Re: [firebird-support] permissions nbackup

['Paul Beach' pabe...@waitrose.com [firebird-support]]

The default linux tar install has the following for security2.fdb amongst others

MakeFileFirebirdWritable() {
FileName=$1
chown $RunUser:$RunGroup $FileName

if [ "$RunUser" = "root" ]
# In that case we must open databases, locks, etc. to the world...
# That's a pity, but required if root RunUser choosen.
then
chmod a=rw $FileName
else
# This is good secure setting
chmod ug=rw,o= $FileName
fi

Paul Beach
Tel (France): +33 (0) 2 47 58 30 43
Mob (France): +33 (0) 6 79 24 32 32

Re: [firebird-support] permissions nbackup

['Paul Beach' pabe...@waitrose.com [firebird-support]]

Apologies, it does get changed, I was looking in the wrong place in the MacOS
installer...

SuperServer chmod 600 security2.fdb
Classic chmod 660 security2.fdb

Regards
Paul 

Re: [firebird-support] permissions nbackup

['Paul Beach' pabe...@waitrose.com [firebird-support]]

<<# ls -lart  /var/lib/firebird/system/security2.fdb
-rw--- 1 firebird firebird 1171456 Aug 14 14:25 
/var/lib/firebird/system/security2.fdb>>

Is this a distro specific install or the more generic Firebird one from 
SourceForge?
I ask, because on MacOS the default security is the following
-rw-r--r--   1 pbeach  staff   729088 Feb 15 16:54 security2.fdb
And on install I do not make any effort to change it.

Regards
Paul Beach
Tel (France): +33 (0) 2 47 58 30 43
Mob (France): +33 (0) 6 79 24 32 32

[firebird-support] Re: nbackup : Error assessing database due a missing delta file

['Paul Beach' pabe...@waitrose.com [firebird-support]]

The Chequered Career of nBackup
By Helen Borrie

http://www.ibphoenix.com/resources/documents/search/doc_394

Regards
Paul Beach

[firebird-support] internal firebird consistency check

['Paul Beach' pabe...@waitrose.com [firebird-support]]

<<1. I got following error reported Firebird-3.0.2.32703_0_Win32 :
"internal firebird consistency check (cannot find record back version (291), 
file: vio.cpp line: 4676)">>

Try a gbak using something like the following
gbak -b -v -i -g copy1.fdb{path}copy1a.fbk
using the –g switch to signify "no garbage collection"

If this succeeds then you can restore the database without the corrupt record 
pointer.

Paul

RE: [firebird-support] Ask : firebird 1.5 to firebird 2.5

['Paul Beach' pabe...@waitrose.com [firebird-support]]

> If our software running on firebird 1.5 and now going to move over to
> firebird 2.5,
> technical-wise, what are the points we can convince people to change over?
> Can you kindly advise?

Have you tried reading the release notes?
https://www.firebirdsql.org/en/release-notes/

Regards
Paul

AW: [firebird-support] RE: Firebird SuperClassic hangs

['Paul Beach' pabe...@waitrose.com [firebird-support]]

<>

Thats what a lock print is for - when it "hangs the next time" get a lock print
fb_lock_print -a -d database > lock.txt
Once you have it - you can analyse it.

https://www.ibphoenix.com/resources/documents/how_to/doc_402
http://www.ibphoenix.com/files/conf2011/Lock-Print-Yemanov-2011.pdf

Regards
Paul

RE: [firebird-support] RE: Firebird SuperClassic hangs

['Paul Beach' pabe...@waitrose.com [firebird-support]]

> Deadlock scans:289, Deadlocks:  1, Scan interval:  10

Is probably the culprit, 289 deadlock scans, one actual deadlock found

"Deadlock scans. The number of times that the lock manager walked a chain of 
locks and owners looking for deadlocks. The lock manager initiates a deadlock 
scan 
when a process has been waiting 10 seconds for a lock."

"Deadlocks.  The number of actual deadlocks found, A deadlock occurs when 
Process A, wants a lock on Resource 1 which is held in an incompatible mode 
by Process B and Process B wants a lock on some Resource 2 which is held in an 
incompatible mode by Process A.

"Each owner stands around glowering at the other and neither will do anything 
to improve the situation, so the lock manager returns a fatal error to one or 
the 
other. Deadlocks can also occur with a single resource if both owners start 
with 
read locks and request conversions to write locks. However, deadlocks always 
involve two owners (or two separate transactions)

Errors that are returned as "lock conflict" from "no wait" lock requests will 
not 
be recorded in the lock table as deadlocks because only one owner is waiting.

