Rotate Oracle database passwords with Commander
Keeper has launched a new Password Rotation feature with Keeper Secrets Manager. This new capability is recommended for all password rotation use cases. The Documentation is linked below:
Password Rotation with Keeper Secrets Manager
This plugin allows rotating a user's password in Oracle Database Server
Oracle requires Instant Client setup to enable client applications.
Consult the following page: http://www.oracle.com/technetwork/database/features/instant-client/index-097480.html
Rotation supports legacy and typed records. If using typed record, a 'Login' type field is required. Additional fields may be added depending on the rotation type as well. See the instructions below.
See the Troubleshooting section for more information on legacy vs typed records
To connect with DSN string:
cmdr:dsn
ex: "(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=localhost)(PORT=1521))(CONNECT_DATA=(SID=XE)))"
Oracle DSN string
To connect using database host and service name
If cmdr:dsn
is used then cmdr:host
and cmdr:db
properties will be ignored.
cmdr:host
Hostname of your Oracle server
cmdr:db
Database service to connect to on Oracle server
cmdr:plugin
oracle
(Optional) Tells Commander to use Oracle rotation. This should be either set to the record, or supplied to the rotation command
Commander will use the oracle plugin automatically for records with a hostname that starts with "oracle//"
Record Example:
To rotate Oracle passwords, use the rotate
command in Commander. Pass the command a record title or UID (or use --match
with a regular expression to rotate several records at once)
The plugin can be supplied to the command as shown here, or added to a record field (see options above). Adding the plugin type to the record makes it possible to rotate several records at once with different plugins.
After rotation is completed, the new password will be stored in the Password
field of the record