Encrypt password value for GoldenGate using blowfish algorithm

 

Encrypt password value for Golden Gate using Blow fish algorithm

GGSOURCE IS THE PASSWORD FOR USER GGSOURCE (DB USER)

Login as ggsci user:

GGSCI (Linux03 as GGSOURCE@orcl/PDBORCL) 14> ENCRYPT PASSWORD 
GGSOURCE,ENCRYPTKEY DEFAULT

Using Blowfish encryption with DEFAULT key.
Encrypted password:  AACAAAAAAAAAAALAXCJHZHLEZAKGMFABMBWBEJLFHCRHABJGYI  --> This is encrypted value
Algorithm used:  BLOWFISH

[gguser@Linux03 OGGHOME]$ mkdir dirinc
[gguser@Linux03 OGGHOME]$ vi ./dirinc/ggtarget.inc


We can create a  include file to use it for our future references.

GoldenGate Trainer (to All - Entire Audience): vi ./dirinc/ggtarget.inc
USERID ggtarget, PASSWORD AACAAAAAAAAAAALAXCJHZHLEZAKGMFABMBWBEJLFHCRHABJGYI, ENCRYPTKEY DEFAULT
  
we can use new hash value for our ggsci future dblogins  like this

GGSCI (Linux03 as GGSOURCE@orcl/PDBORCL) 15> DBLOGIN USERID GGSOURCE@PDBORCL,PASSWORD AACAAAAAAAAAAALAXCZHLEZAKGMFABMBWBEJLFHCRHABJGYI ,ENCRYPTKEY DEFAULT

While PDBORCL is the DB NAME


Successfully logged into database PDBORCL

Create the new groups and user for GoldenGate sofwtare. - STEP -1

This is an optional setup. By doing this you can separate the golden gate user access from other users like oracle, RAC user etc. While some prefer to have GG software installed with in oracle user. I like to have it separated.

Create the new groups and user for GoldenGate replication sofwtare.

groupadd ggowner  ## Adding new group ggowner
useradd -g ggowner -G dba,oper gguser ## Adding new user gguser & add to groups default ggowner additional dba,oper,oinstall

WE CAN QUERY THESE NEW USERS IN LINUX:

[root@Linux03 Desktop]# cat /etc/passwd |grep gguser
gguser:x:501:501:golden gate user:/home/gguser:/bin/bash
gguser1:x:502:54331::/home/gguser1:/bin/bash

LOGIN AS NEW USER :

[root@Linux03 Desktop]# su gguser

CHECK THE GROUPS GGUSER IS PART OF :

[gguser@Linux03 Desktop]$ id
uid=501(gguser) gid=501(gguser) groups=501(gguser),54321(oinstall),54322(dba),54330(ggowner) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c102