Re: Hit Ratio
¦D Unreal, eh? that's SAP for you... Cheers Nuno Souto [EMAIL PROTECTED] - Original Message - Just thought I would share my hit ratio with y'all. -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Nuno Souto INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: Duplicating with rman
Hi, I'm not sure why your RMAN output says LOGFILE GROUP 1 ( '/z01/oradata/DEVL/redo_01a.dbf', '/z02/oradata/DEVL/redo_01b.dbf', GROUP 2 ( '/z01/oradata/DEVL/redo_02a.dbf', Where's the ) reuse shown in your RMAN script? Are you sure the script you showed here was run? Yong Huang you wrote: RMAN-06162: sql statement: CREATE CONTROLFILE REUSE SET DATABASE DEVL ... LOGFILE GROUP 1 ( '/z01/oradata/DEVL/redo_01a.dbf', '/z02/oradata/DEVL/redo_01b.dbf', GROUP 2 ( '/z01/oradata/DEVL/redo_02a.dbf', '/z02/oradata/DEVL/redo_02b.dbf', ... RMAN-06136: ORACLE error from auxiliary database: ORA-02236: invalid file name RMAN-06097: text of failing SQL statement: CREATE CONTROLFILE REUSE SET ... LOGFILE GROUP 1 ( '/z01/oradata/DEVL/redo_01a.dbf', '/z02/oradata/DEVL/redo_01b.dbf', GROUP 2 ( '/z01/oradata/DEVL/redo_02a.dbf', '/z02/oradata/DEVL/redo_02b.dbf', ... RMAN script is: run { allocate auxiliary channel d1 type disk; set until logseq 5115 thread 1; set newname for datafile 1 to '/u03/oradata/DEVL/system_01.dbf'; ... duplicate target database to DEVL nofilenamecheck logfile group 1 ('/z01/oradata/DEVL/redo_01a.dbf','/z02/oradata/DEVL/redo_01b.dbf') reuse, group 2 ('/z01/oradata/DEVL/redo_02a.dbf','/z02/oradata/DEVL/redo_02b.dbf') reuse, group 3 __ Do you Yahoo!? New Yahoo! Photos - easier uploading and sharing. http://photos.yahoo.com/ -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Yong Huang INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: OEM permissions
Hi, I think you're describing a real security hole. But I'm not sure how it's exploited exactly. Let's say John Doe sets up his database on his desktop, which is part of the production database network. He sees the hash value of SYSTEM's password on production and sets the hash value for his own SYSTEM user to be the same. Since now he doesn't know the clear text password for SYSTEM (Pete Finnigan may know how to find it, though), he can't easily create a private database link owned by SYSTEM. He can still create a public link, or a private link owned by somebody else, his SYS user e.g. Then what? (He can still create a link owned by SYSTEM from another account such as SYS using a little bit hacking. But he won't know SYSTEM's password. I don't know how security of the production database is compromised in any way) Yong Huang you wrote: Maybe I'm a being a bit touchy here; but it seems that my comments about having access to dba_users went completely unnoticed. Let's put it this way: There is NO WAY you can prevent somebody from setting up their own private oracle instance. It they have access to dba_users in your database, they can create the SAME users with the SAME passwords in their private database. And they can create database links in their private database. Now, is this a problem? __ Do you Yahoo!? New Yahoo! Photos - easier uploading and sharing. http://photos.yahoo.com/ -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Yong Huang INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: Linux
--- Seema Singh [EMAIL PROTECTED] wrote: Hi Does anyone know good Linux administration book? Can you guyes suggest any good linux user group? thx -Seema Matt Welsh's Running Linux is now out in 4th Edition. Just make sure that you find a recent edition, as there are still plenty of RedHat 6.0 books out there on the shelves. where might you be located? If you're in the New York Metropolitan area, LinuxWorldExpo will be held Jan 21-24 at Javitts. They typically have a .org pavillion where the LUGs have booths. The NYLUG website has a good list of area Linux User Groups - http://www.nylug.org I haven't been attending NYLUG for awhile, but its one of my new year's resolutions to start doing so. They used to have some pretty good speakers, such as lead developers for Apache, Eric Raymond. Beers afterwards at Typhoon Brewery. hth. Pd __ Do you Yahoo!? New Yahoo! Photos - easier uploading and sharing. http://photos.yahoo.com/ -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Paul Drake INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Unable to coonect to database after server upgraded from NT to W2K
--- Norris, Gregory T [ITS] [EMAIL PROTECTED] wrote: The server was probably added to a domain (or moved to a different one) as part of the upgrade. Try adding the following entry to your sqlnet.ora file. SQLNET.AUTHENTICATION_SERVICES = (NONE) good call. You'll also see this if a W2K Server that is running an Oracle Database is migrated from an NT4 or W2K domain to an Active Directory. unfortunately, the default value of this parameter in 8.1.6 and 8.1.7 was (NTS). the use of the environment variable TNS_ADMIN pointing to a network share makes this a non-issue, but if you had config files on the user desktops, you'll be using a login script to push out a new copy. then again, the developers that want to maintain their own fat client config files will still have to make modifications. (Hi Alan :) ). I already got what I wanted for Christmas ... going to Hotsos!! Pd -Original Message- Paul Vincent Sent: Friday, December 19, 2003 8:49 AM To: Multiple recipients of list ORACLE-L W2K Hi folks, Our server team has just upgraded a server from Windows NT4 to Windows 2000, and when I tried connecting to the database from my workstation, using OEM or TOAD, I get an error message after half a minute or so: ORA-12535: TNS: Operation Timed Out, and cannot complete the connection. Looking at the Event Log for the database, everything looks OK - it's up and running. Likewise, the Listener log looks OK - the database service name is there. Looking at .../network/log/sqlnet.log however, there's something odd: - - - - - Fatal NI connect error 12638, connecting to: (DESCRIPTION=(LOCAL=YES)(ADDRESS=(PROTOCOL=beq))) VERSION INFORMATION: TNS for 32-bit Windows: Version 8.1.6.3.0 - Production Oracle Bequeath NT Protocol Adapter for 32-bit Windows: Version 8.1.6.3.0 - Production Time: 19-DEC-2003 13:57:19 Tracing not turned on. Tns error struct: nr err code: 0 ns main err code: 12638 TNS-12638: Credential retrieval failed ns secondary err code: 0 nt main err code: 0 nt secondary err code: 0 nt OS err code: 0 TNS-12638: Credential retrieval failed ns secondary err code: 0 nt main err code: 0 nt secondary err code: 0 nt OS err code: 0 - - - - - I'm not getting very far with tracking down possible causes of these problems, so if it rings any bells with any of you, I'd appreciate any insights! Regards, Paul Vincent Database Administrator University of Central England Author: Paul Vincent INET: [EMAIL PROTECTED] Author: Norris, Gregory T [ITS] INET: [EMAIL PROTECTED] __ Do you Yahoo!? New Yahoo! Photos - easier uploading and sharing. http://photos.yahoo.com/ -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Paul Drake INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: problem with mult datafiles and local mng tblspaces
--- John Blake [EMAIL PROTECTED] wrote: I have a 9.2.0.3 DB running on AIX 4.3.3 An application running on W2K using SQLLDR to load approx 6g of data using local managed tablespaces ie.. CREATE TABLESPACE PARENTDAT DATAFILE '/vol01/oradata/e450dev/parentdat01.dbf' SIZE 2000M REUSE, '/vol01/oradata/e450dev/parentdat02.dbf' SIZE 2000M REUSE, '/vol01/oradata/e450dev/parentdat03.dbf' SIZE 2000M REUSE, '/vol01/oradata/e450dev/parentdat04.dbf' SIZE 2000M REUSE EXTENT MANAGEMENT LOCAL UNIFORM SIZE 1M NOLOGGING ONLINE; It was taking 8 hours to load this data 1) copied the data to the AIX box and ran SQLLDR local to the DB and received similar results 2) changed the tablespace to contain 1 8g datafile 3) ran SQLLDR from the W2K machine ..completed in 30minutes Also ran the same test on AIX 5.1 running oracle 9.2.0.3 and obtained the same results. I really would like to be able to create the tablespaces with multiple data files but it seems whenever I add a datafile the performance of the load degrades. Any ideas?? Thanks in advance John Author: John Blake INET: [EMAIL PROTECTED] John, any chance that you can create those 4 datafiles on 4 different mount points and re-test? at first glance, without knowing a thing about AIX, I'd say that you are having thrashing problems across the multiple datafiles. As Jared indicated, the 10046 trace should show you each wait. Usually, you'll see small waits when working on a drive track, and then a larger wait when a seek across tracks occurs. The waits should list what file# is being written to (or read from). This may sound funny, but what does the server sound like when this load is running? Its pretty easy to tell the difference between a drive writing serially, and one that is covering 8 GB of surface area every second. How many segments are you loading into, are you sure that 1 MB extents are a good size? I'm a fan of keeping files to 1 GB, so that compression and transfer aren't such a pain, but then again the largest db that I work with is under 100 GB. A File size of 2000 MB scare me, bugs in the past with 2 GB files. Pd __ Do you Yahoo!? Free Pop-Up Blocker - Get it now http://companion.yahoo.com/ -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Paul Drake INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: OEM permissions
You could use protocol.ora to specify which machines are allowed to make a connection to the database. In some environments this would be fairly painless. SAP for example. The users do not connect to the database, they connect to the app server. The number of machines that legitimately require a connection to the database could be very limited. This would reduce the possibility of someone sneaking in through a database link. Jared On Sat, 2003-12-20 at 12:29, Yong Huang wrote: Hi, I think you're describing a real security hole. But I'm not sure how it's exploited exactly. Let's say John Doe sets up his database on his desktop, which is part of the production database network. He sees the hash value of SYSTEM's password on production and sets the hash value for his own SYSTEM user to be the same. Since now he doesn't know the clear text password for SYSTEM (Pete Finnigan may know how to find it, though), he can't easily create a private database link owned by SYSTEM. He can still create a public link, or a private link owned by somebody else, his SYS user e.g. Then what? (He can still create a link owned by SYSTEM from another account such as SYS using a little bit hacking. But he won't know SYSTEM's password. I don't know how security of the production database is compromised in any way) Yong Huang you wrote: Maybe I'm a being a bit touchy here; but it seems that my comments about having access to dba_users went completely unnoticed. Let's put it this way: There is NO WAY you can prevent somebody from setting up their own private oracle instance. It they have access to dba_users in your database, they can create the SAME users with the SAME passwords in their private database. And they can create database links in their private database. Now, is this a problem? __ Do you Yahoo!? New Yahoo! Photos - easier uploading and sharing. http://photos.yahoo.com/ -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Yong Huang INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Jared Still INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Re: Hit Ratio
