Firewalls

Offsite folks with firewalls:

After

• getting an Oracle8 account with me, at the account request page
  and notify me of the request akeuneke@csuchico.edu
• downloading the .zip file with the proper driver (in classes12.zip). On our ect-sun.ecst.csuchico.edu machine at /opt/Oracle8i/products/8.1.7/jdbc/lib/classes12.zip
• and putting the path for this driver (i.e, to the classes12.zip file) in your classpath: OR if running from our SUNs putting /opt/Oracle8i/products/8.1.7/jdbc/lib/classes12.zip in your CLASSPATH in your .profile here
• try the test page first on http://www.ecst.csuchico.edu/~amk/foo/cscijava/database/oracle/Employee.java with your database username and password to see if you are lucky :-) :-(

If it runs it means two things, you are set up correctly and you do not have to worry about a firewall, thus you can run the program to see exactly what I would see.

If not you have two paths to take:
(1)not worry about firewall (below)and
(2) get past the stinking firewall

1. you can connect (ssh) to one of the machines here to run your program (notice this is different than the database account; here you have to have an account on our ecst machines.) You should have done this already so that you could make a webpage here to submit stuff. If you have not done so, you can still can get this account through http://www.ecst.csuchico.edu/~amk/foo/csci151/newaccounts.html .

   For the DATABASE account, you should send me email to request an Oracle account (that was step one up above)

   It is best to ssh to one of the SUNs (ect-sun.ecst.csuchico.edu). Since the program above is non-gui it should work just fine.

   Copy this program to the machine you are connecting to (ssh), Make sure your CLASSPATH is set to see the driver CLASSPATH=./:/opt/Oracle8i/products/8.1.7/jdbc/lib/classes12.zip

   If you are not a UNIX person, you can just say the following when you get logged in

   export CLASSPATH=./:/opt/Oracle8i/products/8.1.7/jdbc/lib/classes12.zip
   

   export PATH=$PATH:/usr/java/bin (not needed since in env variables)

   Then compile the program with your username and password and run it
   java Employee

   This lets you at least see that you can connect and how the program will run.

   A good way to go about it is to make two programs, one without a GUI to test it using ssh, and then the corresponding one with a GUI that I could run from here. Note the minor differences in the two above examples to see how easy this is to do, and yet provides a rewarding experience :-)

   • You want to get past the firewall so you can see exactly what I will see.

     Socks allows you to connect through a firewall from the inside of a firewall but does not allow connection from the other side of the firewall to be initiated. In other words, you can go out and make a connection but nothing can get in, unless you ask it to.

     What this means to you, is that you can connect to the database and request things and get them back, but other people can't come in. IF you have a firewall at your work that does not allow you to connect to our database, this solution is the easiest to get past the firewall.

     Talk to your system administrator to see if you can do this.

     From Jerry Loyd:

     By running the "java.exe" out of SocksCap32 (which allows me to specify a complete command line...) and by using the information provided in the links in the example for Driver name and URL, I have been able to connect to the database on Noodle.

     Specifically, for those trying to connect through a firewall, from a PC..
     We are able to use the "SocksCap32" program, which you can find at the following URL. http://www.socks.nec.com/sockscap.html

     HP does have some corporate-wide "socks5" server that you point this utility at. I'm not sure how others might use it, but if you weren't aware of this thing, the info might help you get going.

     HP people - if you want details on our Socks5 server, send me an e-mail and I'll send you the URL from our on-site "expert" that tells you how to configure SocksCap32.

     The easiest thing to do to test this is run the putty (ssh) program in it, and try to connect to ect-unix.csuchico.edu