Home IT Linux Windows Database Network Programming Server Mobile  
           
  Home \ Database \ Oracle GoldenGate encryption     - Java NIO in the world (Programming)

- RedHat 6 xrdp use remote login interface (Linux)

- Talk about the Linux folder permissions issue again (Linux)

- VMware virtual machine Ubuntu install arm-linux-gcc cross-compiler environment (Linux)

- Getting the Linux shell variable test (Programming)

- Firewall chapter of Linux server security configuration (Linux)

- Linux tmux tcpdump summary (Linux)

- FileZilla 3.10.1.1 install on Ubuntu 14.10 (Linux)

- Change CentOS 7 NIC name eno16777736 to eth0 (Linux)

- Linux, see picture not resolve the problem (Linux)

- Ubuntu install Eclipse can not find JAVA_HOME problem (Linux)

- Use Vagrant up a local development environment tutorials (Server)

- CentOS 6.5 dual card configuration, one of the external network, a local area network connection (Linux)

- Steps to build MPICH2 development environment on CentOS 6.4 (Linux)

- Teach you how to protect the security of Linux desktop (Linux)

- Unix system security configuration (Linux)

- Ubuntu install Tonido private cloud services (Server)

- Unetbootin make use U disk loading Linux system (Linux)

- Port Telnet command to detect the remote host is turned on (Linux)

- AngularJS achieve picture upload feature (Programming)

 
         
  Oracle GoldenGate encryption
     
  Add Date : 2017-08-31      
         
       
         
  Read navigation

Before you start writing
Encryption usage scenarios
Encryption Algorithm 2 GoldenGate provided
3 generates a key
4 Local encryption configuration
  4.1 Configure the primary extraction process
  4.2 Configuration Data Pump process
5 sink decrypt the configuration
  5.1 Replicat process configuration decryption operation
6 unencrypted and encrypted files trail Comparative Analysis
  6.1 unencrypted trail file analysis
  6.2 Analysis of file encryption trail
7 OBEY file
8 summary

Encryption usage scenarios

GoldenGate parameter file
Extract the USERID each process and Replicat process, TRANLOGOPTIONS, DDLOPTIONS, DBOPTIONS parameter must specify a password, which is more sensitive and more important information, because the user has more GoldenGate database privileges, password protection is so effective GoldenGate the first one on security.
trail file
Primary extraction process (Primary Extract) extract information from a database and change the encrypted file is written to the trail, and then decrypt the complex operated by Data Pump (Secondly Extract) process, a final trail encrypted file sent to the destination terminal through the network, the target side GoldenGate background collector process to save the trail file to the target end trail file, replicat process reads the contents of the file and decrypt them, reconstruction, applied to the target database.
GGSCI command line
Password provided when logging into the database DBLOGIN.
Encryption Algorithm 2 GoldenGate provided

AES128
Using AES 128 encryption, with 128-bit key size
AES192
Using AES 192 encryption, 192-bit key size
AES256
Using AES 256 encryption with 256-bit key size
BLOWFISH
64-bit block size and the Blowfish encryption 32-128 variable-length key, it is recommended only GoldenGate earlier versions used only in ENCRYPTKEY can use this encryption method when DEFAULT.
3 generates a key

It must first generate a key and stored in ENCKEYS LookUp file before you can use the following features

Use ENCRYPT PASSWORD PWD ENCRYPTKEY generate encrypted passwords
Designated trail file encryption and key in the configuration file name parameter in ENCRYPTTRAIL KEYNAME
Specifies the encryption method and key parameters in the configuration file name or RMTHOSTOPTIONS ENCRYPT in RMHOST
Key generation
Switch to GoldenGate home directory, use KEYGEN tool to generate the key; syntax:

./keygen < key length> < n>
key length indicates the length of the encryption key;
n represents the number of key generation;