Errors returned as "deadlock" with a secondary message specifying "update 
conflicts 
with concurrent update" are not actual deadlocks either. What has happened in 
those 
cases is that one owner has modified (or erased) a record and moved on. Another 
concurrent owner has attempted to modify (or erase) the same record, noticed 
that the 
most recent version is one he can't see waited to find out how the other 
transaction 
ends up, and found to his disappointment, that the other transaction succeeded. 
In that case, our patient transaction can't modify the record because it can't 
find 
out what its late contemporary actually did."

"Scan interval.  The lock manager waits some period of time after a request 
starts 
waiting before it starts a deadlock scan.  The default interval is 10 seconds, 
which may be 
long considering the change in CPU performance since 1983. Deadlock scans 
should not be done 
whenever there's a wait because waiting is normal and scans are not free."

A deadlock scan would cause your server to hiccup while the lock manager tries 
to
find if there is a real deadlock within the lock manager. You might want to 
investigate 
why deadlock scans are being instigated..

With thanks to Ann Harrison :-)

Regards
Paul Beach

[firebird-support] Potential Causes for Query to Slow Down

['Paul Beach' pabe...@waitrose.com [firebird-support]]

<>

Garbage collection usually.

Regards
Paul Beach

[firebird-support] Re: FB3 - Limbo and consistency check

['Paul Beach' pabe...@waitrose.com [firebird-support]]

>  Do you have reproducible example ? Could you send it to me (or regiser at 
> tracker), please ?

http://tracker.firebirdsql.org/browse/CORE-3679

Regards
Paul 

Re: [firebird-support] Help: firebird and apache Processes doesn't die

['Paul Beach' pabe...@waitrose.com [firebird-support]]

<>

The pseudo table MON$ATTACHMENTS will tell you.

Regards
Paul 

Re: [firebird-support] Help: firebird and apache Processes doesn't die

['Paul Beach' pabe...@waitrose.com [firebird-support]]

<>

SuperServer wil hold cached data as long as any connections exist. Only when 
the last "real" user disconnects
from the database will the cache be cleared.

Which two users are still connected to the database? CACHE WRITER and GARBAGE 
COLLECTOR?
If so then these should also finish with the last user connection.

Paul

RE: [firebird-support] On Connect triggers are dangerous, aren't they?

['Paul Beach' pabe...@waitrose.com [firebird-support]]

<>

gbak -nodbtriggers - Suppresses Database Triggers from running [Firebird 2.1]

Regards
Paul Beach

[firebird-support] Encryption on FB3

['Paul Beach' pabe...@waitrose.com [firebird-support]]

<<2) Use the new FB 3 encrytion, we do not have any idea how to, is there any 
document we can read to start testing?>>

IBPhoenix have a working plugin thats available for use.
http://www.ibphoenix.com/products/software/encryptionplugin

Regards
Paul 

RE: [firebird-support] Incorrect values within SQLDA structure SQLDA version expected between 1 and 1, found 0 when using Firebird 3.0 client with older (BDE) programa

['Paul Beach' pabe...@waitrose.com [firebird-support]]

> The problem there would be that the BDE has reached its end of life for
> some years now.

The BDE was put on death row when IBX was made available, the same time 
Interbase 6.0 became available and Firebird
was open sourced. Some 16 years ago...

Paul Beach
Tel (France): +33 (0) 2 47 58 30 43
Mob (France): +33 (0) 6 79 24 32 32

RE: [firebird-support] FOR UPDATE [OF ...]] WITH LOCK

['Paul Beach' pabe...@waitrose.com [firebird-support]]

<>

"The clause can take an optional OF  to target updates
at specific cursor columns"

The Firebird Book Vol 2 p220

Regards
Paul

[firebird-support] Problem Firebird 2.5

['Paul Beach' pabe...@waitrose.com [firebird-support]]

<>


Usually caused (AFAIK) by a restore done with Firebird 2.1 or an earlier gbak, 
or if a Firebird 2.5 backup was
restored to Firebird 2.1, backed up and then restored on Firebird 2.5

On the original database you can do

DROP ROLE RDB$ADMIN;
COMMIT;

When you restore, gbak.exe should recreate the RDB$ADMIN role.

Paul

AW: [firebird-support] Support for OS X 10.11 El Capitan

['Paul Beach' pabe...@waitrose.com [firebird-support]]

<>

And are now available for download.
http://sourceforge.net/projects/firebird/files/firebird-MacOS-X_darwin/2.5.4-Release/

Regards
Paul 

AW: [firebird-support] Support for OS X 10.11 El Capitan

['Paul Beach' pabe...@waitrose.com [firebird-support]]

Having identified and fixed a problem in file_params.h and Info.plist, we
now have a working prototype installer via pkgbuild, albeit very alpha, but 
its installing and working OK for me on El Capitan.

