Re: Hit Ratio

2003-12-20 Thread Nuno Souto
¦D
Unreal, eh?  that's SAP for you...
Cheers
Nuno Souto
[EMAIL PROTECTED]
- Original Message - 

 Just thought I would share my hit ratio with y'all.


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Nuno Souto
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


Re: Duplicating with rman

2003-12-20 Thread Yong Huang
Hi,

I'm not sure why your RMAN output says

 LOGFILE
  GROUP  1 ( '/z01/oradata/DEVL/redo_01a.dbf',
'/z02/oradata/DEVL/redo_01b.dbf',
  GROUP  2 ( '/z01/oradata/DEVL/redo_02a.dbf',

Where's the ) reuse shown in your RMAN script? Are you sure the script you
showed here was run?

Yong Huang

you wrote:

RMAN-06162: sql statement: CREATE CONTROLFILE REUSE SET DATABASE DEVL
...
 LOGFILE
  GROUP  1 ( '/z01/oradata/DEVL/redo_01a.dbf',
'/z02/oradata/DEVL/redo_01b.dbf',
  GROUP  2 ( '/z01/oradata/DEVL/redo_02a.dbf',
'/z02/oradata/DEVL/redo_02b.dbf',
...
RMAN-06136: ORACLE error from auxiliary database: ORA-02236: invalid file
name
RMAN-06097: text of failing SQL statement: CREATE CONTROLFILE REUSE SET
...
 LOGFILE
  GROUP  1 ( '/z01/oradata/DEVL/redo_01a.dbf',
'/z02/oradata/DEVL/redo_01b.dbf',
  GROUP  2 ( '/z01/oradata/DEVL/redo_02a.dbf',
'/z02/oradata/DEVL/redo_02b.dbf',
...

RMAN script is:
run {
   allocate auxiliary channel d1 type disk;
   set until logseq 5115 thread 1;
   set newname for datafile 1 to '/u03/oradata/DEVL/system_01.dbf';
...
   duplicate target database to DEVL nofilenamecheck
  logfile
  group 1
('/z01/oradata/DEVL/redo_01a.dbf','/z02/oradata/DEVL/redo_01b.dbf') reuse,
  group 2
('/z01/oradata/DEVL/redo_02a.dbf','/z02/oradata/DEVL/redo_02b.dbf') reuse,
  group 3

__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Yong Huang
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


RE: OEM permissions

2003-12-20 Thread Yong Huang
Hi,

I think you're describing a real security hole. But I'm not sure how it's
exploited exactly. Let's say John Doe sets up his database on his desktop,
which is part of the production database network. He sees the hash value of
SYSTEM's password on production and sets the hash value for his own SYSTEM user
to be the same. Since now he doesn't know the clear text password for SYSTEM
(Pete Finnigan may know how to find it, though), he can't easily create a
private database link owned by SYSTEM. He can still create a public link, or a
private link owned by somebody else, his SYS user e.g. Then what?

(He can still create a link owned by SYSTEM from another account such as SYS
using a little bit hacking. But he won't know SYSTEM's password. I don't know
how security of the production database is compromised in any way)

Yong Huang

you wrote:

Maybe I'm a being a bit touchy here; but it seems that my comments about
having access to dba_users went completely unnoticed.  Let's put it this
way: There is NO WAY you can prevent somebody from setting up their own
private oracle instance.  It they have access to dba_users in your database,
they can create the SAME users with the SAME passwords in their private
database.  And they can create database links in their private database.

Now, is this a problem?

__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Yong Huang
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


Re: Linux

2003-12-20 Thread Paul Drake
--- Seema Singh [EMAIL PROTECTED] wrote:
 Hi
 Does anyone know good Linux administration book?
 Can you guyes suggest any good linux user group?
 thx
 -Seema

Matt Welsh's Running Linux is now out in 4th
Edition.
Just make sure that you find a recent edition, as
there are still plenty of RedHat 6.0 books out there
on the shelves.

where might you be located?

If you're in the New York Metropolitan area,
LinuxWorldExpo will be held Jan 21-24 at Javitts.
They typically have a .org pavillion where the LUGs
have booths.