[Oracle @ sywu ogg_src] $ ./keygen 128 2
0xDEE44B0133536B0DA1B858620E4A240D

0x71DF8D01C352097FC76BBA31232DA95A
Each generated key is not the same, after generating key saved to file GoldenGate home ENCKEYS root directory defined for each key a name (keyName) replication. ENCKEYS file is a lookup file.
Save the file key to ENCKEYS

[Oracle @ sywu ogg_src] $ vim ENCKEYS
#GoldenGate Encryption key
#keyName key
securekey1 0xDEE44B0133536B0DA1B858620E4A240D
securekey2 0x71DF8D01C352097FC76BBA31232DA95A
At the command line by GGSCI key to encrypt the password

GGSCI (sywu) 8> encrypt password ogg_owner aes128 encryptkey securekey1
Encrypted password: AADAAAAAAAAAAAJATJEEYELAGIQFZDWHQAMDMCCHGIVGFIPHOCABMAYCHGSCPHGILCPCLCXCCHUEFGOC
Algorithm used: AES128

GGSCI (sywu) 9> encrypt password ogg_owner aes128 encryptkey securekey1
Encrypted password: AADAAAAAAAAAAAJANJBHVDBAGCCBOIUCTJHJVIOCVGBFSGNJFFAAGIOHBJNBWAPANGWILCPFGIXBOIXB
Algorithm used: AES128
After the password encryption can try dblogin login database, password verification

GGSCI (sywu as ogg_owner @ sydb) 11> dblogin userid ogg_owner, password AADAAAAAAAAAAAJANJBHVDBAGCCBOIUCTJHJVIOCVGBFSGNJFFAAGIOHBJNBWAPANGWILCPFGIXBOIXB aes128 encryptkey securekey1
Successfully logged into database.
Note: Because of the length of the key is specified when creating the key, so use the specified type of encryption key length must be consistent.

4 Local encryption configuration

Configure the primary source extraction process encryption and Data Pump encryption process.

4.1 Configure the primary extraction process

GGSCI (sywu as ogg_owner @ sydb) 31> EDIT PaRAM ESYDB001

extract ESYDB001
SETENV (ORACLE_SID = "sydb")
SETENV (NLS_LANG = AMERICAN_AMERICA.AL32UTF8)
userid ogg_owner, password AADAAAAAAAAAAAJANJBHVDBAGCCBOIUCTJHJVIOCVGBFSGNJFFAAGIOHBJNBWAPANGWILCPFGIXBOIXB &
aes128, ENCRYPTKEY securekey1
ENCRYPTTRAIL aes128, KEYNAME securekey1
EXTTRAIL / u01 / app / product / ogg_src / dirdat / es
table ogg_owner.togg;
Password in password userid original plaintext by encrypted replaced after a specified type of encryption and key name (ENCRYPTKEY);
ENCRYPTTRAIL specify the type of encryption and key name (KEYNAME) trail file;

4.2 Configuration Data Pump process

GGSCI (sywu) 10> edit param PSYDB001

extract psydb001
SETENV (ORACLE_SID = "sydb")
SETENV (NLS_LANG = AMERICAN_AMERICA.AL32UTF8)
userid ogg_owner, password AADAAAAAAAAAAAJANJBHVDBAGCCBOIUCTJHJVIOCVGBFSGNJFFAAGIOHBJNBWAPANGWILCPFGIXBOIXB aes128 encryptkey securekey1
DECRYPTTRAIL aes128 KEYNAME securekey1
RMTHOST sywu, mgrport 7909
ENCRYPTTRAIL aes128 KEYNAME securekey1
RMTTRAIL / u01 / app / product / ogg_trg / dirdat / ps
TABLE ogg_owner.togg;
Because Data Pump to read primary extraction process saved trail file data and provides the data to achieve operational functions such as filtering, arithmetic and other complex work, so after reading the original must first decrypt the data again, and finally encrypted again sent to the destination terminal;
DECRYPTTRAIL encryption type definition files to be decrypted and encrypted key (KEYNAME);
After ENCRYPTTRAIL define the final processing of the data encryption type and encryption key (KEYNAME);
NOTE: The same type of decryption and keyname must master process configuration.
Start the process

GGSCI (sywu as ogg_owner @ sydb) 42> start *

Sending START request to MANAGER ...
EXTRACT ESYDB001 starting
EXTRACT PSYDB001 is already running.

GGSCI (sywu as ogg_owner @ sydb) 43> info all

Program Status Group Lag at Chkpt Time Since Chkpt

MANAGER RUNNING
EXTRACT RUNNING ESYDB001 00:01:31 00:00:08
EXTRACT RUNNING PSYDB001 00:00:00 116: 02: 26
5 sink decrypt the configuration

Sink background Collector process sends a request received after the end of the source data is written to the target end trail file, and then read by the replicat process, decryption, reconstruction or ddl dml statements to the database, so if the source is configured with encryption the target client must be configured to decrypt, and decryption and key type must be the same source, the steps:

1 sends ENCKEYS source file created to target the root end GoldenGate
2 Replicat process configuration decryption operation
3 Restart replicat process
Send source file to the target end ENCKEYS scp or copy and paste to the target end, the operation thereof is omitted here.

5.1 Replicat process configuration decryption operation

[Oracle @ sywu ~] $ tggsci

Oracle GoldenGate Command Interpreter for Oracle
Version 12.1.2.1.0 OGGCORE_12.1.2.1.0_PLATFORMS_140727.2135.1_FBO
Linux, x64, 64bit (optimized), Oracle 11g on Aug 7 2014 09:14:25
Operating system character set identified as UTF-8.

Copyright (C) 1995, 2014, Oracle and / or its affiliates. All rights reserved.

GGSCI (sywu) 1> edit param RSYDB001

REPLICAT rsydb001
SETENV (ORACLE_SID = "sydb")
SETENV (NLS_LANG = AMERICAN_AMERICA.AL32UTF8)
USERID ogg_trg, password AADAAAAAAAAAAAHABDQFVJMADCAFECACYEPIQEJCFGDGMDHBRJXCUBOBQJEGLBPEBDMCOAACDILGAJKA &
aes128, ENCRYPTKEY securekey1
DISCARDFILE /u01/app/product/ogg_trg/discrd/reptr.desc,append,megabytes 512
DECRYPTTRAIL AES128, KEYNAME securekey1
ALLOWNOOPUPDATES
ASSUMETARGETDEFS
MAP OGG_OWNER.TOGG, target OGG_TRG.TOGG;
DECRYPTTRAIL definition file to decrypt the encryption type and encryption key (KEYNAME), and where the source must be the same;
These are configured, restart replicat process.

6 unencrypted and encrypted files trail Comparative Analysis

6.1 unencrypted trail file analysis

[Oracle @ sywu ~] $ strings / u01 / app / product / ogg_src / dirdat / es000004
* Uri: sywu :: u01: app: product: ogg_src: ESYDB0016
(/ U01 / app / product / ogg_src / dirdat / es0000047
575 523
575 169
, ............................................
Linux1
sywu2
2.6.32-431.23.3.el6.x86_643
## 1 SMP Thu Jul 31 17:20:51 UTC 20144
x86_642
SYDB2
sydb3
Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
PL / SQL Release 11.2.0.3.0 - Production
CORE 11.2.0.3.0 Production
TNS for Linux: Version 11.2.0.3.0 - Production
NLSRTL Version 11.2.0.3.0 - Production
11.2.0.3.09
08: 003
ESYDB0011
AVersion 12.1.2.1.0 OGGCORE_12.1.2.1.0_PLATFORMS_140727.2135.1_FBO4
ESYDB001Z
OGG_OWNER.TOGG
1003
1900-01-01: 00: 00: 00
1900-01-01: 00: 00: 00T
AAADX2AAGAAAAA2AAA
5755236
        2.138.127Z
OGG_OWNER.TOGG
1004
sywu
user
1900-01-01: 00: 00: 00
1900-01-01: 00: 00: 00T
AAADX2AAGAAAAA2AAB
The trail over the last unencrypted file from the test environment, the specific dml

OGG_OWNER @ sydb> insert into togg (id, name) values (1003, 'tt');

1 row created.

