Advance Replication and Oracle Label Security

Has anyone been able to configure both Advance Replication and Oracle Label Security to work together?

This is currently not supported in Streams. I have an enhancement request in with Oracle for this functionality. This won't be seen in 11g R2 either.
Has anyone done Label Security with Advance Replication?

Similar Messages

How to install "Oracle Label Security" on "Oracle Developers Day" VM?

Hello,
I downloaded and started the "Oracle Developers Day" pre-built virtual machine using VirtualBox.
I need to install Oracle Label Security in order to make some tests with it. So:
1) Do we have the installation folder of Oracle Enterprise Edition somewhere on the VM?
2) If not, how can I install OLS? Do I have to use shared folder to mount the installation media? How can I mount the installation folder, which I downloaded and stored on the host machine? Could you, please, provide step-by-step example?
Thank you in advance.
Beroetz

Options is to connect to Oracle Policy Manager or use Oracle Internet Directory (OID)to administer Oracle Label Security.
Find more ways in the Documentation here:
http://download-uk.oracle.com/docs/cd/B19306_01/network.102/b14267/toc.htm

How to install Oracle Label Security in Oracle Database 10g EE

Hello All
I just want to know how to install Oracle Label Security in Oracle 10g Database EE.
I read in Oracle Enterprise Manager Grid Control Installation and Basic Configuration that Label Security must be installed before installing Enterprise Manager Grid Control.
I have Oracle Database 10g Release 1 (10.1.0.1) on my Windows XP System, and I patch it to 10.1.0.3.
M.
Sorry about my English.

Options is to connect to Oracle Policy Manager or use Oracle Internet Directory (OID)to administer Oracle Label Security.
Find more ways in the Documentation here:
http://download-uk.oracle.com/docs/cd/B19306_01/network.102/b14267/toc.htm

Enabling Oracle Label Security on 9.2.0.7 database

Hi there,
I have installed the option Oracle Label Security and patched it to 9.2.0.7. I have then run the script $ORAHOME\rdbms\admin\catols.sql . Which re-starts the database.
But when I run the below example I get the below error.
SQL> CONNECT lbacsys/lbacsys
Connected.
SQL> EXECUTE SA_SYSDBA.CREATE_POLICY( -
'FACILITY','FACLAB','READ_CONTROL,CHECK_CONTROL,LABEL_DEFAULT,HIDE');
BEGIN SA_SYSDBA.CREATE_POLICY( 'FACILITY','FACLAB','READ_CONTROL,CHECK_CONTROL,LABEL_DEFAULT,HIDE'); END;
ERROR at line 1:
ORA-00439: feature not enabled: Oracle Label Security
ORA-06512: at "LBACSYS.LBAC_SYSDBA", line 107
ORA-06512: at "LBACSYS.SA_SYSDBA", line 43
ORA-06512: at line 1
I have also noticed that in the v$option view shows the
PARAMETER VALUE
Oracle Label Security FALSE
I have compared the number of objects to metalink article 171155.1 How to Install / Deinstall Oracle Label Security and all the objects seem to be in the schema.
Also I check the version and saw below.
SQL> conn dba/
Connected.
SQL> COL comp_name FORMAT A32
SQL> COL version FORMAT A16
SQL> SELECT
2 comp_id
3 ,comp_name
4 ,version
5 FROM dba_registry
6 where comp_id='OLS';
COMP_ID COMP_NAME VERSION
OLS Oracle Label Security 9.2.0.7.0
1 rows selected.
SQL>
Anyone know how I can enable Oracle Label Security is that it works?
TIA
Ed

I still have some old 9.2.0.8 databases running on both HP-UX and AIX and have clients on 10.2g which doesn't manifest any problem .

