Oracle Wallet的使用

从Oracle10gR2开始, 通过使用Oracle Wallet达到任意用户不使用密码登录数据库(非操作系统认证方式),
这对在shell中要使用用户密码登录数据库进行操作的脚本来说是非常有用的, 可以不暴露用户密码. 比如在Oracle客
户端通过 mkstore命令设置 Wallet认证信息, 然后通过"sqlplus /@connect_string"方式就可以直接连接数据库

例子:test用户可以不需要密码登录

1>mkstore用法如下
[oracle@primary ~]$ $ORACLE_HOME/bin/mkstore -wrl $ORACLE_HOME/network/admin/wallet -create
Enter password:           
输入wallet密码
Enter password again:           
确认wallet密码

2>查看wallet目录是否创建
[oracle@primary ~]$ cd /data/oracle/product/10.2.1/network/admin/wallet/
[oracle@primary wallet]$ ll
total 16
-rw-------  1 oracle dba 7940 Mar 26 15:10 cwallet.sso
-rw-------  1 oracle dba 7912 Mar 26 15:10 ewallet.p12

3>配置一个connect string
primary =
  (DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.6.2)(PORT = 1521))
    (CONNECT_DATA =
      (SERVER = DEDICATED)
      (SID = source)
    )
  )

4>加入用户验证信息到wallet
[oracle@primary wallet]$ $ORACLE_HOME/bin/mkstore -wrl $ORACLE_HOME/network/admin/wallet -createCredential primary test "test"
Enter password:           
输入wallet密码
Create credential oracle.security.client.connect_string1

5>确认用户认证信息已经加入到wallet
[oracle@primary wallet]$ $ORACLE_HOME/bin/mkstore -wrl $ORACLE_HOME/network/admin/wallet -listCredential
Enter password:           

List credential (index: connect_string username)
1: primary test

6> 加入wallet位置信息到sqlnet.ora
WALLET_LOCATION=(SOURCE=(METHOD=FILE)(METHOD_DATA=(DIRECTORY=/data/oracle/product/10.2.1/network/admin/wallet)))
SQLNET.WALLET_OVERRIDE=TRUE

 

7>验证
[oracle@primary admin]$ sqlplus /@primary

SQL*Plus: Release 10.2.0.1.0 - Production on Fri Mar 26 15:17:16 2010

Copyright (c) 1982, 2005, Oracle.  All rights reserved.

Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
With the Partitioning, OLAP and Data Mining options

SQL> show user
USER is "TEST"
SQL>

----------------------------------------------------------------------------------------------------
wallet的简单管理
1. list the contents of the external password store
mkstore -wrl /oracle/product/10.2.0/Db_1/network/admin -listCredential

2. add database login credentials:
mkstore -wrl /oracle/product/10.2.0/Db_1/network/admin -createCredential

3. modify database login credentials:
mkstore -wrl /oracle/product/10.2.0/Db_1/network/admin -modifyCredential

4. delete database login credentials:
mkstore -wrl /oracle/product/10.2.0/Db_1/network/admin -deleteCredential

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/7314177/viewspace-630473/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/7314177/viewspace-630473/