ANBOB™

外部存储用户名密码

如果在shell中处理数据库内容，又不想从os用户随便看到脚本中的用户密码，可以用oracle提供的Oracle Wallet，中文钱包或钱夹，在我以前的透明加密时有用提到过. wallet文件内容是不可读的. 如果日后可以修改了密码，wallet也随着失效，
可以修改wallet也可以重建

Wallet 创建方法 – mkstore:
 
 [oracle@anbob ~]$ which mkstore
 /oracle10g/app/oracle/product/10.2.0/db_1/bin/mkstore
 [oracle@anbob ~]$ mkstore -help
 mkstore
 [-wrl wrl]
 [-create]
 [-createSSO]
 [-delete]
 [-deleteSSO]
 [-list]
 [-createEntry alias secret]
 [-viewEntry alias]
 [-modifyEntry alias secret]
 [-deleteEntry alias] [-help]

有可能会创建多个wallets, 它们每个都应该有自己的目录

下面开始创建先用参数createEntry ，稍后再说两个区别

[oracle@anbob bin]$ cd $ORACLE_HOME/network/admin/
[oracle@anbob admin]$ mkdir -p wallets/anbob<
[oracle@anbob anbob]$ mkstore -wrl $ORACLE_HOME/network/admin/wallets/anbob -create
Enter password:

Enter password again:
--979899

[oracle@anbob anbob]$ ll
total 16
-rw------- 1 oracle oinstall 7940 Jan 4 06:57 cwallet.sso
-rw------- 1 oracle oinstall 7912 Jan 4 06:57 ewallet.p12
/pre>
--配置tnsnames
[oracle@anbob anbob]$ tnsping anbob

TNS Ping Utility for Linux: Version 10.2.0.1.0 - Production on 04-1?-2012 06:57:32

Copyright (c) 1997, 2005, Oracle. All rights reserved.

Used parameter files:
/oracle10g/app/oracle/product/10.2.0/db_1/network/admin/sqlnet.ora

增加Default Wallet记录
We now add a default username and default user password to the wallet. The default username and password are used whenever the wallet is used. To do this we use the "-wrl" and "-createEntry" options

[oracle@anbob anbob]$ mkstore -wrl $ORACLE_HOME/network/admin/wallets/anbob -createEntry oracle.security.client.default_username anbob;
Enter password:

Could not open wallet. Check password
--这时输入的是wallet的上面建的钱包密码非用户密码，下面也是
[oracle@anbob anbob]$ mkstore -wrl $ORACLE_HOME/network/admin/wallets/anbob -createEntry oracle.security.client.default_username anbob;
Enter password:

[oracle@anbob anbob]$ mkstore -wrl $ORACLE_HOME/network/admin/wallets/anbob -createEntry oracle.security.client.default_password anbob;
Enter password:

note:oracle.security.client.default_password 只是个别名而已！

List Wallet Entries:

We now list the entries in the wallet using the mkstore "-list" option:

[oracle@anbob anbob]$ mkstore -wrl $ORACLE_HOME/network/admin/wallets/anbob -list
Enter password:

Oracle Secret Store entries:
oracle.security.client.default_password
oracle.security.client.default_username

[oracle@anbob anbob]$ mkstore -wrl $ORACLE_HOME/network/admin/wallets/anbob -viewEntry oracle.security.client.default_password
Enter password:

oracle.security.client.default_password = anbob


note:这里有别于
[oracle@primary wallet]$ $ORACLE_HOME/bin/mkstore -wrl $ORACLE_HOME/network/admin/wallet -createCredential
Enter password: 的方法，这种创建会显示tnsname,用户名

[oracle@primary wallet]$ $ORACLE_HOME/bin/mkstore -wrl $ORACLE_HOME/network/admin/wallet -listCredential
Enter password:


Configure the Wallet for use - sqlnet.ora: 上面的文件和sqlnet.ora配置路径是client路径,可以copy
现在我们就有了一个钱夹. The following entries are added to the sqlnet.ora file:
[oracle@anbob admin]$ vi sqlnet.ora
# sqlnet.ora Network Configuration File: /oracle10g/app/oracle/product/10.2.0/db_1/network/admin/sqlnet.ora
# Generated by Oracle configuration tools.

NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)

# append
WALLET_LOCATION =
(SOURCE =
(METHOD = FILE)
(METHOD_DATA =
(DIRECTORY = /oracle10g/app/oracle/product/10.2.0/db_1/network/admin/wallets/anbob)
)
)

SQLNET.WALLET_OVERRIDE = TRUE
SSL_CLIENT_AUTHENTICATION = FALSE
SSL_VERSION = 0

下面测试看是否可以登录

登录本机
[oracle@anbob admin]$ sqlplus /

SQL*Plus: Release 10.2.0.1.0 - Production on 骀涓 1?4 19:26:04 2012

Copyright (c) 1982, 2005, Oracle. All rights reserved.

Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
With the Partitioning, OLAP and Data Mining options

SQL> show user
USER is "ANBOB"

登录其它服务器--前提对方也有anbob用户及相应密码
[oracle@anbob admin]$ vi tnsnames.ora

#append
d191 =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.191.11)(PORT = 1521))
(CONNECT_DATA =
(SERVICE_NAME = ncme)
)
)
)

[oracle@anbob admin]$ sqlplus /@d191

SQL*Plus: Release 10.2.0.1.0 - Production on 骀涓 1?4 19:27:16 2012

Copyright (c) 1982, 2005, Oracle. All rights reserved.

Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
With the Partitioning, OLAP and Data Mining options

SQL> show user
USER is "ANBOB"

 

每一部分到这，下篇用第二个参数
        

            打赏
            

                
                
微信扫一扫，打赏作者吧～