Skip to content

Commit

Permalink
docs/oracle: add wallet permissions example
Browse files Browse the repository at this point in the history
  • Loading branch information
jasonodonnell committed Feb 7, 2022
1 parent 1c7ce15 commit d573a9d
Showing 1 changed file with 15 additions and 3 deletions.
18 changes: 15 additions & 3 deletions website/content/docs/secrets/databases/oracle.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -106,9 +106,6 @@ pluggable databases rather than the container database in the `connection_url` f

### Connect Using SSL

~> **Note**: The wallets used when connecting via SSL should be available on every Vault
server when using high availability clusters.

If the Oracle server Vault is trying to connect to uses an SSL listener, the database
plugin will require additional configuration using the `connection_url` parameter:

Expand All @@ -133,6 +130,21 @@ vault write database/config/oracle \
password="password"
```

#### Wallet Permissions

~> **Note**: The wallets used when connecting via SSL should be available on every Vault
server when using high availability clusters.

The wallet used by Vault should be in a well known location with the proper filesystem permissions. For example, if Vault is running as the `vault` user,
the wallet directory may be setup as followed:

```shell
mkdir -p /etc/vault/wallets
cp cwallet.sso /etc/vault/wallets/cwallet.sso
chown -R vault:vault /etc/vault
chmod 600 /etc/vault/wallets/cwallet.sso
```

### Using TNS Names

~> **Note**: The `tnsnames.ora` file and environment variable used when connecting via SSL should
Expand Down

0 comments on commit d573a9d

Please sign in to comment.