Re: [GENERAL] Oracle to PostgreSQL

On Thu, 2017-11-09 at 17:01 +0530, Brahmam Eswar wrote: > You can create a composite type in PostgreSQL: > CREATE TYPE complex AS (r integer, i integer); > You would use an array in this case: > DECLARE > carr complex[]; I've once faced the same thing, and did as Laurenz suggested. You will like

Re: [GENERAL] Oracle to PostgreSQL

On Thu, 2017-11-09 at 17:01 +0530, Brahmam Eswar wrote: > Here is the snippet of it. >TYPE INV_LINES_RT IS RECORD( > VENDOR_NUM A.Datastore.VENDOR_NUM%TYPE, > VENDOR_SITE_CODE A.Datastore.VENDOR_SITE_CODE%TYPE, > INVOICE_NUM A.Datastore.INVOICE_NUM%TYPE, >

Re: [GENERAL] Oracle to PostgreSQL

Here is the snippet of it. *Oracle :* *Declaration part in Store Procedure* CREATE OR REPLACE PROCEDURE "A"."Datastore" ( , In_Param1 IN VARCHAR2 , In_Param2 IN VARCHAR2 , In_Param3 IN VARCHAR2 , Out_Param1 OUT VARCHAR2 , ERROR_MSG OUT VARCHAR2 ) AS TEMP_ERR_MSG VARCHAR2(4000);

Re: [GENERAL] Oracle to PostgreSQL

Brahmam Eswar wrote: > How to migrate the Oracle collection types ( IsTableOF, IsRecord) to postgres. Are you talking about table definitions or PL/SQL code? Yours, Laurenz Albe -- Sent via pgsql-general mailing list (pgsql-general@postgresql.org) To make changes to your subscription:

[GENERAL] Oracle to PostgreSQL

Hi , How to migrate the Oracle collection types ( IsTableOF, IsRecord) to postgres. -- Thanks & Regards, Brahmeswara Rao J.

Re: [GENERAL] Oracle to PostgreSQL Migration.

On Mon, May 29, 2017 at 7:17 PM, Adrian Klaver wrote: > On 05/29/2017 06:40 AM, PAWAN SHARMA wrote: > >> >> > ya, but how can fix it.?? >> >> because memory is not an issue on both the server. >> >> >> Hi Chris, >> >> I am able to get the output script in

Re: [GENERAL] Oracle to PostgreSQL Migration.

On 05/29/2017 06:40 AM, PAWAN SHARMA wrote: ya, but how can fix it.?? because memory is not an issue on both the server. Hi Chris, I am able to get the output script in output.sql but now data migration is the big problem.

Re: [GENERAL] Oracle to PostgreSQL Migration.

>>> >>> >> ya, but how can fix it.?? >> >> because memory is not an issue on both the server. >> > I've never used ora2pg but there is some documentation saying that often an out of memory issue can be fixed by adjusting your DATA_LIMIT setting.

Re: [GENERAL] Oracle to PostgreSQL Migration.

On Mon, May 29, 2017 at 6:54 PM, PAWAN SHARMA wrote: > > > On Mon, May 29, 2017 at 6:51 PM, Chris Mair wrote: > >> [>] 1/1 rows (100.0%) Table MYTAB (0 recs/sec) >>> [>] 1/2 total rows (50.0%) - (4 sec.,

Re: [GENERAL] Oracle to PostgreSQL Migration.

On Mon, May 29, 2017 at 6:51 PM, Chris Mair wrote: > [>] 1/1 rows (100.0%) Table MYTAB (0 recs/sec) >> [>] 1/2 total rows (50.0%) - (4 sec., avg: 0 >> recs/sec). >> Out of memory!] 1/2 rows (50.0%) on total estimated

Re: [GENERAL] Oracle to PostgreSQL Migration.

[>] 1/1 rows (100.0%) Table MYTAB (0 recs/sec) [>] 1/2 total rows (50.0%) - (4 sec., avg: 0 recs/sec). Out of memory!] 1/2 rows (50.0%) on total estimated data (4 sec., avg: 0 recs/sec) Issuing rollback() due to DESTROY without explicit

Re: [GENERAL] Oracle to PostgreSQL Migration.

