How to configure JIRA to use Oracle Wallet for connecting to Oracle Database?

[satyanarayana visampalli]

How to configure JIRA v6.2.3 to use Oracle Wallet for connecting to Oracle Database 11g R2?

Please help.

[satyanarayana visampalli]

Hi Warren, 

We looked into this Oracle Wallet and gave up on this idea for JIRA and tried another approach with JNDI.

Please check this link and go through Matthias Küspert  comments. We encrypted dbusername as well as dbpwd for JIRA using this approach.

https://jira.atlassian.com/browse/JRA-31004

[Warren Paul]

so I have spent more time on this than I wish :( Just cannot get it to use the wallet. We have a number of tomcat apps that we setup the wallet for and are very familiar with that process. But since jira really wants to read this file
[jira.config.database.SystemDatabaseConfigurationLoader] Reading database configuration from /opt/app/jira/dbconfig.xml
and that file must have a username/password option it just wont work
We tried blanking out the password, giving null, putting the connector string in parts of the password. And all to no avail.

[Warren Paul]

I'm kind of struggling with the same issue. Yes I'm using tomcat and have setup tomcat to use oracle wallet. So for example I have the follwing "-Doracle.net.tns_admin=/opt/app/qa1/wallet -Doracle.net.wallet_location=/opt/app/qa1/wallet"

However dbconfig.xml appears to require username/password to be set or I only get errors. How can I get oracle wallet configured for dbconfig.xml or is there something else needed? Here is my dbconfig.xml

<?xml version="1.0" encoding="UTF-8"?>
<jira-database-config>
<name>defaultDS</name>
<delegator-name>default</delegator-name>
<database-type>oracle10g</database-type>
<jdbc-datasource>
<url>jdbc:oracle:thin:@<URL>:1521:ORCL</url>
<driver-class>oracle.jdbc.OracleDriver</driver-class>
<username>jirauser</username>
<password>password</password>
<pool-min-size>20</pool-min-size>
<pool-max-size>20</pool-max-size>
<pool-max-wait>30000</pool-max-wait>
<pool-max-idle>20</pool-max-idle>
<pool-remove-abandoned>true</pool-remove-abandoned>
<pool-remove-abandoned-timeout>300</pool-remove-abandoned-timeout>
<validation-query>select 1 from dual</validation-query>
<min-evictable-idle-time-millis>60000</min-evictable-idle-time-millis>
<time-between-eviction-runs-millis>300000</time-between-eviction-runs-millis>
<pool-test-while-idle>true</pool-test-while-idle>
<pool-test-on-borrow>false</pool-test-on-borrow>
</jdbc-datasource>
</jira-database-config>

[Nic Brough -Adaptavist-]

I seem to remember that another system I've used on Oracle drops username/password and uses a "connection settings" option that tells Tomcat to use the wallet. But it wasn't Atlassian, so I don't know if that will work. My instinct is that it will, because in my head, the image is: User asks JIRA for something, JIRA says "Oi, Tomcat, go find out this from whereever you're keeping my data", Tomcat talks to the database, and hands data back to JIRA which processes it and gives it to the user. Jira doesn't care about the database, Tomcat handles it. So if you can configure tomcat to use a database like that, it should work fine for Atlassian stuff too.

[Warren Paul]

Hmm I think your right, whats strange is I never figured it out because of the error I got, but now with what your saying I believe it is indeed looking for the wallet but erroring out. /// org.ofbiz.core.util.GeneralRuntimeException: Could not determine database type. (PKI classes not found. To use 'connect /' functionality, oraclepki.jar must be in the classpath: /// Thats the error, however I have made sure that the ojdbc6.jar is in the correct location. Some googling suggests that I may stil;l need some extra jars elsewhere. I'll keep working at it

[Nic Brough -Adaptavist-]

I was lucky enough to have someone who had done Tomcat with Wallet before (and it wasn't an Atlassian app), but it did mean I didn't look too closely at it. I'd be tempted to place the oraclepki.jar in Tomcat's /lib directory.

[Nic Brough -Adaptavist-]

It depends.

JIRA does NOT "connect to Oracle".  JIRA connects to the application server's data-source, and what you need to look at is the application server's connection of "data-source = go read that database over there".

So, your question needs to be rewritten to become "How do I configure my application server (that is running JIRA) to use Oracle Wallet for the Oracle database connections?".  

And that depends on the application server.  If you've used Atlassian installers / recommendations then, the application server is Tomcat, but we don't know that, you may have used another application server.  Whichever one you have used, you need to read up on how to connect that application server to Oracle using the wallet.  (Some of us may already know, but I don't, and the others need to know what your application server is before they can help!)