Security :: Creating Wallet - System Does Not Prompt For Password

Apr 14, 2011

I'm trying to hide the password for the batch programs that connect to the DB Server

as Cadot pointed out in

[URL].........

Quote:
use secure external password store

with reference to

[URL].........

when I create wallet, the system does not prompt me for password

C:>mkstore -wrl "C:ora102NETWORKADMIN" -create

when creating login credentials, again the system never prompts me for password

C:>mkstore -wrl "C:ora102NETWORKADMIN" -createCredential db10g scott tiger

here's my sqlnet.ora configurations

WALLET_LOCATION =
(SOURCE =
(METHOD = FILE)
(METHOD_DATA =
(DIRECTORY =C:ora102NETWORKADMIN)
)
)
SQLNET.WALLET_OVERRIDE = TRUE
SSL_CLIENT_AUTHENTICATION = FALSESSL_VERSION = 0

here's my tnsname.ora settings

DB10G =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
)
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = mike)
)
)

here's the outcome

C:Documents and SettingsAdministrator>sqlplus /@db10g
SQL*Plus: Release 10.2.0.4.0 - Production on Wed Apr 13 22:53:06 2011
Copyright (c) 1982, 2007, Oracle. All Rights Reserved.

ERROR:
ORA-12534: TNS:operation not supported

Enter user-name:

so I Google around for the solution to the ORA-12534 error, one of the site,

[URL].......

here's my lsnrctl services

Connecting to (ADDRESS=(PROTOCOL=tcp)(HOST=)(PORT=1521))
Services Summary...
Service "MIKEXDB" has 1 instance(s).
Instance "mike", status READY, has 1 handler(s) for this service...
Handler(s):
[code].....

The command completed successfully

right now I think I will be a fool to think that the solution is to resolve the ERROR: ORA-12514: TNS:listener does not currently know of service requested in connect descriptor. so what is wrong with my setup, or is it some patch that I need to apply?

View 9 Replies


ADVERTISEMENT

Security :: See Who Or When Password Was Changed For SYS Or SYSTEM Account?

Nov 10, 2010

Is there a way to see who or when password was changed for SYS or SYSTEM account?

View 4 Replies View Related

Security :: Password Verify Function While Creating A Profile

Dec 5, 2011

I've created a password verification function (verify_pwd) in a schema which is not in SYS, but an equivalent of SYS. However, the problem arises when I'm trying to create a profie (MAIN_PROFILE) with the following attributes :

CREATE PROFILE MAIN_PROFILE LIMIT
PASSWORD_LIFE_TIME 90
PASSWORD_VERIFY_FUNCTION verify_pwd;

The above script is resulting in an error.

ORA-02376 : invalid or redundant resource...Can I create the function verify_pwd not in the schema SYS but instead in a schema equivalent to SYS?

View 3 Replies View Related

Security :: How To Install Wallet In Oracle 11g

Oct 6, 2012

how to install wallet in Oracle 11g and chek if it is installed? Extra cost is involved for liscencing ?

Does it ask for any option while installing Oracle Software?

View 1 Replies View Related

Security :: Wallet Autologin - Can't Move It To Another Machine?

Feb 21, 2013

I'm reviewing the method of setting up transparent data encryption (TDE) and the role Oracle Wallet plays in that process. One statement that caught my attention was this statement in the documentation:

Quote:You can also choose to create a local auto login wallet. Local auto login wallets cannot be moved to another computer. They must be used on the host on which they are created." URL....

Why an auto-login wallet can't be moved to another computer? For example, if my Oracle database server goes down and I'm in a recovery situation, would an autologin Oracle wallet file restored from tape not work?

View 3 Replies View Related

Security :: Oracle Wallet Open Failed?

Jul 16, 2013

I successfully created a Oracle Wallet in AIX. The wallet is belong to user "oracle" and permission is 755. I can access it with non-oracle user. Note: the non-oracle user is under the same group as "oracle" id.

But when I try to change the Oracle Waller permission to less than 755, I am not able to access it anymore. The error is "ORA-12578: TNS:wallet open failed".

My question is how can I access the Oracle Wallet without using 755 permission?

