From oracle-l-bounce@freelists.org Thu Mar 11 13:12:52 2004 Return-Path: Received: from air189.startdedicated.com (root@localhost) by orafaq.com (8.11.6/8.11.6) with ESMTP id i2BJCpJ18712 for ; Thu, 11 Mar 2004 13:12:51 -0600 X-ClientAddr: 206.53.239.180 Received: from turing.freelists.org (freelists-180.iquest.net [206.53.239.180]) by air189.startdedicated.com (8.11.6/8.11.6) with ESMTP id i2BJClo18697 for ; Thu, 11 Mar 2004 13:12:47 -0600 Received: from turing (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 9C518395A11; Thu, 11 Mar 2004 12:21:31 -0500 (EST) Received: with ECARTIS (v1.0.0; list oracle-l); Thu, 11 Mar 2004 12:19:57 -0500 (EST) X-Original-To: oracle-l@freelists.org Delivered-To: oracle-l@freelists.org Received: from brcexc04.churchill.com (mx.churchill.com [193.130.154.133]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 777E5396667 for ; Thu, 11 Mar 2004 10:49:55 -0500 (EST) Received: by brcexc04.churchill.com with Internet Mail Service (5.5.2653.19) id ; Thu, 11 Mar 2004 15:54:32 -0000 Message-ID: <817D2444710B934B9F7B8A1DAAF432D601F2ADE6@brcexm03> From: Feighery Raymond To: "'oracle-l@freelists.org'" Subject: RE: listener for external procedure Date: Thu, 11 Mar 2004 15:54:42 -0000 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" X-archive-position: 514 X-ecartis-version: Ecartis v1.0.0 Sender: oracle-l-bounce@freelists.org Errors-To: oracle-l-bounce@freelists.org X-original-sender: Raymond.Feighery@churchill.com Precedence: normal Reply-To: oracle-l@freelists.org X-list: oracle-l David It depends on the version. Extproc is used in 8.1.7 and 9i in interMedia. In 9i, many formats are handled without extproc using java in the database. If you do need to run the extproc listener, patch your security. Don't configure the standard Oracle Listener to use extproc. Instead have two listeners and ensure that the Oracle Listener created for PL/SQL EXTPROC runs as an unprivileged OS user (e.g., "nobody" on Unix). Good Metalink article on this at Oracle Security Alert #57 http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_datab ase_id=NOT&p_id=244523.1 Ray -----Original Message----- From: David Boyd [mailto:davidb158@hotmail.com] Sent: Thursday, March 11, 2004 2:24 PM To: oracle-l@freelists.org Subject: listener for external procedure Hi List, Our application development team is trying to use InterMedia Text for text searching against a CLOB field that requires calling external procedure to create domain index. So we need to configure the listener for external procedure (extproc). However, our administrator says that it's NOT a good idea because this opens a security hole on the machine. The interface had been removed as part of addressing security issues in previous patches. I was wondering how you use external procedure. If you don't use external procedure, how do you search text against CLOB field? Thanks in advance for any input. _________________________________________________________________ FREE pop-up blocking with the new MSN Toolbar - get it now! http://clk.atdmt.com/AVE/go/onm00200415ave/direct/01/ ---------------------------------------------------------------- Please see the official ORACLE-L FAQ: http://www.orafaq.com ---------------------------------------------------------------- To unsubscribe send email to: oracle-l-request@freelists.org put 'unsubscribe' in the subject line. -- Archives are at http://www.freelists.org/archives/oracle-l/ FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html ----------------------------------------------------------------- ___________________________________________________________________________ This email and any attached to it are confidential and intended only for the individual or entity to which it is addressed. If you are not the intended recipient, please let us know by telephoning or emailing the sender. You should also delete the email and any attachment from your systems and should not copy the email or any attachment or disclose their content to any other person or entity. The views expressed here are not necessarily those of Churchill Insurance Group plc or its affiliates or subsidiaries. Thank you. Churchill Insurance Group plc. Company Registration Number - 2280426. England. Registered Office: Churchill Court, Westmoreland Road, Bromley, Kent BR1 1DP. ---------------------------------------------------------------- Please see the official ORACLE-L FAQ: http://www.orafaq.com ---------------------------------------------------------------- To unsubscribe send email to: oracle-l-request@freelists.org put 'unsubscribe' in the subject line. -- Archives are at http://www.freelists.org/archives/oracle-l/ FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html -----------------------------------------------------------------