{"id":48198,"date":"2026-10-28T16:14:22","date_gmt":"2026-10-28T15:14:22","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/?p=48198"},"modified":"2026-10-28T16:17:05","modified_gmt":"2026-10-28T15:17:05","slug":"name-resolution-of-oracle","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/name-resolution-of-oracle\/","title":{"rendered":"Name resolution of Oracle"},"content":{"rendered":"\n

This blog post is a follow-up of TNS_ADMIN \u2013 which *.ora files Oracle will use<\/a>. There, the main focus was to find out if a running database instance will use a TNS_ADMIN environment or the binary defaults.<\/p>\n\n\n\n

In this blog post we will analyze much more the internal mechanisms to find the *.ora files, which offered a few surprises. You will see many tracing output. If you are only interested in the summary, scroll down to the end \ud83d\ude09<\/p>\n\n\n\n

Local and remote connections<\/h2>\n\n\n\n

To connect to an Oracle database, you can do that locally <\/p>\n\n\n

\nsqlplus appuser\/password\nsqlplus appuser    #asks for password\nsqlplus \/ as sysdba\n<\/pre><\/div>\n\n\n
In this case, it connects locally to the current environment of ORACLE_HOME and ORACLE_SID. No listener is involved for that.<\/p>\n\n\n\n
For a remote connection, you have to connect to a listener (defined by hostname and port), and specifying the desired SID or SERVICE_NAME for which the listener should start a process for you. The easiest form is EZCONNECT: host:port\/service, but usually you will use an alias that will be resolved to the destination. These aliases are defined in the tnsnames.ora file or an ldap server specified in ldap.ora. For how to setup an ldap server, see my blog post Setup an LDAP server for Oracle naming on Enterprise Linux 9<\/a><\/p>\n\n\n
\nMYAPP.DBI-SERVICES.COM =\n  (DESCRIPTION =\n    (ADDRESS = (PROTOCOL = TCP)(HOST = host01)(PORT = 1521))\n    (CONNECT_DATA =\n      (SERVICE_NAME = PDBMYAPP.dbi-services.com)\n    )\n  )\n<\/pre><\/div>\n\n\n
To connect to that database remotely, you can use<\/p>\n\n\n
\nsqlplus appuser\/password@\/\/host01:1521\/pdbmyapp.dbi-services.com\nsqlplus appuser\/password@myapp.dbi-services.com\nsqlplus appuser\/password@myapp  #if names.default_domain=dbi-services.com\n<\/pre><\/div>\n\n\n
Location of the Oracle network configuration (*.ora files)<\/h2>\n\n\n\n
Without TNS_ADMIN<\/h3>\n\n\n\n
And where is sqlplus or tnsping looking for the configuration files? As an old, experienced administrator, I would expect it in the directory of the $TNS_ADMIN<\/code> variable, or if unset, in $ORACLE_HOME\/network\/admin<\/code>. Or if you are using the nice feature of the Read-Only ORACLE_HOME (ROOH) where configuration and logs are relocated to ORACLE_BASE (roohctl -enable<\/code>), it will be in $ORACLE_BASE\/homes\/<home_name>\/network\/admin<\/code>. I will call the directory as $DEFAULT_TNS<\/strong><\/code> and it points, depending if ROOH or non-ROOH, to the corresponding network\/admin directory. <\/p>\n\n\n\n
Hint: My home for the tests is such a ROOH home. If you have a non-ROOH home, simply set DEFAULT_TNS to $ORACLE_HOME\/network admin.<\/p>\n\n\n\n
Tracing with strace<\/h4>\n\n\n\n
But is my expectation of name resolution really correct? On Linux, we can see with the strace<\/code> binary what the tool will look for:<\/p>\n\n\n
