Oracle Linux / Oracle Exadata

Cheat sheet and tricks for Oracle Linux and Oracle Exadata.

Oracle Exadata Components

• Oracle Database Servers
• Exadata Storage Server (storage cells)
• InfiniBand switch
• Ethernet switch: Cisco switch
• Power distribution units (PDUs)
• Oracle Integrated Lights Out Manager (ILOM) for Database server, Exadata Storage Server & InfiniBand
• Keyboard, video, mouse (KVM)

Oracle Linux Hardening

• https://www.oracle.com/technical-resources/articles/it-infrastructure/admin-secure-linux-env.html
• https://www.oracle.com/technical-resources/articles/it-infrastructure/admin-tips-harden-oracle-linux.html

💡 “brute.credfile” contains username/password pairs delimited by “/”. Use credentials-exadata.txt (GitHub). “dos2unix” command might be necessary after copy/pasting the list.

# Minimizing the Software Footprint

# Services
netstat -tulp

# Look for default passwords
nmap -sV -p 22 --script ssh-brute.nse --script-args brute.credfile=/root/credentials_exadata.txt $IP

Oracle Exadata Default Passwords

Default passwords: https://cirt.net/passwords?vendor=Oracle

💡 Use credentials-exadata.txt (GitHub).

# Database Server:
root/welcome1
oracle/welcome1
grid/welcome1
grub/sos1Exadata

# Exadata Storage Server:
root/welcome1
celladmin/welcome1
cellmonitor/welcome1

# InfiniBand switch:
root/welcome1
nm2user/changeme

# Ethernet switch:
admin/welcome1

# Power distribution units (PDUs):
admin/welcome1
root/welcome1

# Database server ILOMs:
root/welcome1

# Exadata Storage Server ILOMs:
root/welcome1

# InfiniBand ILOMs:
ilom-admin/ilom-admin
ilom-operator/ilom-operator

# Keyboard, video, mouse (KVM):
admin/welcome1

# Oracle Gateway
custadmin/install

Default SNMP community strings

public
private
exadata

Other useful commands

# Version
cat /etc/oracle-release

# SSH config
cat /etc/ssh/sshd_config

# List Database instances
cat /etc/oratab

# Connect to DB instance
su - oracle
. oraenv
[DBNAME]
sqlplus / as sysdba

-- List database links
select * from dba_db_links ORDER BY 1;