Oracle Wallet初探

創新互聯主營安源網站建設的網絡公司,主營網站建設方案,成都app軟件開發公司,安源h5微信小程序開發搭建,安源網站營銷推廣歡迎安源等地區企業咨詢

1.  什么是Wallet

A datastructure used to store and manage security credentials for an individualentity.

從Oracle10gR2開始, 通過使用Oracle Wallet達到用戶不使用密碼登錄數據庫(非操作系統認證方式),這對于用腳本登錄數據庫進行操作來說是非常有用的；尤其對于企業安全要求很高，不希望用戶名和密碼明文存在配置文件中，而且對于密碼的維護是極為方便的，比如我把wallet放在指定路徑下，當修改密碼時，只需統一覆蓋wallet即可，對于有大量應用服務器尤為方便。

2.  Wallet的創建和管理

1.創建wallet

[oracle@daidai ~]$ mkdir -p/tmp/test_wallet

[oracle@daidai ~]$ mkstore-wrl /tmp/test_wallet –create

[oracle@daidai ~]$ cd /tmp/test_wallet/

[oracle@daidai test_wallet]$ ls

cwallet.sso ewallet.p12

配置連接串tnsnames.ora

WALLET_OCP11G =

 (DESCRIPTION =

   (ADDRESS = (PROTOCOL = TCP)(HOST = daidai.com)(PORT = 1522))

   (CONNECT_DATA =

     (SERVER = DEDICATED)

     (SERVICE_NAME = ocp11g)

   )

 )

配置sqlnet.ora

WALLET_LOCATION=(SOURCE=(METHOD=FILE)(METHOD_DATA=(DIRECTORY=/tmp/test_wallet)))

SQLNET.WALLET_OVERRIDE = TRUE

把登入數據庫的用戶認證信息添加到wallet中

[oracle@daidai ~]$ mkstore --help

Oracle Secret Store Tool : Version11.2.0.4.0 - Production

Copyright (c) 2004, 2013, Oracle and/or itsaffiliates. All rights reserved.

No wallet location specified.

mkstore [-wrl wrl] [-create] [-createSSO][-createLSSO] [-createALO] [-delete] [-deleteSSO] [-list] [-createEntry aliassecret] [-viewEntry alias] [-modifyEntry alias secret] [-deleteEntry alias] [-createCredential connect_string username password][-listCredential] [-modifyCredential connect_string username password][-deleteCredential connect_string] [-help] [-nologo]

[oracle@daidai ~]$ mkstore-wrl /tmp/test_wallet -createCredential wallet_ocp11g daidai love8013

Oracle Secret Store Tool : Version11.2.0.4.0 - Production

Copyright (c) 2004, 2013, Oracle and/or itsaffiliates. All rights reserved.

Enter wallet password:l        3

Create credential oracle.security.client.connect_string1

測試連接

至此，就可以使用wallet連接

[oracle@daidai ~]$ sqlplus/@wallet_ocp11g

SQL*Plus: Release 11.2.0.4.0 Production onTue Jun 14 14:47:49 2016

Copyright (c) 1982, 2013, Oracle. All rights reserved.

Connected to:

Oracle Database 11g Enterprise EditionRelease 11.2.0.4.0 - 64bit Production

With the Partitioning, OLAP, Data Miningand Real Application Testing options

SQL>

2.管理wallet

管理wallet同樣適用mkstore命令

查看Credential

[oracle@daidai ~]$ mkstore-wrl /tmp/test_wallet -listCredential

Oracle Secret Store Tool : Version11.2.0.4.0 - Production

Copyright (c) 2004, 2013, Oracle and/or itsaffiliates. All rights reserved.

Enter wallet password:love801  3

List credential (index: connect_stringusername)

1: wallet_ocp11g daidai

修改wallet中用戶密碼

[oracle@daidai ~]$ mkstore-wrl /tmp/test_wallet -modifyCredential wallet_ocp11g daidai love8014

Oracle Secret Store Tool : Version11.2.0.4.0 - Production

Copyright (c) 2004, 2013, Oracle and/or itsaffiliates. All rights reserved.

