Has anyone setup CMU to work for all the PDBs within a CDB ?
I have it working for a single PDB but when I created a new wallet based off the GUID it doesn't work I get an ora-1017 but it works for the 1st PDB I setup.
I'm running Oracle 19.14 on Windows 2019.
I don't have an override in the SQLNET.ora, my wallet is in the C:\ORACLE_BASE\admin\<CDB>\<PDB>\wallet as is the dsi.ora file for each PDB.
The Create user IDENTIFIED GLOBALLY is in each PDB.
And CMU_WALLER_DIR is set in each PDB pointing to it correct directory.
So what am I missing to get it to work for the 2nd PDB ?
Should it be setup at the CDB level vs. the PDBs level ?
If so then should the user be created in the CDB as a common user ?
I have a SR open with Support but I'm not getting anywhere.
Any help is greatly appreciate.
Thanks,
Barb.
Assuming your PDBs are all intended to point a single AD endpoint, I got the following information from the security team.
You should be able to set that up with ldap.ora (and probably with dsi.ora) as well at a single location. This way you don’t need to set up/manage separate dsi.ora/wallets for each PDB.
Plus a few things to look at:
- Since you are on 19c – make sure they have implemented the cumulative patch for CMU for 19c: 31404487
- Make sure you set set the database property CMU_WALLET (CMU_WALLET_DIR is used in the Autonomous context)
- With the patch, they can point CMU_WALLET in every PDB to the location with dsi.ora/wallet. That way all the PDBs can leverage a single set of files instead of duplicating it in different directories.
The team also graciously offered the opportunity to contact them directly, so if you still have troubles, let me know via a review and I'll get you in touch with them directly.