On Enabling TDE Column Encryption for 11g 11.2.0.4 , will SYS user able to decrypt, encrypted column !

Hi ,
we are planning to implement Transparent Data Encryption for 11.2.0.4 11g DB .
My Query is Whether SYS DB user will be able to Decrypt all encrypted Columns.
we have tested for Virtual Private Database Policy, and found out that it applies Policy for all DB Users except SYS.
so now we have a query whether encryption will be applied for all DB users except for SYS.?
regards
Abdulrahman
(P.S: attached is document how we tested for Virtual Private Database , if we can somehow disable SYS access to specific tables also our compliance requirement will be met thanks )

http://docs.oracle.com/cd/E11882_01/network.112/e40393/asotrans.htm#ASOAG600
"Transparent Data Encryption(TDE) enables you to encrypt sensitive data, such as credit card numbers, stored in tables and tablespaces. Encrypted data is transparently decrypted for a database user or application that has access to data. TDE helps protect data stored on media in the event that the storage media or data file gets stolen."
TDE encrypts data blocks.
Users are not aware that the objects they query are encrypted - this is the reason it is called 'transparent'.

Similar Messages

I have the Ipod Nano. I'm traveling to Australia which has the following current: 240V AC, 50Hz. I have a travel plug adapter for the Australian electric sockets. Will I be able to use my Ipod charger with an Australian travel plug adapter or will I also

I have the Ipod Nano. I’m traveling to Australia which has the following current:240V AC, 50Hz. I have a travel plug adapter for the Australian electricsockets. Will I be able to use my Ipod charger with an Australian travel plugadapter or will I also need a voltage converter? Australia which has thefollowing current: 240V AC, 50Hz.

I have the Ipod Nano. I’m traveling to Australia which has the following current:240V AC, 50Hz. I have a travel plug adapter for the Australian electricsockets. Will I be able to use my Ipod charger with an Australian travel plugadapter or will I also need a voltage converter? Australia which has thefollowing current: 240V AC, 50Hz.

Need help in creating a view with Encryption for hiding the code used by the multiple users

Hi,
Can anyone help me out in creating view with encryption data to hide the stored procedure logic with other users.
I have create a stored procedure with encryted view but while running this manually temporary views are getting created, therefore the problem is if there are 500 entries then 500 temp views will get created.
Any solution to aviod creating temporary views, please refer my code below
USE [etl_validation]
GO
/****** Object: StoredProcedure [dbo].[Pr_DBAccess_mod]    Script Date: 05/23/2014 12:53:22 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
ALTER PROCEDURE [dbo].[Pr_DBAccess_mod](@ETL_CONFIG_ID INT)
AS
BEGIN
DECLARE @openquery NVARCHAR(MAX),
@DATABASENAME NVARCHAR(100),
@HIERNAME NVARCHAR(100),
@TABLENAME NVARCHAR(100),
@SERVERTYPE NVARCHAR(100),
@SERVERNAME NVARCHAR(100),
@USERNAME NVARCHAR(100),
@PASSWORD NVARCHAR(100),
@ETL_CONFIG_IDN NVARCHAR(100);
SET @ETL_CONFIG_IDN=CAST(@ETL_CONFIG_ID AS NVARCHAR);
SET @TABLENAME='Department';
SET @SERVERTYPE='SQL';
SET @SERVERNAME ='192.168.31.176';
SET @DATABASENAME='AdventureWorks2008R2';
SET @HIERNAME = 'HumanResources';
IF @SERVERTYPE='SQL'
BEGIN
/*SET @openquery= 'SELECT * INTO ##TestTable
                 FROM OPENROWSET(''SQLNCLI'',''server=192.168.31.176;Trusted_Connection=yes;'','''+@query+''')'
SET @openquery= 'CREATE VIEW '+@TABLENAME+@ETL_CONFIG_IDN+
                 ' WITH ENCRYPTION AS SELECT * FROM OPENROWSET(''SQLNCLI'',''SERVER='+@SERVERNAME+';TRUSTED_CONNECTION=YES;'',''SELECT * FROM '+@DATABASENAME+'.'+@HIERNAME+'.'+@TABLENAME+''')'
SELECT @openquery
END
EXECUTE sp_executesql @openquery
END

Hi aa_rif,
According to your description and code message, you execute the sp_executesql statement in your stored procedure, it indeed create many views with a tablename and ETL_CONFIG_ID named. If you need not to use these temporary views, you can delete them when
it contains the tablename in one view name.
In addition, if you want to create view with encryption in SQL Server, you can use directly the ENCRYPTION option to encrypt the T-SQL of a view in create view commands, for more information, see:
http://learnsqlserver.in/4/Create-View-With-Encryption.aspx. if not, you can descript more detail about requriements, so that more forum members can involve into the thread and help you
out.
Regards,
Sofiya Li
Sofiya Li
TechNet Community Support

How to set displayed column width for a search help

I have created an elementary search help for a custom field with a value table behind it.
The search help functions correctly, but when displayed the column widths are all 10 characters. The user has to adjust the column to view the descriptive text.
Can anyone tell me how to set default column widths for the help?

Please open you Elementary search help and see the Column width behind the Fields of your ...there increase the width of the fields
"Activate it and refresh
reward points if it is usefull .....
Girish

Stop a dimensional drill for a particular value of a column in obiee 11g

Hi,
I have dimensional drill been setup for Supervisor Hierarchy Table.I need to stop the dimensional drill for a particular value of the column in obiee 11g.
Example: I have two columns
1.Supervisor Level 1 Name
2.Supervisor Level 2 Name
Supervisor Level 1 Name Columns have these values.(Ram,Higher,Sam)
Supervisor Level 2 Name Columns have these values.(Ravi,Higher,Raghul).
If we pull Supervisor Level 1 Name Column in report which has a dimensional drill(It will navigate to Supervisor Level 2 Name).It will show
1.Ram
2.Higher
3.Sam
I should not drill on Higher value but the rest of the values(Sam and Ram will drill to Supervisor Level 2 Name) should be drillable.The same should happen for Supervisor Level 2 Name.
Please Suggest.
Thanks,
Azim

Azim,
Don't think you can actually get this working

How to enable AI(accent insensitiv) for one column without changing session

Following is my test SQL:
create table accent_test(col varchar2(10 char);
insert into accent_test values('INDIA');
insert into accent_test values('india');
insert into accent_test values('InDiÄ ');
Following SQL can only enable CI(Case insensitive), but can’t enable AI(accent insensitive):
select *
from accent_test
where NLS_UPPER(col, 'NLS_SORT=GENERIC_BASELETTER') LIKE NLS_UPPER('INDIA', 'NLS_SORT=GENERIC_BASELETTER')
COL
INDIA
india
Upper SQL can’t return the third row ‘InDiÄ’ which includes accent character.
I know following SQL can enable AI by changing the session. However it will change the whole session and other columns in one table:
SQL> ALTER SESSION SET NLS_COMP=LINGUISTIC;
SQL> ALTER SESSION SET NLS_SORT=GENERIC_BASELETTER;
Is there any solution to enable AI for only one column without changing the session?

convert(<Any Chinese Character>, 'US7ASCII') will all return same character '?'.might be an matter of using the right characterset:
SQL> select 'ä' str, convert('ä', 'JA16SJIS') converted_str from dual union all
select 'á', convert('á', 'JA16SJIS') from dual union all
select 'â', convert('â', 'JA16SJIS') from dual union all
select 'à', convert('à', 'JA16SJIS') from dual
STR CONVERTED_STR
ä   a
á   a
â   a
à   a
4 rows selected.

SSL encryption for Apex 4.1

Hi Guys,
I am trying to set up SSL encryption for my local install.
I am running APEX 4.1 in Windows 7 (32 bit) , Oracle XE 11G with embedded plsql gateway setup.
The APEX documentation I looked at that deals with SSL:
http://docs.oracle.com/cd/E23903_01/doc/doc.41/e21678/adm_mg_service_set.htm#AEADM297
instructs to turn HTTPS on in APEX_ADMIN (Internal schema) under security.
It didn't work as APEX was visible still under http://localhost:8080/apex and using HTTPS gave page not found error. On top of that It locked out my Admin account for INTERNAL workspace. So I had to switch it back via SQL query in SQL plus.
From limited experience in doing something similar in Tomcat, I believe one needs certificates etc before proceeding with this.
Anyone who has done this before, can you please point to a any documenation/blog post, tutorial etc that shows how its done? Many thanks.

Hi,
http://docs.oracle.com/cd/E17781_01/install.112/e18802/toc.htm#BABGCDJJ
>
HTTPS is not supported natively with the HTTP listener built into Oracle Database XE. If you want HTTPS support, use an alternative Web listener, such as Apache, that does provide HTTPS support, and provide proxies for the URLs provided by Oracle Database XE.
>
Regards,
Jari
http://dbswh.webhop.net/dbswh/f?p=BLOG:HOME:0
Edited by: jarola on Jan 25, 2012 9:42 AM
That APEX instance admin parameter you have change do not enable HTTPS. It require that you use HTTPS on your web listener.
Here is how reverse HTTPS Requirement for APEX instance admin
http://docs.oracle.com/cd/E23903_01/doc/doc.41/e21678/adm_mg_service_set.htm#autoId17

Column definition for a specific column in a view

Is there a way to query the metadata to get the definition of a single column in a view? I can see the complete DDL for a view from USER_VIEWS.TEXT, and I can see the column listing in USER_TAB_COLUMNS to give the datatype etc. However, what I'm looking for is the DDL that defined a specific column.
So, given:
create table PERSON (
SSN VARCHAR2(12),
FIRST_NAME VARCHAR2(25),
LAST_NAME VARCHAR2(25),
STREET VARCHAR2(40),
CITY VARCHAR2(30),
STATE VARCHAR2(30),
ZIP VARCHAR2(15),
COUNTRY VARCHAR2(35))
create view PERSON_VW as
select SSN,
FIRST_NAME,
LAST_NAME,
FIRST_NAME || ' ' || LAST_NAME FULL_NAME
from PERSON
I expect the query might look something like:
select DDL from metadata where table_name = 'PERSON_VW' and column_name = 'FULL_NAME'
and the result would be: "PERSON.FIRST_NAME || ' ' || PERSON.LAST_NAME"
or select DDL from metadata where table_name = 'PERSON_VW' and column_name = 'FIRST_NAME'
and the result would be: "PERSON.FIRST_NAME"
Thanks!

>
Hi again Barry,
When I queried user_tab_columns (or dba_tab_columns or all_tab_columns), I have the following list of columns:
TABLE_NAME
COLUMN_NAME
DATA_TYPE
DATA_LENGTH
DATA_PRECISION
DATA_SCALE
NULLABLE
COLUMN_ID
DEFAULT_LENGTH
DATA_DEFAULT
I don't see anything resembling the DDL for the view column. Somewhere underneath some
cover I haven't peeked under, Oracle must be keeping track of what it is supposed to be giving
for, in my example, FULL_NAME.Unless I'm very much mistaken, these columns' data (per table) looks pretty much like DDL to me.
Maybe what you need is just SQL Developer (great tool, if you don't have it, get it!).
And it's free (as in beer - not as in speech! :( )
Beside the connections tab is a "Reports" tab with various, as you might expect ;), reports.
One of them is on the Tables - with (some) DDL. This will work as a once-off if that's what
you need?
Otherwise there's the SQL tab if you open a table under connections - it's very complete - sample
at bottom of post.
HTH,
Paul...
(Ultimately, I'm diagnosing problems in existing databases that have views already created so
I don't have the option of considering virtual columns.)Quelle surprise ;(
Paul...
-Barry
CREATE TABLE "HR"."COUNTRIES"
    "COUNTRY_ID"   CHAR(2 BYTE) CONSTRAINT "COUNTRY_ID_NN" NOT NULL ENABLE,
    "COUNTRY_NAME" VARCHAR2(40 BYTE),
    "REGION_ID"    NUMBER,
    CONSTRAINT "COUNTRY_C_ID_PK" PRIMARY KEY ("COUNTRY_ID") ENABLE,
    CONSTRAINT "COUNTR_REG_FK" FOREIGN KEY ("REGION_ID") REFERENCES "HR"."REGIONS" ("REGION_ID") ENABLE
ORGANIZATION INDEX NOCOMPRESS PCTFREE 10 INITRANS 2 MAXTRANS 255 LOGGING STORAGE
    INITIAL 65536 NEXT 1048576 MINEXTENTS 1 MAXEXTENTS 2147483645 PCTINCREASE 0 FREELISTS 1 FREELIST GROUPS 1 BUFFER_POOL DEFAULT
TABLESPACE "USERS" PCTTHRESHOLD 50;
COMMENT ON COLUMN "HR"."COUNTRIES"."COUNTRY_ID"
IS
'Primary key of countries table.';
COMMENT ON COLUMN "HR"."COUNTRIES"."COUNTRY_NAME"
IS
'Country name';
COMMENT ON COLUMN "HR"."COUNTRIES"."REGION_ID"
IS
'Region ID for the country. Foreign key to region_id column in the departments table.';
COMMENT ON TABLE "HR"."COUNTRIES"
IS
'country table. Contains 25 rows. References with locations table.';

APEX 4.0 Report Query column limitation, 43 column maximum for the result!

Hi there,
I'm trying to generate report from Apex 4.0.1, but I got stucked with column limitation when I'm executing the report query.
Case:
Environment: oracle 11g, apex 4.0.1, oracle BI 11, windows xp
Table: My test table is quite simple, by creating a sample table with 44 columns, the column name is random, i.e. column1..column44, column data type is varchar2 (20)
report query:my report query is also simple, by "select * from testtable"
Ｄａｔａ: no data in my sample table
Ｅｒｒｏｒ：　then I'll get the error: "HelpORA-06502: PL/SQL: numeric or value error: character string buffer too small"
solution:　If I shrink the table column from 44 to 43, then the report can be generated to xls, pdf, etc.
Question: Is there any column limitation for Apex report query? I know there's a 32k row size limitation for varchar, but since there's no single data in my table, it shouldn't be the case.
Does anybody get this issue before? Thanks for any generous input!! :)
Horatio

hi marko,
Thanks for the reply, but i can't find the 45 column limitation from report query and report printing. any clue for this call?
Regards
Horatio

Removing drag functionality of column in OBIEE 11g

Hi all,
Can any one say me how to remove the draging functionality for the columns in OBIEE 11g ? It is creating an issue for me when i hide the columns in pivot and has only rows over there. It is creating one more layer on the top of the measures.
Thanks for your help.

Fightclub,
Edit the Pivot view and goto Row section -> Row Properties -> Option - Uncheck the Display Heading.
But you'll loose your columns heading of rows.
Thanks,
Balaa...

Tcpcrypt - Simple, transparent encryption for any TCP application

Long story short, tcpcrypt is a new TCP extension and draft standard for automatic transport-layer encryption. Using it as simple as installing the package and running /etc/rc.d/tcpcryptd start
I created an AUR package here: http://aur.archlinux.org/packages.php?ID=40308
What does it do?
Opportunistic - automatically enabled if both ends support tcpcrypt, gracefully falls back to normal TCP if not
No configuration - Just works
Transparent - any regular TCP application can use it
No kernel compilation necessary - just run a daemon to enable (Eventually it'll be merged into the Linux kernel, but until then this is a VERY convenient solution)
Works on Linux, OSX, FreeBSD and Windows
Low overhead
It was recently covered in an LWN.net article and presented on USENIX Security Symposium. (IETF/RFC draft, Design paper PDF, tcpcrypt.org website)
Basically, it's what IPsec and TLS always should have been. The catch is, it doesn't do any authentication itself, but it makes it very easy for applications to do auhtentication (to prevent MITM etc). But un-authenticated encryption is still much better than no encryption at all.
They also have plans to improve TLS, such that encryption is done by tcpcrypt, with TLS only adding authentication (with PKI certificates as usual). In other words, both http:// and https:// would be encrypted with tcpcrypt, but https:// uses a server SSL certificate.
Testing
Record yourself among the first tcpcrypt users: Hall of Fame
If you install it on 2 machines, try ssh'ing between them and run tcnetstat -- it will show a list of connections
You can also test it by going to tcpcrypt.org; at the bottom it will say something like "Your tcpcrypt session ID is: DAC08BB7DBD2..."
In the worst case, the tcpcryptd daemon may crash and temporarily halt all your TCP connections. When that happens, run /etc/rc.d/tcpcryptd stop and un-encrypted connections will resume as if nothing happened
Please report bugs to their bug tracker: http://github.com/sorbo/tcpcrypt/issues
Last edited by intgr (2010-08-27 15:23:16)

The memory leak in tcpcryptd has been fixed, so anyone who was turned off by this bug can start using it again.
faelar wrote:I've waited for the issue to be fixed, but it seems I can't run tcpcryptd currently :
tcpcryptd: nfq_unbind_pf(): Invalid argument
Weird, I built tcpcrypt-git right now (20101011-1) and it's working as expected.
Can you install ltrace, run this command as root and post its output?
ltrace -l /usr/lib/libnetfilter_queue.so.1 -l /usr/lib/libnfnetlink.so.0 tcpcryptd
Thanks!
Last edited by intgr (2010-10-11 20:27:07)

How do i enable the diagnostic pages for OER 11.1.1.3.0?

I'm currently trying to enable the diagnostic pages for OER 11.1.1.3.0. In the documentation the following is stated:
In Oracle Enterprise Repository 11g release, Oracle Enterprise Repository Diagnostics page is disabled, by default. Navigate to http://host_name:port/application_name/diag/index.jsp (replace host_name with the appropriate location).*
When you open the Diagnostics page in the default mode, the following message is displayed:*
Diag pages are currently disabled. Please contact your Oracle Enterprise Repository Administrator.*
To enable the Diagnostics page, the vm-argument diagPagesEnabled parameter must be set to true when the system is started.*
It is recommended to only enable when necessary and disable once the system is running without any issues.*
But with which argument do i place the diagPagesEnabled_ parameter on the startup arguments of my managed server?

