goldengate配置文件裏面登入數據庫的密碼是明文的,這樣很不安全,我們需要對其加密
環境:redhat 5.7 oracle 11.2.0.3
beijing用戶,shenzhen用戶,tianjin用戶,shanghai用戶,4個用戶之間需要同步數據
ogg安裝目錄:
/ogg/beijing/
/ogg/shenzhen/
/ogg/tianjin/
/ogg/shanghai/
一:修改數據庫oggpro賬戶的密碼:
alter user oggpro identified by abc123;
二:生成密碼串:
cd /ogg/beijing/
./keygen 128 1
0x793E406328265C72A26E3861B7807147
將生成的密碼保存到OGG安裝目錄ENCKEYS文件中:
[oracle@rac01 beijing]$ more ENCKEYS
kasaur_key 0x793E406328265C72A26E3861B7807147
cp -rf ENCKEYS ../shenzhen/
cp -rf ENCKEYS ../tianjing/
cp -rf ENCKEYS ../shanghai/
三:根據修改後oggpro賬戶密碼生成密鑰:
GGSCI (rac01) 1> encrypt password abc123 encryptkey kasaur_key
AADAAAAAAAAAAAGATEQEMHNCCGDFKFYCAESDCDIBMGZGYENJXFIBQDWFQCLDYENAGHNCAEJBPIWGUBFA --beijing
AADAAAAAAAAAAAGALBGFSITATIHGIDACCEGAJJJEYIMHWHBDUAIJMDXEQHTECEQFAJGHGDBIWHDDNIOH --shenzhen
AADAAAAAAAAAAAGAMFCEPGNDRIXHEFPDRGAIYABGUDIETAXBXCAAIHNJGJJHLAUFHGDDLEICAEPHWDEF --tianjin
AADAAAAAAAAAAAGAQFQDUDIBNETGUCQGGABGVDYCRHRCIDEHKBDJFAACCIAGMENBBDYFOCLBRCCDZDBD --shanghai
測試登入數據庫:
GGSCI (rac01) 1> dblogin userid oggpro,password AADAAAAAAAAAAAGATEQEMHNCCGDFKFYCAESDCDIBMGZGYENJXFIBQDWFQCLDYENAGHNCAEJBPIWGUBFA,encryptkey kasaur_key --beijing
GGSCI (rac01) 1> dblogin userid oggpro,password AADAAAAAAAAAAAGALBGFSITATIHGIDACCEGAJJJEYIMHWHBDUAIJMDXEQHTECEQFAJGHGDBIWHDDNIOH,encryptkey kasaur_key --shenzhen
GGSCI (rac01) 1> dblogin userid oggpro,password AADAAAAAAAAAAAGAMFCEPGNDRIXHEFPDRGAIYABGUDIETAXBXCAAIHNJGJJHLAUFHGDDLEICAEPHWDEF,encryptkey kasaur_key --tianjin
GGSCI (rac01) 1> dblogin userid oggpro,password AADAAAAAAAAAAAGAQFQDUDIBNETGUCQGGABGVDYCRHRCIDEHKBDJFAACCIAGMENBBDYFOCLBRCCDZDBD,encryptkey kasaur_key --shanghai
四:修改OGG配置文件:
修改ogg配置文件(有多個同步用戶都需要拷貝ENCKEYS到對應ogg安裝目錄,都需要改配置文件密碼串對應生成的密鑰)密碼串位置如:
userid oggpro, password AADAAAAAAAAAAAGATEQEMHNCCGDFKFYCAESDCDIBMGZGYENJXFIBQDWFQCLDYENAGHNCAEJBPIWGUBFA,encryptkey kasaur_key --beijing
userid oggpro, password AADAAAAAAAAAAAGALBGFSITATIHGIDACCEGAJJJEYIMHWHBDUAIJMDXEQHTECEQFAJGHGDBIWHDDNIOH,encryptkey kasaur_key --shenzhen
userid oggpro, password AADAAAAAAAAAAAGAMFCEPGNDRIXHEFPDRGAIYABGUDIETAXBXCAAIHNJGJJHLAUFHGDDLEICAEPHWDEF,encryptkey kasaur_key --tianjin
userid oggpro, password AADAAAAAAAAAAAGAQFQDUDIBNETGUCQGGABGVDYCRHRCIDEHKBDJFAACCIAGMENBBDYFOCLBRCCDZDBD,encryptkey kasaur_key --shanghai
參考博客:http://blog.itpub.net/25618347/viewspace-722144/
---end---