\nstrace sqlplus -S -L a\/b@xyz 2>&1 |grep -E '\\.ora'\n<\/pre><\/div>\n\n\n
I will use an alias that does not exist (@xyz). strace prints the output on STDERR, so I will redirect it to STDOUT (2>&1) and filter the whole output for “.ora”. I use the ORACLE_HOME=\/u00\/app\/oracle\/product\/19.32.0 where no Oracle newtork configuration is present:<\/p>\n\n\n\n
lstat(\"\/u00\/app\/oracle\/product\/19.32.0\/env.ora\", {st_mode=S_IFREG|0644, st_size=852, ...}) = 0\nopenat(AT_FDCWD, \"\/u00\/app\/oracle\/product\/19.32.0\/env.ora\", O_RDONLY) = 3\naccess(\"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/sqlnet.ora\", F_OK) = -1 ENOENT (No such file or directory)\naccess(\"\/home\/oracle\/.sqlnet.ora\", F_OK) = -1 ENOENT (No such file or directory)\naccess(\"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/sqlnet.ora\", F_OK) = -1 ENOENT (No such file or directory)\naccess(\"\/etc\/intchg.ora\", F_OK)         = -1 ENOENT (No such file or directory)\naccess(\"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/intchg.ora\", F_OK) = -1 ENOENT (No such file or directory)\naccess(\"\/etc\/tnsnav.ora\", F_OK)         = -1 ENOENT (No such file or directory)\naccess(\"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/tnsnav.ora\", F_OK) = -1 ENOENT (No such file or directory)\naccess(\"\/home\/oracle\/.tnsnames.ora\", F_OK) = -1 ENOENT (No such file or directory)\naccess(\"\/etc\/tnsnames.ora\", F_OK)       = -1 ENOENT (No such file or directory)\naccess(\"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/tnsnames.ora\", F_OK) = -1 ENOENT (No such file or directory)\nopenat(AT_FDCWD, \"\/u00\/app\/oracle\/product\/19.32.0\/ldap\/admin\/fips.ora\", O_RDONLY) = -1 ENOENT (No such file or directory)\nopenat(AT_FDCWD, \"\/u00\/app\/oracle\/product\/19.32.0\/ldap\/admin\/fips.ora\", O_RDONLY) = -1 ENOENT (No such file or directory)\nstat(\"\/u00\/app\/oracle\/product\/19.32.0\/ldap\/admin\/ldap.ora\", 0x7fff8d79e530) = -1 ENOENT (No such file or directory)\nstat(\"\/u00\/app\/oracle\/product\/19.32.0\/network\/admin\/ldap.ora\", 0x7fff8d79e530) = -1 ENOENT (No such file or directory)\nstat(\"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/ldap.ora\", 0x7fff8d79e620) = -1 ENOENT (No such file or directory)<\/code><\/pre>\n\n\n\n
    \n
  • $ORACLE_HOME\/env.ora<\/code> : First surprise, a file that was not known to me. In this file you can set environment variables. Here you can set a TNS_ADMIN variable as a fallback if it is not yet set in the environment.<\/li>\n\n\n\n
  • \/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/sqlnet.ora<\/code>: The next one is the $DEFAULT_TNS<\/code> location which is expected for me<\/li>\n\n\n\n
  • \/home\/oracle\/.sqlnet.ora<\/code> : Did you know that it looks for a “.sqlnet.ora” (mind the dot!) in your home-directory?<\/li>\n\n\n\n
  • intchg.ora \/ tnsnav.ora<\/code> : seems to be related to network “communities” and routing, not naming resolution.<\/li>\n\n\n\n
  • \/home\/oracle\/.tnsnames.ora<\/code> : It also looks for a .tnsnames.ora (mind the dot!) in the user’s home.<\/li>\n\n\n\n
  • \/etc\/tnsnames.ora<\/code> : I have never seen that before …<\/li>\n\n\n\n
  • \/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/tnsnames.ora<\/code> : expected $DEFAULT_TNS<\/code> location<\/li>\n\n\n\n