The NYLUG website has a good list of area Linux User
Groups - http://www.nylug.org

I haven't been attending NYLUG for awhile, but its one
of my new year's resolutions to start doing so. They
used to have some pretty good speakers, such as lead
developers for Apache, Eric Raymond. Beers afterwards
at Typhoon Brewery.

hth.

Pd

__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Paul Drake
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


RE: Unable to coonect to database after server upgraded from NT to W2K

2003-12-20 Thread Paul Drake
--- Norris, Gregory T [ITS]
[EMAIL PROTECTED] wrote:
 The server was probably added to a domain (or moved
 to a different one) as part of the upgrade.  Try
 adding the following entry to your sqlnet.ora file.
 
   SQLNET.AUTHENTICATION_SERVICES = (NONE)


good call.
You'll also see this if a W2K Server that is running
an Oracle Database is migrated from an NT4 or W2K
domain to an Active Directory.

unfortunately, the default value of this parameter in
8.1.6 and 8.1.7 was (NTS).

the use of the environment variable TNS_ADMIN
pointing to a network share makes this a non-issue,
but if you had config files on the user desktops,
you'll be using a login script to push out a new copy.

then again, the developers that want to maintain their
own fat client config files will still have to make
modifications. (Hi Alan :) ).


I already got what I wanted for Christmas ... going to
Hotsos!!


Pd


 -Original Message-
 Paul Vincent
 Sent: Friday, December 19, 2003 8:49 AM
 To: Multiple recipients of list ORACLE-L
 W2K
 
 
 Hi folks,
 
 Our server team has just upgraded a server from
 Windows NT4 to Windows
 2000, and when I tried connecting to the database
 from my workstation,
 using OEM or TOAD, I get an error message after half
 a minute or so:
 ORA-12535: TNS: Operation Timed Out, and cannot
 complete the
 connection.
 
 Looking at the Event Log for the database,
 everything looks OK - it's up
 and running.
 
 Likewise, the Listener log looks OK - the database
 service name is
 there.
 
 Looking at .../network/log/sqlnet.log however,
 there's something odd:
 
 - - - - -
 Fatal NI connect error 12638, connecting to:
  (DESCRIPTION=(LOCAL=YES)(ADDRESS=(PROTOCOL=beq)))
 
   VERSION INFORMATION:
   TNS for 32-bit Windows: Version 8.1.6.3.0 -
 Production
   Oracle Bequeath NT Protocol Adapter for 32-bit
 Windows: Version
 8.1.6.3.0 - Production
   Time: 19-DEC-2003 13:57:19
   Tracing not turned on.
   Tns error struct:
 nr err code: 0
 ns main err code: 12638
 TNS-12638: Credential retrieval failed
 ns secondary err code: 0
 nt main err code: 0
 nt secondary err code: 0
 nt OS err code: 0
 TNS-12638: Credential retrieval failed
 ns secondary err code: 0
 nt main err code: 0
 nt secondary err code: 0
 nt OS err code: 0
 - - - - -
 
 I'm not getting very far with tracking down possible
 causes of these
 problems, so if it rings any bells with any of you,
 I'd appreciate any
 insights!
 
 Regards,
 
 Paul Vincent
 Database Administrator
 University of Central England
 

 Author: Paul Vincent
   INET: [EMAIL PROTECTED]
 

 Author: Norris, Gregory T [ITS]
   INET: [EMAIL PROTECTED]
 


__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Paul Drake
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


Re: problem with mult datafiles and local mng tblspaces

2003-12-20 Thread Paul Drake

--- John Blake [EMAIL PROTECTED] wrote:
 I have a 9.2.0.3 DB running on AIX 4.3.3
 An application running on W2K using SQLLDR to load
 approx 6g of data
 using local managed tablespaces
 ie..
 CREATE TABLESPACE PARENTDAT
   DATAFILE '/vol01/oradata/e450dev/parentdat01.dbf'
 SIZE 2000M REUSE,
   '/vol01/oradata/e450dev/parentdat02.dbf' SIZE 2000M
 REUSE,
   '/vol01/oradata/e450dev/parentdat03.dbf' SIZE 2000M
 REUSE,
   '/vol01/oradata/e450dev/parentdat04.dbf' SIZE 2000M
 REUSE
   EXTENT MANAGEMENT LOCAL UNIFORM SIZE 1M
   NOLOGGING
   ONLINE;
 
 It was taking 8 hours to load this data
 1) copied the data to the AIX box and ran SQLLDR
 local to the DB and
 received similar results
 2) changed the tablespace to contain 1 8g datafile
 3) ran SQLLDR from the W2K machine ..completed in
 30minutes
 
 Also
 ran the same test on AIX 5.1 running oracle 9.2.0.3
 and obtained the same
 results.
 
