I am on 11.2.0.1. I created wallet with
orapki wallet create -wallet "C:Oracleserver11201productdbhomeNETWORKADMIN" -pwd <password> -auto_login_local
How do I remover it now? Wallet manager doesn't list it.
I want to create a wallet on RAC setup.I have two node setup.I have created the wallet directory under shared folder /u01/oradata/$ORACLE_SID/wallet
I am Unable to open wallet.I tried this using the below command
SQL> alter system set encryption key identified by "aryabhat";
alter system set encryption key identified by "aryabhat"
*
ERROR at line 1:
ORA-28353: failed to open wallet
Following is the content of sqlnet.ora file
(path : /u01/app/11.2.0/grid/network/admin/sqlnet.ora)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
ADR_BASE = /u01/app/oracle
ENCRYPTION_WALLET_LOCATION =
(SOURCE = (METHOD = FILE)(METHOD_DATA =
(DIRECTORY = /u01/oradata/$ORACLE_SID/wallet/)))
how to install wallet in Oracle 11g and chek if it is installed? Extra cost is involved for liscencing ?
Does it ask for any option while installing Oracle Software?
what steps I am missing or provide a work-around?
1) cat sqlnet.ora
NAMES.DIRECTORY_PATH=(TNSNAMES)
WALLET_LOCATION =
(SOURCE =
[code]...
2) mkdir /u01/app/oracle/secure
ls -ld /u01/app/oracle/secure
drwxr-sr-x 2 oracle dba 512 Sep 28 17:04 /u01/app/oracle/secure
lsnrctl stop
lsnrctl start
3) sqlplus 'sys/sys as sysdba'
SQL*Plus: Release 11.2.0.1.0 Production on Tue Sep 28 17:07:53 2010
SQL> ALTER SYSTEM SET ENCRYPTION KEY IDENTIFIED BY "DeciPher";
ALTER SYSTEM SET ENCRYPTION KEY IDENTIFIED BY "DeciPher"
*
ERROR at line 1:
ORA-28374: typed master key not found in wallet
I'm reviewing the method of setting up transparent data encryption (TDE) and the role Oracle Wallet plays in that process. One statement that caught my attention was this statement in the documentation:
Quote:You can also choose to create a local auto login wallet. Local auto login wallets cannot be moved to another computer. They must be used on the host on which they are created." URL....
Why an auto-login wallet can't be moved to another computer? For example, if my Oracle database server goes down and I'm in a recovery situation, would an autologin Oracle wallet file restored from tape not work?
I successfully created a Oracle Wallet in AIX. The wallet is belong to user "oracle" and permission is 755. I can access it with non-oracle user. Note: the non-oracle user is under the same group as "oracle" id.
But when I try to change the Oracle Waller permission to less than 755, I am not able to access it anymore. The error is "ORA-12578: TNS:wallet open failed".
My question is how can I access the Oracle Wallet without using 755 permission?
I have TDE enable in system. Now i want to remove wallet from the server and keep another secure place so that it can't be put in wrong hand. Is there any way that i can remove the wallet folder from the server while encryption and decryption on?
View 1 Replies View RelatedIs there a way to have separate wallets for each windows user? Well, I have found a way, but does not seem to work always properly and that is with %USERNAME% environment variable.
This is how our customer want's to have - so separate wallet for each windows user, how to accomplish this without using %USERNAME%?
If i have Oracle Wallet installed for a Oracle 10.2 Client, i am able to connect to the database. But , while generations a report , when my oracle report server tries to connect to the DB using Oracle Wallet
(i.e. sqlplus /@<dbname> ) , I am not able to establish a connection.
Is it a compatibility issue ?
Following is the parameter i am passing.
$ORACLE_HOME/bin/rwclient.sh server="$REPORT_SERVER" REPORT="$RDF_FILE" DESTYPE=FILE DESNAME="$PDF_FILE" DESFORMAT=PDF BATCH=YES USERID= /@"$ORACLE_SID"
I need few clarifications regarding oracle wallet.
db version: 11.2.0.3.2 (Enterprise Edition)
We have a requirement to run shell scripts calling stored procedures for specific activities, which are run on database server. We do not want to store passwords in shell scripts and decided to use Secure External Password Store for hiding passwords instead of os authentication method. need few clarifications on the below.
