Managing Audit Vault with OEM - Passwords

How do these products transmit passwords, encryption or clear text? I plan on using Oracle Enterprise Manager to admin the Audit Vault repository. I understand the risks of using SQL*plus to alter user credentials and possible network sniff but if its from Oracle OEM to AV, are there risks?
Edited by: 895890 on Nov 8, 2011 7:59 AM
Edited by: 895890 on Nov 8, 2011 8:01 AM

Hi ,
Please try the following:
Execute the setup in cmd with -ignoreSysPrereqs option.
Thank you.

Similar Messages

Manage hyperion services with OEM

is anyone know how to config OEM to monitor Hyperion services?
I knew this a patch for OEM 10 which can maike OEM to monitor hyperion financial management serivce. I want to know how to monitor other hyperion services
thanks

I have the same issue finding documentation.
I'm aiming for GC 11g and the target Hyperion is 11.1.1.3
If i find same, I'll update

Audit Vault Agent sizing (harware requirements)

Hi, I need to provide my customer an estimation of the disk space needed for the Audit Vault Agent, size of archivelog files of the source database so that REDO collector could work without problems, and other demands of source side (audit vault agent) versus audit vault server?
Is there any document like "audit vault configuration best practice" related with hardware requirements (size of disk space, size of archivelog files, aud records...)???
Thank you all in advance..
Edited by: user10600747 on Jan 4, 2011 5:21 AM

Hi Elmin,
I was doing implementation on Audit Vault with around twenty source databases. These were hardware requirements:
Server:
HP-UX 11.31, 2 CPUs, 16 GB RAM, 1TB of storage for database
Agent (these are from the installation guide):
- At least 512 MB of available physical memory (RAM)
- Swap space of 1024 MB or twice the size of RAM
- 400 MB of disk space in the /tmp directory
- 1.6 GB of disk space for the Oracle Audit Vault collection agent software (but if you apply patches you need actually more than this).
Regards,
Sve

Audit Vault Best Practices WP

Just recently posted is a new white paper called Audit Vault Best Practices. You can find it here:
http://www.oracle.com/technology/products/audit-vault/pdf/twp_auditvault_bestpractices_200706.pdf
I hope you find it useful.
Thanks Tammy

Hi Elmin,
I was doing implementation on Audit Vault with around twenty source databases. These were hardware requirements:
Server:
HP-UX 11.31, 2 CPUs, 16 GB RAM, 1TB of storage for database
Agent (these are from the installation guide):
- At least 512 MB of available physical memory (RAM)
- Swap space of 1024 MB or twice the size of RAM
- 400 MB of disk space in the /tmp directory
- 1.6 GB of disk space for the Oracle Audit Vault collection agent software (but if you apply patches you need actually more than this).
Regards,
Sve

In house Management Plugin for Audit Vault Collector Status

I've developed a plug in to collect the status of the many Audit Vault Collectors we have.
For the moment I just want the collector as a new target with just a response/status metric.
I have created a ttd and dc xml file together with a .ksh script.
I tested the XML using ilint and created a jar file using emctl. I successfully imported and deployed the plug in to the necessary agent and then created one of the new targets.
The status appeared as up in the console but I then shutdown the collector but the status remains as up.
I have tested the .ksh script from the command line and it correctly outputs em_status=Up or Down as required but the Down status is not getting to the console.
I have the collection as 5 minutes.
Does anyone have any pointers as to what I need to look at please?
Thanks,
Mike

You can enable the Agent metric browser as described in section 2.2.1.2 of the EM Extensibility Guide (http://download.oracle.com/docs/cd/B16240_01/doc/em.102/b40007.pdf) and see what the gets back for each of your metrics.
Also, from the Extensibility Guide:
"For target availability to show up correctly on the default target home page, Oracle requires the target metadata file to define a metric with NAME="Response" that contains a column with NAME="Status" and the default collection file must define a critical condition on the "Status" column that represents the target being up or down."
Presumably, since your target shows as up initially, you have already defined a critical condition on the "Status" column of your "Response" metric. You may want to follow up with the EM extensibility product manager [email protected] to get some help from the Agent team on this issue.

