oracle labellingv2 v1.0

31
Oracle UserID Labelling Oracle Error: Reference source not found V2 Error: Reference source not found0 Author: Data Management SL France Document: document.doc Date: 8:48 AM 07/05/2022 Version: V1.1 Owner: S Verdier Status: Final Subject: Oracle UserId Labelling Page 1 of 31

Upload: vasanthjayaramv

Post on 16-Jan-2016

31 views

Category:

Documents


0 download

DESCRIPTION

Oracle Lablelling

TRANSCRIPT

Page 1: Oracle Labellingv2 V1.0

Oracle UserID Labelling

Oracle Error: Reference source not found V2

Error: Reference source not found0

Author: Data Management SL France

Customer:IMT FR

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 1 of 23

Page 2: Oracle Labellingv2 V1.0

Oracle UserID Labelling

Document History

Document LocationRefer to the author if you are in any doubt about the currency of this document.

Revision HistoryDate of this revision: 01-21-2011 Date of next revision none setRevision Number

Revision Date

Summary of Changes Changes marked

2.0 Nov 2011

First release V2 N

ApprovalsThis document requires following approvals.

Name Title RoleArnaud Lund Review &

Approve

Document ReferencesName Title

http//URT.emea.ibm.com

UserID+Identification+and+labelling+Convention+V1[1].2.92.doc

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 2 of 23

Page 3: Oracle Labellingv2 V1.0

Oracle UserID Labelling

Contents1. Oracle Labelling....................................................................................................4

1.1. Objective..................................................................................................................................... 4

2. UNIX Labelling......................................................................................................5

2.1. Unix Operations.......................................................................................................................... 5

Make directory on target server............................................................................................................5

Retreive sources from repository..........................................................................................................5

Permissions.......................................................................................................................................... 7

Launch Labeling generation................................................................................................................. 7

Check Labeling generation...................................................................................................................8

Generate crontab................................................................................................................................ 10

3. WINDOWS Labelling...........................................................................................14

3.1. Windows Operations................................................................................................................. 14

Retreive sources from repository........................................................................................................14

Launch Labeling generation...............................................................................................................14

Check Labeling generation................................................................................................................. 16

Generate Shedule task....................................................................................................................... 21

4. Annexe................................................................................................................22

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 3 of 23

Page 4: Oracle Labellingv2 V1.0

Oracle UserID Labelling

1. Oracle Labelling

1.1. Objective

The objective is to perfom userid revalidation

Oracle labelling project need to consolidate all oracle users into a single file.The goal is to validate that each user with specifics permissions are authorized on the system.

This file could be created manually and automatically and need around 15 mn to be deployed.

Example for oracle_labels.txt :

MOSP,IBMDBA,706/S/*COCORA//IBMDBAMOSP,IMPTUSBRE,706/S/*COCORA//IMPTUSBREMOSP,OPS$ORAMOSP,706/S/*COCORA//OPS$ORAMOSPMOSP,SYS,706/S/*COCORA//SYSMOSP,SYSTEM,706/S/*COCORA//SYSTEMMOSP,TNNBRE,706/S/*COCORA//TNNBREMOSP,TUSBRE,706/S/*COCORA//TUSBRE

1) MOSP is Database SID (Databes’s Name for Oracle)2) Database User Name3) PSC Code, 706 for FRANCE FR4) Flags describing the UserID Use type, S for System, Service or daemon etc (see document

UserID+Identification+and+labelling+Convention+V1[1].2.92.doc, chapter 2.1.1 Identifying UserID ‘Ownership)

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 4 of 23

Page 5: Oracle Labellingv2 V1.0

Oracle UserID Labelling

5) Validation Group6) Nothing7) Database User Name

2. UNIX Labelling

2.1. Unix Operations

Make directory on target server

root@miaiba05:/home/root # cd /exploit/scriptsroot@miaiba05:/exploit/scripts #root@miaiba05:/exploit/scripts # mkdir /exploit/scripts/dbaroot@miaiba05:/exploit/scripts # mkdir /exploit/scripts/dba/sqlroot@miaiba05:/exploit/scripts # mkdir /exploit/scripts/dba/kshroot@miaiba05:/exploit/scripts # mkdir /exploit/scripts/dba/sql/labellingroot@miaiba05:/exploit/scripts # mkdir /exploit/scripts/dba/ksh/labelling

Retreive sources from repository

Use this repository describe before for Michelin or TR : Notes://D06DBL048/C12574640054918F/4B87A6F6EAEAADD385256A2D006A582C/B4356078B7E790758025790400495D1D

root@miaiba05:/exploit/scripts # cd /exploit/scripts/dba/sql/labellingroot@miaiba05:/exploit/scripts/dba/sql/labelling # sftp fp00386@miaibf02Connecting to miaibf02...fp00386@miaibf02's password:

