Oracle Golden Gate Credential Store
Securely manage credentials with GoldenGate's credential store feature.
When you work with Oracle Golden Gate with Oracle Multi-Tenant, you have to deal with multiple containers, users and tns connections. Trying to remember all those details when you issue dblogin inside ggsci becomes challenging. Golden Gate Credential Store manages your local database user ID's along with their encrypted passwords so you don't have to specify plain text passwords in the parameter files.
Add Credential Store
With a simple command, you can add credential store within Golden Gate
GGSCI> ADD CREDENTIALSTORE
This creates a credential store file under dircrd sub-directory.
Add User to Credential Store
To add a new user ID and password with an alias name
GGSCI> alter credentialstore add user c##ggadmin@AKS01_CDB alias ggadmin_cdb
Where:
c##ggadmin: is a database username
@AKS01_CDB: is a TNS connection string to the root container
alias ggadmin_cdb: is an alias that can be used in parameter files to login with specific user & password
Note: If you don't specify alias, golden gate
To view the User Id's stored in Credential Store, user INFO command
GGSCI> INFO CREDENTIALSTORE
Login to Golden Gate Using Alias
You are all set with Golden Gate Credential store and login to database using the Alias. Instead of USERID, you will use USERIDALIAS and specify the credential store alias
GGSCI> DBLOGIN USERIDALIAS ggadmin_cdb
If there is a change in user password at DB level, you must update credential store
GGSCI> ALTER CREDENTIALSTORE REPLACE USER c##ggadmin@AKS01_CDB ALIAS ggadmin_cdb
To delete a user from credential store
GGSCI> ALTER CREDENTIALSTORE DELETE USER ggadmin_cdb
Enjoy!!