On Mon, May 29, 2017 at 6:28 PM, Chris Mair wrote: > C:\ora2pg>ora2pg -c ora2pg.conf >> [>] 2/2 tables (100.0%) end of scanning. >> [>] 0/2 tables (0.0%) end of scanning. >> [>] 2/2 tables (100.0%) end of

Re: [GENERAL] Oracle to PostgreSQL Migration.

C:\ora2pg>ora2pg -c ora2pg.conf [>] 2/2 tables (100.0%) end of scanning. [>] 0/2 tables (0.0%) end of scanning. [>] 2/2 tables (100.0%) end of table export. Looks good so far. This means you could connect to Oracle DB now.

Re: [GENERAL] Oracle to PostgreSQL Migration.

On Mon, May 29, 2017 at 2:49 PM, Chris Mair wrote: > I am facing below issue while running below command. >> >> *C:\ora2pg>ora2pg -c ora2pg.conf* >> DBI connect('host=;sid=;port=',',...) >> failed: ORA-01017: invalid username/p >> assword; logon denied (DBD ERROR:

Re: [GENERAL] Oracle to PostgreSQL Migration.

I am facing below issue while running below command. *C:\ora2pg>ora2pg -c ora2pg.conf* DBI connect('host=;sid=;port=',',...) failed: ORA-01017: invalid username/p assword; logon denied (DBD ERROR: OCISessionBegin) at C:/Strawberry/perl/site/lib/Ora2Pg.pm line 1376. FATAL: 1017 ... ORA-01017:

[GENERAL] Oracle to PostgreSQL Migration.

Hi All, I am going to migrate Oracle database into PostgreSQL using ora2pg tools. I have installed Strawberry Perl. C:\ora2pg>perl -v This is perl 5, version 24, subversion 1 (v5.24.1) built for MSWin32-x64-multi-thread Copyright 1987-2017, Larry Wall I am facing below issue while running

Re: [GENERAL] Oracle to PostgreSQL Migration - Need Information

On Wed, Jul 8, 2015 at 5:20 PM, Joshua D. Drake j...@commandprompt.com wrote: On 07/08/2015 12:47 PM, John McKown wrote: ​Why are they converting? Would EnterpriseDB (a commercial version of PostgreSQL which has extensions to make it a drop in replacement for Oracle) be a possibility?

Re: [GENERAL] Oracle to PostgreSQL Migration - Need Information

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Le 08/07/2015 22:25, CS DBA a écrit : On 07/08/2015 02:20 PM, John R Pierce wrote: On 7/8/2015 1:16 PM, dinesh kumar wrote: We recently done the similar migration for one of our customer. We used all opensource tools to achieve this migration

Re: [GENERAL] Oracle to PostgreSQL Migration - Need Information

Hi, We recently done the similar migration for one of our customer. We used all opensource tools to achieve this migration process. We used Pentaho Data Integration tool for doing Online DB migration, which took minimal downtime with CDC{Change Data Capture} approach. Also, we used Ora2Pg tool

[GENERAL] Oracle to PostgreSQL Migration - Need Information

Hello, I have a customer that is about to undertake a migration of an Oracle 11g database to PostgreSQL 9.x (exact version to be determined). I am talking not only of the migration of schemas and data, but also of a substantial codebase of Pl/SQL stored procedures, as well as many triggers. I

Re: [GENERAL] Oracle to PostgreSQL Migration - Need Information

On 7/8/2015 1:16 PM, dinesh kumar wrote: We recently done the similar migration for one of our customer. We used all opensource tools to achieve this migration process. We used Pentaho Data Integration tool for doing Online DB migration, which took minimal downtime with CDC{Change Data

Re: [GENERAL] Oracle to PostgreSQL Migration - Need Information

On 07/08/2015 12:47 PM, John McKown wrote: ​Why are they converting? Would EnterpriseDB (a commercial version of PostgreSQL which has extensions to make it a drop in replacement for Oracle) be a possibility? http://www.enterprisedb.com/solutions/oracle-compatibility-technology Because EDB

