Oracle Streams and Database Encryption

I am looking for encryption method for OLTP database.
Oracle Streams will be used to synchronize the data between source and remote database.
Business process wants all remote database to be fully encrypted.
What Can I use?
- TDE is not supported with Oracle Streams,
- I can’t use DBMS_CRYPTO since it needs big Database modifications.
Any other Oracle supported techniques, or maybe I’m gonna need to consider hardware encryption (like hard disk encryption) or OS level encryption.
Thanks,

TDE is not supported with LogMiner based technologies such as Streams, Data Guard (logical standby). Therefore you can not use TDE to replicated encrypted content. --You will get exception "Unsupported data type"
But, you might replicate decrypted data into encrypted destination. This means your destination might have TDE encrypted columns.
Unofficially Oracle will support TDE with logminer based technologies in the next database version 11.
I am waiting for this.
Regards,
Mike

Similar Messages

  • Differenece between oracle streams and oracle Replication

    Hi all,
    Can anyone tell me difference between oracle streams and oracle replication?
    Regards

    refer the link:Difference Between Oracle Replication & Oracle Streams.
    Oracle Replication is designed to replicate exact copies of data sets to various databases. Oracle Streams is designed to propagate individual data changes to various databases. Thus, Replication is probably easier if the end goal is to maintain identical copies of data, where Streams is easier if the end goal is to allow different databases to react differently to data changes.
    Oracle Replication is a significantly more mature product-- it is quite usable with older databases. Oracle Streams is a much newer technology and is only usable among different 9i databases. Most competent Oracle developers and DBA's are familiar with Oracle Replication, while many fewer have any real experience with Streams.
    The Streams architecture strikes me as a lot more flexible than Oracle Replication's. This leads me to suspect that Oracle will be pushing Streams over Replication in subsequent releases, so I would expect new features in Streams, like DDL changes, that aren't in Oracle Replication. Realistically, though, I don't expect any serious movement away from Replication for at least a few releases, so I wouldn't tend to be overly concerned on this front.
    answered by Justin
    Distributed Database Consulting, Inc.
    reference from forum thread:
    Difference Between Oracle Replication & Oracle Streams.

  • Oracle Streams and Dataguard

    Does anyone know how to configure oracle streams and dataguard to work together? I've set up an environment which successfully captures and applies records in a streams environment using
    log_archive_config=SEND, RECEIVE, NODG_CONFIG
    as soon as I try to introduce the streams setup into a database which already has dataguard setup it begins to get convoluted as setting DG_CONFIG requires you to then set the db_unique_name and it seems that the streams log mining will not work without being fully incorporated into the Dataguard configuration.
    Has anyone set up streams in a dataguard environment?

    Lets see what's missing from your request:
    1. Oracle version number?
    2. Physical or logical Data Guard?
    3. Which Data Guard mode? Synch or Asynch?
    4. Which Data Guard protection level?
    5. ARCH or LGWR?
    6. Which streams mode? Synch or Asynch?
    7. Hotlog or Autolog?
    8. Streams on the production server or the standby server?
    I'm all out of guesses tonight. Please provide enough information for someone to help you.

  • Setup between Oracle streams and MQ

    Hi All,
    I m trying to create the setup between oracle streams and Messing Queue(MQ).i have already install MQClient on my machine and messing gateways is also working fine,but accoring to setup docs i have created one user having all the granst they provide in docs and created queuetable,queue,dml handler,tables rules and starting queue after that we have done Capture and Apply process on that user, in other word u have say the entire setup but our data is not propagating that messaage to MQ.
    So if anyone has specific setup code then pl provide or any suggestion u want can give.
    thnks & regards
    Sanjeev

    Hi Sanjeev,
    There is a special forum dedicated to Oracle Streams: Streams
    You may want to try there.
    Extra tip: post the code you used. That way it is easier for people to see what you might have done wrong.
    Regards,
    Rob.

  • Oracle Streams 9i Database Link Error

    Can anyone be help me regarding Oracle Streams 9i
    Oracle Version: 9.2.0.5.0
    Initial parameters:
    global_name=true
    aq_tm_processes=1
    job_queue_process=10
    log_parallelism=1 scope=spfile
    database is in archivelog;
    I executed the following SQL statements:
    CONNECT sys/xxxxx@db1 AS SYSDBA
    CREATE USER strmadmin IDENTIFIED BY strmadminpw
    DEFAULT TABLESPACE users QUOTA UNLIMITED ON users;
    GRANT CONNECT, RESOURCE, SELECT_CATALOG_ROLE TO strmadmin;
    GRANT EXECUTE ON DBMS_AQADM TO strmadmin;
    GRANT EXECUTE ON DBMS_CAPTURE_ADM TO strmadmin;
    GRANT EXECUTE ON DBMS_PROPAGATION_ADM TO strmadmin;
    GRANT EXECUTE ON DBMS_STREAMS_ADM TO strmadmin;
    GRANT EXECUTE ON DBMS_APPLY_ADM TO strmadmin;
    GRANT EXECUTE ON DBMS_FLASHBACK TO strmadmin;
    BEGIN
    DBMS_RULE_ADM.GRANT_SYSTEM_PRIVILEGE(
    privilege => DBMS_RULE_ADM.CREATE_RULE_SET_OBJ,
    grantee => 'strmadmin',
    grant_option => FALSE);
    END;
    BEGIN
    DBMS_RULE_ADM.GRANT_SYSTEM_PRIVILEGE(
    privilege => DBMS_RULE_ADM.CREATE_RULE_OBJ,
    grantee => 'strmadmin',
    grant_option => FALSE);
    END;
    CONNECT strmadmin/strmadminpw@db1
    EXEC DBMS_STREAMS_ADM.SET_UP_QUEUE();
    CREATE DATABASE LINK db2 CONNECT TO strmadmin IDENTIFIED BY strmadminpw USING 'DB2';
    CONNECT sys/xxxxx@db2 AS SYSDBA
    CREATE USER strmadmin IDENTIFIED BY strmadminpw
    DEFAULT TABLESPACE users QUOTA UNLIMITED ON users;
    GRANT CONNECT, RESOURCE, SELECT_CATALOG_ROLE TO strmadmin;
    GRANT EXECUTE ON DBMS_AQADM TO strmadmin;
    GRANT EXECUTE ON DBMS_CAPTURE_ADM TO strmadmin;
    GRANT EXECUTE ON DBMS_PROPAGATION_ADM TO strmadmin;
    GRANT EXECUTE ON DBMS_STREAMS_ADM TO strmadmin;
    GRANT EXECUTE ON DBMS_APPLY_ADM TO strmadmin;
    GRANT EXECUTE ON DBMS_FLASHBACK TO strmadmin;
    BEGIN
    DBMS_RULE_ADM.GRANT_SYSTEM_PRIVILEGE(
    privilege => DBMS_RULE_ADM.CREATE_RULE_SET_OBJ,
    grantee => 'strmadmin',
    grant_option => FALSE);
    END;
    BEGIN
    DBMS_RULE_ADM.GRANT_SYSTEM_PRIVILEGE(
    privilege => DBMS_RULE_ADM.CREATE_RULE_OBJ,
    grantee => 'strmadmin',
    grant_option => FALSE);
    END;
    CONNECT strmadmin/strmadminpw@db2
    EXEC DBMS_STREAMS_ADM.SET_UP_QUEUE();
    CONNECT sys/xxxxx@db2 as sysdba
    GRANT ALL ON scott.dept TO strmadmin;
    CONNECT sys/xxxxx@db1 AS SYSDBA
    CREATE TABLESPACE logmnr_ts DATAFILE 'D:\oracle\oradata\db1\logmnr01.dbf'
    SIZE 25 M REUSE AUTOEXTEND ON MAXSIZE UNLIMITED;
    EXECUTE DBMS_LOGMNR_D.SET_TABLESPACE('logmnr_ts');
    CONNECT sys/xxxxx@db1 AS SYSDBA
    ALTER TABLE scott.dept ADD SUPPLEMENTAL LOG GROUP log_group_dept_pk (deptno) ALWAYS;
    CONNECT strmadmin/strmadminpw@db1
    BEGIN
    DBMS_STREAMS_ADM.ADD_TABLE_PROPAGATION_RULES(
    table_name => 'scott.dept',
    streams_name => 'db1_to_db2',
    source_queue_name => 'strmadmin.streams_queue',
    destination_queue_name => 'strmadmin.streams_queue@db2',
    include_dml => true,
    include_ddl => true,
    source_database => 'db1');
    END;
    CONNECT strmadmin/strmadminpw@db1
    BEGIN
    DBMS_STREAMS_ADM.ADD_TABLE_RULES(
    table_name => 'scott.dept',
    streams_type => 'capture',
    streams_name => 'capture_simp',
    queue_name => 'strmadmin.streams_queue',
    include_dml => true,
    include_ddl => true);
    END;
    Did this exp/imp
    exp userid=scott/tiger@db1 FILE=dept_instant.dmp TABLES=dept OBJECT_CONSISTENT=y ROWS=n
    imp userid=scott/tiger@db2 FILE=dept_instant.dmp IGNORE=y COMMIT=y LOG=import.log STREAMS_INSTANTIATION=y
    and then
    CONNECT sys/xxxxx@db2 AS SYSDBA
    ALTER TABLE scott.dept DROP SUPPLEMENTAL LOG GROUP log_group_dept_pk;
    CONNECT strmadmin/strmadminpw@db2
    BEGIN
    DBMS_STREAMS_ADM.ADD_TABLE_RULES(
    table_name => 'scott.dept',
    streams_type => 'apply',
    streams_name => 'apply_simp',
    queue_name => 'strmadmin.streams_queue',
    include_dml => true,
    include_ddl => true,
    source_database => 'db1');
    END;
    CONNECT strmadmin/strmadminpw@db2
    BEGIN
    DBMS_APPLY_ADM.SET_PARAMETER(
    apply_name => 'apply_simp',
    parameter => 'disable_on_error',
    value => 'n');
    DBMS_APPLY_ADM.START_APPLY(
    apply_name => 'apply_simp');
    END;
    CONNECT strmadmin/strmadminpw@db1
    BEGIN
    DBMS_CAPTURE_ADM.START_CAPTURE(
    capture_name => 'capture_simp');
    END;
    Here is my problem:
    After i configured it the streams still cannot replicate. And when I checked the EM GUI for streams monitoring it displays a broken database link.
    Also it says that the database link is not active.
    Can anyone please help?
    Thanks.

    I don't know what Datacomp is, but you should be able
    to connect to any non-Oracle database if there is
    an ODBC driver for it. You would use Generic
    Heterogeneous Services to do this. See the following
    link to the documentation for details:
    http://download-west.oracle.com/docs/cd/B10501_01/server.920/a96544/gencon.htm#1656
    There are also several articles on the Net. Do a google
    search on oracle generic heterogeneous services /
    connectivity.
    Hope this helps.
    Kailash.

  • Oracle Streams and Oracle Apps  11i

    Hi,
    I am looking for an oracle solution to build a reporting instance off an e-business suite 11i and offload discoverer reporting to the reporting instance. I have tried dataguard logical standby but too many issues and I cannot use. I am wondering if anyone tried using oracle streams to build a reporting instance from an oracle apps instance?
    Thanks

    Hi,
    Is Streams supported in an E-Business Suite database? We once had a scenerio where some parameters for Streams were conflicting with parameters required for E-Business Suite performance improvement. I could not find any documents from Oracle to verify whether Streams on E-Business Suite database was a supported configuration or not.
    So if you have any such document, could you send the link to me?
    Also please provide the link to your white paper/presentation.
    Regards,
    Sujoy

  • Oracle Streams and CLOB column

    Hi there,
    We are using "Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit". My question is "Does Oracle Streams captures, propagates (source capture method) and applies CLOB column changes?"
    If yes, is this default behavior? Can we tell Streams to exclude the CLOB column from the whole (capture-propage-apply) process?
    Thanks in advance!

    You can exclude columns via a rule (dbms_streams_adm.delete_column).
    CLOBs are captured.
    http://download.oracle.com/docs/cd/E11882_01/server.112/e17069/strms_capture.htm#i1006263

  • Connect to different Oracle server and database in PL/SQL code

    Hi,
    There are two oracle servers and databese, A and B. I need to read data from database A and insert those data to databse B. Is there anyway I can do it in PL/SQL program?
    Regards,
    Shiva

    In a SQL*Plus session, [connect string] is generally a TNS alias (i.e. in the command "connect scott/tiger@orcl", orcl is a TNS alias). I don't know if it is possible in some release to have a fully qualifies TNS entry (i.e. connect scott/tiger@(DESCRIPTION=(ADDRESS=(...)) ), but it is certainly uncommon. Depending on the version of Oracle, there are various ways to configure a client to resolve a TNS alias, but local naming is the most common, so I'll assume that is what you're using...
    If you are trying to query a remote database, you would either have to
    - Create a database link (i.e. CREATE DATABASE LINK db_link_name ...) and refer to the database link name in your SQL statement
    - Embed the full TNS entry in your query (i.e. SELECT * FROM emp@(DESCRIPTION=(ADDRESS=( .. .)) )
    If you choose to create the database link, one of the things you have to specify is the TNS alias (or the fully qualified TNS entry). If you specify a TNS alias there, you would generally have to ensure that the TNS alias existed in the tnsnames.ora file on the database server where the database link is created.
    Justin

  • Oracle stream and  standby database

    i want to implement stream(table level) in the following scenario
    what i must to set for standby as when i switch to standby database the stream work correctly like when primary was working.
    DB1--------------------stream---------------------DB2
    DB1standby .......................................DB2standby
    Narges.

    Your schema above do not tell us if this is a streams master/master. Also it is important to know if you a doing full schema replication or only some tables.
    For the db_name think global name : how do you setup a propagation when the source DB and target DB have the same TNS entry - whose name is driven by the rule dblink name = global_name = tns entry.
    Here it is a slightly different case : DG will succeed to SRC and appear as the same DB for the remote though they are on different hostname. Only way is the fail over in tns entry when you set multiple host for the same services.
    The rest should be ok except for the lost data of SRC which requires a re-sync.
    On the streams side problems remains and I am still skeptic on the feasibility : on paper no problems but problems come fast for the data's lost during the switch to DG (and this is to be expected with async DG, last SCN's will be missing on DG but not necessary on remote target site).
    Then both sites will start suffering on the loss of this data most probably with ORA 1403 data not found or Streams transactions pending and there is no way to predict the extend of this in advance. The re-sync of this status is then crucial and I am working on this. I will come back to the community with a generic procedure for master-master re-sync. One of the main problem is to identify table remote correspondents: These are easy to determine for declarative transformations but for transformation done within apply handler or transformation function associated to a context I have not find better than to comes back to the DBA and ask pitifully which are the remote target tables. The correspondence is a precious data that do not appear in any data dictionary view, but is only into the text of a pl/sql block.
    For my comments on the others thread, when the former SRC comes back, I have not considered the possibility in 11g to re-sync the former Master with a DG being the new master and sound like I should have.
    But this is all new also for me and I need to test it. if it works then you don't have the problem to setup a downstream capture between 2 DB having the same db_name.

  • General questions on how to get started with Oracle OEPE and databases

    My company has a server in the cloud, written using Ruby on Rails. The server is designed to work with a browser, so it communicates via standard HTTP.
    The server has an SQL database.
    The server sends and receives HTTP requests from clients, which are then used to either update the database or retrieve information from the database.
    The database can be edited from a separate admin dashboard.
    I have recently rewritten our client software as a native android app. The new app makes calls to the server that look like browser calls. I have used Eclipse to develop the Android app.
    Sounds pretty standard so far, right? :-)
    I now want to replace the Ruby on Rails server with a new Java server that I will write. I want to use Eclipse to develop the new server. During development, I want to be able to have the new Android app communicate with the development server software that will reside on my desktop.
    So I was thinking that Oracle's tools might be perfect for me, if only I knew which tools to use. There are lot to choose from. :-)
    I believe that all I need is OEPE and a database. I would like to keep it pretty simple. I don't want to learn 20 new tools. It will be enough effort to become proficient in OEPE and a database.
    I looked at "Oracle Database Tools >> Connecting to an Oracle database" in the help files for OEPE 12.1.1. I tried going through the help files for Database connections, but I got to a "New Connection Profile" form that asks me for a SID, a user name, a password, etc. I don't have any of those. I tried to enter some data in the forms and ping the database, but I could not get any results from the ping. So my first question is: Do I have to sign up for an Oracle database in the cloud or is there a database contained within the OEPE software that I just installed. I will have to do the former anyway when I eventually deploy my new server software, so maybe the right thing to do is sign up for the "database in the cloud" service now, and use it during development.
    The other question I have is about getting a simple application client and server application sample. I found a "hello world" example at http://docs.oracle.com/cd/E13224_01/wlw/docs103/guide/webapplications/workshopJSP/tutorialJSP/TutorialJSPMakeJSP.html, but that is for WLS 10.3 and it doesn't seem to match the 12.1.1 software very well.
    So does anybody know where I can find a simple client and server sample program for WLS 12.1.1?
    If I can get these two questions answered, I can start making some progress.
    Thanks in advance to anybody who can help me navigate this minefield.
    Jim

    I wanted to add some information to my previous posting.
    1. The server I will develop will communicate ONLY with Android and iOS native apps, so the interface will not be HTML or XML. The information sent by the server to the client will be JSON. The information sent by the client to the server will be HTTP parameters, usually in the form of URL-encoded form data. This is not a browser-to-server server interface, so JSP is probably not appropriate for the server. The communication protocol will be HTTP.
    2. I don't need anything fancy on the server side. The server will simply be a Java program that emits JSON responses to the client and receives URL-encoded form data from the client. The server program will also make database queries and update the database.
    3. I don't understand how my native Android app will be able to communicate with my development server code running on my desktop. I want that communication to be over the internet, but my desktop does not have a static IP address, so I don't see how the app will be able to address the development server software on my desktop PC. I don't want to deploy the server software into the cloud every time I start a debug run, but I don't see any other way for my app to be able to address the server code over the Internet.
    If anybody has any ideas, I would appreciate hearing them.

  • What are the differences between Oracle AS and Database Server?

    Hi
    I have quesstions:
    1- what are the main differnces between Oracle Application Server 10g and Oracle Database Server 10g ?
    2- does the oracle J developer 10g come with Oracle application server or comes standalone?
    3- is there any integration between the three above application , and how it are working together?
    thanks
    Suhaib

    1) At its simplest level a Database Server is a database so for storing data and an application server is for running the applications (which will probably access the data in the database server).
    2) JDeveloper comes stand alone or as part of the Oracle Developer Suite which is a collection of tools for building applications.
    3) Yes they are integrated. More details on otn.oracle.com/products/ias
    Regards
    Grant

  • Oracle Streams and Hetrogenous Enviornment

    Hi,
    As we can use Streams in Heterogeneous environment, then let say we implemented streams for replication between MS SQL server and Oracle and data has to be replicated from Oracle to SQL server then on SQL server side what sort of configuration we need.
    And if we want to replicate both data and also user messages then what we would do.
    Regards,
    Abbasi

    Viacheslav Ostapenko wrote:
    Sorry, Aman,
    I couldn't find any info about replication to MS SQL. Is it possible at all? Could you provide link where we can read about this? It could be very interesting.Sorry Viacheslav, even I couldn't find anything for the same. I am not sure that it can be done or not, I haven't heard anyone in my contact doing so. The only place where I have seen Streams being used around me is within Oracle db only. May be someone else can help if he/she has done it.
    Aman....