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 5 of 23

Page 6: Oracle Labellingv2 V1.0

Oracle UserID Labelling

sftp> cd /exploit/scripts/dba/sql/labellingsftp> mget *Fetching /exploit/scripts/dba/sql/labelling/oracle_dbopen.sql to oracle_dbopen.sql/exploit/scripts/dba/sql/labelling/oracle_dbopen.sql 100% 394 0.4KB/s 00:00Fetching /exploit/scripts/dba/sql/labelling/oracle_dbopen.tmp to oracle_dbopen.tmp/exploit/scripts/dba/sql/labelling/oracle_dbopen.tmp 100% 8 0.0KB/s 00:00Fetching /exploit/scripts/dba/sql/labelling/oracle_labels.sql to oracle_labels.sql/exploit/scripts/dba/sql/labelling/oracle_labels.sql 100% 1048 1.0KB/s 00:00Fetching /exploit/scripts/dba/sql/labelling/oracle_labels.tmp to oracle_labels.tmpFetching /exploit/scripts/dba/sql/labelling/oracle_labels.txt to oracle_labels.txt/exploit/scripts/dba/sql/labelling/oracle_labels.txt 100% 393 0.4KB/s 00:00sftp> quitroot@miaiba05:/exploit/scripts/dba/sql/labelling # cd sql ksh/exploit/scripts/dba/ksh/labellingroot@miaiba05:/exploit/scripts/dba/ksh/labelling # sftp fp00386@miaibf02Connecting to miaibf02...fp00386@miaibf02's password:sftp> cd /exploit/scripts/dba/ksh/labellingsftp> mget *Fetching /exploit/scripts/dba/ksh/labelling/oracle_labels.ksh to oracle_labels.ksh/exploit/scripts/dba/ksh/labelling/oracle_labels.ksh 100% 4353 4.3KB/s 00:00Fetching /exploit/scripts/dba/ksh/labelling/oracle_labels.ksh.svg to oracle_labels.ksh.svg/exploit/scripts/dba/ksh/labelling/oracle_labels.ksh.svg 100% 4098 4.0KB/s 00:00Fetching /exploit/scripts/dba/ksh/labelling/oracle_labels.old to oracle_labels.old

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 6 of 23

Page 7: Oracle Labellingv2 V1.0

Oracle UserID Labelling

/exploit/scripts/dba/ksh/labelling/oracle_labels.old 100% 4305 4.2KB/s 00:00Fetching /exploit/scripts/dba/ksh/labelling/oracle_labels2.ksh to oracle_labels2.ksh/exploit/scripts/dba/ksh/labelling/oracle_labels2.ksh 100% 4355 4.3KB/s 00:00Fetching /exploit/scripts/dba/ksh/labelling/oracle_labels_cron.ksh to oracle_labels_cron.ksh/exploit/scripts/dba/ksh/labelling/oracle_labels_cron.ksh 100% 609 0.6KB/s 00:00Fetching /exploit/scripts/dba/ksh/labelling/toto to toto/exploit/scripts/dba/ksh/labelling/toto 100% 229 0.2KB/s 00:00sftp> exit

Permissions

root@miaiba05:/exploit/scripts/dba/ksh/labelling # cd /exploit/scriptsroot@miaiba05:/exploit/scripts # chown -R oracle:dba dba

Launch Labeling generation

root@miaiba05:/exploit/scripts # cd /exploit/scripts/dba/ksh/labelling/root@miaiba05:/exploit/scripts/dba/ksh/labelling # ksh oracle_labels.ksh/opt/IBM/SCM/client/oracle_labels.txt[YOU HAVE NEW MAIL][YOU HAVE NEW MAIL][YOU HAVE NEW MAIL][YOU HAVE NEW MAIL][YOU HAVE NEW MAIL][YOU HAVE NEW MAIL][YOU HAVE NEW MAIL]

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 7 of 23

Page 8: Oracle Labellingv2 V1.0

Oracle UserID Labelling

[YOU HAVE NEW MAIL][YOU HAVE NEW MAIL][YOU HAVE NEW MAIL][YOU HAVE NEW MAIL][YOU HAVE NEW MAIL]

Check Labeling generation

root@miaiba05:/exploit/scripts/dba/ksh/labelling # more /opt/IBM/SCM/client/oracle_labels.txtIBDFEUR0,BDF_DBA,706/S/*COCORA//BDF_DBAIBDFEUR0,DBSNMP,706/S/*COCORA//DBSNMPIBDFEUR0,FM00669,706/C/IBDFEUR0//FM00669IBDFEUR0,IBDFEUR0,706/C/IBDFEUR0//IBDFEUR0IBDFEUR0,OUTLN,706/S/*COCORA//OUTLNIBDFEUR0,SYS,706/S/*COCORA//SYSIBDFEUR0,SYSTEM,706/S/*COCORA//SYSTEMIBDFEUR0,U_BDF_1,706/C/IBDFEUR0//U_BDF_1IBDFEUR0,U_BDF_RO,706/C/IBDFEUR0//U_BDF_ROIFYTEUR0,DBSNMP,706/S/*COCORA//DBSNMPIFYTEUR0,FM00669,706/C/IFYTEUR0//FM00669IFYTEUR0,FYT_APP,706/C/IFYTEUR0//FYT_APPIFYTEUR0,FYT_DBA,706/C/IFYTEUR0//FYT_DBAIFYTEUR0,FYT_DBL,706/S/*COCORA//FYT_DBLIFYTEUR0,FYT_SYS,706/S/*COCORA//FYT_SYSIFYTEUR0,IFYTEUR0,706/C/IFYTEUR0//IFYTEUR0IFYTEUR0,OUTLN,706/S/*COCORA//OUTLNIFYTEUR0,SYS,706/S/*COCORA//SYSIFYTEUR0,SYSTEM,706/S/*COCORA//SYSTEMIFYTEUR0,TIVOLI,706/S/*COCORA//TIVOLI

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 8 of 23

Page 9: Oracle Labellingv2 V1.0

Oracle UserID Labelling

IFYTEUR0,U_FYT_1,706/C/IFYTEUR0//U_FYT_1IFYTEUR0,U_FYT_RO,706/C/IFYTEUR0//U_FYT_ROIOEIEUR1,A044479,706/C/IOEIEUR1//A044479IOEIEUR1,A068705,706/C/IOEIEUR1//A068705IOEIEUR1,ADM_ERR,706/C/IOEIEUR1//ADM_ERRIOEIEUR1,ADM_PEP,706/C/IOEIEUR1//ADM_PEPIOEIEUR1,ADM_SRC,706/C/IOEIEUR1//ADM_SRCIOEIEUR1,ADM_TIR,706/C/IOEIEUR1//ADM_TIRIOEIEUR1,ADM_VEH,706/C/IOEIEUR1//ADM_VEHIOEIEUR1,B501674,706/C/IOEIEUR1//B501674IOEIEUR1,D102035,706/C/IOEIEUR1//D102035IOEIEUR1,D105344,706/C/IOEIEUR1//D105344IOEIEUR1,D118175,706/C/IOEIEUR1//D118175IOEIEUR1,D160183,706/C/IOEIEUR1//D160183IOEIEUR1,D171844,706/C/IOEIEUR1//D171844IOEIEUR1,D171884,706/C/IOEIEUR1//D171884IOEIEUR1,D173162,706/C/IOEIEUR1//D173162IOEIEUR1,D173302,706/C/IOEIEUR1//D173302IOEIEUR1,D173312,706/C/IOEIEUR1//D173312IOEIEUR1,D173325,706/C/IOEIEUR1//D173325IOEIEUR1,D173394,706/C/IOEIEUR1//D173394IOEIEUR1,D173514,706/C/IOEIEUR1//D173514IOEIEUR1,D173783,706/C/IOEIEUR1//D173783IOEIEUR1,D174004,706/C/IOEIEUR1//D174004IOEIEUR1,D174016,706/C/IOEIEUR1//D174016IOEIEUR1,D174027,706/C/IOEIEUR1//D174027IOEIEUR1,D174039,706/C/IOEIEUR1//D174039IOEIEUR1,DBSNMP,706/S/*COCORA//DBSNMPIOEIEUR1,DB_ACCT_01,706/C/IOEIEUR1//DB_ACCT_01IOEIEUR1,F010111,706/C/IOEIEUR1//F010111IOEIEUR1,F019567,706/C/IOEIEUR1//F019567

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 9 of 23

Page 10: Oracle Labellingv2 V1.0

Oracle UserID Labelling

IOEIEUR1,F019961,706/C/IOEIEUR1//F019961IOEIEUR1,F020113,706/C/IOEIEUR1//F020113IOEIEUR1,F033591,706/C/IOEIEUR1//F033591IOEIEUR1,F045703,706/C/IOEIEUR1//F045703IOEIEUR1,F050945,706/C/IOEIEUR1//F050945IOEIEUR1,F051643,706/C/IOEIEUR1//F051643IOEIEUR1,F062752,706/C/IOEIEUR1//F062752IOEIEUR1,F063446,706/C/IOEIEUR1//F063446IOEIEUR1,F081411,706/C/IOEIEUR1//F081411IOEIEUR1,F252236,706/C/IOEIEUR1//F252236IOEIEUR1,F253191,706/C/IOEIEUR1//F253191IOEIEUR1,F255343,706/C/IOEIEUR1//F255343IOEIEUR1,F257460,706/C/IOEIEUR1//F257460IOEIEUR1,F259477,706/C/IOEIEUR1//F259477IOEIEUR1,F259713,706/C/IOEIEUR1//F259713IOEIEUR1,F260293,706/C/IOEIEUR1//F260293IOEIEUR1,F261204,706/C/IOEIEUR1//F261204IOEIEUR1,F261623,706/C/IOEIEUR1//F261623

Generate crontab

root@miaiba05:/exploit/scripts/dba/ksh/labelling # ksh oracle_labels_cron.ksh

==> Putting LABELING Oracle Collection invocation on cron...