  • fips.ora<\/code> : Related to cryptography (US government Federal Information Processing Standards)<\/li>\n\n\n\n
  • \/u00\/app\/oracle\/product\/19.32.0\/ldap\/admin\/ldap.ora<\/code> : It is a home configured for ROOH. Why it looks here? Probably a bug…<\/li>\n\n\n\n
  • \/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/ldap.ora<\/code> : That is what I expected.<\/li>\n<\/ul>\n\n\n\n
    Summary: 1st, it looks for an sqlnet.ora (to determine name resolution order and default domain); Then, it looks for a tnsnames.ora, then for an ldap server<\/p>\n\n\n\n
    Next, I will create a \/home\/oracle\/.sqlnet.ora<\/code> and trace what happens:<\/p>\n\n\n\n
    $ strace sqlplus -S -L a\/b@xyz 2>&1 |grep -E '\\.ora'\naccess(\"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/sqlnet.ora\", F_OK) = -1 ENOENT (No such file or directory)\naccess(\"\/home\/oracle\/.sqlnet.ora\", F_OK) = 0\nopenat(AT_FDCWD, \"\/home\/oracle\/.sqlnet.ora\", O_RDONLY) = 6\naccess(\"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/sqlnet.ora\", F_OK) = -1 ENOENT (No such file or directory)<\/code><\/pre>\n\n\n\n
    It opens my .sqlnet.ora, but it also tries to open the sqlnet.ora of the $DEFAULT_TNS<\/code>. I assume it will use it as fallback for parameters not present in $HOME\/.sqlnet.ora; let’s try: <\/p>\n\n\n\n
    Create a test configuration<\/h4>\n\n\n\n
    I create a configuration with <\/p>\n\n\n
    \n# \/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/sqlnet.ora\nnames.default_domain = dbi-services.com\nSQLNET.EXPIRE_TIME = 10\n<\/pre><\/div>\n\n
    \n# \/home\/oracle\/.sqlnet.ora\nnames.default_domain = dbi.internal\nSQLNET.EXPIRE_TIME = 10\n<\/pre><\/div>\n\n
    \n#  \/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/\nDBI.dbi-services.com = ...\n<\/pre><\/div>\n\n
    \n# \/home\/oracle\/.tnsnames.ora\nEXT.dbi-services.com = ...\nINT.dbi.internal = ...\n<\/pre><\/div>\n\n\n
    Then, I try to connect:<\/p>\n\n\n
    \nsqlplus a\/b@EXT  # ORA-12154: TNS:could not resolve the connect identifier specified\nsqlplus a\/b@INT   # it can resolve it and connects (default_domain of $HOME\/.sqlnet.ora)\n<\/pre><\/div>\n\n\n
    The domain of $HOME\/.sqlnet.ora<\/code> is used. If I remove the default domain from the $HOME\/.sqlnet.ora<\/code>:<\/p>\n\n\n
    \nsqlplus a\/b@EXT  # it can resolve it and connects (using default_domain of $DEFAULT_TNS\/sqlnet.ora)\nsqlplus a\/b@INT   # ORA-12154: TNS:could not resolve the connect identifier specified\n<\/pre><\/div>\n\n\n
    That means, values in $HOME\/.sqlnet.ora<\/code> will override values of the default $DEFAULT_TNS\/sqlnet.ora<\/code>. The same applies to $HOME\/.tnsnames.ora, it overrides entries in the default tnsnames.ora<\/p>\n\n\n\n
    And what about the \/etc\/tnsnames.ora<\/code>? Create it:<\/p>\n\n\n
    \n# \/etc\/tnsnames.ora\nETC.dbi-services.com = ...\n<\/pre><\/div>\n\n
    \nsqlplus a\/b@ETC.dbi-services.com\nsqlplus a\/b@INT.dbi.internal \nsqlplus a\/b@EXT.dbi-services.com   # ORA-12154: TNS:could not resolve the connect identifier specified\nsqlplus a\/b@ETC\n<\/pre><\/div>\n\n\n
