RE: EM 12c best practise!!

From: Peter Sharman <pete.sharman_at_oracle.com>
Date: Wed, 4 Jun 2014 12:04:48 -0700 (PDT)
Message-ID: <72f0667a-3de2-457e-959c-08b42859578b_at_default>



Yup, nailed it in one – as I would expect from Fuad. J

 

Pete

Pete Sharman
Principal Product Manager
Enterprise Manager Product Suite
33 Benson Crescent CALWELL ACT 2905 AUSTRALIA

Phone: HYPERLINK "tel:+61262924095"+61262924095 | | Fax: HYPERLINK "fax:+61262925183"+61262925183 | | Mobile: +61414443449 

  _____  

"Controlling developers is like herding cats."

Kevin Loney, Oracle DBA Handbook

 

"Oh no, it's not, it's much harder than that!"

Bruce Pihlamae, long term Oracle DBA

  _____  

 

From: Fuad Arshad [mailto:dmarc-noreply_at_freelists.org] Sent: Wednesday, June 4, 2014 9:19 PM
To: dmarc-noreply_at_freelists.org
Cc: ORACLE-L
Subject: Re: EM 12c best practise!!

 

named credentials is the way to go. easy to setup grant it to the user and no one knows the password 

EM 12cr4   enhances these options by adding  ssh keys as credentials as well 

Fuad

 

On Jun 4, 2014, at 7:10, "edwin devadanam" <HYPERLINK "mailto:dmarc-noreply_at_freelists.org"dmarc-noreply_at_freelists.org> (Redacted sender "HYPERLINK "mailto:edwin_kodamala_at_yahoo.com"edwin_kodamala_at_yahoo.com" for DMARC) wrote:

Thanks Faud..already i have gone through this.

am still reading EM docs before i can put in few things in place for my Env.

 

also am interested how other guys in thier env are performing things in terms of global id or something which is secured...

 

thanks,

Edwin.K

 

On Wednesday, June 4, 2014 3:49 PM, Fuad Arshad <HYPERLINK "mailto:dmarc-noreply_at_freelists.org"dmarc-noreply_at_freelists.org> wrote:

 

you need to look at named credentials for this 

the wp below can help 

http://www.oracle.com/technetwork/oem/framework-infra/wp-em12c-security-best-practicesv2-1493383.pdf#page16

Fuad

 

On Jun 4, 2014, at 5:33, "edwin devadanam" <HYPERLINK "mailto:dmarc-noreply_at_freelists.org"dmarc-noreply_at_freelists.org> (Redacted sender "HYPERLINK "mailto:edwin_kodamala_at_yahoo.com"edwin_kodamala_at_yahoo.com" for DMARC) wrote:

Hi guru's,

 

I am trying to explore and understand more on EM 12c best practices to be followed.

I am looking for more into security setup and creating a global ID.

 

As am reading through EM12c documentation,i need some advice on security setup.

 

Is it possible to setup "global id/global role" to perform Job Scheduling(HOST/SQL script..etc) for multiple servers?

 

example for 10 servers with 10 different O/S and DB user and my requirement would like what is the best way to perform EM jobs without revealing credentials to anyone?

 

thanks,

Edwin.K

we have mupltiple 11g oracle database,OBIEE,Oracle Ebiz Suite and Oracle Portal on redhat linux 6/HP-ux servers

 

 

 

--
http://www.freelists.org/webpage/oracle-l
Received on Wed Jun 04 2014 - 21:04:48 CEST

Original text of this message