HP Protect tool password manager not working with the new version of Mozilla: I got this alert: "Firefox doesn't know how to open this address, because the protocol (dpql) isn't associated with any program." please help

I have an HP ProBook 4520s. I have been using HP Protect tool's Password manager to store and manage my passords for all Login websites in Firefox 3.6. As a result, I just swiped my fingerprint to log on to any website.
After I installed the version 4 of Firefox, my all my login details do not work anymore. I have tried to reset them but I repeatedly get this error: "Firefox doesn't know how to open this address, because the protocol (dpql) isn't associated with any program."
something like this would have been passed onto the address: "dpql://c:\program%20files%20(x86)\hewlett-packard\hp%20protecttools%20security%20manager\bin\dpminionlineids.dll/qlinkload.htm#id=2".
Although the password manager works with Internet Explorer 9, I need it to work with Firefox 4 as this is my preferred browser.
Please help. Thank you!

I guess this means that IE is more user friendly for HP Password Manager finger swipe recall of passwords, a favorite of mine. I still don't see a post from Firefox as to why they haven't produced fix. So I'll switch to IE until things change. I don't see value in downgrading to a Firefox version that's no longer going to be supported.

I am unable to access my email. I can sign in with my password, then a message comes up that says "The plug-in for this page has been disabled. Click here to manage your plug-ins." All plug-ins listed are enabled. What am I missing?

I am unable to access my email from Charter.net. I can sign in with my password, then a message comes up which says "The plug-in for this page has been disabled. Click here to manage your plug-ins." All of my plug-ins are enabled. What am I missing?

After a great deal of searching I ran across the suggestion to disable all plug-ins and then, one by one, enable them until finally the problem was solved. I am not sure which plug-in was causing the problem, as I am satisfied to have the problem solved. I am going to leave the rest of the plug-in disabled.

Issue with Audit Vault Collector for Peoplesoft-MS Sql Server

Experts,
Requesting your valuable inputs regarding below issue :
Environment:
- Peoplesoft with SQL Server 2008
- Oracle Audit Vault.
Current issue with Audit Vault collector for SQL server is that it is not giving PSFT login ID instead it is giving Peoplesoft DB service Account ID.
Is this expected ?. If yes, what is the workaround ? Can Database Firewall is a best option to capture PSFT login ID ?
Thanks

Hi Rabi ,
just do one think here ..
During data source creation , in the Additional tab area , in the SQL Engine session , select "Vendor SQL" instead of "Open SQL".
HOw could u create data source without selecting the driver corrsponding to MS SQL.?
it is recommended to download the latest Driver and use this for Driver creation.
let me know ..
Regards
Kishor Gopinathan

Installation audit vault agent with RAC configuration

Hi at all,
I have a question about the installation of the agent on the RAC configuration. Where must I install the Audit vault agent, on all RAC nodes or is there a properly configuration?
Thanks
Vincenzo

By default when you install the agent on any single node the installation recognizes that it is a cluster and presents you with a list of available nodes from which to select.
With a RAC cluster you have one database and multiple instances. All instances will write to one, and only one AUD$ and FGA_LOG$ table so if you are using database auditing one node will suffice. Which node that is though depends on knowing which node is up at any one time so you could potentially choose a node that is dropped from the cluster or is down for patching and maintenance while the cluster is still running. With respect to REDO collection each node has its own redo thread so you definitely need to be collecting from every node.
Audit Vault has not been out long enough that I can tell you from experience what might be defined as "best practice" and often what we really need to study is "worst practice" to know what not to do. But in the case of RAC my instinct would be to first determine the collection type(s) and then decide. Erring on the side of collecting from all nodes makes a lot of sense.

Use port 50013 (Management Console) with User/password

Hello,
I have a problem. We had a security auditory of SAP systems. They have seen that the port 50013 (Management Console) has not any security with user /password.
Is there a way to put a security before the information?
Best Regards.
Pablo Mortera.

Hi Pablo
The SAP Managment Console is a UI (Applet) to access the functionality of the sapstartsrv process, This process is used for montioring and administration of SAP instances and listens on port 5nn13 (or 5nn14 for https)
It is expected that you can access the UI without authentication but to carry out administrative functions (which are sapstartsrv webservice method calls) , such as shutting down an instance for example, authentication is required.
By default only the most critical of these web service methods require authentication but the list of protected webmethods can be modified. Please see note 927637 for more details

Is it possible to save "Mozilla Persona"-password with FF password manager?