Hopefully I should have something constructive early next week.

Regards
Paul 

[firebird-support] Support for OS X 10.11 El Capitan

['Paul Beach' pabe...@waitrose.com [firebird-support]]

How to manually install Firebird on El Capitan, for those who need to know.

http://paulbeachsblog.blogspot.fr/2015/10/how-to-installupgrade-firebird-manually.html

Paul 

RE: [firebird-support] Support for OS X 10.11 El Capitan

['Paul Beach' pabe...@waitrose.com [firebird-support]]

Timo,

<>.

Thanks - that tells me where to look and try and fix the problem.

Regards
Paul Beach
Tel (France): +33 (0) 2 47 58 30 43
Mob (France): +33 (0) 6 79 24 32 32

RE: [firebird-support] Support for OS X 10.11 El Capitan

['Paul Beach' pabe...@waitrose.com [firebird-support]]

<>

I suspect its not SIP, but the fact that we use an outdated package format. 
Looks like El Capitan has finally deprecated it.
I found this https://forums.developer.apple.com/thread/8676
Note the error message, they then switched from /var to /Applications and all 
was ok.
While we use /Library/Frameworks

Regards
Paul

RE: [firebird-support] Support for OS X 10.11 El Capitan

['Paul Beach' pabe...@waitrose.com [firebird-support]]

>

I am currently using 10.10.5 not 10.11 and I will not be upgrading to
10.11 yet as its only in late RC, but the release date is September 30, 2015
So when it goes GM I guess I get to install it and try and work out whats wrong,
and come up with a solution.

In terms of Firebird 3.0, Firebird compiles on MacOSX, but I have been waiting 
for
RC1 so all the 64bit txn id code is committed. When RC1 is tagged I will start
work on the MacOSX port and installer.


Currently this is how I install it:
Right Click on the pkg file, and choose open, then select open again
But I guess that mechanism won't work mow because of SIP, I did find this:

The supported way to disable System Integrity Protection in those cases where 
it’s truly
necessary is to boot into the Recovery partition and turn System Integrity 
Protection off
from there with the csrutil tool.

$ csrutil
usage: csrutil
Modify the System Integrity Protection configuration. All configuration changes 
apply to the entire machine.
Available commands:
disable
Disable the protection on the machine. Requires a reboot.
enable
Enable the protection on the machine. Requires a reboot.
status
Display the current configuration.

The kext-dev-mode and rootless boot-args are being removed from OS X El Capitan 
and will no longer work.

But reading further the sort of places that are protected are /System, /bin, 
/sbin and /usr
whilst we install into /Applications/Frameworks... So is there anything when 
you try to install it, where it
confirms that this is a SIP problem?

Paul

[firebird-support] Need Help

['Paul Beach' pabe...@waitrose.com [firebird-support]]

If by QBICSYSTEMS you mean QBIC III Systems Inc. then the database will be 
Firebird.

Regards
Paul 

RE: [firebird-support] Re: FB 2.1 CS High FBLockPrint Mutex wait figure

['Paul Beach' pabe...@waitrose.com [firebird-support]]

Hopefully Dmitry will come up with some answers. He seems to be the man that 
knows. I’m sure he was one of the IBSurgeon guys at
the recent Prague seminar on performance tuning etc.

Just as an FYI - Dimitry is *not* one of the IBSurgeon guys - he happens to be
the Firebird project's lead developer. You can find out a bit more on who
does what re. the project by looking here.

http://www.firebirdsql.org/en/team-members/

Regards
Paul

[firebird-support] Re: How do I uninstall Firebird on Mac Yosemite?

['Paul Beach' pabe...@waitrose.com [firebird-support]]

I tried it out and it said the following:


Ryans-MacBook-Pro:~ ryanashton1$ ./remove.sh
Launchctl
/Library/LaunchDaemons/org.firebird.gds.plist: Could not find specified service
Remove Framework
Remove Receipt
Remove /tmp/firebird


Then the sh file has done nearly all its job...
the comments you see above refer to the echo commands in the shell script
But I have just seen a small problem with why you still have a firebird user...

The original had the remove user/group commands commented out. Apologies. 

just type the following into the terminal and hit return
sudo dscl localhost -delete /Local/Default/Users/firebird
sudo dscl localhost -delete /Local/Default/Groups/firebird

The following script is now complete.

