goldengate加密



goldengate配置文件里面登入数据库的密码是明文的,这样很不安全,我们需要对其加密


环境:redhat 5.7  oracle 11.2.0.3

beijing用户,shenzhen用户,tianjin用户,shanghai用户,4个用户之间需要同步数据

ogg安装目录:

      /ogg/beijing/

      /ogg/shenzhen/

      /ogg/tianjin/

      /ogg/shanghai/



一:修改数据库oggpro账户的密码:
alter user oggpro identified by abc123;
二:生成密码串:
cd /ogg/beijing/
./keygen 128 1
0x793E406328265C72A26E3861B7807147

将生成的密码保存到OGG安装目录ENCKEYS文件中:

[oracle@rac01 beijing]$ more ENCKEYS
kasaur_key      0x793E406328265C72A26E3861B7807147

cp -rf ENCKEYS ../shenzhen/
cp -rf ENCKEYS ../tianjing/
cp -rf ENCKEYS ../shanghai/

三:根据修改后oggpro账户密码生成密钥:
GGSCI (rac01) 1> encrypt password abc123 encryptkey kasaur_key

AADAAAAAAAAAAAGATEQEMHNCCGDFKFYCAESDCDIBMGZGYENJXFIBQDWFQCLDYENAGHNCAEJBPIWGUBFA  --beijing
AADAAAAAAAAAAAGALBGFSITATIHGIDACCEGAJJJEYIMHWHBDUAIJMDXEQHTECEQFAJGHGDBIWHDDNIOH  --shenzhen
AADAAAAAAAAAAAGAMFCEPGNDRIXHEFPDRGAIYABGUDIETAXBXCAAIHNJGJJHLAUFHGDDLEICAEPHWDEF  --tianjin
AADAAAAAAAAAAAGAQFQDUDIBNETGUCQGGABGVDYCRHRCIDEHKBDJFAACCIAGMENBBDYFOCLBRCCDZDBD  --shanghai


测试登入数据库:
GGSCI (rac01) 1> dblogin userid oggpro,password AADAAAAAAAAAAAGATEQEMHNCCGDFKFYCAESDCDIBMGZGYENJXFIBQDWFQCLDYENAGHNCAEJBPIWGUBFA,encryptkey kasaur_key  --beijing
GGSCI (rac01) 1> dblogin userid oggpro,password AADAAAAAAAAAAAGALBGFSITATIHGIDACCEGAJJJEYIMHWHBDUAIJMDXEQHTECEQFAJGHGDBIWHDDNIOH,encryptkey kasaur_key  --shenzhen
GGSCI (rac01) 1> dblogin userid oggpro,password AADAAAAAAAAAAAGAMFCEPGNDRIXHEFPDRGAIYABGUDIETAXBXCAAIHNJGJJHLAUFHGDDLEICAEPHWDEF,encryptkey kasaur_key  --tianjin
GGSCI (rac01) 1> dblogin userid oggpro,password AADAAAAAAAAAAAGAQFQDUDIBNETGUCQGGABGVDYCRHRCIDEHKBDJFAACCIAGMENBBDYFOCLBRCCDZDBD,encryptkey kasaur_key  --shanghai

四:修改OGG配置文件:
修改ogg配置文件(有多个同步用户都需要拷贝ENCKEYS到对应ogg安装目录,都需要改配置文件密码串对应生成的密钥)密码串位置如:
userid oggpro, password AADAAAAAAAAAAAGATEQEMHNCCGDFKFYCAESDCDIBMGZGYENJXFIBQDWFQCLDYENAGHNCAEJBPIWGUBFA,encryptkey kasaur_key     --beijing
userid oggpro, password AADAAAAAAAAAAAGALBGFSITATIHGIDACCEGAJJJEYIMHWHBDUAIJMDXEQHTECEQFAJGHGDBIWHDDNIOH,encryptkey kasaur_key     --shenzhen
userid oggpro, password AADAAAAAAAAAAAGAMFCEPGNDRIXHEFPDRGAIYABGUDIETAXBXCAAIHNJGJJHLAUFHGDDLEICAEPHWDEF,encryptkey kasaur_key     --tianjin
userid oggpro, password AADAAAAAAAAAAAGAQFQDUDIBNETGUCQGGABGVDYCRHRCIDEHKBDJFAACCIAGMENBBDYFOCLBRCCDZDBD,encryptkey kasaur_key     --shanghai





参考博客:http://blog.itpub.net/25618347/viewspace-722144/



---end---



發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章