Enter wallet password:love80

Modify credential

Modify 1

[oracle@daidai ~]$ sqlplus @/wallet_ocp11g

SQL*Plus: Release 11.2.0.4.0 Production onTue Jun 14 14:58:35 2016

Copyright (c) 1982, 2013, Oracle. All rights reserved.

SP2-0310: unable to openfile "/wallet_ocp11g.sql"

Enter user-name: daidai

Enter password:--此處輸入正確密碼則進入，錯誤密碼則不進入

刪除wallet的用戶認證信息

[oracle@daidai ~]$ mkstore -wrl/tmp/test_wallet -listCredential

Oracle Secret Store Tool : Version11.2.0.4.0 - Production

Copyright (c) 2004, 2013, Oracle and/or itsaffiliates. All rights reserved.

Enter wallet password:lov  e8

List credential (index: connect_stringusername)

1: wallet_ocp11g daidai

[oracle@daidai ~]$ mkstore-wrl /tmp/test_wallet -deleteCredential wallet_ocp11g

Oracle Secret Store Tool : Version11.2.0.4.0 - Production

Copyright (c) 2004, 2013, Oracle and/or itsaffiliates. All rights reserved.

Enter wallet password: ove801  3

Delete credential

Delete 1

查看wallet詳細認證信息

[oracle@daidai ~]$ mkstore-wrl /tmp/test_wallet -list

Oracle Secret Store Tool : Version11.2.0.4.0 - Production

Copyright (c) 2004, 2013, Oracle and/or itsaffiliates. All rights reserved.

Enter wallet password:l e8  013

Oracle Secret Store entries:

oracle.security.client.connect_string1

oracle.security.client.password1

oracle.security.client.username1

[oracle@daidai ~]$mkstore-wrl /tmp/test_wallet -viewEntry oracle.security.client.connect_string1

Oracle Secret Store Tool : Version11.2.0.4.0 - Production

Copyright (c) 2004, 2013, Oracle and/or itsaffiliates. All rights reserved.

Enter wallet password:lo  ve8

oracle.security.client.connect_string1 =wallet_ocp11g

更改wallet里用戶認證信息的內容

mkstore -wrl/tmp/test_wallet -modifyEntry oracle.security.client.password1skatepwd1

mkstore -wrl/tmp/test_wallet -modifyEntry oracle.security.client.username1skate1

3.  遷移linux wallet至window 7

1. 按照linux中的樣式修改tnsname.ora[IP & port]和sqlnet.ora[walletpath]，注意測試連通性

2. mkstore -wrl e:/test_wallet –create

3. 拷貝出linux中wallet文件覆蓋windows中的wallet文件

windows遷移至linux，我沒有測試。

另外有需要云服務器可以了解下創新互聯cdcxhl.cn，海內外云服務器15元起步，三天無理由+7*72小時售后在線，公司持有idc許可證，提供“云服務器、裸金屬服務器、高防服務器、香港服務器、美國服務器、虛擬主機、免備案服務器”等云主機租用服務以及企業上云的綜合解決方案，具有“安全穩定、簡單易用、服務可用性高、性價比高”等特點與優勢，專為企業上云打造定制，能夠滿足用戶豐富、多元化的應用場景需求。

網頁題目：OracleWallet初探-創新互聯
文章源于：http://www.js-pz168.com/article22/cdoocc.html

成都網站建設公司_創新互聯，為您提供建站公司、企業網站制作、網站維護、關鍵詞優化、網站內鏈、域名注冊

廣告

聲明：本網站發布的內容（圖片、視頻和文字）以用戶投稿、用戶轉載內容為主，如果涉及侵權請盡快告知，我們將會在第一時間刪除。文章觀點不代表本網站立場，如需處理請聯系客服。電話：028-86922220；郵箱：631063699@qq.com。內容未經允許不得轉載，或轉載時需注明來源： 創新互聯