Expert Oracle Exadata - Parent Directory

CHAPTER 14 STORAGE LAYOUTRemoving Cell SecurityOnce implemented, cell security may be modified as needed by updating the ACL lists on the storagecells, and changing the availableTo attribute of the grid disks. Removing cell security is a fairlystraightforward process of backing out the database security settings and then removing the ASMsecurity settings.The first step in removing cell security is to remove database-scoped security. The following stepswill remove database-scoped security from the system.1. Before database security may be removed, the databases and ASM clustermust be shut down.2. Remove the databases from the availableTo attribute of the grid disks using theCellCLI command alter griddisk. This command doesn’t selectively removedatabases from the list. It simply redefines the complete list. Notice that wewill just be removing the databases from the list at this point. The ASM uniquename should remain in the list for now. This must be done for each cell youwant to remove security from.CellCLI> alter griddisk DATA_CD_00_cell03, -DATA_CD_01_cell03 -availableTo='+ASM'CellCLI> alter griddisk DATA_CD_02_cell03, -DATA_CD_03_cell03 -availableTo='+ASM'Optionally, all the databases may be removed from the secured grid disks with the followingcommand:CellCLI> alter griddisk DATA_CD_00_cell03, -DATA_CD_01_cell03 -DATA_CD_02_cell03 -DATA_CD_03_cell03 -availableTo='+ASM'Assuming that these databases have not been configured for cell security on any other grid disks inthe cell, the security key may be removed from the ACL list on the storage cell as follows:CellCLI> assign key for HR='', PAY=''Key for HR successfully droppedKey for PAY successfully dropped3. Remove the cellkey.ora file located in theORACLE_HOME/admin/{db_unique_name}/pfile directory for the database client.4. Now the cellkey.ora file for the HR and PAY databases may be removed fromthe database servers.> rm $ORACLE_HOME/admin/HR/cellkey.ora> rm $ORACLE_HOME/admin/PAY/cellkey.ora5. Verify that the HR and PAY databases are not assigned to any grid disks withthe following CellCLI command:493