Getting started (SAP Compliance accelerator)

Follow the below documentation to install, configure, and run the SAP Compliance Accelerator.

Prerequisites

Installation

To install dxac, you must extract the tar (or zip) file into a folder of your choice. The extraction process creates a folder named dxac-sap-<os>-<version>. It is the working directory for dxac.

Contents of dxac-sap-<os>-<version>folder

• 3 sap/<database>/resource folders

• The dxac command line tool

• Simple README.md file

Before you can run the dxac tool, you must give it the execute permissions:

chmod +x dxac

Initialization

After dxac is installed and extracted, the next step is to initialize and prepare for the deployment. To initialize dxac, run the following command from the dxac directory using a terminal window (or Powershell).

./dxac config init -r ./sap/<database>/resource

Update the <database> value with the folder name that aligns with the Target scrambling SAP application. The available options are:

• S4_hana_1909

• S4_hana_2020

• oracle

For example, if scrambling a SAP S/4HANA 2020 application, specify S4_hana_2020. Most configuration is performed within its ./sap/<database>/resource directory.

During this step, dxac does the following within the current working directory:

• Creates a log folder.

• Creates a dxac_user.config file.

Configuration

The dxac tool relies on three sets of configuration components: the SAP JDBC driver, dxac_user.config, and connector.properties. Each component is used differently to deploy the scrambling metadata into a Delphix Continuous Compliance Engine.

1. SAP HANA JDBC Driver: Enables the connection between the SAP HANA database and Delphix Continuous Compliance Engine.

   1. If you are connecting to an Oracle database, then this step can be skipped as the Compliance Accelerator will leverage the native Oracle JDBC connection capabilities.

2. dxac_user.config: Contains information to create your Compliance Application object model, such as Application name, Environment name, Driver name, and Driver class name.

3. connector.properties: Contains information to connect the created Delphix Continuous Compliance Environment and ruleset to the SAP database via the JDBC Driver.

SAP HANA JDBC Driver

If you need to install the SAP HANA JDBC Driver, then follow these steps. These steps can be ignored if using an Oracle database. The Driver installation can be performed manually or through the dxac tool. If an SAP HANA JDBC Driver has already been installed, then it can be reused. Please confirm before continuing.

Manual Installation

Follow these instructions.

Automated dxac Installation

1. Download an SAP JDB Driver for a local installation or download the SAP JDBC Driver as described in these directions.

2. Copy the Driver jar file into the ../resource/jdbc_driver folder.

3. (Optional) Copy a Driver Support Plugin into the ../resource/plugin folder

4. Configure the driver_name, driver_class_name, and plugin_name (optional) parameters as specified in the following dxac_user.config section.

Once the JDBC driver and parameters are specified, we will upload the Driver in the next Deploying metadata documentation directions. For now, you can continue on with the following configuration directions.

dxac_user.config

The values in this section define the Compliance object model. We suggest using the dxac tool to set these parameters. All values are housed in dxac_user.config file under the current working directory.

These parameters can be specified directly through the command line. For example:

$ ./dxac config update -en DEMO-ENV -an DEMO-APP

The full set of configurable parameters are listed below.

To see the current default values, simply view the dxac_user.config file.

[DEFAULT]
# this is an autogenerated config file.
# please don't edit it manually.
# use dxac config update command to update any parameter

[AcceleratorConfig]
environment_name = DEMO-ENV
app_name = DEMO-APP
plugin_name =
resource_location = ./sap/oracle/resource
driver_name = Oracle
connector_type = DatabaseConnector

[DatabaseConfig]
driver_class_name =

For more information, see dxac config documentation or run the following command:

$ ./dxac config update --help

connector.properties

This file is located under the ../resource/connector directory and contains information to set up a Connector to the database that is being masked. Unlike the dxac_user.config file, these values are updated directly in the connector.properties file.

The following example shows the sample content of the connector.properties file for SAP ECC’s Oracle and SAP S4/HANA’s HANA databases.

For Oracle

[DatabaseConnector]
connector_name = DX_SAP_ORACLE_CN
database_type = ORACLE
jdbc = jdbc:oracle:thin:@<host name>:<port name>:<database name>schema_name = SAPSR3
username = SAPSR3
kerberos_auth = false

For HANA

[DatabaseConnector]
connector_name = DX_SAP_HANA_CN
database_type = EXTENDED
jdbc = jdbc:sap://<host-name>:<portno>?databaseName=<database-name>schema_name = <schema name>username = <user name>kerberos_auth = false

Additional JDBC Details

The following are examples of the key parameters in a JDBC URL that Delphix Continuous Compliance Engine can use to connect to SAP.

Oracle

jdbc:oracle:thin:@<VM-name>:<port-no>:<SID>For eg :- jdbc:oracle:thin:@ecc-oracle.dlpxdc.co:1521:ODB

HANA

jdbc:sap://<host-name>:<portno>?databaseName=<database-name>For eg :-  jdbc:sap://hana-1909.dlpxdc.co:30013?databaseName=S19

If you are uncertain of the correct JDBC string, then we recommend attempting to configure the connection manually through the Delphix Continuous Compliance Engine’s UI and then return to the Compliance Accelerator solution.

What’s Next?

You have now successfully installed, initialized, and configured dxac. The next step is to deploy the scrambling metadata to a Continuous Compliance Engine. For detailed instructions, see Deploying Metadata.

For in-depth details on dxac commands, refer to the Compliance Accelerator’s Config section.