Discussion:
troubleshooting ssl to port 2484 using tnsping
Michael McMullen
2017-08-14 18:01:25 UTC
Permalink
Oracle 11.2.0.4 (Oracle restart ie. +ASM but single host)

OEL 6.5



I'm troubleshooting tcps setup with Oracle. At this point I'm really trying to just narrow my troubleshooting if port 2484 is listening for tcps.

No server certs at this time.


Can I just add to the listener.ora file the following (if I've made a typo below assume I have it ok on my server)


(ADDRESS = (PROTOCOL = TCPS)(HOST = myhost)(PORT = 2484))


restart the listener, see that it's listening on port 2484 and then


tnsping "(DECRIPTION=(ADDRESS = (PROTOCOL = TCPS)(HOST = myhost)(PORT = 2484))"


when I do the above tnsping I get TNS-12560: TNS:protocol adapter error

while it returns OK (0 msec) when I use tcp and 1521 which is expected.


Just looking for the minimum I need to do to get the tnsping to return ok so I can limit my troubleshooting.


Thanks


Mike
Andrew Kerber
2017-08-14 18:08:44 UTC
Permalink
Are you going through a vpn?
Post by Michael McMullen
Oracle 11.2.0.4 (Oracle restart ie. +ASM but single host)
OEL 6.5
I'm troubleshooting tcps setup with Oracle. At this point I'm really
trying to just narrow my troubleshooting if port 2484 is listening for tcps.
No server certs at this time.
Can I just add to the listener.ora file the following (if I've made a typo
below assume I have it ok on my server)
(ADDRESS = (PROTOCOL = TCPS)(HOST = myhost)(PORT = 2484))
restart the listener, see that it's listening on port 2484 and then
tnsping "(DECRIPTION=(ADDRESS = (PROTOCOL = TCPS)(HOST = myhost)(PORT = 2484))"
when I do the above tnsping I get TNS-12560: TNS:protocol adapter error
while it returns OK (0 msec) when I use tcp and 1521 which is expected.
Just looking for the minimum I need to do to get the tnsping to return ok
so I can limit my troubleshooting.
Thanks
Mike
--
Andrew W. Kerber

'If at first you dont succeed, dont take up skydiving.'
Michael McMullen
2017-08-14 19:03:14 UTC
Permalink
no,

listener is run from ASM_HOME

tnsping from DB_HOME on same server


I'm trying to verify at this point that I don't need certs or even a wallet setup to do the tnsping test before I start thinking about firewalls etc.

________________________________
From: Andrew Kerber <***@gmail.com>
Sent: August 14, 2017 2:08 PM
To: ***@hotmail.com
Cc: oracle-***@freelists.org
Subject: Re: troubleshooting ssl to port 2484 using tnsping

Are you going through a vpn?

On Mon, Aug 14, 2017 at 1:01 PM, Michael McMullen <***@hotmail.com<mailto:***@hotmail.com>> wrote:

Oracle 11.2.0.4 (Oracle restart ie. +ASM but single host)

OEL 6.5



I'm troubleshooting tcps setup with Oracle. At this point I'm really trying to just narrow my troubleshooting if port 2484 is listening for tcps.

No server certs at this time.


Can I just add to the listener.ora file the following (if I've made a typo below assume I have it ok on my server)


(ADDRESS = (PROTOCOL = TCPS)(HOST = myhost)(PORT = 2484))


restart the listener, see that it's listening on port 2484 and then


tnsping "(DECRIPTION=(ADDRESS = (PROTOCOL = TCPS)(HOST = myhost)(PORT = 2484))"


when I do the above tnsping I get TNS-12560: TNS:protocol adapter error

while it returns OK (0 msec) when I use tcp and 1521 which is expected.


Just looking for the minimum I need to do to get the tnsping to return ok so I can limit my troubleshooting.