Elapsed: 00: 00: 00.00
OGG_OWNER @ sydb> insert into togg (id, name, type) values (1004, 'sywu', 'user');

1 row created.

Elapsed: 00: 00: 00.01
So unencrypted case can clearly see the new id (1003,1004) and rowid (AAADX2AAGAAAAA2AAA, AAADX2AAGAAAAA2AAB);

6.2 Analysis of file encryption trail

At the source end insert the following data:

SYS @ sydb> conn ogg_owner / ogg_owner
Connected.
OGG_OWNER @ sydb> insert into togg (id, name, type) values (1005, 'sywu', 'user');

1 row created.

Elapsed: 00: 00: 00.09
OGG_OWNER @ sydb> insert into togg (id, name, type) values (1006, 'sywu', 'user');

1 row created.

Elapsed: 00: 00: 00.01
OGG_OWNER @ sydb> commit;

Commit complete.

Elapsed: 00: 00: 00.00
Analysis GoldenGate Data Pump process

GGSCI (sywu) 11> stats PSYDB001

Sending STATS request to EXTRACT PSYDB001 ...

Start of Statistics at 2015-08-31 17:32:14.

Output to / u01 / app / product / ogg_trg / dirdat / ps:

Extracting from OGG_OWNER.TOGG to OGG_OWNER.TOGG:

*** Total statistics since 2015-08-31 17:29:53 ***
        Total inserts 2.00
        Total updates 0.00
        Total deletes 0.00
        Total discards 0.00
        Total operations 2.00

*** Daily statistics since 2015-08-31 17:29:53 ***
        Total inserts 2.00
        Total updates 0.00
        Total deletes 0.00
        Total discards 0.00
        Total operations 2.00

*** Hourly statistics since 2015-08-31 17:29:53 ***
        Total inserts 2.00
        Total updates 0.00
        Total deletes 0.00
        Total discards 0.00
        Total operations 2.00

*** Latest statistics since 2015-08-31 17:29:53 ***
        Total inserts 2.00
        Total updates 0.00
        Total deletes 0.00
        Total discards 0.00
        Total operations 2.00

End of Statistics.

GGSCI (sywu) 12> info PSYDB001, detail

EXTRACT PSYDB001 Last Started 2015-08-31 17:17 Status RUNNING
Checkpoint Lag 00:00:00 (updated 00:00:01 ago)
Process ID 31884
Log Read Checkpoint File / u01 / app / product / ogg_src / dirdat / es000007
                     2015-08-31 17: 29: 49.000000 RBA 1865

  Target Extract Trails:

  Trail Name Seqno RBA Max MB Trail Type

  / U01 / app / product / ogg_trg / dirdat / ps 10 2043 100 RMTTRAIL

  Extract Source Begin End

  / U01 / app / product / ogg_src / dirdat / es000007 2015-08-26 10:04 2015-08-31 17:29
  / U01 / app / product / ogg_src / dirdat / es000004 2015-08-26 10:04 2015-08-26 10:04
  / U01 / app / product / ogg_src / dirdat / es000004 2015-08-26 10:04 2015-08-26 10:04
  / U01 / app / product / ogg_src / dirdat / es000004 2015-08-26 10:04 2015-08-26 10:04
  / U01 / app / product / ogg_src / dirdat / es000004 2015-08-26 10:04 2015-08-26 10:04
  / U01 / app / product / ogg_src / dirdat / es000004 2015-08-26 10:04 2015-08-26 10:04
  / U01 / app / product / ogg_src / dirdat / es000004 * Initialized * 2015-08-26 10:04
  / U01 / app / product / ogg_src / dirdat / es000000 * Initialized * First Record
  / U01 / app / product / ogg_src / dirdat / es000000 * Initialized * First Record
  / U01 / app / product / ogg_src / dirdat / es000000 * Initialized * First Record
  / U01 / app / product / ogg_src / dirdat / es000000 * Initialized * First Record

Current directory / u01 / app / product / ogg_src

Report file /u01/app/product/ogg_src/dirrpt/PSYDB001.rpt
Parameter file /u01/app/product/ogg_src/dirprm/psydb001.prm
Checkpoint file /u01/app/product/ogg_src/dirchk/PSYDB001.cpe
Process file /u01/app/product/ogg_src/dirpcs/PSYDB001.pce
Error log /u01/app/product/ogg_src/ggserr.log
Source Data Pump process reads from the primary extraction process to save the trail file to insert two information, it reads trail file is: / u01 / app / product / ogg_src / dirdat / es000007; attention to their works, the main extraction process to extract data is encrypted and saved to trail file, data Pump process reads the trail then decrypt the file data manipulation, and finally sent;

[Oracle @ sywu ~] $ strings / u01 / app / product / ogg_src / dirdat / es000007
* Uri: sywu :: u01: app: product: ogg_src: ESYDB0016
(/ U01 / app / product / ogg_src / dirdat / es0000077
597 066
, ............................................
Linux1
sywu2
2.6.32-431.23.3.el6.x86_643
## 1 SMP Thu Jul 31 17:20:51 UTC 20144
x86_642
SYDB2
sydb3
Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
PL / SQL Release 11.2.0.3.0 - Production
CORE 11.2.0.3.0 Production
TNS for Linux: Version 11.2.0.3.0 - Production
NLSRTL Version 11.2.0.3.0 - Production
11.2.0.3.09
08: 003
ESYDB0011
AVersion 12.1.2.1.0 OGGCORE_12.1.2.1.0_PLATFORMS_140727.2135.1_FBO4
ESYDB001Z
OGG_OWNER.TOGG
AAADX2AAGAAAAA7AAA
5981816
1.86.100Z
OGG_OWNER.TOGG
uaDL
AAADX2AAGAAAAA7AAB
Data encryption, and see it.
Source replicat process information

[Oracle @ sywu ogg_src] $ tggsci

Oracle GoldenGate Command Interpreter for Oracle
Version 12.1.2.1.0 OGGCORE_12.1.2.1.0_PLATFORMS_140727.2135.1_FBO
Linux, x64, 64bit (optimized), Oracle 11g on Aug 7 2014 09:14:25
Operating system character set identified as UTF-8.

Copyright (C) 1995, 2014, Oracle and / or its affiliates. All rights reserved.

GGSCI (sywu) 1> info all

Program Status Group Lag at Chkpt Time Since Chkpt

MANAGER RUNNING
REPLICAT RUNNING RSYDB001 00:00:00 00:00:03

GGSCI (sywu) 4> stats RSYDB001

Sending STATS request to REPLICAT RSYDB001 ...

Start of Statistics at 2015-08-31 18:40:08.

Replicating from OGG_OWNER.TOGG to OGG_TRG.TOGG:

*** Total statistics since 2015-08-31 17:30:03 ***
        Total inserts 2.00
        Total updates 0.00
        Total deletes 0.00
        Total discards 0.00
        Total operations 2.00

*** Daily statistics since 2015-08-31 17:30:03 ***
        Total inserts 2.00
        Total updates 0.00
        Total deletes 0.00
        Total discards 0.00
        Total operations 2.00

*** Hourly statistics since 2015-08-31 18:00:00 ***

        No database operations have been performed.

*** Latest statistics since 2015-08-31 17:30:03 ***
        Total inserts 2.00
        Total updates 0.00
        Total deletes 0.00
        Total discards 0.00
        Total operations 2.00
End of Statistics.