Trying to use Oracle Label Security with a XMLType

Hi everybody.
I'm trying to apply some of the Oracle Label Security functionalities to a table created from the annotations of a XML Schema
(Below I show part of this XML Schema:
<?xml version="1.0" encoding="UTF-8"?>
<xs:schema xmlns:xdb="http://xmlns.oracle.com/xdb"
xmlns:xs="http://www.w3.org/2001/XMLSchema"
elementFormDefault="qualified"
attributeFormDefault="unqualified">
<xs:element name="FILE_INFO" xdb:SQLType="FILE_INFO" xdb:defaultTable="TABLE_FILE_INFO">
<xs:complexType>
<xs:choice>
<xs:element name="FILE_INFO_DICOM"
type="FILE_INFO_DICOM_TYPE" />
<xs:element name="FILE_INFO_ANALYZE"
type="FILE_INFO_ANALYZE_TYPE" />
</xs:choice>
</xs:complexType>
</xs:element>
<xs:complexType name="FILE_INFO_DICOM_TYPE" xdb:SQLType="FILE_INFO_DICOM_TYPE">
<xs:sequence>
<xs:element name="ELEMENT_INFO_DICOM"
type="ELEMENT_INFO_DICOM_TYPE"
minOccurs="0"
maxOccurs="unbounded"
xdb:defaultTable="TABLE_ELEMENT_INFO_DICOM"
xdb:SQLInline ="false"/>
</xs:sequence>
</xs:complexType>
<xs:complexType name="ELEMENT_INFO_DICOM_TYPE" xdb:SQLType="ELEMENT_INFO_DICOM_TYPE">
<xs:all>
<xs:element name="Description" type="xs:string" minOccurs="0" maxOccurs="1" />
<xs:element name="GroupTag" type="xs:string" minOccurs="0" maxOccurs="1" />
<xs:element name="ElementTag" type="xs:string" minOccurs="0" maxOccurs="1" />
<xs:element name="VR" type="xs:string" minOccurs="0" maxOccurs="1"/>
<xs:element name="Value" type="xs:string" minOccurs="0" maxOccurs="1"/>
</xs:all>
</xs:complexType>
................etc
I've created a security policy that I have tested on relational tables (not based on any object type) and works correctly.
BEGIN
SA_POLICY_ADMIN.APPLY_TABLE_POLICY(policy_name => 'policy1',
schema_name => 'oe',
table_name => 'TABLE_FILE_INFO',
table_options => 'LABEL_DEFAULT, READ_CONTROL, WRITE_CONTROL',
label_function => NULL,
predicate => NULL);
END;
When I try to apply this policy to the XMLSchema-created table (TABLE_FILE_INFO) I get next error messages:
ORA-22856: cannot add columns to object tables
ORA-00604 error occurred at recursive SQL level 1
ORA-12445: cannot change HIDDEN property of column.
ORA-06512: in "LBACSYS.LBAC_POLICY_ADMIN", line 257
ORA-06512: in line 2
I suppose that the main problem is that the apply_plicy procedure is trying to add an extra column to a table created from a defined type.
So my questions are: It's that true? Is it possible to apply a policy to the content of XML documents, I mean, if I want to restrict that some users see some subset of a XML document based on a specific policy, is there anything similar to Oracle Label security for XML? (as defined with the annotations in the XML Schema, some elements will be mapped to rows of a XMLType-based table when a XML document is inserted into the XMLDB repository (marked to follow the previous XML Schema of course)
Hope someone can help to solve my doubts...
Thanks,
Marcos.

Have you ever answered this question? If not, have you tried to use the "HIDE" property on your table_options?

Using non-alphabetical symbols in Oracle Label Security API

I decide to use Oracle Label Security Release 9.0.1 , but I have some problems in realization . When I try to use function sa_policy_admin.apply_table_policy with
following parameters:
sa_policy_admin.apply_table_policy(
POLICY_NAME => 'policy1',
SCHEMA_NAME => 'domain1\user1',
TABLE_NAME => 'table1'
I receive messages :
ORA-00604: error occurred at recursive SQL level 1
ORA-00911: invalid character
ORA-00911: invalid character
ORA-06512: at "LBACSYS.LBAC_POLICY_ADMIN", line 251
ORA-06512: at line 2
Tell me please , may be there are any limitations on parameter SCHEMA_NAME in function ,
because this function can't understand symbol "\".
Note 1: It is obligatory to use symbol "\" in schema_name ,
because I have to connect to DB as external user (user of Windows 2000 Server).
Note 2: ORA-00911 invalid character
Cause: Special characters are valid only in certain places. If special characters other than $, _, and # are used in a name and the name is not enclosed in double quotation marks ("), this message will be issued. One exception to this rule is for database names; in this case, double quotes are stripped out and ignored.
Action: Remove the invalid character from the statement or encl[i]Long postings are being truncated to ~1 kB at this time.

Yes I have with 10gr3
It can be made to work but perhaps not in the way you want (per user?). Your label security will need to have policies based on something.
I did a proof of concept using Security Group column as the 'label'. Then applied VPD policies based on which network the request came from (1 DB rac node in each network).
In my case I wanted to show ALL content to a secure network but a subset of content to the lower security network. For this use case it is ideal.
It worked flawlessly...not supported though
Apparently OLS is on roadmap or UCM (WCC) so ask Oracle and see if you can find out if it is slated for any particular release yet.
Tim

Advanced Replication between Oracle XE and 64-bit Oracle Enterprise

hi all,
Currently i have advanced replication working between Oracle-XE and our 32-bit based Oracle 10gR2 Enterprise Server. Will advanced replication work if we moved our Enterprise 10gR2 instance from a 32-bit to a 64-bit?
May be some of you might already be doing this, i just want a confirmation before i give the go ahead.
thanks a lot,
GG

Hi;
Please see:
Error: "Could not load file or assembly 'Oracle.DataAccess, Version=%s, Culture=neutral, PublicKeyToken=%s' or one of its dependencies. An attempt was made to load a program with an incorrect format" [ID 1367695.1]
Regard
Helios

Using Content Manager with OLS - Oracle Label Security

There are two entries in this forum with OLS - the last one in 2005.
Has any one successfully deployed UCM with OLS?
Thanks,
Paul

Yes I have with 10gr3
It can be made to work but perhaps not in the way you want (per user?). Your label security will need to have policies based on something.
I did a proof of concept using Security Group column as the 'label'. Then applied VPD policies based on which network the request came from (1 DB rac node in each network).
In my case I wanted to show ALL content to a secure network but a subset of content to the lower security network. For this use case it is ideal.
It worked flawlessly...not supported though
Apparently OLS is on roadmap or UCM (WCC) so ask Oracle and see if you can find out if it is slated for any particular release yet.
Tim

Documentation on Advance Replication in Oracle 10gR2

Hello Everyone,
I am in need of an proper documentation on Advance Replication as i have been assigned a task to perform Replication on DB in Oracle 10gR2 but the content i have is not enough to clear my doubts so can any one provide me the perfect documentation
please i am in a need as i am new to the concept
Thanks & Regards
Pratik Lakhpatwala
Jr Oracle DBA

Thanks a lot Sir,
This Doc will help me a lot...
Thanks & Regards
Pratik Lakhpatwala
Jr Oracle DBA

Advanced Replication using Oracle 8i and Linux

Hi,
My name is Sadhana. I am a software engineer. I have a doubt regarding Oracle and Linux. Well, I am involved in developing a customer care and billing solution with back end as Oracle8i (8.1.5)on Linux RH 6.1. I need your guidance is regarding the reliability of using Oracle on Linux as data file servers for critical applications like customer care and billing systems in telecom. The rating and billing engine will also run on linux servers. Only the client machined will have windows 98/NT. It will be helpful if you can throw some light on the replication features of Oracle particularly in Linux. For e.g. is it possible to keep a database server - Oracle on linux and a replication server on linux. Will it behave similarly like other replication servers (windows NT or Solaris etc.)? Is it reliable?
Looking forward for your reply
TIA,
With Best Regards,
Sadhana S Kamath

Christian Seebode (guest) wrote:
: Hi everybody,
: will Oracle 8i be available for Linux ?
: When ?
: Or will there be a difference in availability for
: the different options of 8i ?
: Thanks for any information
: Christian
1.) Yes it will.
2.) Nobody knows. (Oracle points to May/99...)
3.) Yes, absolutely, since Enterprise Editions are poorly
supported under Oracle/Linux
Bye, Robert
null

It is possible to have a dynamic Oracle Label Security procedure/script to configure data label (compartments and data label) for multiple rows at same time?

A single script which can be run below mentioned commands... instead of using multiple manual steps for configuring data labels. Is that possible and how? Having bulk of data where OLS need to be applied.
exec LBACSYS.SA_COMPONENTS.CREATE_COMPARTMENT
exec SA_LABEL_ADMIN.CREATE_LABEL
exec SA_POLICY_ADMIN.APPLY_TABLE_POLICY

Have you ever answered this question? If not, have you tried to use the "HIDE" property on your table_options?

How to implement Oracle Label Security with Oracle8.1.5 database

I want some fields in some tables which could not be even viwed by DBA..
I am working on Oracle Server 8.1.5
If possible it should be in the same database,same schema but different schema may also work..
Please help

I don't think this is going to be possible.
When you register a crawler, you have to declare it as one of three types: Public, Identity-based or Attribute-based.
The database crawler is registered as attribute-based, and therefore must be used with a suitable authorization manager.
I guess in theory you could create a new authorization manager class which queries active directory to get the appropriate security attributes for a user (corresponding to the security attributes crawled from the database), but I suspect it might be easier to figure out a way to copy AD attributes into a database table (perhaps updating the table once a day via a nightly crawl of AD) and then use the standard database authorization manager.

Whats so special with Advanced Replication feature of Oracle

Hi Techies,
I had a long term doubt on this. When the same functionality can be done using triggers and jobs, why should such advanced replication exist to use all those 5-10 packages and all those mess. What other thing in replication does differentiate it from its rival, manual work ie using triggers and jobs.
Siva

Why use Oracle Replication? Where to start?
(1) Re-inventing the wheel is never a good idea. especially when there's a high risk of inventing it square-shaped.
(2) Oracle will support their replication implementation: they won't support yours.
(3) QUERY_REWRITE_ENABLED
(4) efficiency: Oracle's inbuilt kernel code is simply faster than anything we can write
(5) Do you really mean Advanced Replication and not just materialized views?
"all those mess"Obviously you've never had a business requirement that really necessitated replication. It is a messy area. We are maintaining a single view of the data in multiple physical locations: that's not clean. Consider: performance, freshness of data, data integrity, data ownership, conflict resolution. Consider deployment and synchronisation with a workforce of remote, disconnected users. Once you have to really wrestle with those sorts of issues you will come to appreciate the flexibility, robustness and completeness of Oracle's replication tools.
There are so many gotchas in just setting up the replication architecture using Oracle's box of bits that only a mad man would want to add building their own set of low level components into the mix. Now, you may have a very simple replication requirement that could be satisfied with a few triggers and a DBMS_JOB. Are you sure that requirement is fuilly scoped? Furthermore, are you sure that your requirement won't get more complex in the future? And do you really think it will take you less time to knock up some triggers and related database objects that it will do to issue a CREATE MATERIALIZED VIEW statement (and maybe a CREATE MATERIALIZED VIEW LOG too)?
Oh, and spare a thought for the poor saps that will have to maintain th eapp after you've gone. They'll probably be happier with a standard Oracle implemenation that is well-known well-documented and for which there are training courses.
Life is too short.
Cheers, APC

Specific courses on OLAP and oracle security

sir
can anyone specify on specific courses and book(s) on OLAP and oracle db security?
thanx in advance

OLAP: Depends entirely on what you want to accomplish - basics, tools, migrating data to, etc.
I teach and recommend "Oracle Database 10g: Using OLAP (Data Warehousing and Oracle BI)" as a starter. Other stuff, go to http://education.oracle.com , enter 'OLAP' into the Search box and hit 'Go' button.
Database Security: Depends entirely on what you want to accomplish, but I find Oracle University course offerings lacking in this area. (I really wish May Ann Davidson would do something about that, and I'd love to help.)
The OCP Admin I and Admin II course each have a chapter discussing Security. I think these are rather simplistic for the commercial world, but most OCP candidates I see get stymied by even that level.
The "Oracle Database 10g: Security Release 2" course is a reasonably good starting point, but few offer it. (And yes, I teach that as well)

Can/How does Label Security integrate with Documentum Trusted Content Serv

How easy wouldit be to use Oracle Label Security to manage all information in the Oracle dabase including Documentum metadata so that a single security policy cn be defined..at least for the information stored in the Oracle database.
How does the documentum security tag get mapped to an OLS label?
Customer needs only a high level understanding...
Steve Flournoy

I am not familiar with documentum but you can use OLS for:
Row level security based on labels added to the tables you want to protect. Apply the labels to the documentum metadata tables and you have implemented OLS. The Documentum tags can be mapped to OLS labels in Oracle Policy Manager:
Set up the OLS labels just like the documentum security tags in Oracle Policy Manager .
For even more customization use Application Contexts and Virtual Private Database Policies.

Advance Replication and Oracle Label Security

Similar Messages

Maybe you are looking for