vault配置(RAC)

环境:

OS:Centos 7

DB:11.2.0.4 2节点RAC

1.关闭监听,em和关闭数据库

停掉监听
[grid@rac01 ~]$ srvctl stop listener
停掉数据库
[grid@rac01 ~]$ srvctl stop database -d slnngk
停掉em,em步骤在节点1
[root@rac01 ~]# su - oracle
[oracle@rac01 ~]$ emctl stop dbconsole

2.组件编译
注意这里需要在节点1上和节点2上都进行同样的操作
Oracle Vault是依赖Label Security，需要在操作系统层面上启动配置。在Linux/Unix环境下，使用make进行配置链接.
[oracle@rac01 lib]$cd $ORACLE_HOME/rdbms/lib
[oracle@rac01 lib]$make -f ins_rdbms.mk dv_on lbac_on ioracle

3.重启动监听器,emctl和数据库
节点1上操作
[grid@rac01 ~]$ srvctl start listener
[grid@rac01 ~]$ srvctl start database -d slnngk
[root@rac01 ~]# su - oracle
[oracle@rac01 ~]$ emctl start dbconsole

4.调用dbca启动配置vault
这里需要启动vnc,通过图形界面操作

这里我没有另外创建管理账号,那么dbvowner账号就用户DV_OWNER和DV_DV_ACCTMGR的权限，否则的话权限是分开的。

5.查看安装结果
节点1:
SQL> set linesize 1000;
SQL> select * from v$option where parameter like '%Vault%';

PARAMETER VALUE
---------------------------------------------------------------- ----------------------------------------------------------------
Oracle Database Vault TRUE

节点2:
[oracle@rac02 ~]$ sqlplus /nolog

SQL*Plus: Release 11.2.0.4.0 Production on Wed Oct 20 22:47:40 2021

SQL> connect / as sysdba
Connected.
SQL> set linesize 1000;
SQL> select * from v$option where parameter like '%Vault%';

PARAMETER VALUE
---------------------------------------------------------------- ----------------------------------------------------------------
Oracle Database Vault FALSE

节点1创建用户
SQL> connect / as sysdba
Connected.
SQL> create user hxl01 identified by oracle;
create user hxl01 identified by oracle
*
ERROR at line 1:
ORA-01031: insufficient privileges

节点2创建用户
SQL> connect / as sysdba
Connected.
SQL> create user hxl01 identified by oracle;

User created.

说明在节点1和节点2上都需要进行步骤2的组件编译,下面需要在节点2上做步骤2的操作,需要停掉监听和数据库以及emctl

6.浏览器登录

https://192.168.56.144:1158/dva/login.jsp