Is it possible to save "Mozilla Persona"-password with FF password manager?
Thanks
pollti

No, they both aren't there. But the issue just dissapeared. Thanks for your help

OAV-9016 - Audit Vault 12.1.1 error creating audit trail with TRANSACTION LOG

Hey guys,
I bumped into this problem when trying to start an audit trail with TRANSACTION LOG.
Oracle Audit Vault and Database Firewall 12.1.1.1
Oracle 11gR2 RAC two nodes, OEL x64.
Connection String:
jdbc:oracle:thin:@//192.168.1.139:1521/orcl
I have already ran the sql setup for a REDO_COLL user.
Any ideas?
I have created secure target for each node.
(host01)(oracle@orcl1):log> pwd
/u01/app/oracle/agent/av/log
(host01)(oracle@orcl1):log> cat av.collfwk-8311-0.log
[2013-12-12T17:16:49.855-02:00] [collfwk] [ERROR] [] [] [tid: 22] [ecid: 192.168.1.109:27132:1386867392018:0,0] OAV-9016: Target database global_name is not correct. global_name must include the domain for transaction log collection. Please configure the target database with the correct global_name.CollectionFactory : createCollection : Exception while creating collection. [[
Target database global_name is not correct. global_name must include the domain for transaction log collection. Please configure the target database with the correct global_name.
        at oracle.av.platform.agent.collfwk.impl.redo.RedoCollector.checkDBName(RedoCollector.java:1480)
        at oracle.av.platform.agent.collfwk.impl.redo.RedoCollector.verifySource(RedoCollector.java:1278)
        at oracle.av.platform.agent.collfwk.impl.redo.RedoCollector.startCollector(RedoCollector.java:215)
        at oracle.av.platform.agent.collfwk.impl.redo.RedoCollectorManager.startTrail(RedoCollectorManager.java:199)
        at oracle.av.platform.agent.collfwk.impl.factory.CollectionFactory.createCollection(CollectionFactory.java:504)
        at oracle.av.platform.agent.collfwk.impl.factory.CollectionFactory.createCollection(CollectionFactory.java:354)
        at oracle.av.platform.agent.StartTrailCommandHandler.processMessage(StartTrailCommandHandler.java:63)
        at oracle.av.platform.agent.AgentController.processMessage(AgentController.java:325)
        at oracle.av.platform.agent.AgentController$MessageListenerThread.run(AgentController.java:1859)
        at java.lang.Thread.run(Thread.java:722)
(host01)(grid@+ASM1):~> lsnrctl status
LSNRCTL for Linux: Version 11.2.0.3.0 - Production on 12-DEC-2013 17:27:34
Copyright (c) 1991, 2011, Oracle. All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER)))
STATUS of the LISTENER
Alias                     LISTENER
Version                   TNSLSNR for Linux: Version 11.2.0.3.0 - Production
Start Date                12-DEC-2013 16:58:03
Uptime                    0 days 0 hr. 29 min. 31 sec
Trace Level               off
Security                  ON: Local OS Authentication
SNMP                      OFF
Listener Parameter File   /u01/app/11.2.0/grid/network/admin/listener.ora
Listener Log File         /u01/app/grid/diag/tnslsnr/host01/listener/alert/log.xml
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=LISTENER)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=192.168.1.109)(PORT=1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=192.168.1.139)(PORT=1521)))
Services Summary...
Service "+ASM" has 1 instance(s).
Instance "+ASM1", status READY, has 1 handler(s) for this service...
Service "orcl" has 1 instance(s).
Instance "orcl1", status READY, has 1 handler(s) for this service...
Service "orclXDB" has 1 instance(s).
Instance "orcl1", status READY, has 1 handler(s) for this service...
The command completed successfully
(host01)(grid@+ASM1):~>
(host01)(grid@+ASM1):~> cat /u01/app/11.2.0/grid/network/admin/listener.ora
LISTENER=(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER))))            # line added by Agent
LISTENER_SCAN3=(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER_SCAN3))))                # line added by Agent
LISTENER_SCAN2=(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER_SCAN2))))                # line added by Agent
LISTENER_SCAN1=(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=IPC)(KEY=LISTENER_SCAN1))))                # line added by Agent
ENABLE_GLOBAL_DYNAMIC_ENDPOINT_LISTENER_SCAN1=ON                # line added by Agent
ENABLE_GLOBAL_DYNAMIC_ENDPOINT_LISTENER_SCAN2=ON                # line added by Agent
ENABLE_GLOBAL_DYNAMIC_ENDPOINT_LISTENER_SCAN3=ON                # line added by Agent
ENABLE_GLOBAL_DYNAMIC_ENDPOINT_LISTENER=ON              # line added by Agent
(host01)(grid@+ASM1):~>