View 1 Replies View Related

Security :: Move Wallet From Existing Location?

Oct 22, 2012

I have TDE enable in system. Now i want to remove wallet from the server and keep another secure place so that it can't be put in wrong hand. Is there any way that i can remove the wallet folder from the server while encryption and decryption on?

View 1 Replies View Related

Security :: Wallet For Each Windows (service) User

Apr 4, 2013

Is there a way to have separate wallets for each windows user? Well, I have found a way, but does not seem to work always properly and that is with %USERNAME% environment variable.

This is how our customer want's to have - so separate wallet for each windows user, how to accomplish this without using %USERNAME%?

View 2 Replies View Related

Security :: Oracle Wallet Compatibility With Reports 10.1.2.0.2

Aug 31, 2012

If i have Oracle Wallet installed for a Oracle 10.2 Client, i am able to connect to the database. But , while generations a report , when my oracle report server tries to connect to the DB using Oracle Wallet

(i.e. sqlplus /@<dbname> ) , I am not able to establish a connection.

Is it a compatibility issue ?

Following is the parameter i am passing.

$ORACLE_HOME/bin/rwclient.sh server="$REPORT_SERVER" REPORT="$RDF_FILE" DESTYPE=FILE DESNAME="$PDF_FILE" DESFORMAT=PDF BATCH=YES USERID= /@"$ORACLE_SID"

View 0 Replies View Related

Security :: Query Regarding Client Side Wallet

Jul 11, 2012

I need few clarifications regarding oracle wallet.

db version: 11.2.0.3.2 (Enterprise Edition)

We have a requirement to run shell scripts calling stored procedures for specific activities, which are run on database server. We do not want to store passwords in shell scripts and decided to use Secure External Password Store for hiding passwords instead of os authentication method. need few clarifications on the below.

1) Currently, we are creating oracle wallet entry on db server and making modifications in sqlnet.ora file accordingly. Is it good to use like this or we should do this only on a client machine?
2) Do we need any licensing to use this option?
3) Any knows issues with using oracle wallet?
4) Can we use orapki for creating oracle wallet instead of mkstore?
5) Any knows issues we face during startup and shutdown of db activities?

View 1 Replies View Related

Wallet - While Creating A Table Says Master Encryption Key Is Not Present?

Jan 22, 2013

I have created a wallet (11g R2 OEL 5.5) using the OWM.Tried opening the wallet (encryption_wallet_location set in sqlnet.ora). then while creating a table it said the master encryption key is not present. Have created the master key using the following command.

alter system set encryption key identified by "Password";

Here the strange thing i observed is that when we create a wallet using the OWM, it asks for the password and when i open the same wallet the master key is not created and it allows the master key to be generated with the same password that i have created the wallet in the first place with the OWM, with any other passwords it says that the wallet is not open.

After creating the wallet and creating the master key... I have the following questions, and its becoming quite hard to find the solutions as well.

1. Can we have multiple encryption keys... say i want to encrypt a table or column with one key and other with an another key.
2. How many keys can we have for objects in the table? or can we have only one key and many certificates.
3. wallet created, and encrypted tables present, the wallet is not in auto open mode, but somehow the database open after it is shutdown, here no encrypted tablespaces are present.
4. while creating an encrypted tablespace the default storage (encrypt ) has to be added to the add tablespace clause.

View 2 Replies View Related

Security :: Ora-28374 Typed Master Key Not Found In Wallet

Jun 19, 2013

I am getting error "ora-28374 typed master key not found in wallet".

steps-

1) created tablespace and user to the respective tablespace.

2) created table by issuing command as "CREATE TABLE TEST1 (SR_NO NUMBER(3), NAME VARCHAR2(30) ENCRYPT) DEFAULT TABLESPACE ENC". (by user - enc_user)

3) Inserted rows on to the table.

4) entry made in sqlnet.ora as

ENCRYPTION_WALLET_LOCATION=
(SOURCE=(METHOD=FILE)(METHOD_DATA=
(DIRECTORY=C:appAdministratoradmin estencrypted_wallet/)))

5) issued command as sysdba - ALTER SYSTEM SET ENCRYPTION KEY IDENTIFIED BY "ASHISH123";

6) restarted the database.