Re: [GENERAL] Oracle to PostgreSQL Migration - Need Information

On 07/08/2015 02:20 PM, John R Pierce wrote: On 7/8/2015 1:16 PM, dinesh kumar wrote: We recently done the similar migration for one of our customer. We used all opensource tools to achieve this migration process. We used Pentaho Data Integration tool for doing Online DB migration, which

Re: [GENERAL] Oracle to PostgreSQL Migration - Need Information

This is almost exactly what we did around 8 years ago; obviously the version numbers have changed. The reason we chose Postgres was the enormous similarity between the two languages plus the overwhelming ROI on the migration; my CEO had a spontaneous nosebleed when the Oracle licensing costs were

Re: [GENERAL] Oracle to PostgreSQL Migration - Need Information

On Wed, Jul 8, 2015 at 1:20 PM, John R Pierce pie...@hogranch.com wrote: On 7/8/2015 1:16 PM, dinesh kumar wrote: We recently done the similar migration for one of our customer. We used all opensource tools to achieve this migration process. We used Pentaho Data Integration tool for doing

Re: [GENERAL] Oracle to PostgreSQL Migration - Need Information

On Wed, Jul 8, 2015 at 2:24 PM, Tim Clotworthy tclotwor...@bluestonelogic.com wrote: Hello, I have a customer that is about to undertake a migration of an Oracle 11g database to PostgreSQL 9.x (exact version to be determined). I am talking not only of the migration of schemas and data, but

Re: [GENERAL] Oracle to PostgreSQL Migration - Need Information

I would start by looking at how many databases, schemas, tables and views are involved. Then look at how many individual Oracle functions need to be converted to plpgsql. You also need to investigate if there are any custom data types. I do not have the formula, but I am sure there is a general

[GENERAL] Oracle to PostgreSQL migration

Hi With minimal application code changes we are able to migrate database from Oracle to PostgreSQL successfully (including performance issues) on production This we did on high read intensive database sized 900+GB Thanks to PostgreSQL Thanks Sridhar BN

Re: [GENERAL] Oracle to PostgreSQL replication

-general@postgresql.org Subject: Re: [GENERAL] Oracle to PostgreSQL replication Hi, I need to setup a replication process for continuously replicating changes happening in an Oracle Database to a PostgreSQL database. My Oracle Database is version 11.2 and setup as a cluster with RAC My

Re: [GENERAL] Oracle to PostgreSQL replication

Rajni Baliyan, 09.05.2014 09:46: I downloaded symmetricDS but I did not found any installer (symmetric-pro-x.x.x.jar) Can any one please help me in this This might help: http://www.symmetricds.org/doc/3.5/html/tutorial.html#tutorial-install -- Sent via pgsql-general mailing list

Re: [GENERAL] Oracle to PostgreSQL replication

Sameer Kumar wrote: I guess I will be exploring more on oracle foreign data wrapper. Has anyone tried using oracle_fdw with Oracle RAC? I am wondering how would it handle failovers. I have not tried it, but it should work as follows: - You'll have to use a connect string that is correctly

Re: [GENERAL] Oracle to PostgreSQL replication

You can test with SymmetricDS (www.*symmetricds*.org) On Thu, May 8, 2014 at 10:35 PM, tuanhoanganh hatua...@gmail.com wrote: You can test with SymmetricDS (www.*symmetricds*.org) On Thu, May 8, 2014 at 12:53 PM, Sameer Kumar sameer.ku...@ashnik.comwrote: Thanks alot everyone! I guess

Re: [GENERAL] Oracle to PostgreSQL replication

...@ashnik.commailto:sameer.ku...@ashnik.com, PostgreSQL General Discussion Forum pgsql-general@postgresql.orgmailto:pgsql-general@postgresql.org Subject: Re: [GENERAL] Oracle to PostgreSQL replication Hi, I need to setup a replication process for continuously replicating changes happening

Re: [GENERAL] Oracle to PostgreSQL replication

Sameer Kumar wrote: I need to setup a replication process for continuously replicating changes happening in an Oracle Database to a PostgreSQL database. My Oracle Database is version 11.2 and setup as a cluster with RAC My Postgres database version is 9.2 Oracle Database is running in