Hi
Just run the script $AV_AGENT/av/plugins/com.oracle.av.plugin.oracle/config/oracle_user_setup.sql USER_NAME REDO_COLL
This will grant the user some privileges and roles like DBA and CREATE Database Link
I hope this answer your question
Thanks
Ahmed Moustafa

OEM versus Audit Vault

Is there such Audit Vault option within OEM? In other word, can you use OEM to set up Audit Vault for the target DBs and monitor it?
thx

Hi:
As of the current production release, there is no explicit integration between OEM and Audit Vault.
However, OEM can be used to administer Audit Vault's repository database, just as if it were a normal database. Furthermore, some users have wrapped Audit Vault's commands into OEM fetchlets to provide higher-level administrative functions in OEM.
Regards.

Management agents for 10g OEM Grid setup with HP's MC/Serviceguard

I am trying to set up the OEM Management agents in a MCserviceguard environment.
Each db is a serviceguard "package" with its own disks and a floating IP. The floating
IP is constant, but is dynamicly associated with whichever server currently hosts the package.
The goal is to have a Management agent (formerly Intelligent agent) per db.
There are notes and tech forums on how this is achieved in version 9.2 with
Intelligent Agent. However, not having any luck in finding this for 10g.
In 9.2, a forum note
From: John Low 14-Sep-04 21:20
Subject: OEM setup with HPs MC-Serviceguard
Has anyone setup the 10g Management agents to run on an MC Service Guard environment
(or similar cluster environment on another platform)? If you have please let me know!!
David
Message was edited by:
wan00823
Message was edited by:
wan00823

Here is a nice document that should answer your question
http://www.oracle.com/technology/deploy/availability/pdf/MAA_WP_10gEMAgentActivePassive.pdf
I did not bother installing three agents. I just installed one at the package level. My hosts are monitored by HP Openview. OEM just monitors the databases.
I have not used the command line parameter in runInstaller to set the hostname. Here is how I did it - may not be supported though. I have learnt the hard way that with HPUX you are on your own for most part with OEM. I modify Disk1/install/oraparam.ini. Change SHOW_HOSTNAME=NEVER_SHOW to SHOW_HOSTNAME=ALWAYS_SHOW. Installer will prompt you for hostname and the network card to use. Choose the one to which the service guard ip is attached to and change the hostname.
Take a look at my previous post regarding installing management service I have the tweaking described in more detail. The tweak is same for both management agent and management service install.
10g Grid Control and MC/Service Guard on HP-UX 11i