    If it is present, the default tnsnames.ora in the $DEFAULT_TNS<\/code> is ignored (it will not find the EXT.dbi-services.com), but the $HOME\/.tnsnames.ora<\/code> has precedence (it can resolve INT.dbi.internal). And we can also see that the default-domain for “@ETC” is taken from the $DEFAULT_TNS\/sqlnet.ora<\/code> (in $HOME\/.sqlnet.ora<\/code> it is not defined).<\/p>\n\n\n\n
    With TNS_ADMIN<\/h3>\n\n\n\n
    TNS_ADMIN<\/code> is the variable to explicitly specify the location of the *.ora configuration files. If it is not set in your shell, Oracle looks for it in $ORACLE_HOME\/env.ora<\/code>;
    It is usually used to centralize the configuration for all ORACLE_HOME’s in one directory. We recommend ${ORACLE_BASE}\/network\/admin<\/code>. <\/p>\n\n\n\n
    First, I will use an empty TNS_ADMIN directory with no *.ora files<\/p>\n\n\n
    \nmkdir \/tmp\/empty\nexport TNS_ADMIN=\/tmp\/empty\nstrace sqlplus -S -L a\/b@abc 2>&1 |grep -E "\\.ora"|grep -vE 'tnsnav|intchg|fips'\n<\/pre><\/div>\n\n\n
    lstat(\"\/u00\/app\/oracle\/product\/19.32.0\/env.ora\", {st_mode=S_IFREG|0644, st_size=852, ...}) = 0\nopenat(AT_FDCWD, \"\/u00\/app\/oracle\/product\/19.32.0\/env.ora\", O_RDONLY) = 3\naccess(\"\/tmp\/empty\/sqlnet.ora\", F_OK)   = -1 ENOENT (No such file or directory)\naccess(\"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/sqlnet.ora\", F_OK) = 0\nopenat(AT_FDCWD, \"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/sqlnet.ora\", O_RDONLY) = 6\naccess(\"\/home\/oracle\/.sqlnet.ora\", F_OK) = 0\nopenat(AT_FDCWD, \"\/home\/oracle\/.sqlnet.ora\", O_RDONLY) = 6\naccess(\"\/tmp\/empty\/sqlnet.ora\", F_OK)   = -1 ENOENT (No such file or directory)\naccess(\"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/sqlnet.ora\", F_OK) = 0\nopenat(AT_FDCWD, \"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/sqlnet.ora\", O_RDONLY) = 8\naccess(\"\/home\/oracle\/.tnsnames.ora\", F_OK) = 0\naccess(\"\/tmp\/empty\/tnsnames.ora\", F_OK) = -1 ENOENT (No such file or directory)\naccess(\"\/etc\/tnsnames.ora\", F_OK)       = 0\nstat(\"\/home\/oracle\/.tnsnames.ora\", {st_mode=S_IFREG|0644, st_size=716, ...}) = 0\nopenat(AT_FDCWD, \"\/home\/oracle\/.tnsnames.ora\", O_RDONLY) = 9\nstat(\"\/etc\/tnsnames.ora\", {st_mode=S_IFREG|0644, st_size=579, ...}) = 0\nopenat(AT_FDCWD, \"\/etc\/tnsnames.ora\", O_RDONLY) = 9\nstat(\"\/u00\/app\/oracle\/product\/19.32.0\/ldap\/admin\/ldap.ora\", 0x7ffde1f5b730) = -1 ENOENT (No such file or directory)\nstat(\"\/tmp\/empty\/ldap.ora\", 0x7ffde1f5b730) = -1 ENOENT (No such file or directory)\nstat(\"\/u00\/app\/oracle\/product\/19.32.0\/network\/admin\/ldap.ora\", 0x7ffde1f5b730) = -1 ENOENT (No such file or directory)\nstat(\"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/ldap.ora\", 0x7ffde1f5b820) = -1 ENOENT (No such file or directory)\nstat(\"\/home\/oracle\/.tnsnames.ora\", {st_mode=S_IFREG|0644, st_size=716, ...}) = 0\nstat(\"\/etc\/tnsnames.ora\", {st_mode=S_IFREG|0644, st_size=579, ...}) = 0\n...<\/code><\/pre>\n\n\n\n
    If TNS_ADMIN is set, but the directory is empty, it will fallback to the order as above. 
    Now I will set it to a directory with an sqlnet.ora file and no tnsnames.ora, and I delete the \/etc\/tnsnames.ora:<\/p>\n\n\n
    \nmkdir \/tmp\/admin; cp $ORACLE_BASE\/network\/admin\/sqlnet.ora \/tmp\/admin\/\nexport TNS_ADMIN=\/tmp\/admin\nstrace sqlplus -S -L a\/b@abc 2>&1 |grep -E 'tnsnames|sqlnet'\n<\/pre><\/div>\n\n\n
    access(\"\/tmp\/admin\/sqlnet.ora\", F_OK)   = 0\nopenat(AT_FDCWD, \"\/tmp\/admin\/sqlnet.ora\", O_RDONLY) = 6\naccess(\"\/home\/oracle\/.sqlnet.ora\", F_OK) = 0\nopenat(AT_FDCWD, \"\/home\/oracle\/.sqlnet.ora\", O_RDONLY) = 6\naccess(\"\/tmp\/admin\/sqlnet.ora\", F_OK)   = 0\nopenat(AT_FDCWD, \"\/tmp\/admin\/sqlnet.ora\", O_RDONLY) = 8\naccess(\"\/home\/oracle\/.tnsnames.ora\", F_OK) = 0\naccess(\"\/tmp\/admin\/tnsnames.ora\", F_OK) = -1 ENOENT (No such file or directory)\naccess(\"\/etc\/tnsnames.ora\", F_OK)       = -1 ENOENT (No such file or directory)\naccess(\"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/tnsnames.ora\", F_OK) = 0\nstat(\"\/home\/oracle\/.tnsnames.ora\", {st_mode=S_IFREG|0644, st_size=716, ...}) = 0\nopenat(AT_FDCWD, \"\/home\/oracle\/.tnsnames.ora\", O_RDONLY) = 12\nstat(\"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/tnsnames.ora\", {st_mode=S_IFREG|0644, st_size=432, ...}) = 0\nopenat(AT_FDCWD, \"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/tnsnames.ora\", O_RDONLY) = 12\nstat(\"\/home\/oracle\/.tnsnames.ora\", {st_mode=S_IFREG|0644, st_size=716, ...}) = 0\nstat(\"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/tnsnames.ora\", {st_mode=S_IFREG|0644, st_size=432, ...}) = 0\n...<\/code><\/pre>\n\n\n\n
    It takes the $TNS_ADMIN\/sqlnet.ora<\/code> and ignores the $DEFAULT_TNS\/sqlnet.ora<\/code>. It will not find the $TNS_ADMIN\/tnsnames.ora<\/code> (does not exist) and not the \/etc\/tnsnames.ora<\/code> (I removed it before), so it uses the default in $DEFAULT_TNS<\/code>. <\/p>\n\n\n\n
    For the next try I will add the tnsnames.ora to the TNS_ADMIN.<\/p>\n\n\n
    \ncp $ORACLE_BASE\/network\/admin\/tnsnames.ora \/tmp\/admin\nexport TNS_ADMIN=\/tmp\/admin\nstrace sqlplus -S -L a\/b@abc 2>&1 |grep -E 'tnsnames|sqlnet'\n<\/pre><\/div>\n\n\n
    access(\"\/tmp\/admin\/sqlnet.ora\", F_OK)   = 0\nopenat(AT_FDCWD, \"\/tmp\/admin\/sqlnet.ora\", O_RDONLY) = 6\naccess(\"\/home\/oracle\/.sqlnet.ora\", F_OK) = 0\nopenat(AT_FDCWD, \"\/home\/oracle\/.sqlnet.ora\", O_RDONLY) = 6\naccess(\"\/tmp\/admin\/sqlnet.ora\", F_OK)   = 0\nopenat(AT_FDCWD, \"\/tmp\/admin\/sqlnet.ora\", O_RDONLY) = 8\naccess(\"\/home\/oracle\/.tnsnames.ora\", F_OK) = 0\naccess(\"\/tmp\/admin\/tnsnames.ora\", F_OK) = 0\nstat(\"\/home\/oracle\/.tnsnames.ora\", {st_mode=S_IFREG|0644, st_size=716, ...}) = 0\nopenat(AT_FDCWD, \"\/home\/oracle\/.tnsnames.ora\", O_RDONLY) = 12\nstat(\"\/tmp\/admin\/tnsnames.ora\", {st_mode=S_IFREG|0644, st_size=11319, ...}) = 0\nopenat(AT_FDCWD, \"\/tmp\/admin\/tnsnames.ora\", O_RDONLY) = 12\nread(12, \"# tnsnames.ora Network Configura\"..., 4096) = 4096\nstat(\"\/home\/oracle\/.tnsnames.ora\", {st_mode=S_IFREG|0644, st_size=716, ...}) = 0\nstat(\"\/tmp\/admin\/tnsnames.ora\", {st_mode=S_IFREG|0644, st_size=11319, ...}) = 0\n...<\/code><\/pre>\n\n\n\n
    As expected, it finds the $TNS_ADMIN\/tnsnames.ora<\/code> and it no longer looks for it in the $DEFAULT_TNS\/tnsnames.ora<\/code>. And this was not quite clear to me: it will no longer look for the \/etc\/tnsnames.ora<\/code> file. It is only used if TNS_ADMIN is NOT set! <\/p>\n\n\n\n
    ldap.ora<\/h3>\n\n\n\n
    And what about the LDAP connections (defined in ldap.ora)? Currently there is no ldap.ora present. Without TNS_ADMIN:<\/p>\n\n\n\n
    stat(\"\/u00\/app\/oracle\/product\/19.32.0\/ldap\/admin\/ldap.ora\", 0x7ffdb464fd30) = -1 ENOENT (No such file or directory)
    stat(\"\/u00\/app\/oracle\/product\/19.32.0\/network\/admin\/ldap.ora\", 0x7ffdb464fd30) = -1 ENOENT (No such file or directory)
    stat(\"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/ldap.ora\", 0x7ffdb464fe20) = -1 ENOENT (No such file or directory)<\/code><\/pre>\n\n\n\n
    “Works as designed” or a bug: it first looks in $ORACLE_HOME, instead of the ROOH admin direcory. <\/p>\n\n\n\n
    And with TNS_ADMIN set, but without ldap.ora<\/p>\n\n\n\n
    stat(\"\/u00\/app\/oracle\/product\/19.32.0\/ldap\/admin\/ldap.ora\", 0x7ffcb23acdb0) = -1 ENOENT (No such file or directory)\nstat(\"\/tmp\/admin\/ldap.ora\", 0x7ffcb23acdb0) = -1 ENOENT (No such file or directory)\nstat(\"\/u00\/app\/oracle\/product\/19.32.0\/network\/admin\/ldap.ora\", 0x7ffcb23acdb0) = -1 ENOENT (No such file or directory)\nstat(\"\/u00\/app\/oracle\/homes\/OraDB19Home2\/network\/admin\/ldap.ora\", 0x7ffcb23acea0) = -1 ENOENT (No such file or directory)<\/code><\/pre>\n\n\n\n
    Now I set in TNS_ADMIN the names.directory_path=(LDAP) and add the ldap.ora file<\/p>\n\n\n\n
    stat(\"\/u00\/app\/oracle\/product\/19.32.0\/ldap\/admin\/ldap.ora\", 0x7ffdb55680b0) = -1 ENOENT (No such file or directory)\nstat(\"\/tmp\/admin\/ldap.ora\", {st_mode=S_IFREG|0644, st_size=500, ...}) = 0\nstat(\"\/tmp\/admin\/ldap.ora\", {st_mode=S_IFREG|0644, st_size=500, ...}) = 0\nopenat(AT_FDCWD, \"\/tmp\/admin\/ldap.ora\", O_RDONLY) = 12\n...<\/code><\/pre>\n\n\n\n
    And it works! But what if I create an ldap.ora in the ORACLE_HOME? I create it with an invalid ldap host.<\/p>\n\n\n\n
    stat(\"\/u00\/app\/oracle\/product\/19.32.0\/ldap\/admin\/ldap.ora\", {st_mode=S_IFREG|0644, st_size=501, ...}) = 0\nstat(\"\/u00\/app\/oracle\/product\/19.32.0\/ldap\/admin\/ldap.ora\", {st_mode=S_IFREG|0644, st_size=501, ...}) = 0\nopenat(AT_FDCWD, \"\/u00\/app\/oracle\/product\/19.32.0\/ldap\/admin\/ldap.ora\", O_RDONLY) = 12<\/code><\/pre>\n\n\n\n
    We can see that it only uses the $ORACLE_HOME\/ldap\/admin\/ldap.ora<\/code>, and not the $TNS_ADMIN\/ldap.ora<\/code>! For me, that is a bug. For all other *.ora files the TNS_ADMIN variable is respected, but not for ldap.ora!<\/p>\n\n\n\n
    Summary<\/h2>\n\n\n\n
    To resolve an sql*net alias, which configuration files sqlplus<\/code> will use?<\/p>\n\n\n\n
    My stone-age knowledge that the *.ora files in $TNS_ADMIN are used, and if TNS_ADMIN is not set, then it uses the files in the $DEFAULT_TNS<\/code>. That’s mostly correct (or at least not completely wrong), but there are some differences.  My most important findings:<\/p>\n\n\n\n
    If a file in TNS_ADMIN does not exist, it looks in other locations. If a file .sqlnet.ora or .tnsnames.ora (with leading dot) in $HOME exists, the normal *.ora files will be used, but entries in the dot files has precedence. And if there is a file \/etc\/tnsnames.ora and TNS_ADMIN is not<\/strong> set, it will use it. And it ignores a $TNS_ADMIN\/ldap.ora if there is one in $ORACLE_HOME\/ldap\/admin\/.<\/p>\n\n\n\n
    sqlnet.ora (Network defaults)<\/h3>\n\n\n\n
    The relevant parameters for name resolution are NAMES.DEFAULT_DOMAIN <\/code>and NAMES.DIRECTORY_PATH<\/code>. 
    It uses the sqlnet.ora in:<\/p>\n\n\n\n
      \n
    • $HOME\/.sqlnet.ora<\/code> : (mind the dot!): if it exists, the following files will be used, but values in this file has precedence.<\/li>\n\n\n\n
    • $TNS_ADMIN\/sqlnet.ora<\/code> : It uses this file and stops. If it does not exist or TNS_ADMIN is not defined, then continue with the next point:<\/li>\n\n\n\n
    • $default_tns\/sqlnet.ora<\/code> <\/li>\n<\/ul>\n\n\n\n
      tnsnames.ora<\/h3>\n\n\n\n
        \n
      • $HOME\/.tnsnames.ora<\/code> : (mind the dot!): if it exists, the following files will be used, but aliases in this file has precedence.<\/li>\n\n\n\n
      • \/etc\/tnsnames.ora<\/code> : if TNS_ADMIN is NOT<\/strong> set! It uses this file and stops<\/li>\n\n\n\n
      • $TNS_ADMIN\/tnsnames.ora<\/code> : if TNS_ADMIN is set and tnsnames.ora is present, it uses it and stops; if the file is not present, it continues with the next point.<\/li>\n\n\n\n
      • $default_tns\/tnsnames.ora<\/code> <\/li>\n<\/ul>\n\n\n\n
        ldap.ora<\/h3>\n\n\n\n
          \n
        • $ORACLE_HOME\/ldap\/admin\/ldap.ora<\/code> : if it exists, It uses this file and stops (TNS_ADMIN is ignored!)<\/li>\n\n\n\n
        • $TNS_ADMIN\/ldap.ora<\/code> : if TNS_ADMIN is set and ldap.ora is present, it uses it and stops; if the file is not present, it continues with the next point.<\/li>\n\n\n\n
        • $default_tns\/ldap.ora<\/code> <\/li>\n<\/ul>\n\n\n\n
          These are the findings with an sqlplus of version 19.32.0; For other releases\/versions it is probably the same, but you can simply verify it yourself with the strace utility. <\/p>\n\n\n\n
          For Oracle 26ai (23.26) it is a litte bit easier to see what tnsnames.ora is used<\/p>\n\n\n\n
          SQL*Plus: Release 23.26.1.0.0 - Production on Wed Oct 28 14:10:19 2026\nVersion 23.26.1.0.0\n\nCopyright (c) 1982, 2025, Oracle.  All rights reserved.\n\nERROR:\nORA-12154: Cannot connect to database. Cannot find alias db1970 in\n\/home\/oracle\/.tnsnames.ora,\n\/u00\/app\/oracle\/product\/23\/23.26\/network\/admin\/tnsnames.ora.\nHelp: https:\/\/docs.oracle.com\/error-help\/db\/ora-12154\/\n\n\nSP2-0751: Unable to connect to Oracle.  Exiting SQL*Plus\nHelp: https:\/\/docs.oracle.com\/error-help\/db\/sp2-0751\/<\/code><\/pre>\n\n\n\n
          or with an ldap configuration, you will see that it tried it, but not which ldap.ora was used (so strace may be still needed).<\/p>\n\n\n\n
          ORA-12154: Cannot connect to database. Cannot find alias db1970 in\n\/home\/oracle\/.tnsnames.ora, \/tmp\/admin\/tnsnames.ora and LDAP.<\/code><\/pre>\n\n\n\n
          <\/p>\n","protected":false},"excerpt":{"rendered":"
          This blog post is a follow-up of TNS_ADMIN \u2013 which *.ora files Oracle will use. There, the main focus was to find out if a running database instance will use a TNS_ADMIN environment or the binary defaults. In this blog post we will analyze much more the internal mechanisms to find the *.ora files, which […]<\/p>\n","protected":false},"author":123,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[198,59],"tags":[],"type_dbi":[],"class_list":["post-48198","post","type-post","status-publish","format-standard","hentry","category-database-management","category-oracle"],"acf":[],"yoast_head":"\nName resolution of Oracle - dbi Blog<\/title>\n<meta name=\"description\" content=\"how does the name resolution of oracle find the *.ora files if the $TNS_ADMIN variable is not set. What are the default locations?\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/name-resolution-of-oracle\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Name resolution of Oracle\" \/>\n<meta property=\"og:description\" content=\"how does the name resolution of oracle find the *.ora files if the $TNS_ADMIN variable is not set. What are the default locations?\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/name-resolution-of-oracle\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-28T15:14:22+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-28T15:17:05+00:00\" \/>\n<meta name=\"author\" content=\"Martin Bracher\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Martin Bracher\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/name-resolution-of-oracle\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/name-resolution-of-oracle\\\/\"},\"author\":{\"name\":\"Martin Bracher\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/2cbe1e2ea3cbf519c8ee3493042de8c9\"},\"headline\":\"Name resolution of Oracle\",\"datePublished\":\"2026-10-28T15:14:22+00:00\",\"dateModified\":\"2026-10-28T15:17:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/name-resolution-of-oracle\\\/\"},\"wordCount\":1392,\"commentCount\":0,\"articleSection\":[\"Database management\",\"Oracle\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/name-resolution-of-oracle\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/name-resolution-of-oracle\\\/\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/name-resolution-of-oracle\\\/\",\"name\":\"Name resolution of Oracle - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#website\"},\"datePublished\":\"2026-10-28T15:14:22+00:00\",\"dateModified\":\"2026-10-28T15:17:05+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/2cbe1e2ea3cbf519c8ee3493042de8c9\"},\"description\":\"how does the name resolution of oracle find the *.ora files if the $TNS_ADMIN variable is not set. What are the default locations?\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/name-resolution-of-oracle\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/name-resolution-of-oracle\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/name-resolution-of-oracle\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Name resolution of Oracle\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/2cbe1e2ea3cbf519c8ee3493042de8c9\",\"name\":\"Martin Bracher\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/864a93d77bcd4cd44bab880a88f25fb5173ffbfac8e6e8775f0b4e056a4fbb56?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/864a93d77bcd4cd44bab880a88f25fb5173ffbfac8e6e8775f0b4e056a4fbb56?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/864a93d77bcd4cd44bab880a88f25fb5173ffbfac8e6e8775f0b4e056a4fbb56?s=96&d=mm&r=g\",\"caption\":\"Martin Bracher\"},\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/author\\\/martinbracher\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Name resolution of Oracle - dbi Blog","description":"how does the name resolution of oracle find the *.ora files if the $TNS_ADMIN variable is not set. What are the default locations?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/name-resolution-of-oracle\/","og_locale":"en_US","og_type":"article","og_title":"Name resolution of Oracle","og_description":"how does the name resolution of oracle find the *.ora files if the $TNS_ADMIN variable is not set. What are the default locations?","og_url":"https:\/\/www.dbi-services.com\/blog\/name-resolution-of-oracle\/","og_site_name":"dbi Blog","article_published_time":"2026-10-28T15:14:22+00:00","article_modified_time":"2026-10-28T15:17:05+00:00","author":"Martin Bracher","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Martin Bracher","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/name-resolution-of-oracle\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/name-resolution-of-oracle\/"},"author":{"name":"Martin Bracher","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/2cbe1e2ea3cbf519c8ee3493042de8c9"},"headline":"Name resolution of Oracle","datePublished":"2026-10-28T15:14:22+00:00","dateModified":"2026-10-28T15:17:05+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/name-resolution-of-oracle\/"},"wordCount":1392,"commentCount":0,"articleSection":["Database management","Oracle"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/name-resolution-of-oracle\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/name-resolution-of-oracle\/","url":"https:\/\/www.dbi-services.com\/blog\/name-resolution-of-oracle\/","name":"Name resolution of Oracle - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"datePublished":"2026-10-28T15:14:22+00:00","dateModified":"2026-10-28T15:17:05+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/2cbe1e2ea3cbf519c8ee3493042de8c9"},"description":"how does the name resolution of oracle find the *.ora files if the $TNS_ADMIN variable is not set. What are the default locations?","breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/name-resolution-of-oracle\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/name-resolution-of-oracle\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/name-resolution-of-oracle\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Name resolution of Oracle"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/2cbe1e2ea3cbf519c8ee3493042de8c9","name":"Martin Bracher","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/864a93d77bcd4cd44bab880a88f25fb5173ffbfac8e6e8775f0b4e056a4fbb56?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/864a93d77bcd4cd44bab880a88f25fb5173ffbfac8e6e8775f0b4e056a4fbb56?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/864a93d77bcd4cd44bab880a88f25fb5173ffbfac8e6e8775f0b4e056a4fbb56?s=96&d=mm&r=g","caption":"Martin Bracher"},"url":"https:\/\/www.dbi-services.com\/blog\/author\/martinbracher\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/48198","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/123"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=48198"}],"version-history":[{"count":8,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/48198\/revisions"}],"predecessor-version":[{"id":48206,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/48198\/revisions\/48206"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=48198"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=48198"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=48198"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=48198"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}