Re: [GENERAL] Oracle to PostgreSQL replication

On Wed, May 7, 2014 at 12:31 AM, Sameer Kumar sameer.ku...@ashnik.comwrote: Hi, I need to setup a replication process for continuously replicating changes happening in an Oracle Database to a PostgreSQL database. My Oracle Database is version 11.2 and setup as a cluster with RAC My

Re: [GENERAL] Oracle to PostgreSQL replication

Hi, I need to setup a replication process for continuously replicating changes happening in an Oracle Database to a PostgreSQL database. My Oracle Database is version 11.2 and setup as a cluster with RAC My Postgres database version is 9.2 Oracle Database is running in Solaris and

Re: [GENERAL] Oracle to PostgreSQL replication

Thanks alot everyone! I guess I will be exploring more on oracle foreign data wrapper. Has anyone tried using oracle_fdw with Oracle RAC? I am wondering how would it handle failovers.

[GENERAL] Oracle to PostgreSQL replication

Hi, I need to setup a replication process for continuously replicating changes happening in an Oracle Database to a PostgreSQL database. My Oracle Database is version 11.2 and setup as a cluster with RAC My Postgres database version is 9.2 Oracle Database is running in Solaris and PostgreSQL

[GENERAL] Oracle to PostgreSQL transition?

Hey all, We have a very robust Oracle and SQL Server presence at work but we're looking to farm out some of the load to PostgreSQL to limit costs. I'm curious if there are any DBAs out there who have gone down this route before. Any tips, tricks, failures, successes, etc.? I would just like to

Re: [GENERAL] Oracle to PostgreSQL transition?

On 4 April 2013 16:16, Roy Anderson roy.ander...@gmail.com wrote: Hey all, We have a very robust Oracle and SQL Server presence at work but we're looking to farm out some of the load to PostgreSQL to limit costs. I'm curious if there are any DBAs out there who have gone down this route

Re: [GENERAL] Oracle to PostgreSQL transition?

On Thu, Apr 4, 2013 at 11:16 PM, Roy Anderson roy.ander...@gmail.comwrote: Hey all, We have a very robust Oracle and SQL Server presence at work but we're looking to farm out some of the load to PostgreSQL to limit costs. I'm curious if there are any DBAs out there who have gone down this

Re: [GENERAL] Oracle to PostgreSQL transition?

On Fri, Apr 5, 2013 at 2:12 AM, Szymon Guz mabew...@gmail.com wrote: On 4 April 2013 16:16, Roy Anderson roy.ander...@gmail.com wrote: Hey all, We have a very robust Oracle and SQL Server presence at work but we're looking to farm out some of the load to PostgreSQL to limit costs. I'm

Re: [GENERAL] Oracle to PostgreSQL transition?

On 04/04/2013 09:16 AM, Roy Anderson wrote: We have a very robust Oracle and SQL Server presence at work but we're looking to farm out some of the load to PostgreSQL to limit costs. You can do what we did. EnterpriseDB has built-in Oracle compatibility through a series of plugins, patches,

Re: [GENERAL] Oracle to PostgreSQL transition?

On 04/05/2013 08:03 AM, Robert Treat wrote: On Fri, Apr 5, 2013 at 2:12 AM, Szymon Guz mabew...@gmail.com wrote: On 4 April 2013 16:16, Roy Anderson roy.ander...@gmail.com wrote: Hey all, We have a very robust Oracle and SQL Server presence at work but we're looking to farm out some of the

Re: [GENERAL] Oracle to PostgreSQL transition?