Audit Vault 12.1.1 error creating audit trail with TRANSACTION LOG

Hi,
i installed AV 12.1.1 , the DB target is with Data Guard.
when i run the script oracle_user_setup with the mode REDO_COLL the final message is that was succesfull , but when i go to the AV console and try to create an audit trail with TRANSACTION LOG the AV console shows me an error and the log shows me this :
[2013-10-16T03:37:18.593-05:00] [collfwk] [ERROR] [] [] [tid: 10] [ecid: 192.168.56.8:78800:1381912639433:0,0] RedoCollector : runSourceScript : Error while running script on source for REDO collector.
[2013-10-16T03:37:19.528-05:00] [collfwk] [ERROR] [] [] [tid: 10] [ecid: 192.168.56.8:78800:1381912639433:0,0] OAV-8004: Failed to start collector {0}:{1}CollectionFactory : createCollection : Exception while creating collection. [[
Failed to start collector {0}:{1}
                at oracle.av.platform.agent.collfwk.impl.redo.RedoCollector.runSourceScript(RedoCollector.java:816)
                at oracle.av.platform.agent.collfwk.impl.redo.RedoCollector.sourceSetup(RedoCollector.java:579)
                at oracle.av.platform.agent.collfwk.impl.redo.RedoCollector.setup(RedoCollector.java:454)
                at oracle.av.platform.agent.collfwk.impl.redo.RedoCollector.startCollector(RedoCollector.java:216)
                at oracle.av.platform.agent.collfwk.impl.redo.RedoCollectorManager.startTrail(RedoCollectorManager.java:199)
                at oracle.av.platform.agent.collfwk.impl.factory.CollectionFactory.createCollection(CollectionFactory.java:504)
                at oracle.av.platform.agent.collfwk.impl.factory.CollectionFactory.createCollection(CollectionFactory.java:354)
                at oracle.av.platform.agent.StartTrailCommandHandler.processMessage(StartTrailCommandHandler.java:63)
                at oracle.av.platform.agent.AgentController.processMessage(AgentController.java:325)
                at oracle.av.platform.agent.AgentController$MessageListenerThread.run(AgentController.java:1859)
                at java.lang.Thread.run(Thread.java:679)
Nested Exception:
java.sql.SQLSyntaxErrorException: ORA-01031: insufficient privileges
ORA-06512: at line 1
                at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:445)
                at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:396)
                at oracle.jdbc.driver.T4C8Oall.processError(T4C8Oall.java:879)
                at oracle.jdbc.driver.T4CTTIfun.receive(T4CTTIfun.java:450)
                at oracle.jdbc.driver.T4CTTIfun.doRPC(T4CTTIfun.java:192)
                at oracle.jdbc.driver.T4C8Oall.doOALL(T4C8Oall.java:531)
                at oracle.jdbc.driver.T4CPreparedStatement.doOall8(T4CPreparedStatement.java:207)
                at oracle.jdbc.driver.T4CPreparedStatement.executeForRows(T4CPreparedStatement.java:1044)
                at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1329)
                at oracle.jdbc.driver.OraclePreparedStatement.executeInternal(OraclePreparedStatement.java:3584)
                at oracle.jdbc.driver.OraclePreparedStatement.execute(OraclePreparedStatement.java:3685)
                at oracle.jdbc.driver.OraclePreparedStatementWrapper.execute(OraclePreparedStatementWrapper.java:1376)
                at sun.reflect.GeneratedMethodAccessor9.invoke(Unknown Source)
                at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
                at java.lang.reflect.Method.invoke(Method.java:616)
                at oracle.ucp.jdbc.proxy.StatementProxyFactory.invoke(StatementProxyFactory.java:230)
                at oracle.ucp.jdbc.proxy.PreparedStatementProxyFactory.invoke(PreparedStatementProxyFactory.java:124)
                at $Proxy2.execute(Unknown Source)
                at oracle.av.platform.agent.collfwk.impl.redo.RedoCollector.runSourceScript(RedoCollector.java:747)
                at oracle.av.platform.agent.collfwk.impl.redo.RedoCollector.sourceSetup(RedoCollector.java:579)
                at oracle.av.platform.agent.collfwk.impl.redo.RedoCollector.setup(RedoCollector.java:454)
                at oracle.av.platform.agent.collfwk.impl.redo.RedoCollector.startCollector(RedoCollector.java:216)
                at oracle.av.platform.agent.collfwk.impl.redo.RedoCollectorManager.startTrail(RedoCollectorManager.java:199)
                at oracle.av.platform.agent.collfwk.impl.factory.CollectionFactory.createCollection(CollectionFactory.java:504)
                at oracle.av.platform.agent.collfwk.impl.factory.CollectionFactory.createCollection(CollectionFactory.java:354)
                at oracle.av.platform.agent.StartTrailCommandHandler.processMessage(StartTrailCommandHandler.java:63)
                at oracle.av.platform.agent.AgentController.processMessage(AgentController.java:325)
                at oracle.av.platform.agent.AgentController$MessageListenerThread.run(AgentController.java:1859)
                at java.lang.Thread.run(Thread.java:679)
i don't understand why the issue because the user has the privileges given by the script and i tried with grant as sysdba but without any result
i don't understand what are the privileges that the collector needs.
any idea?
thnks for any help

Hi
Just run the script $AV_AGENT/av/plugins/com.oracle.av.plugin.oracle/config/oracle_user_setup.sql USER_NAME REDO_COLL
This will grant the user some privileges and roles like DBA and CREATE Database Link
I hope this answer your question
Thanks
Ahmed Moustafa

Managing Audit Vault with OEM - Passwords

Similar Messages

Maybe you are looking for