溫馨提示×
您好，登錄后才能下訂單哦！
點擊 登錄注冊 即表示同意《億速云用戶服務條款》
您好，登錄后才能下訂單哦！
Oracle Wallet初探
A datastructure used to store and manage security credentials for an individualentity.
從Oracle10gR2開始, 通過使用Oracle Wallet達到用戶不使用密碼登錄數據庫(非操作系統認證方式),這對于用腳本登錄數據庫進行操作來說是非常有用的；尤其對于企業安全要求很高，不希望用戶名和密碼明文存在配置文件中，而且對于密碼的維護是極為方便的，比如我把wallet放在指定路徑下，當修改密碼時，只需統一覆蓋wallet即可，對于有大量應用服務器尤為方便。
[oracle@daidai ~]$ mkdir -p/tmp/test_wallet
[oracle@daidai ~]$ mkstore-wrl /tmp/test_wallet –create
[oracle@daidai ~]$ cd /tmp/test_wallet/
[oracle@daidai test_wallet]$ ls
cwallet.sso ewallet.p12
配置連接串tnsnames.ora
WALLET_OCP11G =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = daidai.com)(PORT = 1522))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = ocp11g)
)
)
配置sqlnet.ora
WALLET_LOCATION=(SOURCE=(METHOD=FILE)(METHOD_DATA=(DIRECTORY=/tmp/test_wallet)))
SQLNET.WALLET_OVERRIDE = TRUE
把登入數據庫的用戶認證信息添加到wallet中
[oracle@daidai ~]$ mkstore --help
Oracle Secret Store Tool : Version11.2.0.4.0 - Production
Copyright (c) 2004, 2013, Oracle and/or itsaffiliates. All rights reserved.
No wallet location specified.
mkstore [-wrl wrl] [-create] [-createSSO][-createLSSO] [-createALO] [-delete] [-deleteSSO] [-list] [-createEntry aliassecret] [-viewEntry alias] [-modifyEntry alias secret] [-deleteEntry alias] [-createCredential connect_string username password][-listCredential] [-modifyCredential connect_string username password][-deleteCredential connect_string] [-help] [-nologo]
[oracle@daidai ~]$ mkstore-wrl /tmp/test_wallet -createCredential wallet_ocp11g daidai love8013
Oracle Secret Store Tool : Version11.2.0.4.0 - Production
Copyright (c) 2004, 2013, Oracle and/or itsaffiliates. All rights reserved.
Enter wallet password:l 3
Create credential oracle.security.client.connect_string1
測試連接
至此，就可以使用wallet連接
[oracle@daidai ~]$ sqlplus/@wallet_ocp11g
SQL*Plus: Release 11.2.0.4.0 Production onTue Jun 14 14:47:49 2016
Copyright (c) 1982, 2013, Oracle. All rights reserved.
Connected to:
Oracle Database 11g Enterprise EditionRelease 11.2.0.4.0 - 64bit Production
With the Partitioning, OLAP, Data Miningand Real Application Testing options
SQL>
管理wallet同樣適用mkstore命令
查看Credential
[oracle@daidai ~]$ mkstore-wrl /tmp/test_wallet -listCredential
Oracle Secret Store Tool : Version11.2.0.4.0 - Production
Copyright (c) 2004, 2013, Oracle and/or itsaffiliates. All rights reserved.
Enter wallet password:love801 3
List credential (index: connect_stringusername)
1: wallet_ocp11g daidai
修改wallet中用戶密碼
[oracle@daidai ~]$ mkstore-wrl /tmp/test_wallet -modifyCredential wallet_ocp11g daidai love8014
Oracle Secret Store Tool : Version11.2.0.4.0 - Production
Copyright (c) 2004, 2013, Oracle and/or itsaffiliates. All rights reserved.
Enter wallet password:love80
Modify credential
Modify 1
[oracle@daidai ~]$ sqlplus @/wallet_ocp11g
SQL*Plus: Release 11.2.0.4.0 Production onTue Jun 14 14:58:35 2016
Copyright (c) 1982, 2013, Oracle. All rights reserved.
SP2-0310: unable to openfile "/wallet_ocp11g.sql"
Enter user-name: daidai
Enter password:--此處輸入正確密碼則進入，錯誤密碼則不進入
刪除wallet的用戶認證信息
[oracle@daidai ~]$ mkstore -wrl/tmp/test_wallet -listCredential
Oracle Secret Store Tool : Version11.2.0.4.0 - Production
Copyright (c) 2004, 2013, Oracle and/or itsaffiliates. All rights reserved.
Enter wallet password:lov e8
List credential (index: connect_stringusername)
1: wallet_ocp11g daidai
[oracle@daidai ~]$ mkstore-wrl /tmp/test_wallet -deleteCredential wallet_ocp11g
Oracle Secret Store Tool : Version11.2.0.4.0 - Production
Copyright (c) 2004, 2013, Oracle and/or itsaffiliates. All rights reserved.
Enter wallet password: ove801 3
Delete credential
Delete 1
查看wallet詳細認證信息
[oracle@daidai ~]$ mkstore-wrl /tmp/test_wallet -list
Oracle Secret Store Tool : Version11.2.0.4.0 - Production
Copyright (c) 2004, 2013, Oracle and/or itsaffiliates. All rights reserved.
Enter wallet password:l e8 013
Oracle Secret Store entries:
oracle.security.client.connect_string1
oracle.security.client.password1
oracle.security.client.username1
[oracle@daidai ~]$mkstore-wrl /tmp/test_wallet -viewEntry oracle.security.client.connect_string1
Oracle Secret Store Tool : Version11.2.0.4.0 - Production
Copyright (c) 2004, 2013, Oracle and/or itsaffiliates. All rights reserved.
Enter wallet password:lo ve8
oracle.security.client.connect_string1 =wallet_ocp11g
更改wallet里用戶認證信息的內容
mkstore -wrl /tmp/test_wallet -modifyEntry oracle.security.client.password1skatepwd1
mkstore -wrl /tmp/test_wallet -modifyEntry oracle.security.client.username1skate1
按照linux中的樣式修改tnsname.ora[IP & port]和sqlnet.ora[walletpath]，注意測試連通性
mkstore -wrl e:/test_wallet –create
拷貝出linux中wallet文件覆蓋windows中的wallet文件
windows遷移至linux，我沒有測試。
免責聲明：本站發布的內容（圖片、視頻和文字）以原創、轉載和分享為主，文章觀點不代表本網站立場，如果涉及侵權請聯系站長郵箱：is@yisu.com進行舉報，并提供相關證據，一經查實，將立刻刪除涉嫌侵權內容。
