Oracle 11g通过wallet实现无密码登录

刺骨的言语ヽ痛彻心扉 2024-04-18 00:26 80阅读 0赞

创建一个目录来存放wallet  
\[oracle@localhost trace\]$ mkdir -p  /u01/app/oracle/wallets  
  
 在客户端通过下面命令创建一个wallet  
 \[oracle@localhost trace\]$ mkstore -wrl /u01/app/oracle/wallets -create  
Oracle Secret Store Tool : Version 11.2.0.4.0 - Production  
Copyright (c) 2004, 2013, Oracle and/or its affiliates. All rights reserved.  
  
Enter password:                 
  
Enter password again:    
  
 输入的密码是wallet的管理密码，在创建具体用户的wallet时需要用到  
  
 在目录下会生成下面文件  
\[oracle@localhost wallets\]$ ls  /u01/app/oracle/wallets  
cwallet.sso  ewallet.p12  
  
创建数据库连接证书  
\[oracle@localhost trace\]$ mkstore -wrl /u01/app/oracle/wallets -createCredential DB\_FIRE  scott  
Oracle Secret Store Tool : Version 11.2.0.4.0 - Production  
Copyright (c) 2004, 2013, Oracle and/or its affiliates. All rights reserved.  
  
Your secret/Password is missing in the command line   
Enter your secret/Password:        \# 输入scott的密码  
  
Re-enter your secret/Password:        \# 再次输入scott的密码  
  
Enter wallet password:               \# 输入wallet的管理密码  
     
Create credential oracle.security.client.connect\_string1  
  
 /u01/app/oracle/wallets 是在之前创建的wallet存放路径  
DB\_FIRE是TNS中的连接名  
 scott是数据库中的用户名  
  
 \[oracle@localhost admin\]$ cat tnsnames.ora   
DB\_FIRE =  
  (DESCRIPTION =  
    (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1536))  
    (CONNECT\_DATA =  
      (SERVER = DEDICATED)  
      (SERVICE\_NAME = OTA4GSRV)  
    )  
  )  
  
在sqlnet.ora文件中，编辑 WALLET\_LOCATION 参数，将目录路径设置为上面创建的wallet存放路径  
SQLNET.WALLET\_OVERRIDE参数为TRUE，会覆盖系统本身存在的外部安全认证，启用数据库认证  
\[oracle@localhost admin\]$ vi sqlnet.ora  
WALLET\_LOCATION =  
  (SOURCE =  
    (METHOD = FILE)  
    (METHOD\_DATA =  
  (DIRECTORY = /u01/app/oracle/wallets)  
  )  
 )  
  
SQLNET.WALLET\_OVERRIDE = TRUE  
SSL\_CLIENT\_AUTHENTICATION = FALSE  
SSL\_VERSION = 0  
  
 通过下面方式实现无密码登录  
\[oracle@localhost admin\]$ sqlplus /@DB\_FIRE  
  
SQL\*Plus: Release 11.2.0.4.0 Production on Wed Jan 11 11:59:47 2017  
  
Copyright (c) 1982, 2013, Oracle.  All rights reserved.  
  
Connected to:  
Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production  
With the Partitioning, OLAP, Data Mining and Real Application Testing options  
  
SQL>     
  
查看外部密码存放内容  
\[oracle@localhost admin\]$ mkstore -wrl /u01/app/oracle/wallets -listCredential  
Oracle Secret Store Tool : Version 11.2.0.4.0 - Production  
Copyright (c) 2004, 2013, Oracle and/or its affiliates. All rights reserved.  
  
Enter wallet password:                 
  
List credential (index: connect\_string username)  
1: DB\_FIRE scott  
  
删除外部密码存放的证书  
 \[oracle@localhost admin\]$ mkstore -wrl /u01/app/oracle/wallets -deleteCredential DB\_FIRE  scott  
Oracle Secret Store Tool : Version 11.2.0.4.0 - Production  
Copyright (c) 2004, 2013, Oracle and/or its affiliates. All rights reserved.  
  
Enter wallet password:                 
  
Delete credential   
Delete 1  
test invalid  
Invalid command: scott  
  
\[oracle@localhost admin\]$ mkstore -wrl /u01/app/oracle/wallets -listCredential  
Oracle Secret Store Tool : Version 11.2.0.4.0 - Production  
Copyright (c) 2004, 2013, Oracle and/or its affiliates. All rights reserved.  
  
Enter wallet password:                 
  
List credential (index: connect\_string username)  
  
删除证书后， 通过无密码方式登录时，会提示错误  
\[oracle@localhost admin\]$ sqlplus /@DB\_FIRE  
  
SQL\*Plus: Release 11.2.0.4.0 Production on Wed Jan 11 14:27:27 2017  
  
Copyright (c) 1982, 2013, Oracle.  All rights reserved.  
  
ERROR:  
ORA-01017: invalid username/password; logon denied

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/26506993/viewspace-2132246/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/26506993/viewspace-2132246/