Thanks


Mike



--
Andrew W. Kerber

'If at first you dont succeed, dont take up skydiving.'
Tim Gorman
2017-08-14 19:41:46 UTC
Permalink
Have you walked through the steps advised by Oracle Support note
#332125.1
<https://support.oracle.com/epmos/faces/DocumentDisplay?id=332125.1>
(entitled "/Errors When Using The TCPS Protocol/")?
Post by Michael McMullen
no,
listener is run from ASM_HOME
tnsping from DB_HOME on same server
I'm trying to verify at this point that I don't need certs or even a
wallet setup to do the tnsping test before I start thinking about
firewalls etc.
------------------------------------------------------------------------
*Sent:* August 14, 2017 2:08 PM
*Subject:* Re: troubleshooting ssl to port 2484 using tnsping
Are you going through a vpn?
On Mon, Aug 14, 2017 at 1:01 PM, Michael McMullen
Oracle 11.2.0.4 (Oracle restart ie. +ASM but single host)
OEL 6.5
I'm troubleshooting tcps setup with Oracle. At this point I'm
really trying to just narrow my troubleshooting if port 2484 is
listening for tcps.
No server certs at this time.
Can I just add to the listener.ora file the following (if I've
made a typo below assume I have it ok on my server)
(ADDRESS = (PROTOCOL = TCPS)(HOST = myhost)(PORT = 2484))
restart the listener, see that it's listening on port 2484 and then
tnsping "(DECRIPTION=(ADDRESS = (PROTOCOL = TCPS)(HOST =
myhost)(PORT = 2484))"
when I do the above tnsping I get TNS-12560: TNS:protocol adapter error
while it returns OK (0 msec) when I use tcp and 1521 which is expected.
Just looking for the minimum I need to do to get the tnsping to
return ok so I can limit my troubleshooting.
Thanks
Mike
--
Andrew W. Kerber
'If at first you dont succeed, dont take up skydiving.'
Jared Still
2017-08-16 17:19:10 UTC
Permalink
Hi Michael,

What is the output from 'adapters' ?



Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist
Principal Consultant at Pythian
Pythian Blog http://www.pythian.com/blog/author/still/
Github: https://github.com/jkstill
Oracle Blog: http://jkstill.blogspot.com
Home Page: http://jaredstill.com
Post by Michael McMullen
Oracle 11.2.0.4 (Oracle restart ie. +ASM but single host)
OEL 6.5
I'm troubleshooting tcps setup with Oracle. At this point I'm really
trying to just narrow my troubleshooting if port 2484 is listening for tcps.
No server certs at this time.
Can I just add to the listener.ora file the following (if I've made a typo
below assume I have it ok on my server)
(ADDRESS = (PROTOCOL = TCPS)(HOST = myhost)(PORT = 2484))
restart the listener, see that it's listening on port 2484 and then
tnsping "(DECRIPTION=(ADDRESS = (PROTOCOL = TCPS)(HOST = myhost)(PORT = 2484))"
when I do the above tnsping I get TNS-12560: TNS:protocol adapter error
while it returns OK (0 msec) when I use tcp and 1521 which is expected.
Just looking for the minimum I need to do to get the tnsping to return ok
so I can limit my troubleshooting.
Thanks
Mike
MacGregor, Ian A.
2017-08-16 19:01:17 UTC
Permalink
Do you have access to telnet? What happens when you run

telnet myhost 2484

on the client. I suspect it is because the connection does not hang. Have you looked at

http://www.petefinnigan.com/forum/yabb/YaBB.cgi?board=tools_free;action=print;num=1128363187


Ian MacGregor
SLAC National Accelerator Laboratory.


On Aug 16, 2017, at 10:19 AM, Jared Still <***@gmail.com<mailto:***@gmail.com>> wrote:

Hi Michael,

What is the output from 'adapters' ?



Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist
Principal Consultant at Pythian
Pythian Blog http://www.pythian.com/blog/author/still/
Github: https://github.com/jkstill
Oracle Blog: http://jkstill.blogspot.com<http://jkstill.blogspot.com/>
Home Page: http://jaredstill.com<http://jaredstill.com/>

On Mon, Aug 14, 2017 at 11:01 AM, Michael McMullen <***@hotmail.com<mailto:***@hotmail.com>> wrote:

Oracle 11.2.0.4 (Oracle restart ie. +ASM but single host)

OEL 6.5



I'm troubleshooting tcps setup with Oracle. At this point I'm really trying to just narrow my troubleshooting if port 2484 is listening for tcps.

No server certs at this time.


Can I just add to the listener.ora file the following (if I've made a typo below assume I have it ok on my server)


(ADDRESS = (PROTOCOL = TCPS)(HOST = myhost)(PORT = 2484))


restart the listener, see that it's listening on port 2484 and then


tnsping "(DECRIPTION=(ADDRESS = (PROTOCOL = TCPS)(HOST = myhost)(PORT = 2484))"


when I do the above tnsping I get TNS-12560: TNS:protocol adapter error

while it returns OK (0 msec) when I use tcp and 1521 which is expected.