7) since i want to made it autologin. so I open wallet through the below mentioned path program file >>oracle_home>> integrated management tool >> wallet But when it asked the password I typed the same password but it was not accepting. So i made new wallet with the same specified path. Also I clicked on auto login.

8) Now, i have restarted the database and tried to issue the command "ALTER SYSTEM SET ENCRYPTION KEY IDENTIFIED BY "suresh123";

While issuing the command, getting error "ora-28374 typed master key not found in wallet". "

i tried with the recreation of new folder again on the same path as -"C:appAdministratoradmin estwallet" and same entry updated on sqlnet.ora. But facing the same error.

Is there any way to re-create or modify the encryption of tablespace?

View 5 Replies View Related

Client Tools :: Not Able To Launch Sql Prompt After Entering Username And Password?

Oct 17, 2011

I have installed Oracle 10 galso changed the password of Scott,System users during installation via passwordmanagement. When I am click on sql plus icon to launch sql and entering user name : Scoot pwd :Tiger

It get closed and nothing is coming up.

View 7 Replies View Related

Security :: How To Automate Wallet Open Operation In Standby Instance

Dec 14, 2012

My database is 11.1.0.7 and 11.2.0.3 with TDE tablespace encryption, ASM db storage. The wallet needs to be opened for MRP to work in physical standby database. I already have the solution for the primary instances to automate wallet open (e.g. using startup trigger for 11.1.0.7). However, I cannot find solution to automate wallet open operation in standby instances (to issue ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY ""').

Manual operation everytime standby instance is started is not feasible.

View 1 Replies View Related

PL/SQL :: Overcome Prompt User ID And Password To Connect Oracle DB From Unix Environment?

Mar 23, 2013

How to overcome the prompt user id & password to connect oracle DB from Unix environment.

View 2 Replies View Related

Security :: Create Password File / Don't Know Password Of Sys User

Jun 5, 2012

I want to know what if any person don't know the password of SYS, can he create password file, becauase i dont know the password of sys users, generally login with '/ as sysdba',

View 4 Replies View Related

Security :: Enhance Security Of Windows And Recover Lost / Forgotten Password?

Nov 16, 2010

Lost Windows password? Forgot Windows password? Your PC was hacked? Therefore, it is a basic step for every Windows users to enhance the security of Windows password. In the networks, it is found that a number of user's passwords are easy to guess. Only the smallest groups are the most security conscious and select passwords that are mixed lowercase and uppercase letters, numbers and punctuation to create cryptic passwords. Adopting strong password is one of the most effective ways to ensure system security. Here are several methods for you to enhance the security of your passwords in Windows 7/2000/XP/Vista and so on. You'd better remember the methods below unless you want to reset Windows password from time to time.

1. Is random password a great password?

A common myth is that totally random passwords like Ht3&e#L%5d@$B are the best passwords. This is not true. While they may be strong passwords, they are usually difficult to remember, slow to type, and sometimes vulnerable to attacks against the password generating algorithm. It is easy to create passwords that are strong but much easier to remember by using a few simple techniques. For example, consider the password "Luck-73@Better?". This password utilizes uppercase and lowercase letters, two numbers, and three symbols. The password is 15 characters long and can be memorized with very little effort. Moreover, this password can be typed very fast. The portion"Luck" and "Better" alternate between left and right-handed keys on the keyboard, improving speed, decreasing typos, and decreasing the chances of someone being able to discover your password by watching you.

2. Create the long Windows password

Although a password may eventually be discovered through some means, it is possible to create a password that cannot be cracked in any reasonable time. If a password is long enough, it will take so long or require so much processing power to crack it. That is essentially the same as being unbreakable (at least for most hackers).

3. Create the Windows password constantly?

This may be good advice for some high-risk passwords, but it is not the best policy for every user. It is frustrating for a user to have to constantly think of and remember new passwords every 30 days. It may be better to focus on stronger passwords and better user awareness rather than limiting password age. A more realistic time for the common user may be 90-120 days.

