Scribd Logo
Upload

Welcome to Scribd!

  • 10 views

    Considerations

    Uploaded by

    tareqfrak
    The document discusses things to consider when implementing Database Vault (DBV) in Oracle databases. It notes that export/import operations on protected schemas require authorization from DBVSYS.DBMS_MACADM procedures. Masking, encryption, RMAN backups, and database patching generally do not require additional authorization for DBV. Authorization may be needed for some users to run jobs or use Data Guard, GoldenGate, and Streams.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd

    Considerations

    Uploaded by

    tareqfrak
    10 views2 pages
    The document discusses things to consider when implementing Database Vault (DBV) in Oracle databases. It notes that export/import operations on protected schemas require authorization from DBVSYS.DBMS_MACADM procedures. Masking, encryption, RMAN backups, and database patching generally do not require additional authorization for DBV. Authorization may be needed for some users to run jobs or use Data Guard, GoldenGate, and Streams.

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document discusses things to consider when implementing Database Vault (DBV) in Oracle databases. It notes that export/import operations on protected schemas require authorization from DBVSYS.DBMS_MACADM procedures. Masking, encryption, RMAN backups, and database patching generally do not require additional authorization for DBV. Authorization may be needed for some users to run jobs or use Data Guard, GoldenGate, and Streams.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Download as txt, pdf, or txt
    10 views2 pages

    Considerations

    Uploaded by

    tareqfrak
    The document discusses things to consider when implementing Database Vault (DBV) in Oracle databases. It notes that export/import operations on protected schemas require authorization from DBVSYS.DBMS_MACADM procedures. Masking, encryption, RMAN backups, and database patching generally do not require additional authorization for DBV. Authorization may be needed for some users to run jobs or use Data Guard, GoldenGate, and Streams.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Download as txt, pdf, or txt
    of 2

    Thinks to consider during DBV implemenation (most of them need authoriztion, this

    can be done from cloud control under DBV 12c adminstration page:

    1. Export/Import:
    If the user tried to export his protected schema by the realm and he is a realm
    owner he can do that, participant cannot or other user inclduing sys cannot without
    authorization:
    do export/import he must be authorized by this:
    execute DVSYS.DBMS_MACADM.AUTHORIZE_DATAPUMP_USER('BERNST','HR'); --- to be able
    to export HR protected objects
    execute DVSYS.DBMS_MACADM.AUTHORIZE_DATAPUMP_USER('SYS'); --- to be able to export
    any protected objects by realms

    the below error while try to export hr protected schem by sys user

    [oracle@dbhost 27338020]$ expdp directory=DATA_PUMP_DIR dumpfile=test1.dmp


    schemas=hr

    Export: Release 12.1.0.2.0 - Production on Wed Jan 9 23:46:30 2019

    Copyright (c) 1982, 2014, Oracle and/or its affiliates. All rights reserved.

    Username: / as sysdba

    Connected to: Oracle Database 12c Enterprise Edition Release 12.1.0.2.0 - 64bit
    Production
    With the Partitioning, Oracle Label Security, OLAP, Advanced Analytics,
    Oracle Database Vault, Real Application Testing and Unified Auditing options
    Starting "SYS"."SYS_EXPORT_SCHEMA_01": /******** AS SYSDBA directory=DATA_PUMP_DIR
    dumpfile=test1.dmp schemas=hr
    ORA-39327: Oracle Database Vault data is being stored unencrypted in dump file set.
    Estimate in progress using BLOCKS method...
    Processing object type SCHEMA_EXPORT/TABLE/TABLE_DATA
    Total estimation using BLOCKS method: 448 KB
    Processing object type SCHEMA_EXPORT/USER
    Processing object type SCHEMA_EXPORT/SYSTEM_GRANT
    .
    .
    .
    ORA-31693: Table data object "HR"."COUNTRIES" failed to load/unload and is being
    skipped due to error:
    ORA-28116: insufficient privileges to do direct path access
    .
    .
    ******************************************************************************
    Dump file set for SYS.SYS_EXPORT_SCHEMA_01 is:
    /u01/app/oracle/admin/testdb/dpdump/test1.dmp
    Job "SYS"."SYS_EXPORT_SCHEMA_01" completed with 8 error(s) at Wed Jan 9 23:47:29
    2019 elapsed 0 00:00:55

    2. Masking
    3. Encrption
    4. RMAN Backup/Restore: no changes or special needs, backup/restore can run
    normally in DBV configured without any changes, maybe table level recovery need
    consideration
    5. Data Guard
    6. GoldenGate and Streams
    7. Scheduling Jobs: sys user/normal user who has create job success with create job
    without authorization, dvsys.macadm.authorize_scheduler_user('TESTUSER')
    8. Database Patching (apply patches to the software): nothing needed, but no idea
    what they mean of authoriztion in the DBV adminstration page

    You might also like