Connecting to the ARS Recovery Catalog with RMAN
When using Oracle Autonomous Recovery Service (ARS / DBRS) for database backups, the connection to the recovery catalog is secured via an auto-generated Oracle Wallet and configured TNS alias.
To run manual RMAN operations (such as maintenance, reporting, or manual validation), you need to point your environment to the directory containing the ARS wallet/TNS configuration and connect via the catalog alias.
Step 1: Locate and Set the TNS_ADMIN Directory
First, identify the directory where your ARS configuration files (tnsnames.ora, sqlnet.ora, and wallet files like cwallet.sso) reside. On OCI Database environments (such as Base Database Service or Exadata), these are typically stored under the database cluster file system (ACFS) path.
Export the TNS_ADMIN environment variable so RMAN knows where to look for network configuration and credential artifacts:
# Verify the directory path containing your ARS credentials
[oracle@dev-fghd1 TEMP_TNS]$ pwd
/var/opt/oracle/dbaas_acfs/anidev/TEMP_TNS
# Set TNS_ADMIN to the wallet directory
[oracle@dev-fghd1 TEMP_TNS]$ export TNS_ADMIN=/var/opt/oracle/dbaas_acfs/anidev/TEMP_TNS
Step 2: Establish the RMAN Session
Launch RMAN by connecting locally to the target database and using passwordless wallet authentication to connect to the ARS catalog (/@dbrs):
[oracle@dev-fghd1 TEMP_TNS]$ rman target / catalog /@dbrs
target /: Connects to the local target database instance using OS authentication (SYSDBA/SYSBACKUP).
catalog /@dbrs: The slash (/) instructs RMAN to authenticate using the local wallet credentials inside $TNS_ADMIN, while @dbrs references the ARS catalog TNS entry defined in your tnsnames.ora
Key Takeaway: Always ensure that sqlnet.ora inside your $TNS_ADMIN path is configured with WALLET_LOCATION pointing directly to your ARS wallet directory. This eliminates the need to expose or hardcode catalog passwords in backup automation scripts.
Comments
Post a Comment