4. Write down Windows password in a proper place

Sometimes it is necessary for some users losing and forgetting complex passwords easily to write down them somewhere proper. However, it is important to educate users on how to write down passwords properly. Obviously, a sticky note on the monitor is not a good idea, but storing passwords in a safe or even a locked cabinet may be sufficient.

5. 14 characters is the optimal password length

Each character that you add to your password increases the protection. Your passwords should be 8 or more characters in length; 14 characters or longer is the Optimal Password Length. Many systems also support use of the space bar in passwords, so you can create a phrase made of many words. It is not easier to forget and lose, as well as longer than a simple password, and harder to guess.

6. Try not to use the same Windows password for all accounts

Some users always make the same passwords for every account to make it easy to remember. In that case, when any one of them lost, your other information protected by that password will be in danger as well. It is serious to use different passwords for different systems and accounts.

7. Do not use some common words that other users maybe guess

Most of users prefer to use some common words to remember easily, for example, login name, birth date, driver's license, passport number, pets' name and other words contained their personal information someone knows. In that case, your Windows system will not be safe anymore. Moreover, do remember not to use some words spelled backwards, abbreviations, sequences or repeated characters and adjacent letters, such as, asdfgh, 123456, 888888, abcdef and so on.

You can smoothly use your Windows now because the strong and powerful Windows password is created successfully, Certainly, I believe that many users lost Windows password and forgot Windows password, then you need have to reset Windows password or recover Windows password. It is a big problem for plenty of Windows users that how to reset Windows password. how to recover Windows password and they are puzzled by resetting windows password, for instance, reset Windows 7 password, recover password Windows XP, remove Windows Vista password and other operating systems after they create the password with complex letters, numbers and symbols. However, it is unnecessary to worry and it is said that things will eventually sort themselves out. There are many ways to reset forgotten Windows password, including use windows password reset disk and windows password reset software, like Super Windows Password Reset, a professional windows password reset software which could enable you to logon to Windows smoothly without reinstalling system.

View 1 Replies View Related

Delete Wallet Created Outside Wallet Manager?

Mar 17, 2013

I am on 11.2.0.1. I created wallet with

orapki wallet create -wallet "C:Oracleserver11201productdbhomeNETWORKADMIN" -pwd <password> -auto_login_local

How do I remover it now? Wallet manager doesn't list it.

View 2 Replies View Related

Real Application Clusters :: Unable To Open Wallet / ORA-28353 / Failed To Open Wallet

Jul 11, 2012

I want to create a wallet on RAC setup.I have two node setup.I have created the wallet directory under shared folder /u01/oradata/$ORACLE_SID/wallet

I am Unable to open wallet.I tried this using the below command

SQL> alter system set encryption key identified by "aryabhat";
alter system set encryption key identified by "aryabhat"
*
ERROR at line 1:
ORA-28353: failed to open wallet

Following is the content of sqlnet.ora file

(path : /u01/app/11.2.0/grid/network/admin/sqlnet.ora)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
ADR_BASE = /u01/app/oracle
ENCRYPTION_WALLET_LOCATION =
(SOURCE = (METHOD = FILE)(METHOD_DATA =
(DIRECTORY = /u01/oradata/$ORACLE_SID/wallet/)))

View 3 Replies View Related

Server Administration :: Non-expiring SYSTEM And SYS Password

Aug 27, 2012

that's what I did:

SQL> select profile from DBA_USERS where username = 'SYSTEM';

PROFILE
------------------------------
DEFAULT

SQL> alter profile DEFAULT limit password_life_time UNLIMITED;

Profile altered. But I get still the warning message every login. ORA-28002: the password will expire within 7 days.

$ sqlplus system/oracle111@XE
SQL*Plus: Release 11.2.0.2.0 Production on Mon Aug 27 10:29:03 2012
Copyright (c) 1982, 2011, Oracle. All rights reserved.
ERROR:
ORA-28002: the password will expire within 7 days

Connected to: Oracle Database 11g Express Edition Release 11.2.0.2.0 - 64bit Production

View 2 Replies View Related

Server Administration :: Sys Password Changed By System?