Just looking for the minimum I need to do to get the tnsping to return ok so I can limit my troubleshooting.


Thanks


Mike
Insights
2017-08-16 19:19:13 UTC
Permalink
I do believe you need server certs to TCPS

Sent from my iPhone
Post by MacGregor, Ian A.
Do you have access to telnet? What happens when you run
telnet myhost 2484
on the client. I suspect it is because the connection does not hang. Have you looked at
http://www.petefinnigan.com/forum/yabb/YaBB.cgi?board=tools_free;action=print;num=1128363187
Ian MacGregor
SLAC National Accelerator Laboratory.
Post by Jared Still
Hi Michael,
What is the output from 'adapters' ?
Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist
Principal Consultant at Pythian
Pythian Blog http://www.pythian.com/blog/author/still/
Github: https://github.com/jkstill
Oracle Blog: http://jkstill.blogspot.com
Home Page: http://jaredstill.com
Post by Michael McMullen
Oracle 11.2.0.4 (Oracle restart ie. +ASM but single host)
OEL 6.5
I'm troubleshooting tcps setup with Oracle. At this point I'm really trying to just narrow my troubleshooting if port 2484 is listening for tcps.
No server certs at this time.
Can I just add to the listener.ora file the following (if I've made a typo below assume I have it ok on my server)
(ADDRESS = (PROTOCOL = TCPS)(HOST = myhost)(PORT = 2484))
restart the listener, see that it's listening on port 2484 and then
tnsping "(DECRIPTION=(ADDRESS = (PROTOCOL = TCPS)(HOST = myhost)(PORT = 2484))"
when I do the above tnsping I get TNS-12560: TNS:protocol adapter error
while it returns OK (0 msec) when I use tcp and 1521 which is expected.
Just looking for the minimum I need to do to get the tnsping to return ok so I can limit my troubleshooting.
Thanks
Mike
Michael McMullen
2017-08-25 14:07:23 UTC
Permalink
thanks


been away for awhile, i tested with self-signed and it's all good.

Will still trouble shoot for our in-house trusted certs.


________________________________
From: oracle-l-***@freelists.org <oracle-l-***@freelists.org> on behalf of Insights <***@nc.rr.com>
Sent: August 16, 2017 3:19 PM
To: ***@slac.stanford.edu
Cc: ORACLE-L
Subject: Re: troubleshooting ssl to port 2484 using tnsping

I do believe you need server certs to TCPS

Sent from my iPhone

On Aug 16, 2017, at 3:01 PM, MacGregor, Ian A. <***@slac.stanford.edu<mailto:***@slac.stanford.edu>> wrote:

Do you have access to telnet? What happens when you run

telnet myhost 2484

on the client. I suspect it is because the connection does not hang. Have you looked at

http://www.petefinnigan.com/forum/yabb/YaBB.cgi?board=tools_free;action=print;num=1128363187


Ian MacGregor
SLAC National Accelerator Laboratory.


On Aug 16, 2017, at 10:19 AM, Jared Still <***@gmail.com<mailto:***@gmail.com>> wrote:

Hi Michael,

What is the output from 'adapters' ?



Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist
Principal Consultant at Pythian
Pythian Blog http://www.pythian.com/blog/author/still/
Github: https://github.com/jkstill
Oracle Blog: http://jkstill.blogspot.com<http://jkstill.blogspot.com/>
Home Page: http://jaredstill.com<http://jaredstill.com/>

On Mon, Aug 14, 2017 at 11:01 AM, Michael McMullen <***@hotmail.com<mailto:***@hotmail.com>> wrote:

Oracle 11.2.0.4 (Oracle restart ie. +ASM but single host)

OEL 6.5

Mladen Gogala
2017-08-17 15:33:07 UTC
Permalink
Actually, "nc" is much better than "telnet". The "netcat" utility, also
known as "nc" is a veritable Swiss army knife of networking. The command
to verify whether the port is responding would be

nc -v -z -w 3 myhost 2484


That would send out a verbose output (-v) for using zero size messages
(-z) and waiting for 3 seconds for a reply (-w 3). Here is an example:

***@umajor:~$ nc -v -z -w 3 umajor 80
Connection to umajor 80 port [tcp/http] succeeded!
***@umajor:~$

Before the SQLcl command interpreter that has tnsping built in, I was
using a nc-based Perl script called "tnsping" to do that. And it worked
just fine, parsing the relevant part of tnsnames.ora was not a problem.
For all those Python lovers,there is even a CPAN module for netcat:

http://search.cpan.org/~vgirish/Net-Netcat-0.05/lib/Net/Netcat.pm

And some comments about the eternal Perl vs. Python debate: Python is
consistently object oriented. Perl is not. Given that the most of the
application software is written using the OO paradigm, Python is
probably better for the application writing. However, quick one-off
scripts, so frequently written by system and database administrators are
usually not object oriented and do not have well defined set of objects
to operate on. For such tasks Perl, with its unsurpassed ability to
parse strings and the myriad of readily available CPAN modules, is still
the best tool for the job. That is why Perl so stubbornly refuses to
die, despite the fact that so many "programming gurus" have declared it
obsolete. Perl has users, droves of them. Lastly, the idea that
indentation matters reminds me of Completely Oudated and Badly Overused
Language, or COBOL, for short.

OO languages also tend to be very verbose. Both Java and Python are good
examples. Perl can be very short and concise. Snippet like this:

while (<>) {

chomp;

next if /^\s*#/;

if (/..../) {

do_something;

}

}

is definitely not following the OO canon, but is very useful and
frequently used in Perl scripts. I have yet to find language which can
cram more operations in such a small amount of code.

Finally, to end on the Trumpian note: we should use things made in
America, by a guy named Larry, not some suspicious foreign stuff,
invented by a guy named Guido. And we can build beautiful scripts, the
best scripts in the world and Guido will pay for them....
Post by MacGregor, Ian A.
Do you have access to telnet? What happens when you run
telnet myhost 2484
on the client. I suspect it is because the connection does not hang. Have you looked at
http://www.petefinnigan.com/forum/yabb/YaBB.cgi?board=tools_free;action=print;num=1128363187
Ian MacGregor
SLAC National Accelerator Laboratory.
Post by Jared Still
Hi Michael,
What is the output from 'adapters' ?
Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist
Principal Consultant at Pythian
Pythian Blog http://www.pythian.com/blog/author/still/
Github: https://github.com/jkstill
Oracle Blog: http://jkstill.blogspot.com <http://jkstill.blogspot.com/>
Home Page: http://jaredstill.com <http://jaredstill.com/>
On Mon, Aug 14, 2017 at 11:01 AM, Michael McMullen
Oracle 11.2.0.4 (Oracle restart ie. +ASM but single host)
OEL 6.5
I'm troubleshooting tcps setup with Oracle. At this point I'm
really trying to just narrow my troubleshooting if port 2484 is
listening for tcps.
No server certs at this time.
Can I just add to the listener.ora file the following (if I've
made a typo below assume I have it ok on my server)
(ADDRESS = (PROTOCOL = TCPS)(HOST = myhost)(PORT = 2484))
restart the listener, see that it's listening on port 2484 and then
tnsping "(DECRIPTION=(ADDRESS = (PROTOCOL = TCPS)(HOST =
myhost)(PORT = 2484))"
when I do the above tnsping I get TNS-12560: TNS:protocol adapter error
while it returns OK (0 msec) when I use tcp and 1521 which is expected.
Just looking for the minimum I need to do to get the tnsping to
return ok so I can limit my troubleshooting.
Thanks
Mike
--
Mladen Gogala
Oracle DBA
Tel: (347) 321-1217
Rodrigo Mufalani
2017-08-17 16:54:02 UTC
Permalink
Hi,

Sometime ago I need to check a specific port and had no telnet installed on machine. So, decided to use curl:

Mufalani03:~ mufalani$ curl -v telnet://192.168.0.100:1521
* Rebuilt URL to: telnet:// 192.168.0.100:1521/
* Trying 192.168.0.100...
* TCP_NODELAY set
* Connected to 192.168.0.100 (192.168.0.100) port 1521 (#0)

All the best,
[RED]

Rodrigo Mufalani - Dir. Técnico
***@mufalani.com.br
+55 21 988 994 817

Mufalani
+55 21 3193 0326
Rua Almirante Grenfall, 405, Bloco 3, Sala 310
Centro Empresarial Washington Luiz
Duque de Caxias - RJ
CEP 25085-009
www.mufalani.com.br<http://www.mufalani.com.br/>


[id:***@01D2F4C6.8E6B3BE0]