2013/4/5 Robert Treat r...@xzilla.net: Yeah, it's worth reading through those links to get an idea of things; you'll find much less literature (and tools) for MSSQL, but the principals are mostly the same. One thing to decide on is if you are going to port applications wholesale, or try to

[GENERAL] Oracle to PostgreSQL replication with Goldengate

Hello all, GoldenGate added PostgreSQL as a target database for replication. I tried setting it up, and not finding any tutorial, put together a how to here - http://jayadevanm.wordpress.com/2012/11/07/goldengate-replication-from-oracle-to-postgresql/ I think near real-time replication might have

[GENERAL] Oracle to PostgreSQL

Hi, I have almost 1300 files from Oracle (no access to oracle server). I have to create the tables and data as follows. -- start script -- file name: aa_asset_type.sql CREATE TABLE AS_ASSET_TYPE ( MAIN_TYPE CHAR(3) NOT NULL, SUB_TYPE NUMBER(3)

Re: [GENERAL] Oracle to PostgreSQL

Greenhorn wrote: Unfortunately When I execute the above files using \i I am getting errors like ERROR: syntax error at or near ( LINE 4: SUB_TYPE NUMBER(3) NOT NULL, Obviously 'number' is not PostgreSQL data type so is 'varchar2'. What is your suggestion to

Re: [GENERAL] Oracle to PostgreSQL

John R Pierce wrote on 16.03.2009 00:41: Greenhorn wrote: Unfortunately When I execute the above files using \i I am getting errors like ERROR: syntax error at or near ( LINE 4: SUB_TYPE NUMBER(3) NOT NULL, Obviously 'number' is not PostgreSQL data type so is

Re: [GENERAL] Oracle to PostgreSQL

Thomas Kellerer wrote: change number to numeric, and varchar2 to char and you'll likely be good. My guess would have been that varchar is the equivalent to varchar2 char does a blank padding and is different in behaviour to varchar (as it is in Oracle) geez, yeah, what you said!

Re: [GENERAL] Oracle and Postgresql

There is some my publications about SART AML System, where is more detailed described all this things (and more) that I wrote below. http://www.analyticsql.org/documentation.html Regards, Blazej Oleszkiewicz 2008/9/4 Blazej [EMAIL PROTECTED]: Hi Artacus 2008/9/4 Artacus [EMAIL PROTECTED]:

Re: [GENERAL] Oracle and Postgresql

On Sep 15, 2008, at 6:58 AM, David Fetter wrote: Roles, We have 'em. We do NOT have secure application roles or anywhere near the level of configurability in security aspects as Oracle. We've got a great foundation, but we lack a lot of fine-grained granularity (e.g. an Oracle SAR can

Re: [GENERAL] Oracle and Postgresql

On Wed, Sep 24, 2008 at 11:13 PM, Casey Allen Shobe [EMAIL PROTECTED]wrote: On Sep 15, 2008, at 6:58 AM, David Fetter wrote: Roles, We have 'em. We do NOT have secure application roles or anywhere near the level of configurability in security aspects as Oracle. We've got a great

Re: [GENERAL] Oracle and Postgresql

On Thu, Sep 25, 2008 at 01:13:29PM +0300, Asko Oja wrote: but why would you put part of your business logic into some configuration tables while you could keep it in your own functions Because the parameters of the business logic should not be in the code. The parameters should be part of

Re: [GENERAL] Oracle and Postgresql

On Sep 15, 2008, at 6:58 AM, David Fetter wrote: Roles, We have 'em. We do NOT have secure application roles or anywhere near the level of configurability in security aspects as Oracle. We've got a great foundation, but we lack a lot of fine-grained granularity (e.g. an Oracle SAR can

Re: [GENERAL] Oracle and Postgresql

On Sep 4, 2008, at 7:40 PM, Robert Treat wrote: It is not as simple as Oracles database link syntax. Setting up a connection involves a couple of sql looking commands, and once you setup a connection to a remote database, you can reference a table with something like select * from [EMAIL

Re: [GENERAL] Oracle and Postgresql

On Sep 1, 2008, at 12:42 AM, Henry wrote: This is /finally/ being addressed, although (very) belatedly. The Pg core dev team always argued that replication was an add-on and should not form part of the core (ie, similar nonsense excuses the MySQL team used for add-ons such as triggers,

Re: [GENERAL] Oracle and Postgresql

On Thu, Sep 25, 2008 at 3:52 PM, Andrew Sullivan [EMAIL PROTECTED]wrote: On Thu, Sep 25, 2008 at 01:13:29PM +0300, Asko Oja wrote: but why would you put part of your business logic into some configuration tables while you could keep it in your own functions Because the parameters of the