 
 I really would like to be able to create the
 tablespaces with multiple data
 files but it seems whenever I add a datafile the
 performance of the load degrades.
 
 Any ideas??
 
 Thanks in advance
 John
 
 Author: John Blake
   INET: [EMAIL PROTECTED]
 

John,

any chance that you can create those 4 datafiles on 4
different mount points and re-test?

at first glance, without knowing a thing about AIX,
I'd  say that you are having thrashing problems across
the multiple datafiles.

As Jared indicated, the 10046 trace should show you
each wait. Usually, you'll see small waits when
working on a drive track, and then a larger wait when
a seek across tracks occurs. The waits should list
what file# is being written to (or read from).

This may sound funny, but what does the server sound
like when this load is running? Its pretty easy to
tell the difference between a drive writing serially,
and one that is covering 8 GB of surface area every
second.

How many segments are you loading into, are you sure
that 1 MB extents are a good size?

I'm a fan of keeping files to 1 GB, so that
compression and transfer aren't such a pain, but then
again the largest db that I work with is under 100 GB.
A File size of 2000 MB scare me, bugs in the past with
2 GB files.

Pd

__
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Paul Drake
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


RE: OEM permissions

2003-12-20 Thread Jared Still
You could use protocol.ora to specify which machines are
allowed to make a connection to the database.

In some environments this would be fairly painless.

SAP for example.  The users do not connect to the database,
they connect to the app server.  The number of machines
that legitimately require a connection to the database
could be very limited.

This would reduce the possibility of someone sneaking in
through a database link.

Jared

On Sat, 2003-12-20 at 12:29, Yong Huang wrote:
 Hi,
 
 I think you're describing a real security hole. But I'm not sure how it's
 exploited exactly. Let's say John Doe sets up his database on his desktop,
 which is part of the production database network. He sees the hash value of
 SYSTEM's password on production and sets the hash value for his own SYSTEM user
 to be the same. Since now he doesn't know the clear text password for SYSTEM
 (Pete Finnigan may know how to find it, though), he can't easily create a
 private database link owned by SYSTEM. He can still create a public link, or a
 private link owned by somebody else, his SYS user e.g. Then what?
 
 (He can still create a link owned by SYSTEM from another account such as SYS
 using a little bit hacking. But he won't know SYSTEM's password. I don't know
 how security of the production database is compromised in any way)
 
 Yong Huang
 
 you wrote:
 
 Maybe I'm a being a bit touchy here; but it seems that my comments about
 having access to dba_users went completely unnoticed.  Let's put it this
 way: There is NO WAY you can prevent somebody from setting up their own
 private oracle instance.  It they have access to dba_users in your database,
 they can create the SAME users with the SAME passwords in their private
 database.  And they can create database links in their private database.
 
 Now, is this a problem?
 
 __
 Do you Yahoo!?
 New Yahoo! Photos - easier uploading and sharing.
 http://photos.yahoo.com/
 -- 
 Please see the official ORACLE-L FAQ: http://www.orafaq.net
 -- 
 Author: Yong Huang
   INET: [EMAIL PROTECTED]
 
 Fat City Network Services-- 858-538-5051 http://www.fatcity.com
 San Diego, California-- Mailing list and web hosting services
 -
 To REMOVE yourself from this mailing list, send an E-Mail message
 to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
 the message BODY, include a line containing: UNSUB ORACLE-L
 (or the name of mailing list you want to be removed from).  You may
 also send the HELP command for other information (like subscribing).


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jared Still
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


Re: Hit Ratio

2003-12-20 Thread Jared Still
Actually, it isn't SAP.  I was simply creating a set of MV's
based on SAP tables in another database.

The script I was running is used to keep track of how much
IO is going on, just to ensure that everything is still
working during the build.  Once the physical IO exceeds
the logical IO, the HR goes negative. 

