Voice of the DBA

Tag: syndicated

Learning All About Always Encrypted at DevConnections

Like the alliteration in the title? I almost removed it, but decided it had a nice ring. Maybe that should be the title of my IT/DevConnections (Oct 10-13, 2016) session other than End to End Always Encrypted in SQL Server 2016.

I loved seeing encryption being natively built into SQL Server 2005 (and beyond), but the addition of Always Encrypted in Azure SQL and SQL Server 2016 really intrigued me. In fact, I think many people were very excited about this feature. In End to End Always Encrypted in SQL Server 2016, I cover the detailed workings and setup of the feature and how it can be included in your applications. There’s a lot to think about with encryption features, and I hope to both inform attendees as well as ensure they have a healthy respect for the limitations.

I’ve given variations of this talk in 2016 and quite a few people have walked away excited, but also re-thinking the “it just works” message from Microsoft’s marketing people.

If you’re looking for some training, some inspiration, and are a full-stack developer, or multi-technology IT worker, think about coming out to DevConnections. There are a slew of technologies being covered (VS, ASP.NET, C#7, Azure, PowerShell, AWS, SQL Server, Sharepoint, Exchange, Hyper-V and more).

Register today, use 500SPKR to save $500, and I’ll see you in Las Vegas this October.

September 6, 2016
Team Purple

This is Down Tools Week at Redgate Software, and I’m visiting the office. I had hoped to dive into a team and participate, but scheduling and other commitments mean that I’m only working with a team part of the time.

We had our first standup yesterday. They tried desperately to clip me out of the picture here.

After some morning setup, we walked down to the atrium and gathered in a group, talking about our plans and the work for the afternoon.

We’re using a kanban board, which will live on the glass wall of our conference room. One of the team is “Doing” work on the “doing” part of the wall, filling in the letters. I don’t see a post-it in the “ToDo” section, so we’re already off track. Hopefully when he gets to “Done”, we’ll get a ticket in that column.

We have a number of people working full time this week on a few items, with support from other teams that we’ll need API help from. The developers are pair programming, in 3 groups, with really three goals for the team. They are thinking to switch a few times so that each group gets to work on each part of our project.

Breaks are frequent since the coffee machine is downstairs.

We have a couple of people helping to coordinate and keep things on track, and luckily we got the conference room with the couches.

I’ve been in and out, helping work on the presentation that we’ll give on Friday. Hopefully we’ll have some real, tangible results to show as well as a talk. So far things look good, with lots of progress on the first integration point with another product.

September 6, 2016
Filtering Objects with DLM Dashboard

I’ve been looking at some of the features of DLM Dashboard as I go through work building database development pipelines. In this post I wanted to cover one of the lesser used features, filtering objects.

Note: DLM Dashboard is a free tool from Redgate Software. Use it to monitor the schema of your development, test, and production databases and get notified when changes are made.

Why would you filter objects if you’re auditing changes? Well, this isn’t really an audit per se. It’s more a tracking mechanism that provides auditing, but sometimes you don’t want to audit everything.

For example, in my database pipeline, I have these databases:

As much as I want to track down the changes to code, there are things I don’t want to deal with. For example, I don’t care about users. I (properly) use roles to manage security, and the users in each environment aren’t going to be deployed from one database to the other. More importantly, we don’t need to track them. So let’s stop.

If I go to the right side of my pipeline, I can see a “Filter objects…” link.

When I click that, I get this popup on the left, where I can upload a filter file. The filter file is the same format that SQL Compare uses, and indeed, the easiest way to create one is with SQL Compare. I’ll do that.

I’ll run SQL Compare and then grab two random databases. It doesn’t really matter since I don’t care about the comparison. Here I’m comparing a database to itself.

When the comparison finishes, I can go to the left side and set filters.

There are a lot of choices here, but I’ll simply remove the checkbox on “Users”.

Once I do that, I can save the filter file. There’s a save icon near the top of the filter dialog.

Clicking this gives me a dialog to enter a file name.

Now I can just close SQL Compare. By default, these filter files are in %My Documents%\SQL Compare. Once I’ve saved that file, I can see it in the Windows Explorer.

Now let’s go back to DLM Dashboard. I can browse to my filter file and load it. Once I do that, the filter is applied, and my main page notes that I’ve got a filter applied on that pipeline.

There is a warning here, that notes the change of a filter is actually a drift detection change. This means the schema is not recognized. The same things happens if you remove a filter.

If I look at the details, you’ll see the filter has been applied.

Note: This filter is only applicable to those database in this pipeline.

Now, let’s test this. Users are ignored in this pipeline, so if I add a new user to the database, it shouldn’t affect the system. Let’s do that.

SQL Source Control detects this (though I could filter it here as well).

After I commit the change, it flows through the CI process and gets deployed to the Integration database. I can see the login here:

However, I don’t see drift.

You’ll have to trust that I named the drifted schema this, but what if I include a few changes? I’ll add a new procedure and commit it to my VCS. The CI process runs and this is deployed to integration. Now I can see a change in Integration.

This is the same schema I named in Development (I know, I should use numbering). It’s marked as a change from the CI process, and I need to acknowledge that.

The details of the change:

The history, after I’ve Acknowledged the changes

Filtering Helps

When you’ve got environment specific items, or things that you want to exclude from tracking, filtering works. These might be schemas controlled by other groups or a third party. This might be security information. This could be anything.

By using a filter, you can reduce the noise. By deploying these filters throughout your DLM process, in SQL Source Control, in DLM Automation, in DLM Dashboard, you can limit the extra information that isn’t necessary for you to view.

Getting Started

You can start using DLM Dashboard for free today. Download a copy, at no charge, and monitor up to 50 databases from a single installation. Or install multiple instances to watch more databases.

I think you’ll find DLM Dashboard is a handy tool for tracking those development efforts you want to be sure are deployed completely to downstream environments, while ignoring those that aren’t important.

August 31, 2016
Finding out Who’s Touching Your Database at DevConnections

I’ve got a session this fall at the IT/DevConnections conference (Oct 10-13, 2016) called “Who’s Touching My Database?” This is something I’ve worked on for a few years, but never really gotten it to the point where I was ready to deliver it.

Earlier this year, with all the security issues I’ve seen across the last couple years, and having had some questions from customers of Redgate, I decided to finish this talk off. I submitted it to DevConnections and started trying to focus the talk down to showing ways in which you can audit the activity on your database server.

I’ve worked in a few environments where security was taken very seriously and auditing was critical to proving we were properly managing our systems. These days I slowly see the importance of security and auditing growing to all industries, becoming more and more important. I hope to showcase the flexibility and possibilities (As well as drawbacks) of tracking activity on your database servers.

If you’re looking for some training, some inspiration, and are a full-stack developer, or multi-technology IT worker, think about coming out to DevConnections. There are a slew of technologies being covered (VS, ASP.NET, C#7, Azure, PowerShell, AWS, SQL Server, Sharepoint, Exchange, Hyper-V and more).

Register today, use 500SPKR to save $500, and I’ll see you in Las Vegas this October.

August 30, 2016