Re: [GENERAL] Oracle and Postgresql

On Sep 25, 2008, at 3:13 AM, Asko Oja wrote: but why would you put part of your business logic into some configuration tables while you could keep it in your own functions Because as bad as my Not Invented Here syndrome might be at times, I know that I would not be able to alone build as

Re: [GENERAL] Oracle and Postgresql

On Sep 15, 2008, at 1:04 PM, Christophe wrote: More seriously, this is the issue with code-encryption on an open source platform: Where do you keep the key? From my (admittedly brief) research, it appears that Oracle bakes it into the server binary, which isn't going to work for PG. Just

Re: [GENERAL] Oracle and Postgresql

On Sep 15, 2008, at 1:15 PM, Scott Marlowe wrote: But whether it's oracle or postgresql, this is just security through obscurity. If you have root access on the server either method would be trivial to hack. You just contradicted yourself. If you have root access on the server all bets are

Re: [GENERAL] Oracle and Postgresql

@postgresql.org Subject: Re: [GENERAL] Oracle and Postgresql Date: Thu, 25 Sep 2008 11:15:24 -0700 On Sep 4, 2008, at 7:40 PM, Robert Treat wrote: It is not as simple as Oracles database link syntax. Setting up a connection involves a couple of sql looking commands, and once you setup

Re: [GENERAL] Oracle and Postgresql

On Sep 15, 2008, at 2:40 PM, Scott Marlowe wrote: Like MySQL has built in replication. You know, I hear this particular example about MySQL's replication implementation a lot against any sort of new feature, and it's important to recognize the difference here. Replication is *not* a

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

On Sep 15, 2008, at 7:19 PM, Tom Lane wrote: The problem is that the people who ask for this type of feature are usually imagining that they can put their code on customer-controlled machines and it will be safe from the customer's eyes. That's a broken expectation. All that can

Re: [GENERAL] Oracle and Postgresql

Casey Allen Shobe wrote: To an extent we *can* simulate row-level and column-level security through the use of very restricted data tables and more generally- available or specific-purpose views, but we cannot make PostgreSQL call a custom function to determine from it's output whether or

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

On Thu, Sep 25, 2008 at 01:05:26PM -0700, Casey Allen Shobe wrote: On Sep 15, 2008, at 7:19 PM, Tom Lane wrote: The problem is that the people who ask for this type of feature are usually imagining that they can put their code on customer-controlled machines and it will be safe from the

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

On Sep 25, 2008, at 1:05 PM, Casey Allen Shobe wrote: As for the expectation above - could pl/pgsql be made compilable? Without getting into the argument as to the level of security provided, it strikes me that a reasonable approach would be a non- core pluggable language which accepts

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

On Sep 16, 2008, at 6:39 AM, Jonathan Bond-Caron wrote: After some research, I found this article that I believe will make a stronger use case: http://www.iosn.net/network/news/Managing%20the%20insider%20threat%20through %20code%20obfuscation I can tell without even clicking the link that it

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

On Sep 24, 2008, at 8:05 AM, David Fetter wrote: C is not magic obfuscation gear. Anybody with a debugger can expose what it's doing. Yes, but you don't get original code, comments, etc. and it takes a lot of effort to refine it back down into something maintainable. People looking to

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

On Sep 24, 2008, at 6:12 PM, Scott Ribe wrote: the sort of person who thinks re-using someone else's undocumented code is easier than writing it from scratch is probably not going to be able to learn the code via debugging tools. There are two distinct extremes here, and I think most people

Re: [GENERAL] Oracle and Postgresql

On Sep 25, 2008, at 11:16 AM, Asko Oja wrote: What i see is lack of useless bells and whistles in PostgreSQL and i like it. Then you aren't paying attention very well. PostgreSQL comes with an extremely rich and useful set of bells and whistles than most people never use, in a

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

On Sep 25, 2008, at 1:14 PM, David Fetter wrote: On Thu, Sep 25, 2008 at 01:05:26PM -0700, Casey Allen Shobe wrote: On Sep 15, 2008, at 7:19 PM, Tom Lane wrote: The problem is that the people who ask for this type of feature are usually imagining that they can put their code on

