how to secure RMAN scripts?

[manatee]

NBU 7.6.0.3

this may sound silly but i need the opinion of the experts please.  when NBU does Oracle database backup, it calls the RMAN script. this RMAN script contains instructions on how to backup and what to backup. it also contains login credentials for the account (sys) allowed to access the database.

questions:

1. since the RMAN script is in plain text, is it possible to protect it while being called by NBU?
2. can the login credentials be specified NOT in the RMAN script, but elsewhere, in order to protect it?

regards,

Reno

[Michael_G_Ander]

Think it is possible to create a password file for RMAN, but that is more a Oracle thing than a Netbackup thing. 

Have not seen it done, the reason being that the Netbackup service/daemon had full access to the machines anyway through system/root.

[manatee]

so in a way, the NBU daemon should also be secured right? i wonder how it's done..

[Will_Restore]

ensure RMAN scripts are owned by oracle user and permissions are set to 700 (-rwx------)

[Michal_Mikulik1]

Starting at NBU 7.6, you can configure a new type of policy - Oracle Intelligent Policies. With them, credentials are saved on Master Server, not in a RMAN script on Oracle client.

Regards

Michal

[manatee]

where does one find this "Oracle Intelligent Policies" please?

[Marianne · Accepted solution]

Show your Oracle dba's this URL: http://www.oracle.com/technetwork/issue-archive/2009/09-sep/o59recovery-085185.html 

Look at 'stored scripts'.

"With Oracle RMAN stored scripts, you can create scripts that are stored inside the Oracle RMAN catalog and not on the server itself. "