Forum Discussion

manatee's avatar
manatee
Level 6
10 years ago
Solved

how to secure RMAN scripts?

NBU 7.6.0.3

this may sound silly but i need the opinion of the experts please.  when NBU does Oracle database backup, it calls the RMAN script. this RMAN script contains instructions on how to backup and what to backup. it also contains login credentials for the account (sys) allowed to access the database.

questions:

  1. since the RMAN script is in plain text, is it possible to protect it while being called by NBU?
  2. can the login credentials be specified NOT in the RMAN script, but elsewhere, in order to protect it?

 

regards,

Reno

7.6
Backup and Recovery
NetBackup
Solaris

6 Replies

Sort By
  • Michael_G_Ander's avatar
    Michael_G_Ander
    Level 6
    10 years ago

    Think it is possible to create a password file for RMAN, but that is more a Oracle thing than a Netbackup thing. 

    Have not seen it done, the reason being that the Netbackup service/daemon had full access to the machines anyway through system/root.

  • manatee's avatar
    manatee
    Level 6
    10 years ago

    so in a way, the NBU daemon should also be secured right? i wonder how it's done..

  • Will_Restore's avatar
    Will_Restore
    Level 6
    10 years ago

    ensure RMAN scripts are owned by oracle user and permissions are set to 700 (-rwx------)

  • Michal_Mikulik1's avatar
    Michal_Mikulik1
    Moderator
    10 years ago

    Starting at NBU 7.6, you can configure a new type of policy - Oracle Intelligent Policies. With them, credentials are saved on Master Server, not in a RMAN script on Oracle client.

     

    Regards

    Michal

  • manatee's avatar
    manatee
    Level 6
    10 years ago

    where does one find this "Oracle Intelligent Policies" please?