I wonder what I need to tune to fix this?

Jared

On Sat, 2003-12-20 at 03:29, Nuno Souto wrote:
 D
 Unreal, eh?  that's SAP for you...
 Cheers
 Nuno Souto
 [EMAIL PROTECTED]
 - Original Message - 
 
  Just thought I would share my hit ratio with y'all.
 
 
 -- 
 Please see the official ORACLE-L FAQ: http://www.orafaq.net
 -- 
 Author: Nuno Souto
   INET: [EMAIL PROTECTED]
 
 Fat City Network Services-- 858-538-5051 http://www.fatcity.com
 San Diego, California-- Mailing list and web hosting services
 -
 To REMOVE yourself from this mailing list, send an E-Mail message
 to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
 the message BODY, include a line containing: UNSUB ORACLE-L
 (or the name of mailing list you want to be removed from).  You may
 also send the HELP command for other information (like subscribing).
 


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jared Still
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


RE: OEM permissions

2003-12-20 Thread Thomas A. La Porte
I believe the point is not that you can create links to SYS or 
SYSTEM accounts, but instead to application accounts, e.g. if I 
created a link from my private database to the company's HR 
database using a duplicated HR_MANAGER schema, I may be able to 
access data that I otherwise should not have.

 -- Tom

Thomas A. La Porte, DreamWorks SKG
mailto:[EMAIL PROTECTED]  

On Sat, 20 Dec 2003, Yong Huang wrote:

Hi,

I think you're describing a real security hole. But I'm not sure how it's
exploited exactly. Let's say John Doe sets up his database on his desktop,
which is part of the production database network. He sees the hash value of
SYSTEM's password on production and sets the hash value for his own SYSTEM user
to be the same. Since now he doesn't know the clear text password for SYSTEM
(Pete Finnigan may know how to find it, though), he can't easily create a
private database link owned by SYSTEM. He can still create a public link, or a
private link owned by somebody else, his SYS user e.g. Then what?

(He can still create a link owned by SYSTEM from another account such as SYS
using a little bit hacking. But he won't know SYSTEM's password. I don't know
how security of the production database is compromised in any way)

Yong Huang

you wrote:

Maybe I'm a being a bit touchy here; but it seems that my comments about
having access to dba_users went completely unnoticed.  Let's put it this
way: There is NO WAY you can prevent somebody from setting up their own
private oracle instance.  It they have access to dba_users in your database,
they can create the SAME users with the SAME passwords in their private
database.  And they can create database links in their private database.

Now, is this a problem?

__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Thomas A. La Porte
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


RE: OEM permissions

2003-12-20 Thread Norris, Gregory T [ITS]
There's no reason I can see that he couldn't create the dblink first, and then reset 
the password using the encrypted value.  Alternately, the dblink could be created 
using the DBMS_SYS_SQL package... no knowledge of the current password required.

create database link foo
   connect to current_user
   using 'bar';

-Original Message-
Yong Huang
Sent: Saturday, December 20, 2003 2:29 PM
To: Multiple recipients of list ORACLE-L


Hi,

I think you're describing a real security hole. But I'm not sure how it's
exploited exactly. Let's say John Doe sets up his database on his desktop,
which is part of the production database network. He sees the hash value of
SYSTEM's password on production and sets the hash value for his own SYSTEM user
to be the same. Since now he doesn't know the clear text password for SYSTEM
(Pete Finnigan may know how to find it, though), he can't easily create a
private database link owned by SYSTEM. He can still create a public link, or a
private link owned by somebody else, his SYS user e.g. Then what?

(He can still create a link owned by SYSTEM from another account such as SYS
using a little bit hacking. But he won't know SYSTEM's password. I don't know
how security of the production database is compromised in any way)

Yong Huang

you wrote:

Maybe I'm a being a bit touchy here; but it seems that my comments about
having access to dba_users went completely unnoticed.  Let's put it this
way: There is NO WAY you can prevent somebody from setting up their own
private oracle instance.  It they have access to dba_users in your database,
they can create the SAME users with the SAME passwords in their private
database.  And they can create database links in their private database.

Now, is this a problem?

__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Yong Huang
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Norris, Gregory T [ITS]
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).