LABELING Oracle Collection installation complete.

root@miaiba05:/exploit/scripts/dba/ksh/labelling # crontab -l

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 10 of 23

Page 11: Oracle Labellingv2 V1.0

Oracle UserID Labelling

# @(#)08 1.15.1.3 src/bos/usr/sbin/cron/root, cmdcntl, bos520 2/11/94 17:19:47# IBM_PROLOG_BEGIN_TAG# This is an automatically generated prolog.## bos520 src/bos/usr/sbin/cron/root 1.15.1.3## Licensed Materials - Property of IBM## (C) COPYRIGHT International Business Machines Corp. 1989,1994# All Rights Reserved## US Government Users Restricted Rights - Use, duplication or# disclosure restricted by GSA ADP Schedule Contract with IBM Corp.## IBM_PROLOG_END_TAG## COMPONENT_NAME: (CMDCNTL) commands needed for basic system needs## FUNCTIONS:## ORIGINS: 27## (C) COPYRIGHT International Business Machines Corp. 1989,1994# All Rights Reserved# Licensed Materials - Property of IBM## US Government Users Restricted Rights - Use, duplication or# disclosure restricted by GSA ADP Schedule Contract with IBM Corp.##0 3 * * * /usr/sbin/skulker#45 2 * * 0 /usr/lib/spell/compress

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 11 of 23

Page 12: Oracle Labellingv2 V1.0

Oracle UserID Labelling

#45 23 * * * ulimit 5000; /usr/lib/smdemon.cleanu > /dev/null0 11 * * * /usr/bin/errclear -d S,O 300 12 * * * /usr/bin/errclear -d H 900 15 * * * /usr/lib/ras/dumpcheck >/dev/null 2>&1# Purge log LUM0 0 * * * /busapps/rexu/100/_lgi/lum/shell/trclum.sh archlog0 0 * * * /busapps/rexu/100/_lgi/lum/shell/trclum_tmp.sh archlog# SSA warning : Deleting the next two lines may cause errors in redundant# SSA warning : hardware to go undetected.01 5 * * * /usr/lpp/diagnostics/bin/run_ssa_ela 1>/dev/null 2>/dev/null0 * * * * /usr/lpp/diagnostics/bin/run_ssa_healthcheck 1>/dev/null 2>/dev/null# SSA warning : Deleting the next line may allow enclosure hardware errors to go undetected30 * * * * /usr/lpp/diagnostics/bin/run_ssa_encl_healthcheck 1>/dev/null 2>/dev/null# SSA warning : Deleting the next line may allow link speed exceptions to go undetected30 4 * * * /usr/lpp/diagnostics/bin/run_ssa_link_speed 1>/dev/null 2>/dev/null0 0 * * * /opt/csm/bin/cfmupdatenode -a 1>/dev/null 2>/dev/null0 0 * * * /opt/csm/csmbin/cleanup.logs.csp 1>>/var/log/csm/csperror.log 2>>/var/log/csm/csperror.log# DUW Configuration check0 23 * * * /busdata/rduw/eur0/_lgi/home/bin/ODS_SERVER_CONFIG.sh >/dev/null 2>&1#----------------------------------------------------------------------------# added for run Do Once Security Tool in modification mode# Run everyday at 07:00 AM# Check parameters in the config file if issues appear with user right# Read /DoOnceAIX/securityTool/Install/SecurityToolUsersGuide.doc# 0 7 * * * /DoOnceAIX/securityTool/Install/startSecurityTool.ksh -f /DoOnceAIX/securityTool/Install/BIB_DoOnce.config# added for cleaning utmp, wtmp# 0 7 * * * /DoOnceAIX/SecTools/prune_logs/prune_logs#BEGIN_NMON_TAG--------------------------------------------------------------# DCE Support UNIX# AIX performance monitoring# Daily reports : Every days 00:00

