Skip to content

Add Oracle thick mode support via ORACLE_THICK_MODE env var #177

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Gigituier wants to merge 2 commits into
base: master
Choose a base branch
from
Open

Add Oracle thick mode support via ORACLE_THICK_MODE env var #177

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
10d3694
Add Oracle thick mode support and fix password variable bug in set_se…
Gigituier Aug 14, 2026
4d0215d
Remove password bug fix - keeping PR focused on thick mode only
Gigituier Aug 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 16 additions & 0 deletions SecretsManagerRDSOracleRotationSingleUser/lambda_function.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,22 @@
logger = logging.getLogger()
logger.setLevel(logging.INFO)

# Enable Oracle Thick mode if requested via environment variable.
# Thick mode is required for features such as Native Network Encryption (NNE),
# checksumming, Kerberos authentication, and connections to Oracle DB versions
# prior to 12.1. When enabled, Oracle Instant Client libraries must be available
# in the system library search path (LD_LIBRARY_PATH). A Lambda Layer containing
# Oracle Instant Client Basic Lite and libaio.so.1 is the recommended approach.
#
# Supported environment variables for thick mode:
# - ORACLE_THICK_MODE: Set to 'true' to enable thick mode (default: false)
# - ORACLE_CLIENT_CONFIG_DIR: Optional path to Oracle Net config files
# (tnsnames.ora, sqlnet.ora). Defaults to None (uses standard search paths).
if os.environ.get('ORACLE_THICK_MODE', 'false').lower() in ['true', '1', 'y', 'yes']:
config_dir = os.environ.get('ORACLE_CLIENT_CONFIG_DIR')
oracledb.init_oracle_client(config_dir=config_dir)
logger.info("Oracle Thick mode enabled (config_dir=%s)" % config_dir)


def lambda_handler(event, context):
"""Secrets Manager RDS Oracle Handler
Expand Down