Feb 18, 2010

Here is an article to show a case when SYS password is changed by SYSTEM:

[URL]....

This behavior is not working on all the environments.

View 10 Replies View Related

Oracle 11g Installation - SYSTEM Admin Password Does Not Work

Aug 13, 2012

I have installed oracle several times in the past. This time I installed 11gr2 first time. I created default database during install and provided an admin password. Only thing I forgot to do was did not unlock the accounts using Password management button.

When I tried to login as SYS the admin password works fine but as SYSTEM admin password does not work. Used to be able to login as SYS, SYTEM with same admin password.

Now in SQLPLUS I unlocked the account but still can not change the password.

View 4 Replies View Related

Security :: Password In New Database

Mar 7, 2012

i have created a database on my pc and i have given a password at the time of installation , after the installation it is accessed successfully by the given password , but i observed that when i gave anything in password then it is also accessed by it and i don't have any other database of this same name.

And when i access it through another system then it is accessed only by its original password not by any other password.

View 7 Replies View Related

Security :: Password Of Users In 11g?

Jun 2, 2011

how to see password of users in 11g

View 11 Replies View Related

Security :: Automating Password Changes

Oct 25, 2011

I'm working for a credit card company and on a security project. We have oracle databases. Currently the passwords have to be changed every so often for key accounts for security purposes. Any tool to automate the process?

Any way to automate password changes on many accounts where only some people would be able to get the new password once it was changed.

Also, these IDs/passwords are sometimes used by applications to connect to the database so .ini files or some type of connection file would need to be changed automatically also.

View 2 Replies View Related

SQL & PL/SQL :: Creating A Flight Booking System

Dec 1, 2010

i am trying to create a flight booking system,i am at the stage of creating the tables but am having trouble with creating one of the tables

CREATE TABLE Seat
(Seat_no NUMBER(3) CONSTRAINT PK_Seat PRIMARY KEY,
Class_Code CHAR(2) CONSTRAINT FK_Class_Code FOREIGN KEY (Class_Code) REFERENCES Class(Class_Code)
CONSTRAINTS CHK_Class_Code CHECK(Class_Code='EN' OR Class_Code='FS')
(Class_Code is a primary key in the table Class)

It comes up with an error saying ORA-02253: Constraint specification not allowed here and if i put a coma after the first constraint it says the name already used for an existing constraint.

View 18 Replies View Related

Creating DB Link - How To Get Encrypted Password

Feb 7, 2012

for creating a db link, How to get the encrypted passwordhere is an example

create public database link "TEST1.UNIX.190.ORG"
connect to "scott" identified by values '053E6879854B7744F64396350297E1D6EF191163AE35216E64'
using '(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=10.30.20.20)(PORT=1521))(CONNECT_D
ATA=(SID=SID1)))';

where or how to get the encrypted password(Pink colored above) to create db link.

View 2 Replies View Related

Error In Creating Password File

Dec 2, 2010

I am creating prim and phy standby on same WIN machine. I have done with all settings. I can do TNSPING to both oracle_sid.I am trying to connect as sysdba to UP the phy standby. But it gives below error:

Enter user-name: sys as sysdba
Enter password:
ERROR:
ORA-12560: TNS:protocol adapter error

So i tried creating password file for phy standby. But gives below error:

Unable to find error file %ORACLE_HOME%\RDBMS\opw<lang>.msb

I am running it from proper dir.

View 4 Replies View Related

Security :: User Password Expired?

Nov 11, 2011

i am using a oracle server. And all my users password has been expired, is there any way to recover those users without failing my data.

View 19 Replies View Related

Security :: How To Hide Password In Script

Feb 6, 2011

I have following problem I have simple script in bash where I connect to db and launch simple select.

username:$(value)@host...

Problem is that i want to hide the password or encrypt. currently as you can see Iam using variable (value) where the password is keep. the problem is that, mentioned script is launched by many people which are using the same user (monitor). the variable is read from a file where user (monitor ) has access its in the same directory.

is there any way how to solve it ?

for e.g.
1. to put the file with password in another folder where the user (monitor) has no access to see the file.
2. to decrypt the password, but I have no clue how to do it .

View 23 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved