Sudo users within Oracle database

Hi, I know this might sound a little strange, but I thought someone might have been thru a similar situation, if not the same.
Our application has following users.
app0 (schema owner)
app0feed ( db account that is used to run feeds)
app0web ( db account used by the web app).
So when we clone our prod db for testing purposes, we want to be able to track individual users that are operating on these test databases.
We let users use app0, app0feed, app0web logins into these Test databases to do their work, running feeds etc, all these users don't have individual logins for these database so when they login to these test databases it's difficult for us to track the things that they do when they are dealing prod data.
Even though they login with app users we can easily identify them from the machine-name, program and other fields on v$session.
But I was wondering if there was anyway we can have them be themselves be able to do things as app0feed and app0web ( just like sudo on unix).
Where we sudo as Oracle to do DB admin related work on DB hosts.
Ofcourse I can grant all the privs that app0feed or app0web had to these individual users, but it's just duplicating things....so thought if there was anything similar to sudo, I have not come across any but thought someone might have had similar request.
Thanks in Advance
Ramki

Centinul, It works like a charm when using this via SQLPLUS, but I am not sure how to use the connection string for Toad users.
$ sqlplus proxy_user[appuser]/proxy_user@DB
And also when using proxy users using JDBC there are some specific changes that are needed while making a JDBC connection using thin drivers.
OracleConnection conn = (OracleConnection) DriverManager.getConnection(
"jdbc:oracle:thin:pu_pool_user/pu_pool_user@localhost:1521:ora1012",
properties);
conn.openProxySession(OracleConnection.PROXYTYPE_USER_NAME, properties);
this is a an exert from the following link.
http://www.it-eye.nl/weblog/2005/09/12/oracle-proxy-users-by-example/
These changes might be little hard to convince the Dev users to change their code when working with Test databases?.
Is there any way around this, without making code changes.
Thanks,
Ramki

Similar Messages

How to manage HTML DB end users in Oracle Database 10g Express Edition?

I successfully installed Oracle XE on my Windows/XP PC.
I followed 'Getting Started Guide' and created a new application using the hr.employees table.
I could run this application by logging in as hr/hr.
How can I create other HTML DB end users to run this application?
I can only create database users in Oracle XE environment.
Help needed....

This MyApp application (Application 100) was created by the HR Oracle account.
I could use
http://127.0.0.1:8080/htmldb/f?p=100
to run this application by logging in as hr/hr .
For the above URL, if I logged in as anotherOracleAccount/password, I got the 'Invalid Login Credentials' message.
As you said, I could use
http://127.0.0.1:8080/htmldb/f?p=4550
to get into HTML DB of the Oracle XE environment by logging in as anotherOracleAccount/password.
Since MyApp is using the HR-owned 'employees' table, should we grant some privileges on hr.employees to anotherOracleAccount?
I tried this, I still got the 'Invalid Login Credentials' message.

How to trace which user shutdown oracle database in unix OS?

our organization is having 10 DBA with sysdba priviladge. We are using UNIX operating system. At morning say for example if some one (SYSDBA user) shutdown the oracle database how other sysdba user trace the user who shutdown the database? the information i need is terminal from where oracle got shutdown and the username? Please help...

Hello,
You are right Sybrand, SYSDBA connections are always audited.
My answer was about enabling auditing to any connections, which may give informations about who access to the Database in general. And, this is true, it was not the scope of the OP question.
However, so as to enlarge audit of SYS/SYSDBA/SYSOPER operations, setting the parameter audit_sys_operations=TRUE may be interesting:
http://download.oracle.com/docs/cd/E11882_01/network.112/e16543/auditing.htm#DBSEG0611
To the OP:
Where the audit tracefile get genareted for sys user?You may execute this:
show parameter audit_file_destThank again Sybrand for correcting me.
Best regards,
Jean-Valentin

Reserving the sessions for a user in Oracle database

Hi,
Suppose the Oracle database is running in dedicated mode.
I want sys or abc user to have some sessions reserved for them.
This is because if there is heavy load on the system and all the sessions are used up then we can not connect to database to see what is happening inside.
However, if we have got some policy on the number of reserved sessions for a user then we can always log in as that user and see what is happening inside the database.
Consider any version of database, if you can get what I am asking then try answering it, else I can elaborate it further.
Please note that I do not want to change the server mode from Dedicated to Shared.
Any help will be appreciated.
Thank you.
--Harvey.

Hi Guys,
There has to be some way to achieve this. But your sugestions are correct to have a user connected always if we are going to face an issue.
Any ways if there is no other way to achive this then we can not do any thing, else Oracle come up with something.
--Harvey

Unable to create new user using Oracle Database vault

Hi,
can somebody help me to autorize user other then SYS user (e.g. system) to CREATE new and ALTER users when my database is secured by Oracle database vault with default installation settings;
Thanks

Reading the DV docs would be a great place to start.
Consider, for a moment, that if the normal privileges provided to SYS using DV worked the same as they do in a regular database you wouldn't have a data vault you'd have a regular database.
After you read the docs log on and try the following:
SELECT username
FROM dba_users
WHERE username LIKE 'DV%';Aha!

List normal users and corresponding ops$users in Oracle database in groups

Hi,
We are having Oracle database version 11.2.0.2 on Oracle Ent. Linux 5.1. Basically, according to our requirement, we need to list similar users in the database which are having individual usernames as well as their corresponding ops$usernames (in one query).
Eg. in the database if have users 'xyz' and 'ops$xyz', 'abc' and 'ops$abc', then we need to write a query which can list this users together in groups as below;
xyz
ops$xyz
Similarly,
abc
ops$abc.
Can you help me write a query so that I can list all these similar users residing in my database together.
Also, later I need to find out the roles and privileges assigned to these users once its listed.
Thanks in advance.
~ Rahul

Hi, Rahul,
To ignore leading 'OPS$' when sorting:
SELECT       username
FROM       dba_users
ORDER BY REGEXP_REPLACE ( username
                        , '^OPS\$'
;'$' has a special meaning in regular expressions, so when you literally want a '$' sign, it has to be "escaped" as '\$'.
Edited by: Frank Kulash on May 17, 2013 9:52 AM

Which are the ip are accessing the oracle user in oracle database

Hi,
How to check which are the ip are accessing the oracle user in oracle database

Ivan Kartik wrote:
There is error in first query it should be user machine instead of terminal in utl_inaddr.get_host_address(terminal) IP_ADDRESS.
Anyway both queries might produce an error if OS system is not configured to resolve the short names (in case FQDN is not used)."user machine"... Can you please elaborate more. The above both queries are running fine at my end using 11.2.0.1 and windows xp.
Regards
Girish Sharma

Create Portal user within Oracle IAS9.0.4 (10g) using APIs

With the Portal version 3.0 we created our users using the functions:
1. wwsec_api.add_portal_user(...)
2. wwsec_api.activate_portal_user(<user>)
3. WWSSO_API_USER_ADMIN.CREATE_USER(...)
Now with the Portal version 9.0.4 (10g) we can't create the users.
Any sugestions?

declare
l_group varchar2(240);
l_member varchar2(240);
l_guid varchar2(32);
l_id number;
l_user_name varchar2(64) := 'user';
l_pass varchar2(64):= 'user';
l_email varchar2(64) := '[email protected]';
begin
--user to ldap
l_guid := wwsec_oid.create_user_entry
p_base => wwsec_oid.get_user_search_base,
P_USER_NAME => l_user_name,
p_password => l_pass,
p_email => l_email
commit;
--include to default group
l_group := 'cn=AUTHENTICATED_USERS,'||wwsec_oid.get_group_search_base;
l_member := 'cn='||l_user_name||','||wwsec_oid.get_user_search_base;
wwsec_oid.grant_group_membership
(p_group_dn => l_group, p_member_dn => l_member);
commit;
--in portal default group
wwsec_api.add_user_to_list(
p_person_id => wwsec_api.id(l_user_name),
p_to_group_id => wwsec_api.group_id('AUTHENTICATED_USERS'),
p_is_owner => wwsec_api.not_owner
commit;
--add to portal
l_id := portal.wwsec_api.add_portal_user(p_User_Name=>l_user_name,
p_Portal_User=>'Y',
p_Email => l_email);
commit;
end;
lower('LUCK')

Oracle Database 11g Editions Overview - link missing

Hello,
A link on the page Oracle Database Editions Overview doesn't work (error page 404) :
"Secure Application Roles
Enable roles only after a user passes any number of security checks. Read More"
=> link on "Read More" is (which obviously doesn't work):
http://www.oracle.com/technology/deploy/security/database-securitysecure-application-roles/index.html
Nicolas.

It eventually come out after a few re-directions. And ?And page read
Oracle Multimedia (Formerly Oracle interMedia) is a feature of Oracle Database that is included in both Standard Edition and Enterprise Edition.
It is a general purpose feature that enables the efficient management, & retrieval of image, audio, and video data.
Oracle Multimedia has knowledge of the most popular multimedia formats and can automate metadata extraction and basic image processing.
Oracle Multimedia increases programmer productivity when developing multimedia applications using JSPs, Servlets, PL/SQL or when using tools such as JDeveloper (ADF/UIX) and Oracle Portal.
Oracle Multimedia manages multimedia data within Oracle Database under transaction control. Alternately, Oracle Database can store and index meta-information together with external references that enable efficient access to media content stored outside the database.
blah blah ....
by the way, the first is getting 404 error.

How-To install SOAP Client Stack in Oracle Database

Hi,
1. i wrote a java clientstub that accesses a webservice.
2. all works fine if i run it from within java.
3. i then tried to port it to oracle database.
4. loading the java classes defined in the sample code works fine too.
5. i then loaded my client (wrapper and client-stub) classes and made pl/sql procedure from the wrapper.
6. i try to access the webservice
the problem:
1. if i made step 5 in SYS-SCHEMA all is ok
2. if i made step 5 in an other SCHEMA i got an exception in step 6:
java.lang.NoClassDefFoundError
the code line is pointing to: m_httpConnection = new OracleSOAPHTTPConnection();
this is located in the client-stub class constructor
there exist synonyms of all classes in the public schema.
is it a problem with priviledges, and if what priviledges are required?
if this isn't the best way to access webservices from within oracle database, what other solutions are possible?
if more information are required, please let me know
thanks
ralf

Hi,
Refer to this document for information on loading SOAP jar files to the database.
The database schema you are using needs to be granted the following permission to access the external web service
execute dbms_java.grant_permission('<dbuser>','SYS:java.net.SocketPermission','<host-name>:<port>','connect,resolve');
where, <host-name> and <port> point to the location where the webservice is running. If you are behind a firewall, use the proxy host and port here.
For more information on accessing external web service from the database refer to the samples on the Database Web Services Page
HTH,
Sujatha
OTN Group.

SAP MDM Import Manager connect to Oracle Database.

Hi expert,
I try to connect to Oracle DB with SAP MDM Import Manager but I cant.
I entered property in "Connect to Sorce" window.
============================================
Type : Oracle
Remote system : MDM
DBMS server : <DBMS host>:<listener port>
Database : Oracle_SID
User : Oracle database user
Password : Oracle database user password
============================================
then error ocurred.
"Unable to connect to source"
I aleady checked to connect to the Oracle database with Oracle client.
It is connected well.
How can I connect ??
thanks and regards
jun

Hi all,
thank you for your replies.
I tried to connect oracle DB except "< and >" symbol but It did not work.
I installed windowXP 32bit , Oracle client 32bit and SAP MDM Import manager 32bit in My local PC.
Also I connect to MDM DB using sqlplus in My local PC.
I wonder that TNSNAME.ORA is used DB connection using SAP MDM Import manager ??
I think TNSNAME.ORA is not used when I connect to DB using SAP MDM Import manager because I enter parameters are properties of TNSNAME.ORA.
I don`t know why don`t connect to DB.
regards,
jun

UNIX user with Oracle software group settings

I am seeking help on this issue.
When I installed Oracle 10g on Solaris 9 sparc box, I created user oracle and assigned oracle user to primary group Oinstall and second group dba. Then installation went successful. After that, I created another user ccmm and assigned ccmm to dba group. Then I created some UNIX scripts and SQL scripts stored on system. When I log into server as ccmm user and tried to connect to Oracle database, it failed. If I log in as oracle user and tried to connect to Oracle database, everything runs fine. My purpose is to log in as ccmm user and connect to Oracle database or start Oracle utilities from there. So where is the problem for ccmm user settings? How can I make ccmm user as Oracle database user on UNIX machine? Thanks in advance.

Not sure if I quite understand what you're looking to do, but have you added the 'ccmm' user to the 'oinstall' group?
vi /etc/group
oinstall::101:ccmm
Don't know if that helps ya or not.
g/l

Trusted Reconciliation-Oracle Database to OIM

Hi,
I created a GTC in OIM for Trusted reconciliation with Oracle database as source.
I can able to create & update users in OIM according to the same operation on database.
but when i delete a user in oracle database, the same user is marked as deleted in OIM (although the user is not physically deleted).
How to know the user is marked as deleted? i mean which attribute of user is updated? how to reflect the same in OIM admin console?
Regards

Hello
About the trusted conector for an Oracle DB that you mentioned before, you said that you could create and update OIM Users....
Could you please tell me what steps did you do to make the reconciliation work, is just that i already created the connector the same way the manual of the connector said but when I ran the reconciliation it doesnt create any OIM User, but when i saw the log it doesnt have any error.
I hope you can help me please!!!!! TNKS!!!!

Oracle Database management and monitoring tools

hello everyone.
Could anyone offer any advice on Oracle database management tools ?
looking for a 3rd party tool that would provide graphical representation on health and activity within Oracle databases.
Any recommendations , or advice on what to avoid?
Many thanks

Thanks , have enterprise manager already.
Really looking for tool that will email , sms alerts
out as they happen.
Ability to set threshold alerts.
report creation of threshold data.
that kind of thing etc.Since you want to pay extra for this capability, look at the Diagnostics Pack add-on for Enterprise Manager. It does what you ask. And makes it available both on Database Control and Grid Control view.
And both Database Control and Grid Control are included in your SE/EE license.

How many users/ schemas can we create in an oracle database?

How many users can we create in an oracle database? Or how many users can oracle handle?
Problem-
I have to store information of ontologies (I will use countries instead) in db.
I have to store information regarding countries.
I have 13 tables in all to maintain for each country.
Now there are two approaches:
1) keep only 13 tables. Have an extra column in each table to indicate that a particular
row stores information for which country.
2) create a new user/ schema for each country. So we can get rid of the extra column
needed in 1st approach.
I have used the second approach. This is because number of entries in each table for a
given country will be large.
So initially when the s/w is installed I create a central-user. Each time data for new
country has to be entered central-user creates a user/ schema, and creates tables for
this user/ schema. The central user can access the tables of all the countries by
country_name.table_name. By this approach I believe searching would be easy.
If there is any flaw in my approach kindly mention it.
Thank you

There is no (practical at least) limit to the number of users & schemas you can have in Oracle.
Your approach, however, is not going to scale nearly as well as the first option you outlined (adding a column). You are going to end up caching every possible variation of the various queries you're going to be executing because you will be referring to so many different tables, which is going to mean that you are doing a lot more work to parsing statements and generally churning through the shared pool. If you create enough users, you're liable to start hitting ORA-04030 errors because your shared pool is so fragmented.
Additionally, you're likely going to end up with a whole lot of dynamically generated SQL to accommodate new schemas getting added over time which is going to cause you even more pain. Figuring out dynamically what table to join in is a heck of a lot more difficult for the programmer to write and for the database to handle than simply passing in a different country code.
If you're concerned about having too much data, you can have your cake and eat it to by adding the country column and partitioning the tables based on country.
Justin
One other item I forgot to mention is maintainability. Having dozens or hundreds of "identical" schemas makes maintenance a huge pain because something like adding a new column now requires dozens or hundreds of separate DDL statements. You're almost guaranteed that some schema isn't going to be in sync-- it's going to miss a column or miss an index, etc.
Message was edited by:
Justin Cave

Sudo users within Oracle database

Similar Messages

Maybe you are looking for