PDC Weblogic RCU Creation Requires Sysdba Access
(Doc ID 2877730.1)
Last updated on JUNE 22, 2022
Applies to:Oracle Communications Pricing Design Center - Version 184.108.40.206.0 and later
Information in this document applies to any platform.
- As part of the Pricing Design Center (PDC) Weblogic deployment, in the Repository Creation Utility (RCU) creation it has been assumed that one will have always sysdba access.
- See below command:
/u01/oracle/oracle_common/bin/rcu -silent -createRepository -databaseType ORACLE -connectString $CONNECTION_STRING -dbUser $DB_ADMIN_USERNAME -dbRole sysdba -useSamePasswordForAllSchemaUsers true -selectDependentsForComponents true -schemaPrefix $RCU_PREFIX -component MDS -component IAU -component IAU_APPEND -component IAU_VIEWER -component OPSS -component WLS -component STB -f < /u01/oracle/.pwd.txt >> $RCU_LOG_LOCATION/RCU_$rcuFN.out
- But this is not appropriate in Cloud Native environment because service provider does not want to share the sysdba access to the application developer/user.
- The expectation here is to do away with the sysdba credentials here from a security standpoint
- For example, one may be able to deploy RCU even without sysdba by giving the below 2 grants:
GRANT execute on sys.dbms_lock to NEW_USER with grant option
GRANT execute on DBMS_AQIN to NEW_USER with grant option
Can this be addressed in the product?
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document