DBUM Integration With Database Vault Realms

The dbum connector documentation mentions
"...In Oracle Database installations on which Oracle Database Vault is installed, the connector can be used to grant and manage authorization to Oracle Database Vault realms. The connector treats access to Oracle Database Vault realms as an entitlement. You can use the connector to provision database users with access to multiple realms with different levels of access.."
http://docs.oracle.com/cd/E22999_01/doc.111/e28315/intro.htm#CHDICGJF
but after setup database vault and run successfully direct provisioning using dbum connector, I could not grant access to database vault realms. As far as I understood the connector should present database vault realms as entitlements, but i did not find any schedule task or lookup to enable this feature.
Any help is more than appreciated

Hi.
Note 428503.1 is applicable to Database Version 10.2.0.4 with EBS 11i. That is not what you're trying to achieve, you want 10.2.0.4 with EBS 12. (I was able to find note 428503.1 by the way)
There are two notes :
Integrating Oracle E-Business Suite Release 12 with Oracle Database Vault 10.2.0.3 : 744363.1
Integrating Oracle E-Business Suite Release 12 with Oracle Database Vault 10.2.0.5 : 11397981.1
So, I am not sure if you can integrate EBS 12 with 10.2.0.4. I would at least patch the database up to 10.2.0.5 or upgrade to 11.2 as Helios stated.
Either way you are better off contacting Oracle Support directly with your question.
Paul

Similar Messages

Grant role DBA with Database Vault

Hi all,
I need help granting the role DBA to a user with Database Vault option installed. I created a user account and I need that this user be able to do all the things that a regular DBA role can do. I can't find a way to do this in Database Vault... any help will be appreciated.
Thanks!

Sysdba can issue powerful statements such as create user, drop user, alter user, create profile .. and so on... can be done only if it is allowed so by modifying the Can maintain accounts/profiles rule set.
You can also login with dvsys account but that account is locked after installation. So unlock it with
alter user username account unlock; command. And be aware that ANY system privileges are blocked in protected schemas. You can try to grant the following roles in DB Vault := DV_OWNER, DV_REALM_OWNER, DV_REALM_RESOURCE, DV_ADMIN, DV_PUBLIC, DV_ACCTMGR, DV_SECANALYST
Following can help you
SELECT TABLE_NAME, OWNER, PRIVILEGE FROM DBA_TAB_PRIVS WHERE GRANTEE = 'DV_ACCTMGR';
SELECT PRIVILEGE FROM DBA_SYS_PRIVS WHERE GRANTEE = 'DV_ACCTMGR';
Regards
Karan

Schema export via Oracle data pump with Database Vault enabled question

Hi,
I have installed and configured Database Vault on an Oracle 11g-r2-11.2.0.3 to protect a specific schema (SCHEMA_NAME) via a realm. I have followed the following doc:
http://www.oracle.com/technetwork/database/security/twp-databasevault-dba-bestpractices-199882.pdf
to ensure that the sys and the system user has sufficient rights to complete a schedule Oracle data pump export operation.
I.e. I have granted to sys and system the following:
execute dvsys.dbms_macadm.authorize_scheduler_user('sys','SCHEMA_NAME');
execute dvsys.dbms_macadm.authorize_scheduler_user('system','SCHEMA_NAME');
execute dvsys.dbms_macadm.authorize_datapump_user('sys','SCHEMA_NAME');
execute dvsys.dbms_macadm.authorize_datapump_user('system','SCHEMA_NAME');
I have also create a second realm on the same schema (SCHEMA_NAME) to allow sys and system to maintain indexes for real-protected tables, To allow a sys and system to maintain indexes for realm-protected tables. This separate realm was created for all their index types: Index, Index Partition, and Indextype, sys and system have been authorized as OWNER to this realm.
However, when I try and complete an Oracle Data Pump export operation on the schema, I get two errors directly after the following line displayed in the export log:
Processing object type SCHEMA_EXPORT/TABLE/INDEX/DOMAIN_INDEX/INDEX:
ORA-39127: unexpected error from call to export_string :=SYS.DBMS_TRANSFORM_EXIMP.INSTANCE_INFO_EXP('AQ$_MGMT_NOTIFY_QTABLE_S','SYSMAN',1,1,'11.02.00.00.00',newblock)
ORA-01031: insufficient privileges
ORA-06512: at "SYS.DBMS_TRANSFORM_EXIMP", line 197
ORA-06512: at line 1
ORA-06512: at "SYS.DBMS_METADATA", line 9081
ORA-39127: unexpected error from call to export_string :=SYS.DBMS_TRANSFORM_EXIMP.INSTANCE_INFO_EXP('AQ$_MGMT_LOADER_QTABLE_S','SYSMAN',1,1,'11.02.00.00.00',newblock)
ORA-01031: insufficient privileges
ORA-06512: at "SYS.DBMS_TRANSFORM_EXIMP", line 197
ORA-06512: at line 1
ORA-06512: at "SYS.DBMS_METADATA", line 9081
The export is completed but with this errors.
Any help, suggestions, pointers, etc actually anything will be very welcome at this stage.
Thank you

Hi Srini,
Thank you very much for your help. Unfortunately after having followed the instructions of the DOC I am still getting the same errors ?
none the less thank you for your input.
I was also wondering if someone could tell me how to move this thread to the Database Security area of the forum, as I feel I may have posted the thread in the wrong place as it appears to be a Database Vault issue and not an imp/exp problem. ?
Edited by: zooid on May 20, 2012 10:33 PM
Edited by: zooid on May 20, 2012 10:36 PM

How to recreate enterprise manager with database vault

I'm testing the Oracle database Vault option at database version 11.1.0.7 but there are some thing that does not work correct in the test. One of them is that I do not be able to recreate the enterprise manager repository. After probe several ways with database option enabled I decided to disable it. With the database vault option disabled I recreated the emanager ok but after enabled the database vault option again the database vault administrator does not browse for me:
The firefox notice me an error with resource /dva.
I hope you can help me.

when you have vault on do you get errors in the realm audit reports ?
or are you trying to create an oem repository in a vault enabled database ?

Problem with database vault

Hi,
i installed a database 11gR1 (11.1.0.7) with the database vault option.
As in the documentation i tried to call the database vault administrator with the url https://<server_name>:<em_port>/dva. I get a "404 not found" message. The entreprise manager runs without problem.
I search at the directory $ORACLE_HOME/oc4j/j2ee/oc4j_applications/applications for the dva directory, but there is no one. ( The em directory exists )
If I execute the statement select * from v$option where parameter like '%Vault'; the value is TRUE, what means the database vault is installed and enabled.
Has somebody an idea why I can't call the database vault administrator ?
Thanks in advance
Josep

Hi,
what do you mean with create the vault in the database ? I simply installed the database software with the database vault option, afterwards I create the database with the dbca. In the dbca I give the information of the two vault users.
So far I know, if the entry in the v$option for database vault is true, database vault is enabled. Isn't it ?
The sql statement gives as result the file $ORACLE_BASE/admin/<SID>/wallet with the status closed. The wallet is necessary for encryption, but my target is not to encrypt the database, it's to control de access to the information.

Using expdp in database with database vault gives error-39165

Hi,
Please help me with the below mentioned scenario.
I have oracle database 10.2.0.2 and DATABASE VAULT installed on top
of it.
I am trying to export one table DM05 beleonging to DIP schema and
dump it as expdip.dmp. I issue the following command for this.
But it stops with the error mentioned below.
expdp dip/oracle directory expdp_dir tables="DIP".\"DM05\" dumpfile=expdip.dmp
ORA-39165: Schema DIP was not found.
ORA-39166: Object DM05 was not found.
ORA-31655: no data or metadata objects selected for job
Job "DIP"."SYS_EXPORT_TABLE_01" completed with 3 error(s) at 07:02:28
Thanks and Regards,
Dipesh

hi
Oracle Error : ORA-39166: Object string was not found.
Cause: If exporting or importing over the network, either the user specified an object name that was not found in the source database or else the user lacked the proper EXP_FULL_DATABASE or IMP_FULL_DATABASE role that would allow them to access the object another in another schema. For importing from files, the user specified an object name not found in the dump file set.
Action: Retry the operation using the correct object name.
Hope this helps
CHeers

How to Smart Card integrated with database ..im beginner

Dear,
im beginner for Technologies Smart Card.. I have ACOS2 and reader ACR30D ..I hope u can helping me..please my question?
1. How to java or Visul Basic integrated and presenting data on file in card (like name, address, phone number, ..etc)?
2. Please give me sample project in Visual Basic..?
its just for finnal test me.
Thanks for all
Best Reagard,
[email protected]

hello,
Check the section titled Reference Implementation on this page out.
http://www.opencard.org/index-downloads.shtml
Also if you really need codes in VB, this guys have stuff like that
http://www.motechno.com/x509-sdk.0.html
Tha development kit MAY be all you need
All the best,

