goldengate加密



goldengate配置文件裏面登入數據庫的密碼是明文的,這樣很不安全,我們需要對其加密


環境:redhat 5.7  oracle 11.2.0.3

beijing用戶,shenzhen用戶,tianjin用戶,shanghai用戶,4個用戶之間需要同步數據

ogg安裝目錄:

      /ogg/beijing/

      /ogg/shenzhen/

      /ogg/tianjin/

      /ogg/shanghai/



一:修改數據庫oggpro賬戶的密碼:
alter user oggpro identified by abc123;
二:生成密碼串:
cd /ogg/beijing/
./keygen 128 1
0x793E406328265C72A26E3861B7807147

將生成的密碼保存到OGG安裝目錄ENCKEYS文件中:

[oracle@rac01 beijing]$ more ENCKEYS
kasaur_key      0x793E406328265C72A26E3861B7807147

cp -rf ENCKEYS ../shenzhen/
cp -rf ENCKEYS ../tianjing/
cp -rf ENCKEYS ../shanghai/

三:根據修改後oggpro賬戶密碼生成密鑰:
GGSCI (rac01) 1> encrypt password abc123 encryptkey kasaur_key

AADAAAAAAAAAAAGATEQEMHNCCGDFKFYCAESDCDIBMGZGYENJXFIBQDWFQCLDYENAGHNCAEJBPIWGUBFA  --beijing
AADAAAAAAAAAAAGALBGFSITATIHGIDACCEGAJJJEYIMHWHBDUAIJMDXEQHTECEQFAJGHGDBIWHDDNIOH  --shenzhen
AADAAAAAAAAAAAGAMFCEPGNDRIXHEFPDRGAIYABGUDIETAXBXCAAIHNJGJJHLAUFHGDDLEICAEPHWDEF  --tianjin
AADAAAAAAAAAAAGAQFQDUDIBNETGUCQGGABGVDYCRHRCIDEHKBDJFAACCIAGMENBBDYFOCLBRCCDZDBD  --shanghai


測試登入數據庫:
GGSCI (rac01) 1> dblogin userid oggpro,password AADAAAAAAAAAAAGATEQEMHNCCGDFKFYCAESDCDIBMGZGYENJXFIBQDWFQCLDYENAGHNCAEJBPIWGUBFA,encryptkey kasaur_key  --beijing
GGSCI (rac01) 1> dblogin userid oggpro,password AADAAAAAAAAAAAGALBGFSITATIHGIDACCEGAJJJEYIMHWHBDUAIJMDXEQHTECEQFAJGHGDBIWHDDNIOH,encryptkey kasaur_key  --shenzhen
GGSCI (rac01) 1> dblogin userid oggpro,password AADAAAAAAAAAAAGAMFCEPGNDRIXHEFPDRGAIYABGUDIETAXBXCAAIHNJGJJHLAUFHGDDLEICAEPHWDEF,encryptkey kasaur_key  --tianjin
GGSCI (rac01) 1> dblogin userid oggpro,password AADAAAAAAAAAAAGAQFQDUDIBNETGUCQGGABGVDYCRHRCIDEHKBDJFAACCIAGMENBBDYFOCLBRCCDZDBD,encryptkey kasaur_key  --shanghai

四:修改OGG配置文件:
修改ogg配置文件(有多個同步用戶都需要拷貝ENCKEYS到對應ogg安裝目錄,都需要改配置文件密碼串對應生成的密鑰)密碼串位置如:
userid oggpro, password AADAAAAAAAAAAAGATEQEMHNCCGDFKFYCAESDCDIBMGZGYENJXFIBQDWFQCLDYENAGHNCAEJBPIWGUBFA,encryptkey kasaur_key     --beijing
userid oggpro, password AADAAAAAAAAAAAGALBGFSITATIHGIDACCEGAJJJEYIMHWHBDUAIJMDXEQHTECEQFAJGHGDBIWHDDNIOH,encryptkey kasaur_key     --shenzhen
userid oggpro, password AADAAAAAAAAAAAGAMFCEPGNDRIXHEFPDRGAIYABGUDIETAXBXCAAIHNJGJJHLAUFHGDDLEICAEPHWDEF,encryptkey kasaur_key     --tianjin
userid oggpro, password AADAAAAAAAAAAAGAQFQDUDIBNETGUCQGGABGVDYCRHRCIDEHKBDJFAACCIAGMENBBDYFOCLBRCCDZDBD,encryptkey kasaur_key     --shanghai





參考博客:http://blog.itpub.net/25618347/viewspace-722144/



---end---



發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章