Repositories
ALTR refers to a secured OLTP database as a repository. Each repository represents a single registered database server or instance that either the sidecar or an agent connects to. Registering a database as a repository, and registering the repository users used to connect to it, is a prerequisite shared by Sidecar Integration and Agent Integration. This is distinct from installing the sidecar binary, covered in Install the ALTR Sidecar, and distinct from a data consumer connecting through an already-running sidecar, covered in Connect to a Repository through a Sidecar.
In this section
Section titled “In this section”- Register Repositories — Register a database as a repository so the sidecar or an agent can connect to it.
- Register Repository Users — Register the database credentials the sidecar uses to connect data consumers through impersonation.
Repository Users and Repository Service Users
Section titled “Repository Users and Repository Service Users”OLTP uses 2 distinct credential types: repository users and repository service users.
Repository users are database credentials configured in ALTR for impersonation. When a data consumer connects through the sidecar using single sign-on, an impersonation policy determines which repository user credential the sidecar uses for the database session. Repository users are shared credentials — multiple data consumers can map to the same repository user based on policy.
Repository service users are read-only database credentials configured in ALTR for agents, such as the classification agent. An agent retrieves a repository service user’s credentials at runtime through a configured credential provider. The sidecar doesn’t use repository service users, and agents don’t use repository users.