Re: Autostarting wallet question.

From: Charles Schultz <sacrophyte_at_gmail.com>
Date: Thu, 12 Mar 2015 15:09:03 -0500
Message-ID: <CAPZQniWcv5_ML6eEvVot+rSvBn_fiBzKNH0pMfB-uomDEooiWw_at_mail.gmail.com>

I am just trying to find my way. :) I do not yet know the difference between a "regular auto login wallet" and a "local wallet". I assume the former is an SSO and the latter a PK1, but what makes it "local" vs not local?

I did a test where I took the auto-login wallet from one database on one host and copied it to another wallet on another host, and the database failed to open the wallet upon startup. This tells me that in fact the step I used above to create the auto-login wallet cannot be migrated from one host to another. I have not yet tried it for another database on the same host.

On Thu, Mar 12, 2015 at 3:05 PM, Jeremy Schneider < jeremy.schneider_at_ardentperf.com> wrote:

> On Thu, Mar 12, 2015 at 2:40 PM, Alex Fatkulin <afatkulin_at_gmail.com>
> wrote:
> > Just keep in mind that auto login wallet can be opened anywhere (on any
> > system) without knowing the password. So if someone steals your wallet
> they
> > can open it without a password and get access to all your encryption
> keys.
> >
> > If this is not desirable then auto login _local_ wallet might be a better
> > choice - it can only be opened on the system where it was created.
>
> YES - I would be hesitant to use an auto login wallet; the local
> wallet seems much more secure.
>
> However from checking the docs, it seems to me that the local wallet
> was added in 11.2 - so if you're on 11.1 or older then you might need
> to consider other the regular auto login wallet.
>
> Charles - if you were using a regular auto login wallet then maybe
> that's why you were seeing different behavior from me with querying
> the encryption view?
>
> -Jeremy
>
> --
> http://about.me/jeremy_schneider
>

-- 
Charles Schultz

--
http://www.freelists.org/webpage/oracle-l

Received on Thu Mar 12 2015 - 21:09:03 CET