Already found the answer.
Didn't see the setOERdomainEnv.sh within the ${DOMAIN_HOME}
In there is the option OER_DIAG_OPTION. Only needed to remove the *'#'* and restart the server.
+# The following option is disabled by default. Enable this parameter in order to enable the OER Diagnostic pages+
OER_DIAG_OPTION="-DdiagPagesEnabled=true"*

Peoplesoft Trees as Hierarchial Columns in OBIEE 11g

Sorry for a duplicate posting. Logged in as a normal user with random number. I know how much people hate it. Logged in as myself now.
Hi,
I have extensively searched using Google or 11g docs but could not find a proper solution to using Peoplesoft trees in form of hierarchial columns in obiee 11g. Can the rpd of obiee 11g be designed to view the Peoplesoft tree structure( as it is in Tree manager in Pplsoft) as hierachial columns in obiee 11g? I am sure hierarchial columns as a 11g feature are not just for visual representation in tree format but also can be viewed in Answers and queried against it,am I right?
Anybody who has worked on trees and OBIEE 11g hierarchial columns? Ahsan/Navin??
Thanks,
Dan

I have not used the 11g hierarchical columns for PSoft Trees but I can think of a glaring reason NOT to do this..PERFORMANCE. If I understand correctly, 11g issues a group by and Union as you traverse this type of structure and PeopleSoft trees have a number of tables to represent the actual TREE. I cannot possibly see how this can be effective especially with a large scale BI Apps DW? This is part of the reason the trees get flattened out via the OOTB ETL adaptors for PSoft.

Need to know base table and base column name for Oracle view columns

I am trying to load metadata for some views and that requires me to know what the final table and column name would be corresponding to the view column.
For example, if I have a view x_v that is select a,b from x_v2; and x_v2 is a view that is select a,b,c from x;
I need to get the following information.
View View Col Base Table Base Col
X_V A X A
X_V B X B
and so on.
Is it possible to get this programmatically using any SYS schema tables or Dependency tables?
I tried an indirect approach wherein I lock tables using LOCK TABLE or FOR UPDATE OF. But I'm not too sure if I can go down to the level of individual view columns.
Can you help me with this?

Thanks. I was looking at some indirect approaches.
I came up with this script that does it faster than dependencies but thats just for tables and not column mapping.
declare
cursor bt(cp_sid number) is
select u.name uname, o.name oname
from sys.obj$ o, sys.user$ u
where o.obj# in (select id1
from v$lock
where sid=cp_sid)
and u.user# =o.owner#;
cursor c_sid is
select sid
from v$session
where audsid =userenv('sessionid');
l_sid number;
l_view varchar2(100):= 'PER_PEOPLE_V';
l_schema varchar2(10):= 'APPS';
begin
open c_sid;
fetch c_sid into l_sid;
close c_sid;
dbms_output.put_line('SID: '||l_sid);
execute immediate 'lock table '||l_schema||'.'||l_view||' in row share mode nowait';
for i in bt(l_sid) loop
dbms_output.put_line(i.uname||'.'||i.oname);
execute immediate 'alter table '||i.uname||'.'||i.oname||' disable table lock';
execute immediate 'alter table '||i.uname||'.'||i.oname||' enable table lock';
end loop;
end;
It basically uses locks on views to verify locks on the base tables.
Just wondering, can we use FOR UPDATE OF statements to get to the columns?

IP - Rows defined individually, Columns dynamic for

Hi,
If I want to create a ready to input Query for my First Version of the year, I don´t have Actual Data, so I don´t have combination of characteristics. I need a blank template, I want to open 12 months of the year and I know the GL Accounts that the user needs to planning, the user only has to select the Cost Center and the Version. How I do that at IP? In BPS when I created the planning layout I selected the option "Key figure in data columns, rows defined individually" and " Columns dynamic for 0calmonth".
Thanks for your help.

Hi.
In Bex query restrict the parameters CostCenter and Version by variables (user will be able to choose any values).
Then restrict 0CALMONTH for 12 required monthes.
Next, restrict GL account and put it in rows area.
Next, put KF in rows, ensure that it is enabled for planning ("planning" tab - input ready relevant for lock).
Then drug and drop 0CALMONTH (or whatever) above the KF.
Ensure that for 0CALMONTH is set as "Master Data" in 'Advanced" tab.
Regards.

On Enabling TDE Column Encryption for 11g 11.2.0.4 , will SYS user able to decrypt, encrypted column !

Similar Messages

Maybe you are looking for