Posts

Building RAG Entirely Inside Oracle Database 26ai — No Vector DB, No App Layer, Just PL/SQL

Image
Building Retrieval-Augmented Generation (RAG) Entirely Inside Oracle Database — with PL/SQL How I grounded a local LLM (Ollama + Qwen2.5) in Oracle 26ai's native Vector Search — no external vector database, no separate application layer. Munish Kumar Karna Senior Database Solution Architect | Oracle DBA | Oracle RAC, ASM, Data Guard, GoldenGate, OCI Why This Matters Retrieval-Augmented Generation (RAG) is usually built with a dedicated vector database, an orchestration framework, and an application server sitting between the data and the LLM. With Oracle Database 26ai, that entire pipeline can live inside the database itself. In this walkthrough, I demonstrate a complete, self-contained RAG pipeline built purely in PL/SQL: importing an ONNX embedding model, running a local LLM through Ollama, chunking and embedding a real PDF manual, and using Oracle's native VECTOR data type and DBMS_VECTOR package to ground the model...
Post a Comment
Read more

Oracle Database Vault: A Complete Hands-On Guide to Locking Down Privileged Access (CDB, PDB, Realms & Unified Audit)

Image
Locking Down the Database from the Inside: My Hands-On Implementation of Oracle Database Vault Munish Kumar Karna  |  Senior Database Solution Architect & Oracle DBA Every DBA eventually confronts an uncomfortable truth: the biggest risk to a “secure” database is often the person with the keys to it. Firewalls, network segmentation, and encryption all assume the threat is outside the perimeter — but SYSDBA, SYSTEM, and other privileged accounts sit squarely inside it. Over the past few weeks I implemented Oracle Database Vault end-to-end — from installing the option to enforcing a working security Realm with full audit visibility — and I want to walk through exactly how it was done, screenshots and SQL included, for anyone evaluating this for their own environment. Why Oracle Database Vault Matters Oracle Database Vault addresses insider threats and privileged account abuse by restricting access inside the database itself. A few reasons it belongs in any seriou...
Post a Comment
Read more

Row-Level Security, Done Right: My Oracle Label Security Rollout Across Nepal's 7 Provinces

Image
Row-Level Security, Done Right: My Oracle Label Security Rollout Across Nepal's 7 Provinces Oracle Label Security | Case Study Row-Level Security, Done Right: My Oracle Label Security Rollout Across Nepal's 7 Provinces How I used Oracle Label Security to enforce province- and department-level data access across Nepal's 7 provinces Munish Kumar Karna - DBA The Business Problem A national organization operating across all 7 provinces of Nepal needed a single, shared database — but with very different visibility rules depending on who was looking at it. Executive leadership needed a complete, nationwide view. Province-level managers needed full visibility into their own province, but nothing outside it. And functional staff (HR, IT, Marketing, Finance) needed to see only their own department's records within their own province. Rather than maintaining separate schemas, views, or application-level filters for every combination of role and province, ...
Post a Comment
Read more