. For more information on how to use this tool and the implications of each of these permissions, see the Microsoft operating system specific documentation for the computer.

3 Post-Installation Configuration Tasks