Does Replicate connect with oracle wallet information ?

[khchoy]

Hi,

Does Replicate connect oracle target endpoint with oracle wallet information ? 

If Replicate do that , Could you let me detail information .

Rehgards,

Kwangho

[john_wang]

Hello KwangHo,

In Replicate GUI, you can specify wallet entries for TDE Encryption for Oracle Source Endpoint.

For Oracle target endpoint, the TDE Encryption is transparent to Replicate. However, if you want to connect to the Oracle database without user name / password or other reasons, you may use the connection string with wallet information to connect to Oracle database. The string likes:

(description=(address=(host=aaaaa)(protocol=tcps)(port=2484))(connect_data=(service_name=xxxxx))(Security=(my_wallet_directory=*Pathto Wallet*)))

if the connection string works for SQLPlus or other apps then it should work for Replicate too.

Hope this helps.

Regards,

John.

[khchoy]

Hello John  ,

Thanks for update.

Is it same when I connect oracle cloud db? I do  not use TDE, but try to test oracle cloud db.

I have got connection string from oracle cloud but it is different structure.

In the User Guide, Replicate support oracle cloud oracle db source and target. 

Regards,

kwangho

[john_wang]

Hello KwangHo,

I think Yes. The Oracle on Oracle Cloud is supported via general Oracle Target Endpoint.

Is the connection string works for SQLPlus or other 3rd tool? if it works then it should be fine for Replicate.

Regards,

John.

[joshc]

Hi @john_wang I have a similar issue for this. I have configured the Oracle Wallet to ensure connection between Qlik Replicate and Oracle (Source) is encrypted in transit. I have tested the wallet using SQLPlus without a username/password and it's working as expected. However, when using the Qlik Replicate UI, I keep getting an invalid username/password when I don't enter the credentials. Can you please advise how to connect without the username and password?

[john_wang]

Hello @joshc ,

I'm afraid you misunderstood the 2 information.

General --> Connection string, u/p --> are used to connect to Oracle database. You need specify the valid user name and password the authorized user for this Oracle database .

Advanced --> Secret store encryption entries, Names/Values --> are used to input the Oracle wallet entries used for TDE Encryption, detailed info can be found the wallet entries .

Hope this helps.

Regards,

John.

[joshc]

Hi @john_wang 

Thanks for your response. I do not need to use the Oracle Wallet for TDE Encryption.

I need to use Oracle Wallet to:

1) Ensure encryption-in-transit is implemented

2) Avoid entering username/password within Qlik Replicate

As you can see in the screenshots I shared earlier, I was able to connect using SQLPlus without entering the credentials and by checking the sqlnet trace, I can see that the connection is encrypted. 

My question is how do I implement this in Qlik Replicate UI? 

E:\Wallet>sqlplus /@ibis_wallet

SQL*Plus: Release 19.0.0.0.0 - Production on Wed Jun 29 09:13:19 2022
Version 19.3.0.0.0

Copyright (c) 1982, 2019, Oracle. All rights reserved.

Last Successful login time: Wed Jun 29 2022 09:08:26 +01:00

**ibis_wallet is one of the connections defined in TNSNAMES

[john_wang]

Hi @joshc ,

thanks for the info. I got it now however I did not try it before. I'd like suggest:

1. how about if you input an space (otherwise it's null) to the u/p in Replicate endpoint to 'cheat' Replicate

2. open a support case to get further research

Regards,

John.

[lyka · Accepted solution]

Hello,

Here's an article about Oracle TDEs. 

https://community.qlik.com/t5/Knowledge/How-to-get-encryption-keys-in-Oracle/ta-p/1748232

Hope it helps!

Thanks

Lyka