Audit Vault Windows feature?

Hi ,
Have any one installed Audit Vault 10.2.2.1 Windows ?
Just After installing on Windows, I found I could log in to DB as below.
SQL> conn sys/<pass> as sysdba
Is this a Windows specific feature?
I confirmed I couldn't log in as such on any other platforms.
Sincerely,

Please repost this in the AUDIT VAULT forum.
I guess from my perspective installing an audit vault on Windows is a bit like inviting a bank robber to inspect the safety deposit boxes.

Similar Messages

Audit Vault Installation problem on windows platform

Hello!
I'm trying to install Audit Vault 10.2.2 on windows platform. The installation procedure is successfull (there are no alerts about errors during installation). The enterprise manager is working at http://localhost:1158/em without any problem.
The installation guide says that audit vault console should work at http://localhost:5700/av, but this site is unreachable.
I tried to find out the problem, so I started avctl show_av_status
The result is:
Exception in thread "main" java.lang.Exception: Invalid Oracle JDBC url
at oracle.av.avca.Commandarguments.setOracleProperties (Commandarguments.java:281)
at oracle.av.avca.Commandarguments.processArguments(CommandArguments.java:667)
at oracle.av.avca.Avctl.startCTL(Avctl.java:70)
at oracle.av.avca.Avctl.main(Avctl.java:318)
(avctl start_av results the same problem)
Could you help me to solve this problem? Please!

I'd like to help you but it seems to me, from the perspective of the purpose of Audit Vault, that putting a secure repository on top of an insecure operating system is a non sequitur.
Thus all of my installs have been on Oracle Enterprise Linux and I've never seen any installation-related issues such as you are reporting.
If you can I would suggest getting, as they say, "a real operating system."
Performance will improve, hardware utilization will improve, security will improve, and as an additional advantage, this issue will disappear.

Audit Vault Server 10.3 for Windows

Hi
Do any one is having link for downloading the Oracle Audit vault server for Windows.
I do have agent of 10.3 but i want server..
Regards
Kay

Hi Kay:
The Audit Vault Server 10.3 has not been made available on Windows. You should contact Oracle Support if this is critical.

Audit Vault server for Windows?

Forgive my ignorance, is there a version of Audit Vault Server for Windows? I haven't been able to find a link for it, just for the Agent.
Thanks!

So there is a Windows version somewhere, it's only that I haven't found it. When I go to the download page http://www.oracle.com/technology/software/products/auditvault/index.html, all I see is:
Oracle Audit Vault Server (10.2.3)
Download for Linux x86 (930,289,516 bytes) (cksum 1842170548)
Download for Linux x86-64 (1,106,767,762 bytes) (cksum 314005762)
Download for Solaris Operating System (SPARC) (64-bit) (1,189,201,196 bytes) (cksum 2466057202)
Download for AIX5L (1,880,746,261 bytes) (cksum 3844667670)
Download for HP-UX Itanium (1,715,251,924 bytes) (cksum 3230968629)

Error while trying to start Audit Collector on the Audit Vault Server 10g

Hi,
We are trying to build a demo environment for testing Oracle Audit Vault 10g but we are having some trouble.
Our environment is like this: Oracle Audit Vault Server is installed on Windows Server 2003 SP2, while the Audit Vault Agent is installed on an Oracle 10g Release 2 database which resided on Windows server 2003 SP1. This two Windows Server machines are both installed as virtual machines.
We have successfully created the Agent and the Collector on Audit Vault Server and the Agent starts successfully while when we try to start the collector we get an error which says " Http Communication error: Http Communication error: 500" and the collector does not start.
We are new to the Audit Vault Software so we would really appreciate some help on how to resolve this issue because we have got stuck here and can not go on with our work.
Thanks in advance for your time
Best regards
Engrid

Hi,
Thanks again for all of your replies but now we are getting another error with the OSAUD collector. We are able to add the collector successfully by using the avorcldb all_collector command.
Source database is 10g R2 (10.2.1) and we configured it for collecting the audit records in the OS audit trail by using the following statement: ALTER SYSTEM SET AUDIT_TRAIL=OS SCOPE=SPFILE;, and the SHOW PARAMETER AUDIT command returns the following values :
NAME TYPE VALUE
audit_file_dest string C:\ORACLE\PRODUCT\10.2.0\ADMIN
\<db_name>\ADUMP
audit_sys_operations boolean TRUE
audit_trail string OS
We don't know if the values set for the audit_file_dest is correct but after we start working on the database and execute some statements Oracle is not creating any files on this destinations while for the same statements when the Audit_trail=DB, EXTENDED the audit values for these statements are written in the appropriate table.
So we do not know if this is the cause but when we try to start the OSAUD collector defined on the Audit Vault Server it can not start and gives us the follwing error: "could not start collector OSAUD_Collector for source <source name>, directory access error for C:\ORACLE\PRODUCT\10.2.0\ADMIN\<db_name>\ADUMP".
Sorry for the message being so long but we really need some help with this issue.
thanks in advance.
Engrid

Failing 10.2.3.2 audit vault patch on AV Agent at AV Configuation Assistant

Hi,
Applying 10.2.3.2 audit vault patch on top of 10.2.3.0 Audit Vault Agent. Getting following error after 100% installation at the time of Audit Vault Configuation Assistant Components
Information from Installxxxxxx.log
OPatch succeeded.
INFO: Configuration assistant "Oracle Audit Vault Agent One-Off Patches" succeeded
INFO: Command = oracle.av.common.AvcaCfgPlugIn /oracle/app/oracle/product/10.2.3/av_1/bin/avca -s initialize_agent -agentname agent_hmrac2 -agentusr ${s_agentusr} -agentport 7016 -av HMCSPV0921.HIGHMARK.INTRA:1522:av.HIGHMARK.INTRA -rmiport 3121 -jmsport 3300
INFO: Configuration assistant "Oracle Audit Vault Configuration Assistant" succeeded
INFO: All the tools have been executed Successfully
INFO: The "/oracle/app/oracle/product/10.2.3/av_1/cfgtoollogs/configToolAllCommands" script contains all commands to be executed by the configuration assistants. This file may be used to run the configuration assistants outside of OUI. Note that you may have to update this script with passwords (if any) before executing the same.
WARNING:
The following configuration scripts need to be executed as the "root" user.
#!/bin/sh
#Root script to run
/oracle/app/oracle/product/10.2.3/av_1/root.sh
To execute the configuration scripts:
1. Open a terminal window
2. Log in as "root"
3. Run the scripts
4. Return to this window and click "OK" to continue
INFO:
*** End of Installation Page***
The installation of Oracle Audit Vault Agent 10g was successful.
WARNING: Do you really want to exit?
INFO: User Selected: Yes/OK
INFO: The OUICA command is launched from /oracle/app/oracle/product/10.2.3/av_1/oui/bin/ouica.sh.
Executed *"/oracle/app/oracle/product/10.2.3/av_1/cfgtoollogs/configToolAllCommands* which has following command and successful.
[oracle@HMCSPS02 oui]$ cat "/oracle/app/oracle/product/10.2.3/av_1/cfgtoollogs/configToolAllCommands"
# Copyright (c) 1999, 2009, Oracle. All rights reserved.
/oracle/app/oracle/product/10.2.3/av_1/bin/avca apply_patchset
[oracle@HMCSPS02 oui]$ echo $ORACLE_HOME
/oracle/app/oracle/product/10.2.3/av_1
[oracle@HMCSPS02 oui]$ sh /oracle/app/oracle/product/10.2.3/av_1/bin/avca apply_patchset
Deploying to standalone OC4J...
Restarting agent ...
Agent restarted successfully.
Retried component but again failed. Hence executed root.sh and clicked 'Next' button. then message got like 'Agent 10.2.3.2 Installation was successful but some of the components missing,skipped or cancelled which may be functioning properly.
has my patch upgrade to client was successful or what is the workaround ???
Any help on this would be appreciated...
Regards,
Manish

Sorry, it was my mistake.
Actually while upgradation to 10.2.3.2, my ORACLE_HOME was not set to AV Agent HOME (instead it was set for AV Server HOME). That is why at the end script was unable to run from respective HOME.
Conclusion: Make sure to set ORACLE_HOME to AV Agent HOME before applying to 10.2.3.2 patchset to AV Agent. (also Valid for all Oracle Patchset Installation)
thanks for your support and reply.
Regards,
Manish

Oracle Audit Vault installation fails on DVCA assistant + libpthread.so.0

Hello experts, I did this post at general forums but nobody noticed anything, I need your help
I am able to install the Oracle Audit Vault Server on the following features:
OS: Suse Linux 10 SP 2
Clusterware version: 11.1.0 6
The Oracle Audit Vault server installation procces creates the database an starts the instances on each node and notice me the url for the Enterprise Manager but after that it fails at DVCA assistante because is not able to load the shared library libpthread.so.0.
I found in internet that some time there are files like srvctl, vipca, etc tha export LD_ASSUME_KERNEL ant we have to comment that line, but I do not found the line in those files. I just found in the crsctl file this line like
LD_ASSUME_KERNEL=
export LD_ASSUME_KERNEL
PD: The libpthread.so.0 library already exist
Should I comment this line at crsctl file?
Thank you in advance.

Here you are the error messages:
Is the Oracle Audit Vault server 10.2.3
Command = /opt/oracle/product/av/bin/dvca -action option -oh
/opt/oracle/product/av -s_path /opt/oracle/oradata/ -logfile
/opt/oracle/product/av/cfgtoollogs/dvca_install.log -owner_account vault
-owner_passwd ${s_ownerEncryptPwd} -acctmgr_account vault1 ${s_dvMgrPwdArg}
-jdbc_str jdbc:oracle:oci:@av1 ${s_sysPasswdArg} -languages {"en"} -racnode
seguridad1.min2.dtc -lockout
MANAGE_LISTENER start listener
MANAGE_LISTENER start listener
result=/opt/oracle/product/av/bin/dvca_start_listener.sh,127,/opt/oracle/product/av/jdk/jre/bin/java:
error while loading shared libraries: libpthread.so.0: cannot open shared
object file: No such file or directory
MANAGE_LISTENER start listener log=
MANAGE_INSTANCE start RDBMS
MANAGE_INSTANCE start RDBMS
result=/opt/oracle/product/av/bin/dvca_start_rdbms.sh,127,/opt/oracle/product/av/jdk/jre/bin/java:
error while loading shared libraries: libpthread.so.0: cannot open shared
object file: No such file or directory
MANAGE_INSTANCE start RDBMS log=
Executing task SQLPLUS_CATOLS
Executing task RESTART_SERVICES_OLS
MANAGE_INSTANCE stop isqlplus
MANAGE_INSTANCE stop OC4J
MANAGE_LISTENER start listener
MANAGE_LISTENER start listener
result=/opt/oracle/product/av/bin/dvca_start_listener.sh,127,/opt/oracle/product/av/jdk/jre/bin/java:
error while loading shared libraries: libpthread.so.0: cannot open shared
object file: No such file or directory
MANAGE_LISTENER start listener log=
MANAGE_INSTANCE start RDBMS
MANAGE_INSTANCE start RDBMS
result=/opt/oracle/product/av/bin/dvca_start_rdbms.sh,127,/opt/oracle/product/av/jdk/jre/bin/java:
error while loading shared libraries: libpthread.so.0: cannot open shared
object file: No such file or directory
MANAGE_INSTANCE start RDBMS log=
Executing task SQLPLUS_CATMAC
connect SYS:java.sql.SQLException: ORA-01034: ORACLE not available
Questions:
Is the Audit Vault Server Installation compatible with CRS version 11.1.0.6

Oracle Database Vault vs Audit Vault and database firewall

Hi All,
I would like to know the main difference between Oracle Database Vault and Oracle Audit Vault and Database firewall.
I have read all the white papers and documents on them both and find them very similar in work process.
Only difference I see in the pricing.
I feel Oracle audit Vault can do all the work of Database Vault with added feature of proactive session monitoring.
If someone can help me based on their knowledge and experience it would be appreciated.
Thank you.

I have read the white papers of both Database Vault and Audit Vault
According to database Vault sessions can be managed using various roles created as per business requirements.
Audit vault offers same thing in terms of a firewall which manages and restrictions based on roles created .
From the white papers:
DATABAES VAULT:
Oracle Database Vault restricts access to specific areas in an Oracle database from any user, including users who have administrative access.
This enables you to apply fine_grained access control to your sensitive data in a variety of ways.
Oracle Database Vault enables you to create the following components to manage security for your database:
Realms
Command Rules
Factors
Rule Sets.
DATABAE AUDIT AND FIREWALL:
Oracle Audit Vault and database Firewall consolidates database activity monitoring events and audit logs. Policies enforce expected application behaviour, helping preventing SQL injection, application bypass, and other malicious activities from reaching the database while also monitoring and auditing privileged users and other activities inside the database.
To me these sound very similar of doing same work.
My apologies as I am unable to paste the whole text here and I cannot type full documents here

Oracle Audit Vault Server & Agent Installation Error.

Hi,
I am new to Audit vault. When I install Audit Vault on Windows 2008 R2 it throws an error after installing 99%. Kindly help me to resolve.
OS Version : Windows 2008 R2
Oracle Audit Vault Version: 10.2.3.2
Error:
Audit Vault Server:
INFO: Configuration assistant "Oracle Audit Vault Configuration Assistant" failed
*** Starting OUICA ***
Oracle Home set to C:\oracle\product\10.2.3\av_1
Configuration directory is set to C:\oracle\product\10.2.3\av_1\cfgtoollogs. All xml files under the directory will be processed
INFO: The "C:\oracle\product\10.2.3\av_1\cfgtoollogs\configToolFailedCommands" script contains all commands that failed, were skipped or were cancelled. This file may be used to run these configuration assistants outside of OUI. Note that you may have to update this script with passwords (if any) before executing the same.
INFO: Created a new file C:\oracle\product\10.2.3\av_1\cfgtoollogs\configToolFailedCommands
INFO: Since the option is to overwrite the existing C:\oracle\product\10.2.3\av_1\cfgtoollogs\configToolFailedCommands file, backing it up
INFO: The backed up file name is C:\oracle\product\10.2.3\av_1\cfgtoollogs\configToolFailedCommands.bak
SEVERE: OUI-25031:Some of the configuration assistants failed. It is strongly recommended that you retry the configuration assistants at this time. Not successfully running any "Recommended" assistants means your system will not be correctly configured.
1. Check the Details panel on the Configuration Assistant Screen to see the errors resulting in the failures.
2. Fix the errors causing these failures.
3. Select the failed assistants and click the 'Retry' button to retry them.
xception: VariableNotFoundException
Query Exception Class: class oracle.sysman.oii.oiil.OiilQu
Also while installing Collection agent, it throws the error while executing runInstaller.
OS Version : AIX 6.1
Oracle Audit Vault Agent Version: 10.2.3.2
Audit Agent:
bash-3.2$ ./runInstaller
Starting Oracle Universal Installer...
Checking installer requirements...
Checking operating system version: must be 5200 or 5300
Failed <<<<
Exiting Oracle Universal Installer, log for this session can be found at /tmp/OraInstall2011-05-12_05-11-03PM/installActions2011-05-12_05-11-03PM.log
*/tmp/OraInstall2011-05-12_05-15-39PM>*cat installActions2011-05-12_05-15-39PM.log
Using paramFile: /finacle/avagent/aix_5l64/install/oraparam.ini
Checking installer requirements...
Checking operating system version: must be 5200 or 5300
Failed <<<<
Exiting Oracle Universal Installer, log for this session can be found at /tmp/OraInstall2011-05-12_05-15-39PM/installActions2011-05-12_05-15-39PM.log
Thanks & Regards,
Mithra.
Edited by: 864048 on Jun 7, 2011 2:57 AM

Hi ,
Please try the following:
Execute the setup in cmd with -ignoreSysPrereqs option.
Thank you.

Audit Vault Agent Installation issue

Hi All,
I have installed the following things
1) Audit Vault Server (10.2.2.0.1) on a Windows 2003 Server
2) I completed the post-installation tasks
3) I am trying to install Audit Vault agent (10.2.2) on HPUX (11.11) machine.
I start the AV Agent runInstaller, and fill the details like AVAgent name, Username, connect String etc, then click on next , it throws the following error:
"error1: the AV server is expecting an agent with the given name to be installed on another machine"
I am able to ping from Windows to HP machine and Vice versa (By IP Address and Hostname).
Can anyone tell me where i am going wrong and how to solve it.
Please mail to my email address ([email protected])
Thanks & Regards,
Rakesh

Hi,
The details of the installation done so far:
1) I have installed "Oracle Audit Vault Server (10.2.2)" on a Windows 2003 machine providing the following details
a) Audit vault Name
b) Audit Vault Home
c) Audit Vault Administrator
d) Administrator Password
e) Audit Vault Auditor
f) Ausitor Password
g) Database Vault Owner and Manager
h) Created a Audit Vault Agent user and added the user to the udit Vault server using AVCA.
2)I invoke the "Audit Vault Agent" Installer from a HP-UX machine and provide details viz.,
a) Audit vault Agent Name (Same name when i executed the AVCA command above)
b) Aduit Vault Agent Home
c) Agent Username
d) Agent Password
e) Audit Vault Server Connect String (Provide the Database details as mentioned in Audit Vault Server (localhost:port:servicename)
and when i click on the next button it throws me the following error:
"error1: the AV server is expecting an agent with the given name to be installed on another machine".
Hope this gives you a better idea. Waiting for your reply.
Thanks & Regards,
Rakesh

Problems running avctl after successfull installation of audit vault

Hi all,
after successful installation of audit vault, I am able to connect to the instance AV with sqlplus and with the dabase console.
But starting the avctl or questioning the status of the avctl with "avctl show_av_status", I always receive the following error:
C:\oracle\product\10.2.2\av_1\jdk\bin>avctl start_av
Exception in thread "main" java.lang.Exception: Invalid Oracle JDBC url
at oracle.av.avca.CommandArguments.setOracleProperties(CommandArguments.java:281)
at oracle.av.avca.CommandArguments.processArguments(CommandArguments.java:667)
at oracle.av.avca.Avctl.startCTL(Avctl.java:70)
at oracle.av.avca.Avctl.main(Avctl.java:318)
OS: Windows XP Prof 5.1 SP2
Audit Vault DB-Version: 10.2.0.3
Had anybody faced this problem before?
Thanks a lot in advance for your answers
Stefan

I had the same error, On the OUI log there was an error on the instalation of the Database Vault (although the installation finished OK), check if you have the same error output:
<LOG>
MANAGE_INSTANCE start RDBMS result=C:\oracle\product\10.2.2\av_1\bin\dvca_start_rdbms.bat,1,
Executing task SQLPLUS_CATMAC
connect SYS:java.sql.SQLException: ORA-01031: insufficient privileges
Executing task UNLOCK_DVSYS
Error executing task UNLOCK_DVSYS:java.lang.NullPointerException
Executing task LOAD_NLS_FILES
Error executing task LOAD_NLS_FILES:java.lang.NullPointerException
Executing task ACCOUNT_CREATE_OWNER
Error executing task ACCOUNT_CREATE_OWNER:java.lang.NullPointerException
Executing task GRANT_CONNECT_OWNER
Error executing task GRANT_CONNECT_OWNER:java.lang.NullPointerException
Executing task GRANT_ADMIN_DB_TRIG
Error executing task GRANT_ADMIN_DB_TRIG:java.lang.NullPointerException
Executing task GRANT_ALTER_ANY_TRIG
Error executing task GRANT_ALTER_ANY_TRIG:java.lang.NullPointerException
Executing task ACCOUNT_CREATE_MANAGER
Error executing task ACCOUNT_CREATE_MANAGER:java.lang.NullPointerException
Executing task GRANT_CONNECT_MANAGER
Error executing task GRANT_CONNECT_MANAGER:java.lang.NullPointerException
Executing task PASSWORD_CHANGE_DVSYS
Error executing task PASSWORD_CHANGE_DVSYS:java.lang.NullPointerException
Executing task PASSWORD_CHANGE_DVF
Error executing task PASSWORD_CHANGE_DVF:java.lang.NullPointerException
Unable to login to SYS account.. java.sql.SQLException: ORA-01031: insufficient privileges
. Error during post-installation processing. java.lang.NullPointerException. Error during post-installation processing. java.lang.NullPointerException.
</LOG>
Looks like the problem was that I changed sys and system password on the dbca final windows, that maybe wronged the instalation scripts.
When re-installed the AV Server I just press ok on that window without changing any password and it worked.
Hope that Helps.
Alfonso Leon

Audit Vault Download

Hi experts,
I'm interesting in Oracle Audit Vault and going to prepare a test environment. I have an Oracle 10.2.0.3 Database running on HP Itanium platform and want to be install a Audit Vault server on Windows.
However, I got problem of implement Audit Vault on my test environment.
1. For 10.2.0.3 Audit Vault
On OTN, I can get the Audit Vault Collection Agent on Itanium platform, but I cannot get Audit Vault Server on Windows platform.
2. For 10.2.0.2 Audit Vault
I cannot get any 10.2.0.2 source on OTN at this moment. Although I have a 10.2.0.2 Audit Vault Server(Windows), I still cannot get collection agent on Itanium.
Please somebody give me any suggestion?
When will the 10.2.0.3 Audit Vault Server software put on OTN? or Will 10.2.0.2 Audit Vault s/w will put on OTN again?
Thanks,
Calvin

http://www.oracle.com/technology/software/products/auditvault/index.html?rssid=rss_otn_soft
This page has all downloads that you needed.

Audit Vault Agent account creation

Hi, I just installed the AV Server and about to configure the agents. The Oracle AV agent installation document suggests creating AV agent user by logging into the database as AVAdmin user(Section 3.1.1.c). However, the user creation fails with ORA-01031: insufficient privileges. Other database accounts (sys, system..etc..) are locked. Any clue how to resolve this ussue?
Thanks in advance.

1. Where in the OP's post do you see the word Windows?
2. Your advice is totally irresponsible in all respects. The proper way to administer the product is in compliance with the documentation. There is no rational reason to do what you suggest.
Were you an employee of mine, working on an audit vault project, you'd be terminated tomorrow morning when you walked through the door.
Again: your advice is misguided and totally irresponsible.

Audit Vault Demo

Are you aware of an Audit Vault Demo...
A vmware image or something like that?
Would it be possible to setup a db, the audit server and the audit agent all in a single machine (or vmware image) mainly for purposes of checking out Audit Vault features?

Yeah you can defenitly create all the three components in the same VMware.
The audit vault server is nothing but a respository Database.

Audit Vault Agents

Hi,
I have three hosts two with windows server and oracle database 10g on each server and the third is a linux server with 11g database i want to colect informacion about operative system, database audit and redo log in this tree hosts. How is the license? How many licenses of
Audit Collection Agent must I purchase?
How would the installation of agents in this environment where and how would I install?
Thanks a lot !!.
Medalith.

Contact your salesperson with respect to licensing. It would be inappropriate for any of us, in this forum, to attempt to speak on behalf of Oracle.
It isn't Q4 yet so they don't bite. <g>
As to where agents should be installed ... it is well documented if you look here:
http://www.oracle.com/technology/products/audit-vault/index.html
or read the installation docs.
But again contact your sales person. They have a sales engineer on their team that can advise you.

Audit Vault Windows feature?

Similar Messages

Maybe you are looking for