1) Currently, we are creating oracle wallet entry on db server and making modifications in sqlnet.ora file accordingly. Is it good to use like this or we should do this only on a client machine?
2) Do we need any licensing to use this option?
3) Any knows issues with using oracle wallet?
4) Can we use orapki for creating oracle wallet instead of mkstore?
5) Any knows issues we face during startup and shutdown of db activities?
I am getting error "ora-28374 typed master key not found in wallet".
steps-
1) created tablespace and user to the respective tablespace.
2) created table by issuing command as "CREATE TABLE TEST1 (SR_NO NUMBER(3), NAME VARCHAR2(30) ENCRYPT) DEFAULT TABLESPACE ENC". (by user - enc_user)
3) Inserted rows on to the table.
4) entry made in sqlnet.ora as
ENCRYPTION_WALLET_LOCATION=
(SOURCE=(METHOD=FILE)(METHOD_DATA=
(DIRECTORY=C:appAdministratoradmin estencrypted_wallet/)))
5) issued command as sysdba - ALTER SYSTEM SET ENCRYPTION KEY IDENTIFIED BY "ASHISH123";
6) restarted the database.
7) since i want to made it autologin. so I open wallet through the below mentioned path program file >>oracle_home>> integrated management tool >> wallet But when it asked the password I typed the same password but it was not accepting. So i made new wallet with the same specified path. Also I clicked on auto login.
8) Now, i have restarted the database and tried to issue the command "ALTER SYSTEM SET ENCRYPTION KEY IDENTIFIED BY "suresh123";
While issuing the command, getting error "ora-28374 typed master key not found in wallet". "
i tried with the recreation of new folder again on the same path as -"C:appAdministratoradmin estwallet" and same entry updated on sqlnet.ora. But facing the same error.
Is there any way to re-create or modify the encryption of tablespace?
I'm trying to hide the password for the batch programs that connect to the DB Server
as Cadot pointed out in
[URL].........
Quote:
use secure external password store
with reference to
[URL].........
when I create wallet, the system does not prompt me for password
C:>mkstore -wrl "C:ora102NETWORKADMIN" -create
when creating login credentials, again the system never prompts me for password
C:>mkstore -wrl "C:ora102NETWORKADMIN" -createCredential db10g scott tiger
here's my sqlnet.ora configurations
WALLET_LOCATION =
(SOURCE =
(METHOD = FILE)
(METHOD_DATA =
(DIRECTORY =C:ora102NETWORKADMIN)
)
)
SQLNET.WALLET_OVERRIDE = TRUE
SSL_CLIENT_AUTHENTICATION = FALSESSL_VERSION = 0
here's my tnsname.ora settings
DB10G =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
)
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = mike)
)
)
here's the outcome
C:Documents and SettingsAdministrator>sqlplus /@db10g
SQL*Plus: Release 10.2.0.4.0 - Production on Wed Apr 13 22:53:06 2011
Copyright (c) 1982, 2007, Oracle. All Rights Reserved.
ERROR:
ORA-12534: TNS:operation not supported
Enter user-name:
so I Google around for the solution to the ORA-12534 error, one of the site,
[URL].......
here's my lsnrctl services
Connecting to (ADDRESS=(PROTOCOL=tcp)(HOST=)(PORT=1521))
Services Summary...
Service "MIKEXDB" has 1 instance(s).
Instance "mike", status READY, has 1 handler(s) for this service...
Handler(s):
[code].....
The command completed successfully
right now I think I will be a fool to think that the solution is to resolve the ERROR: ORA-12514: TNS:listener does not currently know of service requested in connect descriptor. so what is wrong with my setup, or is it some patch that I need to apply?
I am trying to use oracle wallet with the new odp.net managed driver, but I am getting
"invalid username/password".