  • Oracle ASM and Database are coming up at the same time and running into ERR

    We have Oracle 11G Grid Infrastructure and Oracle 10.2.0.4 running under grid user and oracle user.
    Its AIX 61 LPAR.
    I am running into this error when we do a reboot.
    2010-07-22 19:21:48.581: [    RACG][1310] [667728][1310][ora.maksbx1.MAKSBX11.inst]: SQL> ORA-01565: error in identifying file '+MAKSBX01_DATA_DG1/maksbx1
    /spfileMAKSBX1.ora'
    ORA-17503: ksfdopn:2 Failed to open file +MAKSBX01_DATA_DG1/maksbx1/spfileMAKSBX1.ora
    ORA-15056: additional error message
    2010-07-22 19:21:48.581: [    RACG][1310] [667728][1310][ora.maksbx1.MAKSBX11.inst]: ORA-17503: ksfdopn:DGOpenFile05 Failed to open fi
    ORA-01078: failure in processing system parameters
    SQL> Disconnected
    This is from $ORACLE_HOME/log/srvrname/racg/init<instanace>.log
    After the reboot, wait for 5 min and if I run this command
    srvctl start database -d MAKSBX1 -- DB Comes up with out any error.
    What this tells me is, after the reboot, CRS/ASM is coming up and at the same time DB is also trying to come up and resulting in error.
    Question is:
    Where can I put a sleep 90 or 180 so that DB will come only after ASM is completely up. We didn't write or create any startup scripts for AIX, what ever is there is coming from Oracle 11g Grid and ORacle 10g Database.
    Can some one please point me where I can find those init scripts and where i should either put sleep or dependency so that they don't collide.

    Hi,
    please make sure that you have exported right SID
    ORA-17503: ksfdopn:2 Failed to open file +MAKSBX01_DATA_DG1/maksbx1/spfileMAKSBX1.ora
    echo $ORACLE_SIDand also export ORACLE_SID=+ASM1
    $asmcmd
    asmcmd> cd MAKSBX01_DATA_DG1
    asmcmd> cd maksbx1
    and check for spfileMAKSBX1.ora
    ORA-17503: ksfdopn:string Failed to open file string
    Cause: file open failed due to either insufficient OS permission or the name of file exceeds maximum file name length.
    Thanks
    So you are able to connect later using SRVCTL, hmmmm
    Edited by: CKPT on Jul 23, 2010 9:06 AM

  • Separate Oracle Software and Databases?

    I need to install the Oracle application software to one disk volume, and allow Oracle to store it's databases on another distinct disk volume. I'm also doing this with a headless response file. I initially thought that the ORACLE_HOME and ORACLE_BASE settings in the response file may be what I need:
    ORACLE_HOME=/u01/app/oracle/product/11.2.0/db_1
    ORACLE_BASE=/u01/app/oracle
    However, since ORACLE_HOME is a subdirectory of ORACLE_BASE, I can't mount both locations to different volumes.
    How can I do this?
    Doug.

    895588 wrote:
    I need to install the Oracle application software to one disk volume, and allow Oracle to store it's databases on another distinct disk volume. I'm also doing this with a headless response file. I initially thought that the ORACLE_HOME and ORACLE_BASE settings in the response file may be what I need:
    ORACLE_HOME=/u01/app/oracle/product/11.2.0/db_1
    ORACLE_BASE=/u01/app/oracle
    However, since ORACLE_HOME is a subdirectory of ORACLE_BASE, I can't mount both locations to different volumes.
    How can I do this?
    Doug.Oracle datafiles do NOT need to reside under ORACLE_BASE

  • Login issue in both Oracle EBS and database

    My environment
    EBS --> R12.0.6
    Platform -> AIX
    DB Node -> oracledb
    APPS Node -> app1
    Issues:
    On DB Node:
    when trying to open alert log file getting following error against command:
    vi alert*
    ksh: 0403-030 The fork function failed. Too many processes already exist.
    when trying to get connection through sqlplus either from db-node or apps-node getting following error message:
    ORA-12518 Tns: Listener could not hand off client conenction.
    when trying to login application while accessing through URL http://hostname.domain:port getting either blank page or 500 Internal server error containing also message of
    ORA-12518 Tns: Listener could not hand off client conenction
    This is production server and users are not able to use the application. Please guide me to overcome the issue. Thanks in advance.
    Regards,
    M.U.N.A

    Hi;
    What is your maxuproc value? Please check below link:
    http://www.computing.net/answers/unix/aix-problem-please-help/5468.html
    http://www.computing.net/answers/unix/aix-problem-too-many-process/6681.html
    Also be sure you have related prerquest for IAX
    Oracle Applications Installation and Upgrade Notes Release 12 (12.0.4) for AIX-Based Systems [ID 402306.1]
    For tns error check below notes:
    ORA-12518 / TNS-12518 Troubleshooting [ID 556428.1]
    R12 Concurrent Managers Not Starting After Patching or Upgrade Changes [ID 811093.1] << also check referance part
    Regard
    Helios

Maybe you are looking for