GGSCI (sywu) 2> info RSYDB001, detail

REPLICAT RSYDB001 Last Started 2015-08-31 17:16 Status RUNNING
Checkpoint Lag 00:00:00 (updated 00:00:05 ago)
Process ID 31615
Log Read Checkpoint File / u01 / app / product / ogg_trg / dirdat / ps000010
                     2015-08-31 17: 29: 49.000465 RBA 2043

Current Log BSN value: (requires database login)

Last Committed Transaction CSN value: (requires database login)

  Extract Source Begin End

  / U01 / app / product / ogg_trg / dirdat / ps000010 2015-08-26 10:04 2015-08-31 17:29
  / U01 / app / product / ogg_trg / dirdat / ps000008 2015-08-26 09:52 2015-08-26 10:04
  / U01 / app / product / ogg_trg / dirdat / ps000008 2015-08-25 13:58 2015-08-26 09:52
  / U01 / app / product / ogg_trg / dirdat / ps000006 2015-08-25 13:49 2015-08-25 13:58
  / U01 / app / product / ogg_trg / dirdat / ps000006 2015-08-25 13:49 2015-08-25 13:49
  / U01 / app / product / ogg_trg / dirdat / ps000006 2015-08-25 13:49 2015-08-25 13:49
  / U01 / app / product / ogg_trg / dirdat / ps000006 * Initialized * 2015-08-25 13:49
  / U01 / app / product / ogg_trg / dirdat / ps000006 * Initialized * First Record
  / U01 / app / product / ogg_trg / dirdat / ps000000 * Initialized * First Record
  / U01 / app / product / ogg_trg / dirdat / ps000000 * Initialized * First Record
  / U01 / app / product / ogg_trg / dirdat / ps000000 * Initialized * First Record
  / U01 / app / product / ogg_trg / dirdat / ps000000 * Initialized * First Record

Current directory / u01 / app / product / ogg_trg

Report file /u01/app/product/ogg_trg/dirrpt/RSYDB001.rpt
Parameter file /u01/app/product/ogg_trg/dirprm/rsydb001.prm
Checkpoint file /u01/app/product/ogg_trg/dirchk/RSYDB001.cpr
Checkpoint table OGG_TRG.OGG_CHK
Process file /u01/app/product/ogg_trg/dirpcs/RSYDB001.pcr
Error log /u01/app/product/ogg_trg/ggserr.log
Also insert two target side data, replicate the process / product / ogg_trg / dirdat / ps000010 trail file read process data received from the background collector / u01 / app.

[Oracle @ sywu ~] $ strings / u01 / app / product / ogg_trg / dirdat / ps000010
* Uri: sywu :: u01: app: product: ogg_src: PSYDB0015
* Uri: sywu :: u01: app: product: ogg_src: ESYDB0016
(/ U01 / app / product / ogg_trg / dirdat / ps0000107
598 181
594 135
, ............................................
Linux1
sywu2
2.6.32-431.23.3.el6.x86_643
## 1 SMP Thu Jul 31 17:20:51 UTC 20144
x86_642
SYDB2
sydb3
Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
PL / SQL Release 11.2.0.3.0 - Production
CORE 11.2.0.3.0 Production
TNS for Linux: Version 11.2.0.3.0 - Production
NLSRTL Version 11.2.0.3.0 - Production
11.2.0.3.09
08: 003
ESYDB0011
AVersion 12.1.2.1.0 OGGCORE_12.1.2.1.0_PLATFORMS_140727.2135.1_FBO4
ESYDB001Z
ESYDB001Z
ESYDB001Z
OGG_OWNER.TOGG
AAADX2AAGAAAAA7AAA
5981816
1.86.100Z
OGG_OWNER.TOGG
uaDL
AAADX2AAGAAAAA7AAB
The same information file is encrypted, replicate read and then decrypted, reconstruction, applied to the target database.

