My name is Stefan Oehrli. I’m a Swiss electrical engineer working since several years as an Oracle DBA. My main interests are backup & recovery, database internals, database security, infrastructure management and other stuff coming across my daily work as a DBA and Solution Manager at Trivadis. For a while now, Oracle Unified Directory has been one of them. On this website I share my experience and some of my thoughts in these areas with you. Among other things, you find my blog, a few scripts, links to some papers and presentations I have written or co-authored, list of public appearances as well links to other interesting web resources.
A list of the 5 most recent posts. To see a full list go to the Blogs.
- 1 December 2020 : Security Best Practice: Oracle passwords, but secure!
Beach view in Brighton at the UKOUG Techfest 2019 Today I held my presentation about Oracle security best practice "Oracle passwords, but secure!” at the virtual UKOUG event. Unfortunately, this year the beautiful view of Brighton beach and the active exchange with colleagues was missing. Ok, on the other hand I was able to enjoy the first snow in Switzerland with [Read more...]
- 5 November 2020 : Oracle Security EUS Snippets – Setup Proxy User Privileges
Since I'm always short of time for a longer blog post, I'll just try a short one. Intended as a mini-series, I will show different configuration examples for Oracle Enterprise User Security. Today I’ll start with the configuration of EUS based proxy privileges. The environment I use is DOE, my Docker based Oracle Engineering environment. In particular the EUS configuration. [Read more...]
- 7 September 2020 : Oracle Password Filter for AD, a few exciting insights
When it comes to the conception and implementation of a central user administration of Oracle databases, authentication is one of the central topics. Often there is a need for integration with an existing directory service or IAM solution. Whereby usually MS Active Directory is involved. But Oracle Databases and MS Active Directories are not yet best friends. In this blog [Read more...]
- 2 September 2020 : Trivadis LAB: Simple Vagrant Setup of Windows AD Server
One of my biggest problems when I started to look into Kerberos Authentication, Oracle Centrally Managed Users as well Oracle Enterprise User Security was the availability of an Active Directory to setup test cases. It is usually not the core business of an Oracle DBA to configure an Active Directory server. 🙂 Using the productive AD is generally not a [Read more...]
- 9 June 2020 : Kerberos Troubleshooting – A few approaches
It is way too long ago since my last blog post. These were or are busy weeks for me. Any way, I finally found some time to start writing a blog post about a special setup for kerberos authentication of Oracle databases. It is about configuring kerberos authentication for multiple database servers with only one active directory account and corresponding [Read more...]