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 12 of 23

Page 13: Oracle Labellingv2 V1.0

Oracle UserID Labelling

# nmon_collect.sh : Gather information using nmon# nmon_convert.sh : Convert nmon files in csv file format, compress and purge files# Weekly reports : Every monday 00:00# week_nmon_collect.sh : Gather information using nmon for a week# week_nmon_collect.sh : Convert nmon files in csv file format, compress and purge files#----------------------------------------------------------------------------0 0 * * * /bustools/nmon/current/script/nmon_collect.sh >/dev/null 2>&158 23 * * * /bustools/nmon/current/script/nmon_convert.sh >/dev/null 2>&10 0 * * 1 /bustools/nmon/current/script/week_nmon_collect.sh >/dev/null 2>&140 23 * * 0 /bustools/nmon/current/script/week_nmon_convert.sh >/dev/null 2>&1#END_NMON_TAG--------------------------------------------------------------# RAS db2 collect script0 15 * * 3 /bustools/rras/100/_lgi/scripts/collect/collect_aix_db2.pl 2>&1 >> /bustools/rras/100/_lgi/results/log/collect_aix_db2.log00 00 * * 1 find /var/spool/mqueue -type f -mtime +7 -exec rm -f {} ;\# If srmAIX data generation has not terminated, stop before starting new day0 0 * * * /var/adm/perfmgr/bin/terminate.srm ; /var/adm/perfmgr/bin/verify.srm# Verify srmAIX data is still being generated25,55 * * * * /var/adm/perfmgr/bin/verify.srm# Remove srmAIX data files older than 7 days0 1 * * * /var/adm/perfmgr/bin/clean.account# Create srmAIX envstat file50 23 * * * /var/adm/perfmgr/bin/config.srm# Create srmAIX Single File for Data Transfer59 23 * * * /var/adm/perfmgr/bin/package.srm -z# WLM_scan_and_assign : scan every process throughs svmon -P command# and assign them to a WLM class every minute to estimate application consumption# Those result can be exploited through nmon_Analyser* * * * * /busapps/rexu/100/_lgi/rexu_tools/shell/WLM_scan_and_assign.ksh >/dev/null 2>&1# Update motd info0 7 * * * /busapps/rexu/100/_lgi/scripts/AIX/Updt_motd.ksh#

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 13 of 23

Page 14: Oracle Labellingv2 V1.0

Oracle UserID Labelling

# Log Retention for AIX servers (logkeeper)0 10 * * 1 /opt/DoOnceAIX/SecTools/logkeeper/logkeeper -c /opt/DoOnceAIX/SecTools/logkeeper/logkeeper.cfg >/dev/null 2>&1## cfg2html and gen_ioscan : collect host info00 17 * * 0 /usr/local/bin/collect/call_cfg2html.sh >/dev/null 2>&100 17 * * 0 /usr/local/bin/collect/call_gen_ioscan.sh >/dev/null 2>&1# Collect Labeling data30 1 * * * /exploit/scripts/dba/ksh/labelling/oracle_labels.ksh > /dev/null# Collect Labeling data30 1 * * * /exploit/scripts/dba/ksh/labelling/oracle_labels.ksh > /dev/nullroot@miaiba05:/exploit/scripts/dba/ksh/labelling #

3. WINDOWS Labelling

3.1. Windows Operations

Retreive sources from repository

Retreive sources from TR and transfert to server through ftp to directory C:\Program Files\IBM\SCM\client

Notes://D06DBL048/C12574640054918F/4B87A6F6EAEAADD385256A2D006A582C/B4356078B7E790758025790400495D1D

Launch Labeling generation

C:\Program Files\IBM\SCM\client \perl oracle_labels.pl

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 14 of 23

Page 15: Oracle Labellingv2 V1.0

Oracle UserID Labelling

SQL*Plus: Release 11.2.0.1.0 Production on Wed Jan 11 23:33:02 2012

Copyright (c) 1982, 2010, Oracle. All rights reserved.

Connected to:Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production

SQL> set verify onSQL> set trimspool offSQL> set heading onSQL> set feedback onSQL> set pagesize 14SQL> set linesize 80SQL> exitDisconnected from Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production

SQL*Plus: Release 11.2.0.1.0 Production on Wed Jan 11 23:33:12 2012 Copyright (c) 1982, 2010, Oracle. All rights reserved.

Connected to:Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production

SQL> set verify onSQL> set trimspool offSQL> set heading onSQL> set feedback onSQL> set pagesize 14SQL> set linesize 80SQL> exit

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 15 of 23

Page 16: Oracle Labellingv2 V1.0

Oracle UserID Labelling

Disconnected from Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - ProductionC:\Exploit\scripts\dba\oracle_sids.tmp

C:\Exploit\scripts\dba>

Check Labeling generation

Open file C:\Program Files\IBM\SCM\client\oracle_labels.txt

DCLTSTO0,A011072,706/C/DCLTSTO0//A011072DCLTSTO0,A012079,706/C/DCLTSTO0//A012079DCLTSTO0,A012208,706/C/DCLTSTO0//A012208DCLTSTO0,A027847,706/C/DCLTSTO0//A027847DCLTSTO0,A031540,706/C/DCLTSTO0//A031540DCLTSTO0,A040112,706/C/DCLTSTO0//A040112DCLTSTO0,A040805,706/C/DCLTSTO0//A040805DCLTSTO0,A041030,706/C/DCLTSTO0//A041030DCLTSTO0,A041263,706/C/DCLTSTO0//A041263DCLTSTO0,A043759,706/C/DCLTSTO0//A043759DCLTSTO0,A044934,706/C/DCLTSTO0//A044934DCLTSTO0,A046215,706/C/DCLTSTO0//A046215DCLTSTO0,A046647,706/C/DCLTSTO0//A046647DCLTSTO0,A046728,706/C/DCLTSTO0//A046728DCLTSTO0,A060487,706/C/DCLTSTO0//A060487DCLTSTO0,A061211,706/C/DCLTSTO0//A061211DCLTSTO0,A061277,706/C/DCLTSTO0//A061277DCLTSTO0,A061895,706/C/DCLTSTO0//A061895DCLTSTO0,A064842,706/C/DCLTSTO0//A064842DCLTSTO0,A066705,706/C/DCLTSTO0//A066705

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 16 of 23

Page 17: Oracle Labellingv2 V1.0

Oracle UserID Labelling

DCLTSTO0,A066839,706/C/DCLTSTO0//A066839DCLTSTO0,A067990,706/C/DCLTSTO0//A067990DCLTSTO0,A068102,706/C/DCLTSTO0//A068102DCLTSTO0,A068487,706/C/DCLTSTO0//A068487DCLTSTO0,A068514,706/C/DCLTSTO0//A068514DCLTSTO0,A068515,706/C/DCLTSTO0//A068515DCLTSTO0,A068666,706/C/DCLTSTO0//A068666DCLTSTO0,A068869,706/C/DCLTSTO0//A068869DCLTSTO0,A068897,706/C/DCLTSTO0//A068897DCLTSTO0,A068953,706/C/DCLTSTO0//A068953DCLTSTO0,A069112,706/C/DCLTSTO0//A069112DCLTSTO0,A069163,706/C/DCLTSTO0//A069163DCLTSTO0,A069543,706/C/DCLTSTO0//A069543DCLTSTO0,A069606,706/C/DCLTSTO0//A069606DCLTSTO0,A070010,706/C/DCLTSTO0//A070010DCLTSTO0,A070236,706/C/DCLTSTO0//A070236DCLTSTO0,A070333,706/C/DCLTSTO0//A070333DCLTSTO0,A070344,706/C/DCLTSTO0//A070344DCLTSTO0,A070345,706/C/DCLTSTO0//A070345DCLTSTO0,A070346,706/C/DCLTSTO0//A070346DCLTSTO0,A070348,706/C/DCLTSTO0//A070348DCLTSTO0,A070354,706/C/DCLTSTO0//A070354DCLTSTO0,A070373,706/C/DCLTSTO0//A070373DCLTSTO0,A070376,706/C/DCLTSTO0//A070376DCLTSTO0,A070378,706/C/DCLTSTO0//A070378DCLTSTO0,A070390,706/C/DCLTSTO0//A070390DCLTSTO0,A070411,706/C/DCLTSTO0//A070411DCLTSTO0,A070426,706/C/DCLTSTO0//A070426DCLTSTO0,A070625,706/C/DCLTSTO0//A070625DCLTSTO0,A070638,706/C/DCLTSTO0//A070638DCLTSTO0,A070651,706/C/DCLTSTO0//A070651

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 17 of 23

Page 18: Oracle Labellingv2 V1.0

Oracle UserID Labelling

DCLTSTO0,A070697,706/S/*COCORA//A070697DCLTSTO0,A071336,706/C/DCLTSTO0//A071336DCLTSTO0,A071337,706/C/DCLTSTO0//A071337DCLTSTO0,A071681,706/C/DCLTSTO0//A071681DCLTSTO0,A072118,706/C/DCLTSTO0//A072118DCLTSTO0,A072127,706/C/DCLTSTO0//A072127DCLTSTO0,A072449,706/C/DCLTSTO0//A072449DCLTSTO0,A072714,706/C/DCLTSTO0//A072714DCLTSTO0,A072715,706/C/DCLTSTO0//A072715DCLTSTO0,A072775,706/C/DCLTSTO0//A072775DCLTSTO0,A073529,706/C/DCLTSTO0//A073529DCLTSTO0,A073531,706/C/DCLTSTO0//A073531DCLTSTO0,A073844,706/C/DCLTSTO0//A073844DCLTSTO0,AMCLTLV,706/C/DCLTSTO0//AMCLTLVDCLTSTO0,APPQOSSYS,706/C/DCLTSTO0//APPQOSSYSDCLTSTO0,CLT_DBA,706/S/*COCORA//CLT_DBADCLTSTO0,CLT_RUL,706/C/DCLTSTO0//CLT_RULDCLTSTO0,CLT_SYS,706/S/*COCORA//CLT_SYSDCLTSTO0,DBSNMP,706/S/*COCORA//DBSNMPDCLTSTO0,DCLTSTO0,706/C/DCLTSTO0//DCLTSTO0DCLTSTO0,DIP,706/C/DCLTSTO0//DIPDCLTSTO0,FM00669,706/C/DCLTSTO0//FM00669DCLTSTO0,MECLT,706/C/DCLTSTO0//MECLTDCLTSTO0,ORACLE,706/C/DCLTSTO0//ORACLEDCLTSTO0,ORACLE_OCM,706/C/DCLTSTO0//ORACLE_OCMDCLTSTO0,OUTLN,706/S/*COCORA//OUTLNDCLTSTO0,RCLT_EXP,706/S/*COCORA//RCLT_EXPDCLTSTO0,SYS,706/S/*COCORA//SYSDCLTSTO0,SYSTEM,706/S/*COCORA//SYSTEMDCLTSTO0,TIVOLI,706/S/*COCORA//TIVOLIDCLTSTO0,U_CLT_1,706/C/DCLTSTO0//U_CLT_1

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 18 of 23

Page 19: Oracle Labellingv2 V1.0

Oracle UserID Labelling

DCLTSTO0,U_CLT_RO,706/C/DCLTSTO0//U_CLT_RODCLTSTO0,U_CLT_RW,706/C/DCLTSTO0//U_CLT_RWDRTSSTO0,A011036,706/C/DRTSSTO0//A011036DRTSSTO0,A011080,706/C/DRTSSTO0//A011080DRTSSTO0,A011262,706/C/DRTSSTO0//A011262DRTSSTO0,A011267,706/C/DRTSSTO0//A011267DRTSSTO0,A011612,706/C/DRTSSTO0//A011612DRTSSTO0,A011965,706/C/DRTSSTO0//A011965DRTSSTO0,A012126,706/C/DRTSSTO0//A012126DRTSSTO0,A012154,706/C/DRTSSTO0//A012154DRTSSTO0,A012311,706/C/DRTSSTO0//A012311DRTSSTO0,A012685,706/C/DRTSSTO0//A012685DRTSSTO0,A012714,706/C/DRTSSTO0//A012714DRTSSTO0,A013013,706/C/DRTSSTO0//A013013DRTSSTO0,A013101,706/C/DRTSSTO0//A013101DRTSSTO0,A013267,706/C/DRTSSTO0//A013267DRTSSTO0,A040143,706/C/DRTSSTO0//A040143DRTSSTO0,A040362,706/C/DRTSSTO0//A040362DRTSSTO0,A040365,706/C/DRTSSTO0//A040365DRTSSTO0,A040406,706/C/DRTSSTO0//A040406DRTSSTO0,A040417,706/C/DRTSSTO0//A040417DRTSSTO0,A040541,706/C/DRTSSTO0//A040541DRTSSTO0,A041373,706/C/DRTSSTO0//A041373DRTSSTO0,A043730,706/C/DRTSSTO0//A043730DRTSSTO0,A043876,706/C/DRTSSTO0//A043876DRTSSTO0,A043938,706/C/DRTSSTO0//A043938DRTSSTO0,A044469,706/C/DRTSSTO0//A044469DRTSSTO0,A046347,706/C/DRTSSTO0//A046347DRTSSTO0,A046352,706/C/DRTSSTO0//A046352DRTSSTO0,A046652,706/C/DRTSSTO0//A046652DRTSSTO0,A061137,706/C/DRTSSTO0//A061137

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 19 of 23

Page 20: Oracle Labellingv2 V1.0

Oracle UserID Labelling

DRTSSTO0,A061301,706/C/DRTSSTO0//A061301DRTSSTO0,A061346,706/C/DRTSSTO0//A061346DRTSSTO0,A061599,706/C/DRTSSTO0//A061599DRTSSTO0,A064217,706/C/DRTSSTO0//A064217DRTSSTO0,A064437,706/C/DRTSSTO0//A064437DRTSSTO0,A065109,706/C/DRTSSTO0//A065109DRTSSTO0,A065175,706/C/DRTSSTO0//A065175DRTSSTO0,A065407,706/C/DRTSSTO0//A065407DRTSSTO0,A066091,706/C/DRTSSTO0//A066091DRTSSTO0,A066565,706/C/DRTSSTO0//A066565DRTSSTO0,A066936,706/C/DRTSSTO0//A066936DRTSSTO0,A068361,706/C/DRTSSTO0//A068361DRTSSTO0,A068923,706/C/DRTSSTO0//A068923DRTSSTO0,A069159,706/C/DRTSSTO0//A069159DRTSSTO0,A069218,706/C/DRTSSTO0//A069218DRTSSTO0,A069284,706/C/DRTSSTO0//A069284DRTSSTO0,A069368,706/C/DRTSSTO0//A069368DRTSSTO0,A069495,706/C/DRTSSTO0//A069495DRTSSTO0,A069665,706/C/DRTSSTO0//A069665DRTSSTO0,A069667,706/C/DRTSSTO0//A069667DRTSSTO0,A069806,706/C/DRTSSTO0//A069806DRTSSTO0,A070697,706/C/DRTSSTO0//A070697DRTSSTO0,A071894,706/C/DRTSSTO0//A071894DRTSSTO0,A072638,706/C/DRTSSTO0//A072638DRTSSTO0,A073614,706/C/DRTSSTO0//A073614DRTSSTO0,A099999,706/C/DRTSSTO0//A099999DRTSSTO0,ADMIN,706/C/DRTSSTO0//ADMINDRTSSTO0,AM50173,706/C/DRTSSTO0//AM50173DRTSSTO0,AM50299,706/C/DRTSSTO0//AM50299DRTSSTO0,APPQOSSYS,706/C/DRTSSTO0//APPQOSSYSDRTSSTO0,DBSNMP,706/S/*COCORA//DBSNMP

