CELLDIAG user for Exadata

I was doing some tasks off from my task list and one of the things exachk highlighted was that we should create user CELLDIAG on cells.

Beginning with Exadata Storage Server Software version 12.1.2.2.0,
the storage server user “CELLDIAG” is created during deployment which allows
access to diagnostics without using a more privileged user.
The benefit of creating and using the “CELLDIAG” user is improved security.
The impact of verifying that the “CELLDIAG” user is created is minimal,
as is the impact of creating the user if it does not exist.

Included steps are straightforward:

create user CELLDIAG password=”SomeGood42Password”;
create role celldiagrole;
grant privilege create on diagpack to role celldiagrole;
grant privilege list on diagpack to role celldiagrole;
grant privilege download on diagpack to role celldiagrole;
grant role celldiagrole to user CELLDIAG;

But when I started to create the user I hit an issue with a password:

CellCLI> create user CELLDIAG password="hello.World1!"

CELL-06007: Valid user passwords are 12 to 40 alphanumeric characters with at
least one digit, one lowercase letter and one uppercase letter.
A new password cannot be the same as the existing password.

No matter what combinations I tried it didn’t work. Until I noticed the part about alphanumeric! Sometimes not paying attention and not being native English speaker has it disadvantages.

So new try was much more successful:

CellCLI> create user CELLDIAG password="Hello12World";
User CELLDIAG successfully created.

And rest of the tasks even a Finnish guy like me could complete. 🙂

Simo

Recent Posts

Helping to troubleshoot with OCI VCN Flow Logs

I'm a huge fan of using tools available to help troubleshoot any issues there are.…

2 weeks ago

OCI Routing checklist when using 3rd party firewall

This post will be checklist for items you'll need when you have Firewall (or Hub)…

1 year ago

OCI ExaCS Database Upgrade Rollback

Recently I was testing OCI database upgrade from 12c to 19c and ran into an…

1 year ago

Issues with OCI ExaCS PDB cloning

This is mostly just to document if you hit similar issues and how to get…

1 year ago

OCI Tips and Tricks – Managed MySQL Database in OCI (and trying out Heatwave)

Here I'm looking on how to provision MySQL DB on OCI, see how read replicas…

1 year ago

OCI Tips and Tricks: Create 19c Oracle Database (and manage it)

This time I go over on how to create 19c Oracle Database on OCI (hint:…

1 year ago