CELLDIAG user for Exadata

I was doing some tasks off from my task list and one of the things exachk highlighted was that we should create user CELLDIAG on cells.

Beginning with Exadata Storage Server Software version 12.1.2.2.0,
the storage server user “CELLDIAG” is created during deployment which allows
access to diagnostics without using a more privileged user.
The benefit of creating and using the “CELLDIAG” user is improved security.
The impact of verifying that the “CELLDIAG” user is created is minimal,
as is the impact of creating the user if it does not exist.

Included steps are straightforward:

create user CELLDIAG password=”SomeGood42Password”;
create role celldiagrole;
grant privilege create on diagpack to role celldiagrole;
grant privilege list on diagpack to role celldiagrole;
grant privilege download on diagpack to role celldiagrole;
grant role celldiagrole to user CELLDIAG;

But when I started to create the user I hit an issue with a password:

CellCLI> create user CELLDIAG password="hello.World1!"

CELL-06007: Valid user passwords are 12 to 40 alphanumeric characters with at
least one digit, one lowercase letter and one uppercase letter.
A new password cannot be the same as the existing password.

No matter what combinations I tried it didn’t work. Until I noticed the part about alphanumeric! Sometimes not paying attention and not being native English speaker has it disadvantages.

So new try was much more successful:

CellCLI> create user CELLDIAG password="Hello12World";
User CELLDIAG successfully created.

And rest of the tasks even a Finnish guy like me could complete. 🙂

Simo

Recent Posts

Oracle Autonomous Database on GCP – Using gcloud CLI for operations

Continuing testing Oracle Database@Google features, this time I wanted to test provisioning using gcloud CLI…

2 weeks ago

OCI Networking – Routing Oracle Services Network Public IPs via Service Gateway

This topic keeps coming up and there are many good blog posts from Oracle and…

3 weeks ago

Can I connect with custom private hostname to my Autonomous Database?

Short answer: Yes! When you deploy your Autonomous Database with a private endpoint, you will…

4 weeks ago

Using Google Cloud Storage with Autonomous Database@GCP

If you've worked with Autonomous Database previously, you know that every now and then you…

2 months ago

ZDM migration to Autonomous Database on GCP using Network Link for direct migration – part 2

Well this took a while! With recent work and travel it's been couple busy months.…

2 months ago

New Console Experience for OCI

Just saw that OCI has enabled preview for new OCI Console experience. To enable it,…

4 months ago