# =============================================================================
# Oracle sqlnet.ora - Compatibility Configuration for Old Instant Client
# =============================================================================
#
# Purpose: Allow connections from Oracle Instant Client 10g/11g to Oracle 21c
#
# IMPORTANT - Oracle 21c Location:
#   Oracle 21c uses a read-only Oracle Home. Configuration files must go in
#   the "Oracle Base Home" directory, NOT in ORACLE_HOME.
#
#   For Oracle 21c XE, copy to:
#     %ORACLE_BASE%\product\21c\homes\OraDB21Home1\network\admin\sqlnet.ora
#   Example:
#     C:\app\<user>\product\21c\homes\OraDB21Home1\network\admin\sqlnet.ora
#
#   For older Oracle versions, copy to:
#     %ORACLE_HOME%\network\admin\sqlnet.ora
#
# After copying:
#   1. STOP and START listener (not just reload!):
#      lsnrctl stop
#      lsnrctl start
#   2. Wait ~10 seconds for database services to re-register
#   3. Reset user passwords (required to generate 10G password verifier):
#      ALTER USER CONTAFIN_ORACLE IDENTIFIED BY ROMFASTSOFT;
#      ALTER USER <company> IDENTIFIED BY <password>;
#
# Note: The password MUST be reset after sqlnet.ora change - this regenerates
#       the password hash to include the 10G verifier needed by old clients.
#
# =============================================================================

# -----------------------------------------------------------------------------
# Authentication Protocol Compatibility
# -----------------------------------------------------------------------------

# Allow older authentication protocols (required for Instant Client 10/11)
# Value 8 allows all protocols from Oracle 8i onwards
# Default in 21c is 12, which blocks clients older than 12c
SQLNET.ALLOWED_LOGON_VERSION_SERVER=8
SQLNET.ALLOWED_LOGON_VERSION_CLIENT=8

# -----------------------------------------------------------------------------
# Password Case Sensitivity (Optional)
# -----------------------------------------------------------------------------

# Disable password case sensitivity for compatibility with old applications
# that may send passwords in uppercase
# Uncomment if needed:
# SEC_CASE_SENSITIVE_LOGON=FALSE

# -----------------------------------------------------------------------------
# Name Resolution
# -----------------------------------------------------------------------------

# Standard name resolution order
NAMES.DIRECTORY_PATH = (TNSNAMES, EZCONNECT)

# -----------------------------------------------------------------------------
# Connection Settings (Optional)
# -----------------------------------------------------------------------------

# Timeout for establishing connection (seconds)
# SQLNET.INBOUND_CONNECT_TIMEOUT = 60

# Dead connection detection interval (minutes)
# SQLNET.EXPIRE_TIME = 10

# -----------------------------------------------------------------------------
# Encryption (Optional - for secure connections)
# -----------------------------------------------------------------------------

# Enable native encryption (AES256)
# SQLNET.ENCRYPTION_SERVER = REQUIRED
# SQLNET.ENCRYPTION_TYPES_SERVER = (AES256)
# SQLNET.CRYPTO_CHECKSUM_SERVER = REQUIRED
# SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER = (SHA256)

# -----------------------------------------------------------------------------
# Logging (for troubleshooting)
# -----------------------------------------------------------------------------

# Enable tracing (set to OFF in production)
# TRACE_LEVEL_CLIENT = OFF
# TRACE_LEVEL_SERVER = OFF

# Log file locations
# LOG_DIRECTORY_CLIENT = C:\app\oracle\network\log
# LOG_DIRECTORY_SERVER = C:\app\oracle\network\log

# =============================================================================
# After applying this configuration:
#
# 1. Reload listener:
#    lsnrctl reload
#
# 2. Reset passwords for users connecting with old clients:
#    sqlplus sys/romfastsoft@SERVICE as sysdba
#    ALTER USER CONTAFIN_ORACLE IDENTIFIED BY ROMFASTSOFT;
#    ALTER USER [COMPANY] IDENTIFIED BY [PASSWORD];
#
# 3. Test connection from old client:
#    sqlplus CONTAFIN_ORACLE/ROMFASTSOFT@//host:1521/SERVICE
#
# =============================================================================

# -----------------------------------------------------------------------------
# Autentificare OS (NTS) - Windows
# -----------------------------------------------------------------------------

# Permite "sqlplus / as sysdba" si "rman target /" de pe server, FARA parola.
# Necesar pentru task-ul de backup RMAN: altfel ar trebui tinuta parola SYS
# in clar intr-un fisier de pe disc.
#
# ATENTIE - sunt necesare AMANDOUA, una fara alta da ORA-01017:
#   1. linia de mai jos, si
#   2. contul Windows sa fie membru al grupului DBA al ACESTUI Oracle Home
#      (ORA_OraDB21Home1_DBA, nu ORA_DBA generic):
#         net localgroup ORA_OraDB21Home1_DBA <cont> /add
#      Apartenenta se activeaza abia la o sesiune de logon noua.
#
# Verificat pe VADECO 2026-08-28: cu grupul corect dar FARA linia asta,
# "/ as sysdba" tot da ORA-01017. Nu afecteaza conectarile cu parola si nici
# clientii vechi Instant Client (ambele testate dupa modificare).
SQLNET.AUTHENTICATION_SERVICES = (NTS)