OUD 12c – SSLHandshakeException with “no cipher suites in common”
Recently I’ve update the java installation of my Oracle Unified Directory (OUD) 12.2.1.0.3 to the latest release. Java 1.8.0 update 202 to be exact (p28916775_180202_Linux-x86-64.zip). Actually a piece...
View ArticleConfigure Oracle EUSM to use LDAPS
With the introduction of Oracle 18c, eusm is officially designated as an Enterprise User Security Utility. It is now officially documented of the Enterprise User Security Administrator’s Guide. Before...
View ArticleSOUG Day 2019 – Oracle Database in Docker
Today I did have the opportunity to give a presentation on Oracle Database in Docker at the SOUG day in Olten. It was a great opportunity to discuss how Oracle database engineering can be simplified...
View ArticlePDB_OS_CREDENTIAL with external table pre-processor
As part of a customer project I am currently enhancing PDB security and isolation. Since OS interaction is necessary, I can not just use lockdown profile to block OS access. The idea is to isolate the...
View ArticleSQL Developer 19.1 unable to use connection type ldap with OUD
Due to a tip from a work colleague, I came across a changed behaviour of the latest SQL Developer release. It affects the connection type LDAP respectively the use of an LDAP directory for the database...
View ArticleOracle CPU / PSU Advisory July 2019
Recently, just in the middle of the summer holidays, Oracle has released the third Critical Patch Advisory for its products. It seems there’s a lot of work going on in Redwood Shore. Oracle has fixed...
View ArticleAudit Trail cleanup in Oracle Multitenant environments
A crucial aspect of any database audit concept is the management and maintenance of audit trails. Depending on the defined audit policies and the database activity, an audit trail can grow relatively...
View ArticleOracle Enterprise User Security with multiple ldap.ora
Recently I came across the situation where I have to configure Enterpriser User Security for a database server with multiple databases for different directories. This is quite tricky when using a...
View ArticlePDB Isolation and Security
Brighton see side Today I did have my first presentation at the UKOUG TechFest 2019 in Brighton. Looking back it was a great day with many interesting lectures and good conversations with colleagues...
View ArticleKerberos Troubleshooting – A few approaches
It is way too long ago since my last blog post. These were or are busy weeks for me. Any way, I finally found some time to start writing a blog post about a special setup for kerberos authentication...
View ArticleOracle Password Filter for AD, a few exciting insights
When it comes to the conception and implementation of a central user administration of Oracle databases, authentication is one of the central topics. Often there is a need for integration with an...
View ArticleOracle Security EUS Snippets – Setup Proxy User Privileges
Since I’m always short of time for a longer blog post, I’ll just try a short one. Intended as a mini-series, I will show different configuration examples for Oracle Enterprise User Security. Today...
View ArticleSecurity Best Practice: Oracle passwords, but secure!
Beach view in Brighton at the UKOUG Techfest 2019 Today I held my presentation about Oracle security best practice “Oracle passwords, but secure!” at the virtual UKOUG event. Unfortunately, this year...
View ArticleHow to get an Oracle 21c Database on the Oracle Cloud
A few hours ago Oracle published a blog post about the new version Oracle 21c. See Introducing Oracle Database 21c. It is again an innovation release with a couple of interesting new features and...
View ArticleHome office, starving and the favourite takeaway is far away
It happens that the children are at school and the wife is at work in the hospital. For lunch a light snack from the takeaway around the corner would be perfect. No problem at work in the city, but...
View ArticleNotes on Oracle Password Security
This morning I had the great opportunity to participate in the virtual event AUSOUG Connect 2021 with my lecture Security Best Practice: Oracle passwords, but secure!. For me it was a premiere and a...
View ArticleDOAG Oracle Database Vault
This morning I had the opportunity to give a presentation on Oracle Database Vault at the DOAG conference. Abstract Oracle Database Vault has been on the market for a few years now. The product has...
View ArticleFree Oracle Unified Directory for Oracle Net Services
The tnsnames.ora is a configuration file for Oracle database name resolution. It contains network service names that are mapped to connection descriptors for the local naming method. With the help of...
View ArticleEasy replacement of tnsnames.ora with LDAP Directory Server
The tnsnames.ora is a configuration file for Oracle database respectively Oracle Net Service Names resolution. It contains network service names that are mapped to connection descriptors for the local...
View ArticleHow to write Unified Audit Trail Records to SYSLOG
With the introduction of Oracle Unified Audit, Oracle has completely redesigned the process of logging audit events. With the new unified audit trail, there is only one place where audit records are...
View Article