Sqlnet.ora file 11.5.10.2

Question

Hi,
I always disabled or commented the 2 lines sqlnet.ora file to accept all database connections...
tcp.validnode_checking=yes
tcp.invited_nodes=
I commented the above lines in sqlnet.ora file and bounced the listener..now i am able to connect to the database...
When ever I run the autoconfig in database tier..... these 2 lines are going to be uncommented...
how we can do this for permenant for checking the above 2 lines sqlnet.ora file..
do we need to add any custom context variables in Context file..if it is so..how can we do it..please help me in this regard....

Answer 1

tcp.validnode_checking=yes
tcp.invited_nodes= <list your applications tier nodes here>
These actually ARE recommended in Production. Basically what you're saying by setting these is that the SQL*Net Listener for the database will ONLY talk to these known hosts. This prevents some random person from connecting directly to your database from a PC somewhere.
The downside here is that if you have a large number of users who use a client-side tool (like ADI or Discoverer), then you'll have to list their IP addresses here. This can be quite difficult in a DHCP-enabled environment.
The way autoconfig works, it basically replaces any autoconfig managed files whenever it runs (which is why your customizations get clobbered).
So, in situations where there isn't a context variable that you can update, you'll have to make a custom template.
When autoconfig runs, it checks first for the existence of the custom template (and validates that it isn't based on an older version than the currently installed one) and will use that instead of the delivered one.
Simple way to do a custom template:
1) Identify the template being used (Database tier, it'll be under $ORACLE_HOME/appsutil somewhere... Apps tier it's generally under $AD_TOP/admin/template or $FND_TOP/admin/template).
2) Create a "custom" directory under the "template" directory where your template lives.
3) Copy that template into the "custom" directory.
4) Edit this copy.
-- James