7 OBEY file

Each of Extract GodlenGate, Replicat processes need to configure the database connection, the destination process and increases each division is different or data exchange is different if each configured such that when the database user password is changed, it would mean that you want to go to war changes, there is no way to object-oriented design can be as common as the partially extracted out of it? With sure, GoldenGate provides a parameter called OBEY, allowing the public to save frequently used partially extracted to a separate file sharing and reuse, process configuration such as the following:

GGSCI (sywu) 2> view param PSYDB001

extract psydb001
SETENV (ORACLE_SID = "sydb")
SETENV (NLS_LANG = AMERICAN_AMERICA.AL32UTF8)
userid ogg_owner, password AADAAAAAAAAAAAJANJBHVDBAGCCBOIUCTJHJVIOCVGBFSGNJFFAAGIOHBJNBWAPANGWILCPFGIXBOIXB aes128 encrypt
key securekey1
DECRYPTTRAIL aes128 KEYNAME securekey1
RMTHOST sywu, mgrport 7909
ENCRYPTTRAIL aes128 KEYNAME securekey1
RMTTRAIL / u01 / app / product / ogg_trg / dirdat / ps
TABLE ogg_owner.togg;
Database connection, DECRYPTTRAIL, RMTHOST these basic parameters are common and rarely change, so it can be saved to a separate file;

[Oracle @ sywu dirdef] $ vim /u01/app/product/ogg_src/dirdef/dbConnect.obey

userid ogg_owner, password AADAAAAAAAAAAAJANJBHVDBAGCCBOIUCTJHJVIOCVGBFSGNJFFAAGIOHBJNBWAPANGWILCPFGIXBOIXB aes128 encrypt
key securekey1
DECRYPTTRAIL aes128 KEYNAME securekey1
RMTHOST sywu, mgrport 7909
And then in the process parameter configuration file reference the file by OBEY;

extract psydb001
SETENV (ORACLE_SID = "sydb")
SETENV (NLS_LANG = AMERICAN_AMERICA.AL32UTF8)
OBEY /u01/app/product/ogg_src/dirdef/dbConnect.obey
ENCRYPTTRAIL aes128 KEYNAME securekey1
RMTTRAIL / u01 / app / product / ogg_trg / dirdat / ps
TABLE ogg_owner.togg;
After this information relates to the database connection only change the files, GoldenGate supports 16 subfolders recursively, which means the accident can be more refined configuration management.

8 summary

GoldenGate provides AES128, AES192, AES256 and BLOWFISH encryption type, BLOWFISH available when default in keyname, generally used in earlier versions, AES type encryption more secure. Primary extraction process of encryption is optional and can be performed only in Data Pump data encryption process. Encryption process to take into account the length and encryption key name, the tool must be provided with GoldenGate keygen or other tool to generate keys in ENCKEYS lookUp file, and then GGSCI command line based on the type of password in secret and ENCKEYS generates an encrypted password key name, and finally the use of encrypted password in the configuration file or GGSCI command. And the target side must have the same source file and ENCKEYS lookUp when configuring decryption, type and name of the cryptographic key to be consistent.
     
         
       
         
  More:      
 
- Linux GCC 5.1.0 compiler installation (Linux)
- Linux operating system, the internal and external security overview (Linux)
- Java implementation file encryption and decryption (Programming)
- CentOS 6.6 install JDK7 (Linux)
- IO reference Docker container (Server)
- Use XtraBackup be physical standby database MySQL (Database)
- CentOS system dual network card IP information configuration (Linux)
- How Linux system password security guarantee (Linux)
- Manual cleaning Oracle audit records (Database)
- RHEL7 Apache MPM configuration (Server)
- RabbitMQ user roles and access control (Linux)
- Teach you self-built Linux firewall free (Linux)
- pkg-config to use (Linux)
- Installation under Linux to deploy Java (Linux)
- Linux md5sum verify file integrity (Linux)
- Understanding Linux firewall Iptables (Linux)
- Android custom slideshow menu slidmenu (Programming)
- RVM installation instructions (Linux)
- Talk about the Linux ABI compatibility Application (Linux)
- Linux file permissions bit forced bits and adventure Comments (Linux)
     
           
     
  CopyRight 2002-2016 newfreesoft.com, All Rights Reserved.