My name is Stefan Oehrli. I’m a Swiss electrical engineer working since several years as an Oracle DBA. My main interests are backup & recovery, database internals, database security, infrastructure management and other stuff coming across my daily work as a DBA and Solution Manager at Trivadis. For a while now, Oracle Unified Directory has been one of them. On this website I share my experience and some of my thoughts in these areas with you. Among other things, you find my blog, a few scripts, links to some papers and presentations I have written or co-authored, list of public appearances as well links to other interesting web resources.
A list of the 5 most recent posts. To see a full list go to the Blogs.
- 20 September 2019 : Audit Trail cleanup in Oracle Multitenant environments
A crucial aspect of any database audit concept is the management and maintenance of audit trails. Depending on the defined audit policies and the database activity, an audit trail can grow relatively quickly. Oracle Multitenant environments increase the operational effort because the root container and each PDB uses their own audit trail. Ok, for a simple CDB with 2-3 PDB [Read more...]
- 7 August 2019 : Conferences, Workshops and Events 2019
I am looking forward to a busy second half of 2019. I will be represented with my lectures at various conferences and events. Enclosed a short overview, at which events I will participate: SOUG Day August 2019 Baden August 27th 2019 Trivadis TechEvent 2019 Regensdorf, September 12th + 13th 2019 DOAG [Read more...]
- 17 July 2019 : Oracle CPU / PSU Advisory July 2019
Recently, just in the middle of the summer holidays, Oracle has released the third Critical Patch Advisory for its products. It seems there's a lot of work going on in Redwood Shore. Oracle has fixed about 319 security vulnerabilities across their products. The Oracle database is relatively prominently represented with 9 security vulnerabilities and a maximal CVSS rating of 9.8. [Read more...]
- 2 July 2019 : SQL Developer 19.1 unable to use connection type ldap with OUD
Due to a tip from a work colleague, I came across a changed behaviour of the latest SQL Developer release. It affects the connection type LDAP respectively the use of an LDAP directory for the database name resolution. After specifying one or more LDAP servers it should actually be possible to select the corresponding context in the drop down list. [Read more...]
- 17 June 2019 : PDB_OS_CREDENTIAL with external table pre-processor
As part of a customer project I am currently enhancing PDB security and isolation. Since OS interaction is necessary, I can not just use lockdown profile to block OS access. The idea is to isolate the PDB with lockdown profiles and allow dedicated OS access. The idea is to isolate the PDB with lockdown profiles and allow dedicated OS access. [Read more...]