oracle

README

vault-oracle

A Vault plugin for Oracle

This project uses the database plugin interface introduced in Vault version 0.7.1.

Build

There is not currently a pre-built binary available.

Before building, you will need to download the Oracle Instant Client library, which is available from Oracle. Download the SDK package to get the headers and download the Basic package to get the libraries for your platform.

Next, create a pkg-config file to point to the library. Create the file oci8.pc on your PKG_CONFIG_PATH.

An example oci8.pc for macOS is:

prefix=/usr/local

version=11.2
build=client64

libdir=${prefix}/lib
includedir=${prefix}/include

Name: oci8
Description: Oracle database engine
Version: ${version}
Libs: -L${libdir} -lclntsh
Libs.private:
Cflags: -I${includedir}

Then, git clone this repository into your $GOPATH and go build -o oracle-database-plugin ./plugin from the project directory.

Installation

The Vault plugin system is documented on the Vault documentation site.

You will need to define a plugin directory using the plugin_directory configuration directive, then place the oracle-database-plugin executable generated above in the directory.

Register the plugin using

vault write sys/plugins/catalog/oracle-database-plugin \ 
    sha_256=<expected SHA256 Hex value of the plugin binary> \
    command="oracle-database-plugin"

Documentation

Index

• func Run(apiTLSConfig *api.TLSConfig) error
• type Oracle
  • func New() *Oracle
  • func (o *Oracle) CreateUser(statements dbplugin.Statements, usernameConfig dbplugin.UsernameConfig, ...) (username string, password string, err error)
  • func (o *Oracle) RenewUser(statements dbplugin.Statements, username string, expiration time.Time) error
  • func (o *Oracle) RevokeUser(statements dbplugin.Statements, username string) error
  • func (o *Oracle) Type() (string, error)

Functions

func Run

func Run(apiTLSConfig *api.TLSConfig) error

Run instantiates an Oracle object, and runs the RPC server for the plugin

Types

type Oracle

type Oracle struct {
	connutil.ConnectionProducer
	credsutil.CredentialsProducer
}

func New

func New() *Oracle

func (*Oracle) CreateUser

func (o *Oracle) CreateUser(statements dbplugin.Statements, usernameConfig dbplugin.UsernameConfig, expiration time.Time) (username string, password string, err error)

func (*Oracle) RenewUser

func (o *Oracle) RenewUser(statements dbplugin.Statements, username string, expiration time.Time) error

func (*Oracle) RevokeUser

func (o *Oracle) RevokeUser(statements dbplugin.Statements, username string) error

func (*Oracle) Type

func (o *Oracle) Type() (string, error)