Unverified Commit 051f222e authored by Jason O'Donnell's avatar Jason O'Donnell Committed by GitHub
Browse files

docs/oracle: add wallet permissions example (#13924)


* docs/oracle: add wallet permissions example

* Update website/content/docs/secrets/databases/oracle.mdx
Co-authored-by: default avatarJohn-Michael Faircloth <fairclothjm@users.noreply.github.com>
Co-authored-by: default avatarJohn-Michael Faircloth <fairclothjm@users.noreply.github.com>
Showing with 15 additions and 3 deletions
+15 -3
......@@ -106,9 +106,6 @@ pluggable databases rather than the container database in the `connection_url` f
### Connect Using SSL
~> **Note**: The wallets used when connecting via SSL should be available on every Vault
server when using high availability clusters.
If the Oracle server Vault is trying to connect to uses an SSL listener, the database
plugin will require additional configuration using the `connection_url` parameter:
......@@ -133,6 +130,21 @@ vault write database/config/oracle \
password="password"
```
#### Wallet Permissions
~> **Note**: The wallets used when connecting via SSL should be available on every Vault
server when using high availability clusters.
The wallet used by Vault should be in a well known location with the proper filesystem permissions. For example, if Vault is running as the `vault` user,
the wallet directory may be setup as follows:
```shell
mkdir -p /etc/vault/wallets
cp cwallet.sso /etc/vault/wallets/cwallet.sso
chown -R vault:vault /etc/vault
chmod 600 /etc/vault/wallets/cwallet.sso
```
### Using TNS Names
~> **Note**: The `tnsnames.ora` file and environment variable used when connecting via SSL should
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment