Oracle GoldenGate introduced ACCESSRULE in Oracle GoldenGate 12.1.2.1.10+ and 12.2. The new parameter restricts the remote system access.
- You can establish multiple rules with multiple ACCESSRULE statements with no number limit.
- The priority are specified in the order of the most important to the least important, or you can explicitly set the priority of each rule with the PRI option.
ACCESSRULE[, PROG program_name][, IPADDR address][, PRI rule][, login_ID]{, ALLOW | DENY}
- PROG: specifies the program(s) to set the access rule. The options include GGSCI, GUI, MGR/MANAGER, REPLICAT, COLLECTOR|SERVER and * for all options (default).
- IPADDR: specifies from which IP can access the specified program.
- PRI (0-99): specifies the priority.
- Login_ID: specifies with RMTHOST configuration.
- ALLOW|DENY: specifies allow or deny the access.
ACCESSRULE, PROG *, IPADDR 129.56.30.178, ALLOW
ACCESSRULE, PROG COLLECTOR, IPADDR 129.56.30.178, ALLOW
Make sure you grant the localhost the access to GGSCI and the manager. Otherwise, you can't event stop the manager process:
GGSCI> stop mgr Manager process is required by other GGS processes. Are you sure you want to stop it (y/n)?y Sending STOP request to MANAGER ... ERROR: Access denied. 2016-11-16 00:17:51 WARNING OGG-01742 Command sent to MGR MGR returned with an ERROR response.
In this case, you then have to go to the operation system and kill the process.
$ ps -ef |grep mgr oracle 32513 1 0 00:11 ? 00:00:00 ./mgr PARAMFILE /u02/data/gghome/dirprm/mgr.prm REPORTFILE /u02/data/gghome/dirrpt/MGR.rpt PROCESSID MGR USESUBDIRS oracle 32586 32300 0 00:17 pts/0 00:00:00 grep mgr $ kill 32513