Actually, it isn't SAP. I was simply creating a set of MV's based on SAP tables in another database. The script I was running is used to keep track of how much IO is going on, just to ensure that everything is still working during the build. Once the physical IO exceeds the logical IO, the HR goes negative. I wonder what I need to tune to fix this? Jared On Sat, 2003-12-20 at 03:29, Nuno Souto wrote: D Unreal, eh? that's SAP for you... Cheers Nuno Souto [EMAIL PROTECTED] - Original Message - Just thought I would share my hit ratio with y'all. -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Nuno Souto INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Jared Still INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: OEM permissions
I believe the point is not that you can create links to SYS or SYSTEM accounts, but instead to application accounts, e.g. if I created a link from my private database to the company's HR database using a duplicated HR_MANAGER schema, I may be able to access data that I otherwise should not have. -- Tom Thomas A. La Porte, DreamWorks SKG mailto:[EMAIL PROTECTED] On Sat, 20 Dec 2003, Yong Huang wrote: Hi, I think you're describing a real security hole. But I'm not sure how it's exploited exactly. Let's say John Doe sets up his database on his desktop, which is part of the production database network. He sees the hash value of SYSTEM's password on production and sets the hash value for his own SYSTEM user to be the same. Since now he doesn't know the clear text password for SYSTEM (Pete Finnigan may know how to find it, though), he can't easily create a private database link owned by SYSTEM. He can still create a public link, or a private link owned by somebody else, his SYS user e.g. Then what? (He can still create a link owned by SYSTEM from another account such as SYS using a little bit hacking. But he won't know SYSTEM's password. I don't know how security of the production database is compromised in any way) Yong Huang you wrote: Maybe I'm a being a bit touchy here; but it seems that my comments about having access to dba_users went completely unnoticed. Let's put it this way: There is NO WAY you can prevent somebody from setting up their own private oracle instance. It they have access to dba_users in your database, they can create the SAME users with the SAME passwords in their private database. And they can create database links in their private database. Now, is this a problem? __ Do you Yahoo!? New Yahoo! Photos - easier uploading and sharing. http://photos.yahoo.com/ -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Thomas A. La Porte INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: OEM permissions
There's no reason I can see that he couldn't create the dblink first, and then reset the password using the encrypted value. Alternately, the dblink could be created using the DBMS_SYS_SQL package... no knowledge of the current password required. create database link foo connect to current_user using 'bar'; -Original Message- Yong Huang Sent: Saturday, December 20, 2003 2:29 PM To: Multiple recipients of list ORACLE-L Hi, I think you're describing a real security hole. But I'm not sure how it's exploited exactly. Let's say John Doe sets up his database on his desktop, which is part of the production database network. He sees the hash value of SYSTEM's password on production and sets the hash value for his own SYSTEM user to be the same. Since now he doesn't know the clear text password for SYSTEM (Pete Finnigan may know how to find it, though), he can't easily create a private database link owned by SYSTEM. He can still create a public link, or a private link owned by somebody else, his SYS user e.g. Then what? (He can still create a link owned by SYSTEM from another account such as SYS using a little bit hacking. But he won't know SYSTEM's password. I don't know how security of the production database is compromised in any way) Yong Huang you wrote: Maybe I'm a being a bit touchy here; but it seems that my comments about having access to dba_users went completely unnoticed. Let's put it this way: There is NO WAY you can prevent somebody from setting up their own private oracle instance. It they have access to dba_users in your database, they can create the SAME users with the SAME passwords in their private database. And they can create database links in their private database. Now, is this a problem? __ Do you Yahoo!? New Yahoo! Photos - easier uploading and sharing. http://photos.yahoo.com/ -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Yong Huang INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Norris, Gregory T [ITS] INET: [EMAIL PROTECTED] Fat City Network Services-- 858-538-5051 http://www.fatcity.com San Diego, California-- Mailing list and web hosting services - To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).