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

On Thu, Sep 25, 2008 at 01:25:25PM -0700, Casey Allen Shobe wrote: Gee, I wonder why companies that support these antics grow to insane sizes of employees? Meetings. Lots and lots of meetings. A -- Andrew Sullivan [EMAIL PROTECTED] +1 503 667 4564 x104 http://www.commandprompt.com/ --

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

On Thu, 25 Sep 2008, Christophe wrote: it strikes me that a reasonable approach would be a non-core pluggable language which accepts encrypted strings as functions, decrypts them (using a key compiled into the language module), and passes them on to PL/pgSQL for execution...This would, of

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

On Sep 25, 2008, at 1:16 PM, Christophe wrote: Without getting into the argument as to the level of security provided, it strikes me that a reasonable approach would be a non- core pluggable language which accepts encrypted strings as functions, decrypts them (using a key compiled into the

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

intended recipient. Sender does not necessarily endorse content contained within this transmission. CC: pgsql-general@postgresql.org From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql) Date: Thu, 25 Sep 2008

Re: [GENERAL] Oracle and Postgresql

For an alternative view of the security argument, which may be a little off topic... One consideration in regard to arguments for additional security, whether column and row level security or the divergent thread on obfuscated stored procedures is whether postgresql currently supports PCI

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

I'm not sure what the policy is on putting stuff in the docs, but how about putting that in the relevant place, as well as a note about the other option; using C and SPI. Added to TODO under features not wanted: Incomplete itemObfuscated function source code (not wanted)

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

On Wed, Sep 24, 2008 at 02:12:19PM +, Glyn Astill wrote: I'm not sure what the policy is on putting stuff in the docs, but how about putting that in the relevant place, as well as a note about the other option; using C and SPI. C is not magic obfuscation gear. Anybody with a debugger can

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

David Fetter wrote: On Wed, Sep 24, 2008 at 02:12:19PM +, Glyn Astill wrote: I'm not sure what the policy is on putting stuff in the docs, but how about putting that in the relevant place, as well as a note about the other option; using C and SPI. C is not magic obfuscation gear.

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

On Wed, Sep 24, 2008 at 08:05:18AM -0700, David Fetter wrote: C is not magic obfuscation gear. Anybody with a debugger can expose what it's doing. There have been math papers showing that it's impossible to hide the functionality of a piece of software based only on the ability to run it, so

Re: [GENERAL] Oracle and Postgresql

On Aug 31, 2008, at 8:44 PM, David Fetter wrote: What they want to have is a huge entity they can blame when everything goes wrong. They're not interested in the actual response times or even in the much more important time-to-fix because once they've blamed Oracle, they know the responsibility

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

C is not magic obfuscation gear. Anybody with a debugger can expose what it's doing. There have been math papers showing that it's impossible to hide the functionality of a piece of software based only on the ability to run it, so the entire prospect of obscuring the software's

Re: [GENERAL] Oracle and Postgresql

On Wed, Sep 24, 2008 at 1:02 PM, Casey Allen Shobe [EMAIL PROTECTED] wrote: A knowledgeable PostgreSQL DBA can make significantly more than an Oracle DBA as they're a scarcer resource and generally higher quality on average. But it may be harder for them to find work - they may end up having

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

Andrew Sullivan [EMAIL PROTECTED] writes: On Wed, Sep 24, 2008 at 08:05:18AM -0700, David Fetter wrote: C is not magic obfuscation gear. ... To be fair, one of the points that others are trying to make is not secure this function for real but secure this function enough to make it a little

Re: [GENERAL] Oracle and Postgresql

On Sep 4, 2008, at 7:40 PM, Robert Treat wrote: It is not as simple as Oracles database link syntax. Setting up a connection involves a couple of sql looking commands, and once you setup a connection to a remote database, you can reference a table with something like select * from [EMAIL

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

the sort of person who thinks re-using someone else's undocumented code is easier than writing it from scratch is probably not going to go to the trouble of really learning the code via debugging tools. Fixed that for you: the sort of person who thinks re-using someone else's undocumented

