惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

博
博客园 - 聂微东
GbyAI
GbyAI
G
Google Developers Blog
大猫的无限游戏
大猫的无限游戏
H
Hackread – Cybersecurity News, Data Breaches, AI and More
博
博客园 - 叶小钗
A
About on SuperTechFans
M
MIT News - Artificial intelligence
宝玉的分享
宝玉的分享
雷峰网
雷峰网
钛媒体：引领未来商业与生活新知
钛媒体：引领未来商业与生活新知
Martin Fowler
Martin Fowler
Google DeepMind News
Google DeepMind News
博
博客园 - Franky
B
Blog RSS Feed
Y
Y Combinator Blog
Stack Overflow Blog
Stack Overflow Blog
MongoDB | Blog
MongoDB | Blog
Last Week in AI
Last Week in AI
T
The Blog of Author Tim Ferriss
The GitHub Blog
The GitHub Blog
S
SegmentFault 最新的问题
罗
罗磊的独立博客
Apple Machine Learning Research
Apple Machine Learning Research

博客园 - Steven.zhou

get the server's infomation sql 2005数据库加密实战 Raid(0,1,5,10,01) SQL Server 2005高可用性之镜像功能(http://tech.it168.com/db/s/2007-04-24/200704240837593.shtml) SQL Server 2005高可用性之复制(http://tech.it168.com/db/s/2007-05-15/200705150909375.shtml) SQL Server 2005高可用性之日志传送(http://tech.it168.com/db/s/2007-06-29/200706291229796_2.shtml) SQL Server 2005性能测试实践(读书笔记翻译http://www.testage.net/TestTech/PT/200702/1510.htm) Troubleshooting the Performance of a SQL Server Solution(读书笔记，全是copy原文的） 如何缩小SQL Server数据库日志文件 SQL Server一个特殊查询(http://searchdatabase.techtarget.com.cn/tips/206/2295706.shtml) sql server 2005几个好用易忘的功能 在SSIS中使用自定义的DLL文件 查看数据表的大小 Use Table-Valued Functions as Arrays in SQL Serve 在sql server 中如何移动tempdb到新的位置 动态sql语句返回值 得到所有的触发器（含DDL触发器） 得到数据库中所有用户表的字段、数据类型 在sql2005 中Execute的增强
Setting Up Database Mirroring Using Certificates
Steven.zhou · 2008-11-17 · via 博客园 - Steven.zhou

This example shows all the stages required to create a database mirroring session using certificate-based authentication. The examples in this topic use Transact-SQL. Unless you can guarantee that your network is secure, we recommend that you use encryption for database mirroring connections.

When copying a certificate to another system, use a secure copy method. Be extremely careful to keep all of your certificates secure.

 Example

The following example demonstrates what must be done on one partner that resides on HOST_A. In this example, the two partners are the default server instances on three computer systems. The two server instances run in nontrusted Windows domains, so certificate-based authentication is required.

The initial principal role is taken by HOST_A, and the mirror role is taken by HOST_B.

Setting up database mirroring using certificates involves four general stages, of which three stages—1, 2, and 4—are demonstrated by this example. These stages are as follows:

  1. Configuring Outbound Connections
    This example shows the steps for:
    1. Configuring Host_A for outbound connections.
    2. Configuring Host_B for outbound connections.
  2. Configuring Inbound Connections
    This example shows the steps for:
    1. Configuring Host_A for inbound connections.
    2. Configuring Host_B for inbound connections.
  3. Creating the Mirror Database
  4. Configuring the Mirroring Partners

Configuring Outbound Connections

To configure Host_A for outbound connections
  1. On the master database, create the database master key, if needed.

Code

2. Make a certificate for this server instance.

Code


Create a mirroring endpoint for server instance using the certificate.

Code

Back up the HOST_A certificate, and copy it to other system, HOST_B.

Code


Using any secure copy method, copy C:\HOST_A_cert.cer to HOST_B.

To configure Host_B for outbound connections
  1. On the master database, create the database master key, if needed.

Code

Make a certificate on the HOST_B server instance.

            
Code
  1. Create a mirroring endpoint for the server instance on HOST_B.

Code

  1. Back up HOST_B certificate.

Code

  1. Using any secure copy method, copy C:\HOST_B_cert.cer to HOST_A.

Configuring Inbound Connections

To configure Host_A for inbound connections
  1. Create a login on HOST_A for HOST_B.

    		 
    USE master;
                CREATE LOGIN HOST_B_login WITH PASSWORD = '1Sample_Strong_Password!@#';
                GO
  2. --Create a user for that login.

    		 
    CREATE USER HOST_B_user FOR LOGIN HOST_B_login;
                GO
  3. --Associate the certificate with the user.
    CREATE CERTIFICATE HOST_B_cert
                AUTHORIZATION HOST_B_user
                FROM FILE = 'C:\HOST_B_cert.cer'
                GO
  4. Grant CONNECT permission on the login for the remote mirroring endpoint.

    		 
    GRANT CONNECT ON ENDPOINT::Endpoint_Mirroring TO [HOST_B_login];
                GO
To configure Host_B for inbound connections
  1. Create a login on HOST_B for HOST_A.

    		 
    USE master;
                CREATE LOGIN HOST_A_login WITH PASSWORD = '=Sample#2_Strong_Password2';
                GO
  2. Create a user for that login.
    CREATE USER HOST_A_user FOR LOGIN HOST_A_login;
                GO
  3. Associate the certificate with the user.
    CREATE CERTIFICATE HOST_A_cert
                AUTHORIZATION HOST_A_user
                FROM FILE = 'C:\HOST_A_cert.cer'
                GO
  4. Grant CONNECT permission on the login for the remote mirroring endpoint.
    GRANT CONNECT ON ENDPOINT::Endpoint_Mirroring TO [HOST_A_login];
                GO

Creating the Mirror Database

Configuring the Mirroring Partners

  1. On the mirror server instance on HOST_B, set the server instance on HOST_A as the partner (making it the initial principal server instance). Substitute a valid network address for TCP://HOST_A.Mydomain.Corp.Adventure-Works.com:7024. 

    --At HOST_B, set server instance on HOST_A as partner (principal server):
                ALTER DATABASE AdventureWorks
                SET PARTNER = 'TCP://HOST_A.Mydomain.Corp.Adventure-Works.com:7024';
                GO
  2. On the principal server instance on HOST_A, set the server instance on HOST_B as the partner (making it the initial mirror server instance). Substitute a valid network address for TCP://HOST_B.Mydomain.Corp.Adventure-Works.com:7024.

     

    		 
    --At HOST_A, set server instance on HOST_B as partner (mirror server).
                ALTER DATABASE AdventureWorks
                SET PARTNER = 'TCP://HOST_B.Mydomain.Corp.Adventure-Works.com:7024';
                GO
  3. This example assumes that the session will be running in high-performance mode. To configure this session for high-performance mode, on the principal server instance (on HOST_A), set transaction safety to OFF.

    		 
    --Change to high-performance mode by turning off transacton safety.
                ALTER DATABASE AdventureWorks
                SET PARTNER SAFETY OFF
                GO

此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。