Re: [External] : [PHP-DB] PDO to Oracle db and secure external password store aka wallet for authentication

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




On 28/9/21 6:59 pm, Mathias Zarick wrote:
Hi there,

I am wondering how it would be possible to use authentication using a secure external password store aka wallet with PDO OCI.

See Oracle external authentication and OCI_CRED_EXT in the underground php oracle manual.

and

https://docs.oracle.com/en/database/oracle/oracle-database/19/dbseg/configuring-authentication.html#GUID-803496D2-19C7-4F02-94EC-C13EDD8FB17B
(jump to chapter 3.2.9)


Following works fine with oci8:
$conn = oci_connect('/', '', $db, 'UTF8',OCI_CRED_EXT);

note the OCI_CRED_EXT!

But how can pass that option to a PDO OCI connection?
Following might be close, but does not work:

   $opt = [
       PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
       PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_NUM,
       'session_mode' => OCI_CRED_EXT,

];

   try{
       $conn = new PDO("oci:dbname=".$db.';charset=UTF8', "/","", $opt);
   }
   catch(PDOException $e){
       echo ($e->getMessage());
   }

Is it possible at all?

You can see in the PDO_OCI source code there is no reference to the OCI_CRED_EXT constant which is needed to tell the Oracle client libraries to use external authentication.

PR's are welcome.

For the moment stick with OCI8.  In general, native drivers (e.g OCI8) will be better than any of the PDO abstractions.

Chris



Thanks in Advance
Mathias Zarick

--
https://twitter.com/ghrd

--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




[Index of Archives]     [PHP Home]     [PHP Users]     [Postgresql Discussion]     [Kernel Newbies]     [Postgresql]     [Yosemite News]

  Powered by Linux