Exports with Oracle Database Vault

Hi!
I've running a Database in version 10.2.0.4 and it has installed Oracle Database Vault, wich is running quite well...
I'm trying to export a schema that is protected with a REALM and only the owner of that schema has permision to access the data. So, users like sys o system can´t access to the data of the schema. It's the aim of Database Vault and it do it well.
The problem is that I'm performing a export of that schema and it run successfully! I have the .dmp file which I can import in other Databases (with Database Vault no installed) and it runs perfectly!
So... if Database Vault avoid that user sys can access the data, why it permit to perfom EXPORTS??
Thank,
tom

Bump. Thanks.

Database Vault support with OGG

IHAC who wants to use OGG 11.1.1.1 on a RAC database with "Database Vault" installed.
I found Bug 12356827: NEW DV ROLE IS REQUIRED FOR GOLDEN GATE OCI API TO RUN PROPERLY.
It's unclear, if this just means we need the new DV Role DV_GOLDENGATE_REDO_ACCESS in order to be "DV compliant"
or if GG doesn't work at all with DV enabled Databases.
Please clarifiy, if and with which OGG + Oracle Release we fully support Database Vault.
Thanks,
Robert

I know Database Vault is certified for use with E-Business Suite, and EBS is certified for use with GoldenGate (with the noted limitations of a couple of data types and some tables here and there, as documented in a support note). Given that chain, I would say yes. There isn't much, if any, public information, so to be sure, you should ask Oracle support. There is one hit on Google about dv_goldengate_redo_access, and it comes from your question. I would take that as a sign that you need to go to the source (Oracle) to confirm.

SQL Text in DATABASE VAULT Events

I'm using Audit Vault 10.2.3.2 to collect audit data from a source database 11gR2 (11.2.0.1) protected with Database Vault. The DBAUD collector is collecting all the Database Vault Events, but in all cases the SQL Text column is empty.
The collector seems to be working fine, I've added the collector user to the Oracle Data Dictionary Realm and I've also granted dv_secanalyst to the user.
Are there any aditional steps that have to be done in order to get the SQL Text?
Thanks.

In case anybody is interested, this error has been filed as bug 11818022 with Oracle Support.
Thanks.

Database Vault custom reports

Hi All,
Question about Database Vault: can I build my own custom reports with Database Vault?
Thanks in advance.

Hi,
Database Vault is Security Solution. See http://www.scribd.com/doc/7793997/Oracle-White-Paper-Database-Vault-11g
What report are you referring to?
Regards,
Edited by: gjilevski1 on Sep 9, 2010 11:01 AM

Apex with Oracle Database Vault

Can someone point me to some document/whitepaper that describes how to setup Apex to work with Oracle Database Vault?
My understanding is that data in tables secured by Vault's realms is not accessible even to DBAs (select any table) which is great. But how that does impact Apex applications? The data would have to to be accessible to the app's parsing schema. So unauthorized users can still gain access to the data via the Apex app instead of direct database access. Does Apex provide for tighter integration with Vault to prevent this sort of access?
Thanks

Bump. Thanks.

CCX7.0 Database Integration with Oracle 10g through ODBC

Good Day…
We are up to integrate CCX7.0 with Oracle 10g, CCX7.0 documents show the way to integrate the CCX7.0 with SQL server, but mention nothing about Oracle 10g, anyway...
I tried to check the ODBC options, there were many options, I tried to select any Oracle related choice, just to find out Oracle should supply the driver for it. In the forums, people say it’s an Oracle Client, but what will this client do? Am I going to connect though it to the oracle database server or is it going to query the database to my CCX server? What am I going to use in this case, user DSN or system DSN?
If there any tips or recommendations I will be grateful, as it is my first database integration.
Thanks
AT

Hi Aaron
Thanks Aaron for the information, and yes you are right, I am not a database person.
I have here some questions, sorry if some of them sounds silly
1)       Is there a certain Oracle Client version? or and Oracle Client will work for me?
2)       Do you recommend system DSN on user DSN?
3)       “…. available to any device on the system” as you said in your reply, what do you mean by "device" and "system"? Sorry, but this will help to clear the picture to me
4)       What will this Oracle Client exactly do? Is it going to build an SQL table on my CCX server that query the information from the Oracle Server?
5)       My customer has already implemented database integration with IPCC3.5, how can I check the current configuration of the Oracle Client, and what things else should I check before proceeding with the integration?
The reason I want to understand this because there is a lot of database integration is requested from us, the CCX scripts can be used to query data from SQL tables, I read a lot about this –waiting for the implementation phase- the lucky me, the first integration I faces is with Oracle.
Anyway, who said learning is easy.
Thanks Aaron for your time, waiting your answers.
AT