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

Added to TODO under features not wanted: Incomplete itemObfuscated function source code (not wanted) Obfuscating function source code has minimal protective benefits because anyone with super-user access can find a way to view the code. To prevent

Re: [GENERAL] Oracle and Postgresql

Merlin Moncure wrote: On Mon, Sep 15, 2008 at 1:10 PM, Martin Gainty [EMAIL PROTECTED] wrote: accessing: i *thought* the advantage of creating any SQL procedure/function was the entity is stored in procedure cache load time: Java vs C++ compare here

Re: [GENERAL] Oracle and Postgresql

Am 2008-09-15 10:12:08, schrieb Joshua Drake: Are we going to start a VI vs Emacs argument too? They are out of concurence since I am using mc (Midnight Commander). :-P Thanks, Greetings and nice Day/Evening Michelle Konzack Systemadministrator 24V Electronic Engineer Tamay

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

Because it's so full of obvious loopholes. Yes, it might slow down someone who didn't have superuser access to the database or root access to the machine it's on; but that doesn't count as secure really. The problem is that the people who ask for this type of feature are usually

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

On Tue, Sep 16, 2008 at 9:15 AM, Glyn Astill [EMAIL PROTECTED] wrote: As much as I'm impressed with the we do it properly or not at all attitude, it'd be nice if there was an option to stop the casual user from viewing code. I'll admit to obfusicating bits and pieces using C, even though the

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

On Tue Sep 16 08:40 AM, Bill Moran wrote: In response to Tom Lane [EMAIL PROTECTED]: Bill Moran [EMAIL PROTECTED] writes: What I'm _asking_ is why would extending SECURITY DEFINER to include preventing unauthorized users from viewing code _not_ be a valid method of securing the code.

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

Nice trick ... thanks! One big reason why nothing hasn't been done is that there is a decent 'low tech' obfuscation tactic already: remove select access from pg_proc to the user accounts in question and 'public'. This will essentially disable casual browsing of procedure code from user

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

One big reason why nothing hasn't been done is that there is a decent 'low tech' obfuscation tactic already: remove select access from pg_proc to the user accounts in question and 'public'. This will essentially disable casual browsing of procedure code from user accounts. Neat :-)

Re: Obfuscated stored procedures (was Re: [GENERAL] Oracle and Postgresql)

On Tue, Sep 16, 2008 at 09:39:03AM -0400, Jonathan Bond-Caron wrote: I agree here. I hope there's a consensus that it does offer some level of protection. There is not, in fact, in the security community a consensus that it offers some level of protection. There are some security people who

Re: [GENERAL] Oracle and Postgresql

On Mon, Sep 15, 2008 at 2:04 PM, Christophe [EMAIL PROTECTED] wrote: On Sep 15, 2008, at 12:56 PM, Scott Marlowe wrote: I could totally get behind needing permission to see the plpgsql code. :) I wasn't kidding up there. Setting view permissions on plpgsql (or any pl code

Re: [GENERAL] Oracle and Postgresql

On Tue, 16 Sep 2008 11:54:18 -0500 Roberts, Jon [EMAIL PROTECTED] wrote: I wasn't kidding up there. Setting view permissions on plpgsql (or any pl code really) would be understandable. If you're not a super user or the owner, you need permission to see it. How can I make that a

Re: [GENERAL] Oracle and Postgresql

Kevin Hunter wrote: 1. Oracle was first, and has vendor lock-in momentum. 2. Oracle ...speed/performance/concurrency... 3. Oracle has application lock-in as well. ... 4. Oracle is company-backed, so there is ostensibly someone to blame.. 5. ... individuals ... may prefer it *because* it's

Re: [GENERAL] Oracle and Postgresql

2008/9/9 0123 zyxw [EMAIL PROTECTED]: Kevin Hunter wrote: 1. Oracle was first, and has vendor lock-in momentum. 2. Oracle ...speed/performance/concurrency... 3. Oracle has application lock-in as well. ... 4. Oracle is company-backed, so there is ostensibly someone to blame.. 5. ...

  1   2   >