Valid For
Integrated primary Extract on Oracle; data pump Extract is not valid
Description
Use the FETCHUSERIDALIAS
parameter to specify authentication for an Oracle GoldenGate process to use when logging into a database. The use of FETCHUSERIDALIAS
requires the use of an Oracle GoldenGate credential store. Specify FETCHUSERIDALIAS
before any TABLE
or MAP
entries in the parameter file.
FETCHUSERIDALIAS Compared to FETCHUSERID
FETCHUSERIDALIAS
enables you to specify an alias, rather than a user ID and password, in the parameter file. The user IDs and encrypted passwords are stored in a credential store. FETCHUSERIDALIAS
supports databases running on Linux, UNIX, and Windows platforms.
FETCHUSERID
requires either specifying the clear-text password in the parameter file or encrypting it with the ENCRYPT PASSWORD
command and, optionally, storing an encryption key in an ENCKEYS
file. FETCHUSERID
supports a broad range of the databases that Oracle GoldenGate supports. In addition, it supports the use of an operating system login for Oracle databases.
See Administering Oracle GoldenGate for more information about these parameters and Oracle GoldenGate security features.
FETCHUSERID Requirements
Note:
Logins that require a database user and password must be stored in the Oracle GoldenGate credential store. See Administering Oracle GoldenGate for more information about the credential store.
Use FETCHUSERIDALIAS
for Oracle GoldenGate processes that connect to an Oracle database. The purpose of this connection is to offload fetch operations to an Active Data Guard standby database, which eliminates overhead that would otherwise be placed on the source database.
The SOURCEDB
or TARGETDB
parameter is not required.
Specify the alias of a database credential that is stored in the Oracle GoldenGate credential store.
(Oracle Enterprise Edition earlier than 11.2.0.2) Special database privileges are required for the FETCHUSERIDALIAS
user when Extract is configured to use LOGRETENTION
. These privileges might have been granted when Oracle GoldenGate was installed. See the Ensuring Data Availability for Classic Capture inUsing Oracle GoldenGate for Oracle Database for more information about LOGRETENTION
.
(Oracle Standard or Enterprise Edition 11.2.0.2 or later) To use FETCHUSERIDALIAS
for an Extract group that is configured for integrated capture, the user must have the privileges granted in the dbms_goldengate_auth.grant_admin_privilege
.
To support capture from an Oracle container database, the user that is specified with FETCHUSERID
must log on to the root container and must be a common database user. A connect string must be supplied for this user, for example: C##GGADM@FINANCE
. For more information, see Establishing Oracle GoldenGate Credentials in Using Oracle GoldenGate for Oracle Database.
The connection specified by FETCHUSERI
or FETCHUSERIDALIAS
must be to an Active Data Guard standby database of the source database.
FETCHUSERID
can be specified anywhere in the parameter file. Ordering does not matter. It can come before or after a TABLE
or MAP
statement.
Default
None
Syntax
FETCHUSERIDALIAS alias [DOMAIN domain] [SYSDBA]
alias
Specifies the alias of a database user credential that is stored in the Oracle GoldenGate credential store.
DOMAIN
domain
Specifies the credential store domain for the specified alias. A valid domain entry must exist in the credential store for the specified alias.
SYSDBA
Specifies that the user logs in as sysdba
.
Example
fetchuseridalias gg_user@adg_inst password pwd