As the wallet itself is ok (it works with the unmanaged client), seems to me that this new provider is not fully compatible with Oracle Wallet. Is this true? I am trying this:
<oracle.manageddataaccess.client> <version number="*"> <settings> <setting name="tns_admin" value="D:oracleproduct11.2.0client_1
etworkadmin" /> <setting name="WALLET_LOCATION" value="D:oraclewallets" /> </settings> </version> </oracle.manageddataaccess.client>
I have created a wallet (11g R2 OEL 5.5) using the OWM.Tried opening the wallet (encryption_wallet_location set in sqlnet.ora). then while creating a table it said the master encryption key is not present. Have created the master key using the following command.
alter system set encryption key identified by "Password";
Here the strange thing i observed is that when we create a wallet using the OWM, it asks for the password and when i open the same wallet the master key is not created and it allows the master key to be generated with the same password that i have created the wallet in the first place with the OWM, with any other passwords it says that the wallet is not open.
After creating the wallet and creating the master key... I have the following questions, and its becoming quite hard to find the solutions as well.
1. Can we have multiple encryption keys... say i want to encrypt a table or column with one key and other with an another key.
2. How many keys can we have for objects in the table? or can we have only one key and many certificates.
3. wallet created, and encrypted tables present, the wallet is not in auto open mode, but somehow the database open after it is shutdown, here no encrypted tablespaces are present.
4. while creating an encrypted tablespace the default storage (encrypt ) has to be added to the add tablespace clause.
My database is 11.1.0.7 and 11.2.0.3 with TDE tablespace encryption, ASM db storage. The wallet needs to be opened for MRP to work in physical standby database. I already have the solution for the primary instances to automate wallet open (e.g. using startup trigger for 11.1.0.7). However, I cannot find solution to automate wallet open operation in standby instances (to issue ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY ""').
Manual operation everytime standby instance is started is not feasible.
I need to enable authentication over LDAP SSL. I've configured a wallet (auto login) containing required certificates and set accordingly WALLET_PATH and WALLET_PWD settings using apex_instance_admin.set_parameter method. With this, everything is working fine and LDAP over SSL is working well. It confirms that the wallet is properly configured, valid and usable.
So, the wallet was created with auto login option and it seems to work well without specifying password when calling utl_http.
Proof of properly configured auto login wallet (without password).
TEST01@DB11G> exec show_html_from_url('https://www.verisign.com/'); -- test without wallet
BEGIN show_html_from_url('https://www.verisign.com/'); END;
*
ERROR at line 1:
ORA-29273: HTTP request failed
ORA-06512: at "SYS.UTL_HTTP", line 1527
ORA-29261: bad argument
ORA-06512: at "TEST01.SHOW_HTML_FROM_URL", line 25
ORA-29273: HTTP request failed
ORA-06512: at "SYS.UTL_HTTP", line 1130
ORA-29024: Certificate validation failure
ORA-06512: at line 1TEST01@DB11G> exec utl_http.set_wallet('file:/u01/app/oracle/product/11.2.0/dbhome_1/network/admin'); -- set wallet info for use without password (autologin)
PL/SQL procedure successfully completed.
TEST01@DB11G> exec show_html_from_url('https://www.verisign.com/'); -- It works!
PL/SQL procedure successfully completed. So, when I configure WALLET_PATH without WALLET_PWD, it not seems to work as it should with my auto login wallet...
Is it APEX not handling auto login wallets correctly?
Apex Version: 4.2.0.00.27
OS: OEL 6.4
DB: 11.2.0.3 x64
ON windows environment...i am trying to delete the asm disk recently created with asmtool but it is not allowing me to do that . it seems asmtool gives some system assigned name to it . How to find the name so that i can drop the disk.
1. asmtool -create e:asmasm2.dsk 1024M;
2. asmtool -delete e:asma2.dsk
ASM:00204 : Ignoring ORACLDISKE:E:ASMASM2.DSK not a valid ASM paritition
I am not familiar with form with report in APEX. I have a lot of forms with reports that was created before, but they have only create buttons. Now I need to add edit and delete buttons. I wish I do not have to recreate forms with reports. But when I tried to add delete function by comparing a form with delete button created by APEX, but it does not work. the delete button does not react at all.
setting is as follows:
button style: template based button
button template: Button
button type: normal
action: redirect to URL
execute validation: NO
URL target: javascript:apex.confirm(htmldb_delete_message,'DELETE');
database action: SQL delete action
condition type: value of item / column in expression1 is not null
expression1: P2172_ALIAS_ID
I also enable the delete in the process of :"Process Row of SOR_ALIAS"
If I set action of delete button as submit page, I can delete the row, but no standard popup warning,
Oracle 10gR2 on 64-bit RHEL.Backup Strategy:There will be a level-0 backup of the database every Sunday and level-1 every weekday.Archivelogs will be backed up up every 30 minutes.
Q: How can I delete ALL the archivelog backups that were taken that day (every 30 minutes) right after successful completion of level-0 or level-1 backup?
I want to delete them because they may not be of any use after the level-0 or level-1 backup (am I right)?
I am trying to delete the backupset using Delete Obsolete command, but i am unable to get the success. As per the oracle Doc after completion of Retention Period oracle automatically deletes the backupset. I have set the retention period of 8 days.
View 7 Replies View RelatedIs there a way to find when was a database role created and who has created?
View 5 Replies View Relatedtell me if a REFRESH GROUP is automatically created when a materialized view is created?
View 3 Replies View RelatedI have to write a procedure that accepts schema name, table name and column value as parameters....I knew that i need to use metadata to do that deleting manually.
View 9 Replies View Relatedwe have 5 database servers in different locations,
1.main database 10g(production) ip-192.1.1.1
2.standby for production 10g ip- 192.1.1.2
both are linux
3.another database 10g windows
4. another database 9i windows
both are in same location
5.new database 10g in linux ip-192.1.1.3
some other location
i m having a system windows xp installed
i m monitoring, all 10g by oracle enterpric manager
linux os monitor by Putty software
and i m monitoring below 10g database by sqlplus. now how could i monitor all the database by oracle enterprise manager grid control installed in my system that windows OS installed.
I am having a database running in my windows 2003 server and I want to configure Enterprise manager for that database to check the resource utilization during the peak hours and also the number of transactions...
View 1 Replies View Relatedi have already give the grant option cnnect,resource to scott but it is not connecting to enter prise manager console of Oracle database 11gR1. i am getting this error while connecting "The application requires more database privileges than you have currently been granted. Click on Help to get more version specific information"
when i am giving scott the dba rights then it is connecting. but i cann't give dba rights to scott.so, how/what is the specific command to give permission scott for connecting to enter prise manager console.
We have the Oracle Enterprise Manager Grid Control 10.2.0.5. We recently upgraded our Databases from 10.2.0.3 to 10.2.0.4 and since then we are having this problem.
Whenever i click an Agent on the Grid Control it gives me this error: "Communication between the Oracle Management Service host to the Agent host is unavailable. Any functions or displayed information requiring this communication link will be unavailable. For example: deleting/configuring/adding targets, uploading metric data, or displaying Agent home page information such as Agent to Management Service Response Time (ms)."
I get the same error when i try to configure a host or a database.
Don't know what is wrong
I want to create a meta data table which has all the views users can access with a description of what the view was supposed to do.
Is there a trigger that can be created that fires when a view is created? To make it easy only one user in this system (oracle 9.2.0.8) has the create view privilege.
I know I could write a procedure to create views with dynamic sql that would do this but that seems a bit of overkill.
the sequence of events should go like this:
view created
trigger fires
record with view name and creation date inserted in a table
later, manually go to the table and add explanatory comment
or can I add a comment to a view like you can to tables?
if i want to know when (date/time) that the Database Trigger created? I am using Oracle 8i, so is it possible to check when (date/time) ?
View 2 Replies View RelatedIs there any way to get the last Sequence Number generated regardless the Sequence name? Something like dbinfo('sqlca.sqlerrd1') within Informix?
Imagine I have 2 sequences. Imagine that I run both several times until 20:00 hours. Imagine that at 21:00 hours I would like to know what was the last generated number created by any of the sequences. I don't wann know wich sequence generated the last NEXTVAL, I only want to know the value of the last NEXTVAL used.
Is it possible without mentionating the Sequence name?