ACL/ACE issue: ORA-24244 for xs$name_list('RESOLVE'). No errors for xs$name_list('CONNECT').

user10485797

Does anyone have insights on why one would work and the other would error out? Firewall port has been opened, but the same error is being received as was received before the error.

SQL> connect …

Enter password:

1. Connected.

SQL> BEGIN

  2  DBMS_NETWORK_ACL_ADMIN.append_host_ace

  3  (host =>
'x.y.com',

  4  lower_port => 10036,

  5  upper_port => 10036,

  6  ace => xs$ace_type

  7  (privilege_list => xs$name_list('CONNECT','RESOLVE'),

  8  principal_name => 'CVC',

  9  principal_type => xs_acl.ptype_db));

10  END;

11  /

BEGIN

*

ERROR
at line 1:

ORA-24244:
invalid host or port for access control list (ACL) assignment

ORA-06512:
at "SYS.DBMS_NETWORK_ACL_ADMIN", line 1072

ORA-06512:
at line 2

SQL> BEGIN

  2  DBMS_NETWORK_ACL_ADMIN.append_host_ace

  3  (host =>
'x.y.com',

  4  lower_port => 10036,

  5  upper_port => 10036,

  6  ace => xs$ace_type

  7  (privilege_list => xs$name_list('CONNECT'),

  8  principal_name => 'CVC',

  9  principal_type => xs_acl.ptype_db));

10  END;

11  /

PL/SQL
procedure successfully completed.

SQL> BEGIN

  2  DBMS_NETWORK_ACL_ADMIN.append_host_ace

  3  (host =>
'x.y.com',

  4  lower_port => 10036,

  5  upper_port => 10036,

  6  ace => xs$ace_type

  7  (privilege_list => xs$name_list('resolve'),

  8  principal_name => 'CVC',

  9  principal_type => xs_acl.ptype_db));

10  END;

11  /

BEGIN

*

ERROR
at line 1:

ORA-24244:
invalid host or port for access control list (ACL) assignment

ORA-06512:
at "SYS.DBMS_NETWORK_ACL_ADMIN", line 1072

ORA-06512:
at line 2

Thompson

I believe that resolve cannot have a port range.

Please see under section 107.7.2 and 107.7.6.

https://docs.oracle.com/en/database/oracle/oracle-database/12.2/arpls/DBMS_NETWORK_ACL_ADMIN.html#GUID-F62BDF90-9FB8-4FB4-A36F-F9F988565497