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 20 of 23

Page 21: Oracle Labellingv2 V1.0

Oracle UserID Labelling

DRTSSTO0,DIP,706/C/DRTSSTO0//DIPDRTSSTO0,DRTSSTO0,706/C/DRTSSTO0//DRTSSTO0DRTSSTO0,FM00669,706/C/DRTSSTO0//FM00669DRTSSTO0,IRTSSTO0,706/C/DRTSSTO0//IRTSSTO0DRTSSTO0,MERTS,706/C/DRTSSTO0//MERTSDRTSSTO0,ORACLE,706/C/DRTSSTO0//ORACLEDRTSSTO0,ORACLE_OCM,706/C/DRTSSTO0//ORACLE_OCMDRTSSTO0,OUTLN,706/S/*COCORA//OUTLNDRTSSTO0,RTS_DBA,706/S/*COCORA//RTS_DBADRTSSTO0,RTS_SYS,706/S/*COCORA//RTS_SYSDRTSSTO0,SYS,706/S/*COCORA//SYSDRTSSTO0,SYSTEM,706/S/*COCORA//SYSTEMDRTSSTO0,TIVOLI,706/S/*COCORA//TIVOLIDRTSSTO0,U_RTS_1,706/C/DRTSSTO0//U_RTS_1DRTSSTO0,U_RTS_RO,706/C/DRTSSTO0//U_RTS_RODRTSSTO0,U_RTS_RW,706/C/DRTSSTO0//U_RTS_RW

Generate Shedule task

Create a windows schedule task to plan the perl execution daily

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 21 of 23

Page 22: Oracle Labellingv2 V1.0

Oracle UserID Labelling

4. Annexe

URT Error Level (Status Level)

The table below contains the ‘Error Level’ (or ‘Status Level’) assigned to each account when performing revalidation:

Error level DescriptionSTATUS_TOFOUND 100 User ID convention syntax correct, not yet revalidated (revalidation pending)STATUS_FOUND 0 User ID convention syntax correct and found in BluePagesSTATUS_MISMATCH_NAME 1 User ID convention syntax correct but cannot match first nameSTATUS_FOUND_E 2 User ID convention syntax correct, external (E) flag usedSTATUS_FOUND_UID0 50 User ID convention syntax correct; accounts with UID0STATUS_NOTFOUND 200 User ID convention syntax correct but serial number not found in BluePagesSTATUS_W_COUNTRY 300 User ID convention syntax error: wrong country codeSTATUS_W_STATUS 301 User ID convention syntax error: wrong statusSTATUS_W_SERIAL 302 User ID convention syntax error: serial number incorrect formatSTATUS_NOUSERID 303 User ID convention syntax error: field emptySTATUS_WFUSERID 304 User ID convention syntax error: wrong formatWGROUP 305 User ID convention syntax error: intermediate code does not exist

STATUS_SERIAL_MANAGER 306User ID convention syntax error: using an existing serial number but person is not a manager

STATUS_I_FLAG 308 User ID convention syntax error: invalid use of I flag (e.g. used with an intermediate code)STATUS_SF_FLAG 309 User ID convention syntax error: S, F, or V flag used with a non-intermediate codeSTATUS_N_FLAG 310 User ID convention syntax error: N flag used without a standard serial numberSTATUS_E_FLAG 311 User ID convention syntax error: E or T flag used with an intermediate codeSTATUS_SKIP 400 User ID convention syntax correct; account skipped because flagged as customer/vendorSTATUS_SKIP2 401 User ID convention syntax missing customer account assumedSTATUS_SKIPDOMAIN 403 Domain (non-local) users skippedSTATUS_DONOTTREAT 500 User ID convention syntax correct; validated by intermediate codeSTATUS_USER_DISABLED 501 User account disabled

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 22 of 23

Page 23: Oracle Labellingv2 V1.0

Oracle UserID Labelling

STATUS_WGROUP_KOTBD 600 KOTBD (To be defined) flag foundSTATUS_BP_ERROR 706 BluePages service server not responseSTATUS_BP_AMBIGOUS 707 BluePages service send more than one result

Document: document.doc Date: 10:36 AM 21/04/2023Version: V1.1

Owner: S Verdier Status: FinalSubject: Oracle UserId Labelling Page 23 of 23