goldengate配置文件里面登入数据库的密码是明文的,这样很不安全,我们需要对其加密
环境:redhat 5.7 oracle 11.2.0.3
beijing用户,shenzhen用户,tianjin用户,shanghai用户,4个用户之间需要同步数据
ogg安装目录:
/ogg/beijing/
/ogg/shenzhen/
/ogg/tianjin/
/ogg/shanghai/
一:修改数据库oggpro账户的密码:
alter user oggpro identified by abc123;
二:生成密码串:
cd /ogg/beijing/
./keygen 128 1
0x793E406328265C72A26E3861B7807147
将生成的密码保存到OGG安装目录ENCKEYS文件中:
[oracle@rac01 beijing]$ more ENCKEYS
kasaur_key 0x793E406328265C72A26E3861B7807147
cp -rf ENCKEYS ../shenzhen/
cp -rf ENCKEYS ../tianjing/
cp -rf ENCKEYS ../shanghai/
三:根据修改后oggpro账户密码生成密钥:
GGSCI (rac01) 1> encrypt password abc123 encryptkey kasaur_key
AADAAAAAAAAAAAGATEQEMHNCCGDFKFYCAESDCDIBMGZGYENJXFIBQDWFQCLDYENAGHNCAEJBPIWGUBFA --beijing
AADAAAAAAAAAAAGALBGFSITATIHGIDACCEGAJJJEYIMHWHBDUAIJMDXEQHTECEQFAJGHGDBIWHDDNIOH --shenzhen
AADAAAAAAAAAAAGAMFCEPGNDRIXHEFPDRGAIYABGUDIETAXBXCAAIHNJGJJHLAUFHGDDLEICAEPHWDEF --tianjin
AADAAAAAAAAAAAGAQFQDUDIBNETGUCQGGABGVDYCRHRCIDEHKBDJFAACCIAGMENBBDYFOCLBRCCDZDBD --shanghai
测试登入数据库:
GGSCI (rac01) 1> dblogin userid oggpro,password AADAAAAAAAAAAAGATEQEMHNCCGDFKFYCAESDCDIBMGZGYENJXFIBQDWFQCLDYENAGHNCAEJBPIWGUBFA,encryptkey kasaur_key --beijing
GGSCI (rac01) 1> dblogin userid oggpro,password AADAAAAAAAAAAAGALBGFSITATIHGIDACCEGAJJJEYIMHWHBDUAIJMDXEQHTECEQFAJGHGDBIWHDDNIOH,encryptkey kasaur_key --shenzhen
GGSCI (rac01) 1> dblogin userid oggpro,password AADAAAAAAAAAAAGAMFCEPGNDRIXHEFPDRGAIYABGUDIETAXBXCAAIHNJGJJHLAUFHGDDLEICAEPHWDEF,encryptkey kasaur_key --tianjin
GGSCI (rac01) 1> dblogin userid oggpro,password AADAAAAAAAAAAAGAQFQDUDIBNETGUCQGGABGVDYCRHRCIDEHKBDJFAACCIAGMENBBDYFOCLBRCCDZDBD,encryptkey kasaur_key --shanghai
四:修改OGG配置文件:
修改ogg配置文件(有多个同步用户都需要拷贝ENCKEYS到对应ogg安装目录,都需要改配置文件密码串对应生成的密钥)密码串位置如:
userid oggpro, password AADAAAAAAAAAAAGATEQEMHNCCGDFKFYCAESDCDIBMGZGYENJXFIBQDWFQCLDYENAGHNCAEJBPIWGUBFA,encryptkey kasaur_key --beijing
userid oggpro, password AADAAAAAAAAAAAGALBGFSITATIHGIDACCEGAJJJEYIMHWHBDUAIJMDXEQHTECEQFAJGHGDBIWHDDNIOH,encryptkey kasaur_key --shenzhen
userid oggpro, password AADAAAAAAAAAAAGAMFCEPGNDRIXHEFPDRGAIYABGUDIETAXBXCAAIHNJGJJHLAUFHGDDLEICAEPHWDEF,encryptkey kasaur_key --tianjin
userid oggpro, password AADAAAAAAAAAAAGAQFQDUDIBNETGUCQGGABGVDYCRHRCIDEHKBDJFAACCIAGMENBBDYFOCLBRCCDZDBD,encryptkey kasaur_key --shanghai
参考博客:http://blog.itpub.net/25618347/viewspace-722144/
---end---