De: <oracle-l-***@freelists.org> em nome de Mladen Gogala <***@gmail.com>
Responder para: "***@gmail.com" <***@gmail.com>
Data: quinta-feira, 17 de agosto de 2017 12:33
Para: "oracle-***@freelists.org" <oracle-***@freelists.org>
Assunto: Re: troubleshooting ssl to port 2484 using tnsping


Actually, "nc" is much better than "telnet". The "netcat" utility, also known as "nc" is a veritable Swiss army knife of networking. The command to verify whether the port is responding would be

nc -v -z -w 3 myhost 2484



That would send out a verbose output (-v) for using zero size messages (-z) and waiting for 3 seconds for a reply (-w 3). Here is an example:

***@umajor:~$ nc -v -z -w 3 umajor 80
Connection to umajor 80 port [tcp/http] succeeded!
***@umajor:~$

Before the SQLcl command interpreter that has tnsping built in, I was using a nc-based Perl script called "tnsping" to do that. And it worked just fine, parsing the relevant part of tnsnames.ora was not a problem. For all those Python lovers,there is even a CPAN module for netcat:

http://search.cpan.org/~vgirish/Net-Netcat-0.05/lib/Net/Netcat.pm

And some comments about the eternal Perl vs. Python debate: Python is consistently object oriented. Perl is not. Given that the most of the application software is written using the OO paradigm, Python is probably better for the application writing. However, quick one-off scripts, so frequently written by system and database administrators are usually not object oriented and do not have well defined set of objects to operate on. For such tasks Perl, with its unsurpassed ability to parse strings and the myriad of readily available CPAN modules, is still the best tool for the job. That is why Perl so stubbornly refuses to die, despite the fact that so many "programming gurus" have declared it obsolete. Perl has users, droves of them. Lastly, the idea that indentation matters reminds me of Completely Oudated and Badly Overused Language, or COBOL, for short.

OO languages also tend to be very verbose. Both Java and Python are good examples. Perl can be very short and concise. Snippet like this:

while (<>) {

chomp;

next if /^\s*#/;

if (/..../) {

do_something;

}

}

is definitely not following the OO canon, but is very useful and frequently used in Perl scripts. I have yet to find language which can cram more operations in such a small amount of code.

Finally, to end on the Trumpian note: we should use things made in America, by a guy named Larry, not some suspicious foreign stuff, invented by a guy named Guido. And we can build beautiful scripts, the best scripts in the world and Guido will pay for them....



On 08/16/2017 03:01 PM, MacGregor, Ian A. wrote:
Do you have access to telnet? What happens when you run

telnet myhost 2484

on the client. I suspect it is because the connection does not hang. Have you looked at

http://www.petefinnigan.com/forum/yabb/YaBB.cgi?board=tools_free;action=print;num=1128363187


Ian MacGregor
SLAC National Accelerator Laboratory.


On Aug 16, 2017, at 10:19 AM, Jared Still <***@gmail.com<mailto:***@gmail.com>> wrote:

Hi Michael,

What is the output from 'adapters' ?



Jared Still
Certifiable Oracle DBA and Part Time Perl Evangelist
Principal Consultant at Pythian
Pythian Blog http://www.pythian.com/blog/author/still/
Github: https://github.com/jkstill
Oracle Blog: http://jkstill.blogspot.com<http://jkstill.blogspot.com/>
Home Page: http://jaredstill.com<http://jaredstill.com/>

On Mon, Aug 14, 2017 at 11:01 AM, Michael McMullen <***@hotmail.com<mailto:***@hotmail.com>> wrote:
Oracle 11.2.0.4 (Oracle restart ie. +ASM but single host)
OEL 6.5


I'm troubleshooting tcps setup with Oracle. At this point I'm really trying to just narrow my troubleshooting if port 2484 is listening for tcps.
No server certs at this time.

Can I just add to the listener.ora file the following (if I've made a typo below assume I have it ok on my server)

(ADDRESS = (PROTOCOL = TCPS)(HOST = myhost)(PORT = 2484))

restart the listener, see that it's listening on port 2484 and then

tnsping "(DECRIPTION=(ADDRESS = (PROTOCOL = TCPS)(HOST = myhost)(PORT = 2484))"

when I do the above tnsping I get TNS-12560: TNS:protocol adapter error
while it returns OK (0 msec) when I use tcp and 1521 which is expected.

Just looking for the minimum I need to do to get the tnsping to return ok so I can limit my troubleshooting.

Thanks

Mike
--
Mladen Gogala

Oracle DBA

Tel: (347) 321-1217
Loading...