Database Vault 11g with RAC

According to Oracle whitepaper, it mentioned that "The Oracle Home where DV is to be installed does not contain any ASM instance."
But, ASM and RAC DB are located at the same home (Default installation) at my site.
I jsut puzzle how I can fulfill this requirement. Could any expert give me some advices ?

PiqousKerberos wrote:
Johna Pakas wrote:
I have built a test environment using single instance only, same os version and db version, without clusterware and rac.
I perform the same by installing asm and db in the same home and create db, and then install DBV .
Register the existing db instance for DBConsole at all.
Eventually it turns out that no problem.
Any supporting reason for that I must separate the Oracle Home ?On Oracle [ID 793739.1] -> 12 Things to Check for a Successful Database Vault Installation in 10gR2
#1. Oracle Label Security is correctly installed and enabled.
#2. Database console is functional.
#3. The database to be installed should figure in the oratab file
#4. the sqlnet files (tnsnames.ora and listener.ora) are placed in the default location:
*#5. The Oracle Home where DV is to be installed does not contain any ASM instance.*
#6. In case of RAC srvctl must work fine on all nodes.
#7. The database vault must be installed:
+ For a single instance database it must be installed in a home that does not have the RAC option enabled.
+ For a RAC database it must be installed in a home that has the RAC option enabled.
You cannot run a single instance database vault from a RAC enabled home.
#8. In the database there must be a temporary tablespace named TEMP.
#9. The service name used in jdbc_str must appear as an entry in tnsnames. ora and must match in name and case the ORACLE_SID.
#10. The installer expects the listener name to be LISTENER and this is the only listener it starts. If using a different listener name, it must be started before running runInstaller or dvca.
#11. Respect the password restrictions. Use the alphanumeric, characters, numbers and any of the $,#,_ characters. Password must be at least 8 characters long and contain at least one character from each of the groups mentioned above.
#12. In addition to all the above, the 10.2.0.3 installation expects the ORACLE_SID to be lowercase. If this is too restrictive, it would be recommended to upgrade to the 10.2.0.4 database and database vault releases.
* Certainly , you can install DBV with ASM. However, Oracle support doesn't guarantee it's stability and patch availability.That's fine. Let me discuss with stakeholdersr . My next task is to split RAC and ASM
Edited by: Johna Pakas on 2010年2月25日上午5:24

Weblogic SOA 12.1.3: Integration with Oracle 9i Database

All,
We have a client who currently adopt BPEL 10g (10.1.3.4). Currently we are looking to updrade the client to SOA Suite 12.1.3. As part of their existing architecture, there are a number of Oracle 9i databases that the BPEL components integrate with via DB Adapters. The clients current road map is to upgrade / migrate to the 12c SOA platform but not upgrade any of their legacy applications running on top of a Oracle 9i Database.
Please note I have observed and reviewed the Certification Matrix for supported platforms at http://www.oracle.com/technetwork/middleware/fusion-middleware/documentation/fmw-1213certmatrix-2226694.xls
As part of initial investigations, we have identified that the JDBC drivers that are integrated with 12.1.3. Weblogic are not compatable with Oracle 9i. You are able to create and test data source conections with success. However at runtime when querying the database a number of issues manifest. These incude:
VARCHAR2 columns are not returned via a select. Date columns and number columns are returned
Errors when executing adapters which implement the Pure SQL feature.The error returned involves the "ora-01460: unimplemented or unreasonable conversion requested" error.
Similair design time issues are also envountered in JDeveloper (as per JDeveloper 12.1.3 (SOA / BPM) Integration with Oracle 9i Database)
Looking at the default configuration in 12c, it is to utilise OJDBC7 drivers supplied which support JDBC 4.1specification.
Has anyone had experience of using an Oracle 9i Database with Weblogic 12.1.3.? or have any viable options / views for how this could be achieved?
Regards Dave

I wrongly mentioned to change to change the font format. In that document they mention to add the lines.
Thanks
Guna

DBUM Integration With Database Vault Realms

Similar Messages

Maybe you are looking for