6.7.2 Configuring Credential Checkout for Oracle Database

To enable credential checkout for Oracle, perform the following:

  1. Download and install the Oracle database client:

    1. Download and install the Oracle database client by using the instantclient-basic-linux.x64-x.x.zip package.

      NOTE:You can download the Oracle database client from the Instant Client at http://www.oracle.com/technetwork/indexes/downloads/index.html#database. All the files that you retrieve through the Oracle client zip/ tar file should be saved in /lib64 for 64-bit machine and /lib for 32-bit machine.

    2. Create a symbolic link libclntsh.so for the libclntsh.so.xx.x file in /lib64 or /lib.

      For example, for libclntsh.so.12.1 create a symbolic link libclntsh.so (libclntsh.so -> libclntsh.so.12.1).

  2. Configure the Oracle client library path in Privileged Account Manager:

    1. On the home page of the Privileged Account Manager administration console, click Hosts.

    2. On the middle pane, select the Privileged Account Manager host.

    3. On the right pane, click Packages.

    4. Select the dbaudit package.

    5. On the left pane, click Settings.

    6. In the Oracle Client Library Path field, specify the path where oracle client is installed. By default the path is /lib64 for a 64-bit machine or /lib for a 32-bit machine.

      This library must be installed on a Privileged Account Manager server.

  3. Add the database server details as a resource and add the privileged account of the database server. To add database resource and its credentials, click Credential Vault > Database > Database Type and click + next to the Resources. For more information about the resource configuration fields, see the contextual help.

  4. Create a database rule:

    1. On the home page of the console, click Command Control.

    2. In the Command control pane, click Rules.

    3. In the details pane, click Add Rule.

    4. Specify a name for the database rule, then click Finish.

    5. To configure the rule, select the rule, then in the details pane, click Modify.

      Configure only the following:

      Run User: Select Everyone from dropdown list.

      Run Host: Specify the name of the Database resource created above.

      Authorize: Select Yes, then select Stop from the drop-down list.

    6. Click Finish. The settings you have defined for the rule are displayed in the console.

  5. Add database password check out command to the rule:

    1. On the middle pane, click the Commands icon.

    2. For database password check out rule, From the drop down list of commands, drag the Oracle DB Password Check Out command and drop it to the database rule