===========================================11g=====================================

1) Stop Database Control, the listener and the database

2) Disable Database Vault :

Unix :

cd $ORACLE_HOME/rdbms/lib

make -f ins_rdbms.mk dv_off ioracle

Note:

In 11gR2 one can use chopt to disable DV

chopt disable dv

3) Start the listener and the database.

4) Disable the Database Vault triggers :

conn / as sysdba

alter trigger dvsys.dv_before_ddl_trg disable;

alter trigger dvsys.dv_after_ddl_trg disable;

Note:

These two triggers do not exist in 11gR2 so this step should be executed on 11gR1 only.

5) Identify the DV_OWNER and DV_ACCTMGR users that were configured:

select unique GRANTEE from dba_role_privs

where GRANTED_ROLE in ('DV_ACCTMGR','DV_OWNER')

and grantee <> 'DVSYS';

6) Run script dvremov.sql as SYSDBA after setting parameter recyclebin to OFF:

Note: In 11.2.0.1 run the following statements before running dvremov.sql:

update dvsys.config$ set status=0;

commit;

conn / as sysdba

alter system set recyclebin=off scope=spfile;

shutdown immediate

startup

run ?/rdbms/admin/dvremov.sql

After this only DVSYS and DVF users and DV roles are removed, but the security admin and account manager accounts are not removed as they are considered custom database accounts. They have to be removed manually, use the usernames obtained in step 5. (take care not to drop any users that you may have granted these roles manually):

conn / as sysdba

drop user &DV_OWNER cascade;

drop user &DV_ACCTMGR cascade;

dvremov.sql just removes the DV components and does not affect in any way OLS.

7) Run dbms_network_acl_admin.drop_acl(In 11gR2 this is included in dvremov.sql) :

conn / as sysdba

exec DBMS_NETWORK_ACL_ADMIN.DROP_ACL ('/sys/acls/dvsys-network-privileges.xml');

commit;

8) Turn on recycle bin if it was turned off before

==============================12c=============================================

Disable Oracle Database Vault

Be aware that after you disable Oracle Database Vault, Oracle Label Security, which is required to run Database Vault, is still enabled.

1) To disable Oracle Database Vault:

In SQL*Plus, log in as the Oracle Database Owner (DV_OWNER) account, and then disable Oracle Database Vault.

sqlplus psmith

Enter password: password

EXEC DBMS_MACADM.DISABLE_DV;

2) In a multitenant environment, connect to the appropriate pluggable database (PDB).

For example:

CONNECT psmith@hrpdb

Enter password: password

To find the available PDBs, query the DBA_PDBS data dictionary view. To check the current PDB, run the show con_name command.

3) Restart the database.

CONNECT SYS AS SYSOPER -- Or, CONNECT SYS@hrpdb AS SYSOPER

Enter password: password

SHUTDOWN IMMEDIATE

STARTUP

4) For Oracle RAC installations, repeat these steps for each node on which the database is installed.

5) Run:

sqlplus / as sysdba

@?/rdbms/admin/dvremov.sql

script will remove Database Vault

Uninstall database vault

相關文章