#!/bin/sh
echo Launchctl
launchctl unload /Library/LaunchDaemons/org.firebird.gds.plist
echo Clean User
dscl localhost -delete /Local/Default/Users/firebird
echo Clean Group
dscl localhost -delete /Local/Default/Groups/firebird
if [ -f /Library/StartupItems/Firebird ]; then
echo Remove Superserver StartupItem
rm -fr /Library/StartupItems/Firebird
fi
if [ -f /Library/LaunchDemons/org.firebird.gds.plist ]; then
echo Remove Launchd
launchctl unload /Library/LaunchDemons/org.firebird.gds.plist
rm /Library/LaunchDemons/org.firebird.gds.plist
fi
echo Remove Framework
rm -fr /Library/Frameworks/Firebird.framework
echo Remove Receipt
rm -fr /Library/Receipts/Firebird*.pkg
echo Remove /tmp/firebird
rm -fr /tmp/firebird


Paul

[firebird-support] Re: How do I uninstall Firebird on Mac Yosemite?

['Paul Beach' pabe...@waitrose.com [firebird-support]]

Type 'sudo ./remove.sh' [Enter]
If you are in the same directory as the shell file.

Regards
Paul 

[firebird-support] Re: How do I uninstall Firebird on Mac Yosemite?

['Paul Beach' pabe...@waitrose.com [firebird-support]]

Ryans-MBP:~ ryanashton1$ sudo ./remove.sh
Launchctl
/Library/LaunchDaemons/org.firebird.gds.plist: Could not find specified service
Remove Framework
Remove Receipt
Remove /tmp/firebird
Ryans-MBP:~ ryanashton1$

 Is that correct?  Did it all work?

Yes.

 Also, under Users and Groups in Preferences, there is a 'Firebird Database' 
 User - that has login ability when I start my
computer.
 Do I just delete this from the Preferences, or will it be deleted when I 
 uninstall Firebird?

The script has also removed the Firebird user and group.
Firebird is no longer installed on your Mac.

Regards
Paul

[firebird-support] Re: How do I uninstall Firebird on Mac Yosemite?

['Paul Beach' pabe...@waitrose.com [firebird-support]]

 Must I type vi remove.sh into the Terminal window first?

yes, you are in effect creating a shell file that can be excuted later.
before you paste the commands you will probably need to change vi into
insert mode 

:i

should do it.

Regards
Paul 

[firebird-support] Re: How do I uninstall Firebird on Mac Yosemite?

['Paul Beach' pabe...@waitrose.com [firebird-support]]

 And then do I hit Enter/Return when I have pasted that info into the Terminal 
 window? 

No, you exit vi using the command :wq

Regards
Paul 

RE: [firebird-support] Firebird SQL Classic-Server 2.5.3 in OSX 10.10.2

['Paul Beach' pabe...@waitrose.com [firebird-support]]

I am on 10.10.2 and the instructions below worked for me without a problem...
I saw the port number switching from 3050 - 3051

But you must:
launchctl unload org.firebird.gds.plist
launchctl load org.firebird.gds.plist
after changing the port no.

Paul



-Original Message-
From: firebird-support@yahoogroups.com [mailto:firebird-support@yahoogroups.com]
Sent: 04 March 2015 01:39
To: firebird-support@yahoogroups.com
Subject: Re: [firebird-support] Firebird SQL Classic-Server 2.5.3 in OSX 10.10.2




hi paul,


thank your for help.


bevore my question i have changed the /etc/service file to this:


gds_db  5143/udp# gds_db (buhl)
gds_db  5143/tcp# gds_db (buhl)


(without „/„ like the other entrys in this file)


since this, firebird has stpped/started many times (reloading,reboot)
but firebird seems to ignore the etc/service file on my system. (?)


any other suggestions for osx 10.10. ?


regards
rené


Am 03.03.2015 um 11:47 schrieb 'Paul Beach' pabe...@waitrose.com 
[firebird-support] firebird-support@yahoogroups.com:


The following will work.

cd /etc

vi services
change

gds_db 3051/udp
gds_db 3051/tcp

for example.

cd /Library/LaunchDaemons

launchctl unload org.firebird.gds.plist
launchctl load org.firebird.gds.plist

isqlconnect 'localhost:/Users/whome/databases/test.fdb' user 'whoever' 
password 'whatever';

in another terminal window:

lsof -i:3051

Regards
Paul

 I am using firebird sql classic-server 2.5.3 under mac osx 10.10.2
 How can i change the remote-service-port (standard is 3050) to another one?


 i know, in windows and linux this setting is managed by an entry in 
 „firebird.conf


 in osx there is also a „firebird.conf in 
 /Library/Frameworks/Firebird.framework/A/Resources/English-lproj/var/
 but changes in this file:
 RemoteServiceName = gds_db
 RemoteServicePort = 5143
 have no result in firebird. the port is the same as before (3050)


 i have read the readme-file (firebird.conf.txt) in 
 /Library/Frameworks/Firebird.framework/A/Resources/doc
 But i only found this in „Darwin“ section:


 Darwin on the other hand first checks the environment variable FIREBIRD.
 If not found, it [... John, please describe the „bundle stuff here].
 As a last resort it too falls back to /usr/local/firebird“.“


 It seems that this section is not complete written by the author.
 I have searched in internet many times for help but i have not found a answer 
 for this „problem“.
 (with the right knowledege not really a problem)


 in osx i have found two other files they are maybe used for configuring 
 firebird.
 „org.firebird.gdl.plist and StartupParameters.plist
 but both file has other syntax so i cant adopt the settigs from firebird.conf 
 to this files.


 these files are:
 /Library/Frameworks/Firebird.framework/A/Resources/FirebirdSS/StartupParameters.plist


 {
 Description = Firebird SQL Database server;
 Provides = (Firebird Server);
 Requires = (DirectoryServices);
 Uses = (Disks, NFS);
 OrderPreference = None;
 }


 and:
 /Library/LaunchDeamons/org.firebird.gdl.plist


 ?xml version=1.0 encoding=UTF-8?
 !DOCTYPE plist PUBLIC -//Apple//DTD PLIST 1.0//EN 
 http://www.apple.com/DTDs/PropertyList-1.0.dtd;
 plist version=1.0
 dict
 keyDisabled/key
 false/
 keyEnvironmentVariables/key
 dict
 keyPATH/key

 string/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:/Applications/Server.app/Contents/ServerRoot/usr/bin:/Applications/Se
 rver.app/Contents/ServerRoot/usr/sbin:/usr/local/sbin/string
 /dict
 keyInetdCompatibility/key
 dict
 keyWait/key
 false/
 /dict
 keyInitGroups/key
 true/
 keyLabel/key
 stringorg.firebird.gds/string
 keyOnDemand/key
 true/
 keyProgramArguments/key
 array
 string/Library/Frameworks/Firebird.framework/Resources/bin/fb_inet_server/string
 /array
 keySockets/key
 dict
 keyListeners/key
 dict
 keySockFamily/key
 stringIPv4/string
 keySockServiceName/key
 stringgds_db/string
 keySockType/key
 stringstream/string
 /dict
 /dict
 keyUserName/key
 stringfirebird/string
 /dict
 /plist


 How can i configure the remote-service-port (standard is 3050) to another one?


 Thank You
 Regards


 René


 [colombe] computer und medien

[firebird-support] Accessing/repairing embedded server database file

['Paul Beach' pabe...@waitrose.com [firebird-support]]

When I try to connect to it using Maestro, I get engine error 335544745 
Your login SYSDBA is same as one of the SQL role name. Ask your database 
administrator to set up a valid Firebird login. I can't say whether this 
comes due to the file damage or this is the way how embedded server should 
behave. I tried to connect to this file also by setting up Firebird Server 
and to use gfix/gsec, but also without success.

This is not due to file damage. Basically whoever created the database set up
a role as SYSDBA a well known trick to stop anybody accessing the database 
using the default security database and default user name and password.

Have you got any suggestions how to try to access/fix that file? I am not a 
Firebird expert, so I may have missed something (but I studied a lot of docs 
how to try to fix my problem).

Nothing simple and straightforward comes to mind. If you want to acess the
database using Firebird's own tools, then you need to get rid of the SYSDBA
role first... or find out what the database owner username and password 
really is.

Paul

Re: [firebird-support] Accessing/repairing embedded server database file

['Paul Beach' pabe...@waitrose.com [firebird-support]]

 Have you got any suggestions how to try to access/fix that file? I am not 
a 
 Firebird expert, so I may have missed something (but I studied a lot of 
docs 
 how to try to fix my problem).

 Nothing simple and straightforward comes to mind. If you want to acess the
 database using Firebird's own tools, then you need to get rid of the 
SYSDBA
 role first... or find out what the database owner username and password 
 really is.

I tried some tools trying to remove SYSDBA role and failed. Could you point 
me to the guide that describes how to remove SYSDBA role? I have also one 
password provided by the app developers that is used to access the app as 
master user, but maybe it is the same as the owner username and password. 
But how can I access the embedded server fbd file when providing any 
non-standard credentials? As I try to connect by using Maestro, it does not 
allow me to provide any credentials.

I am not aware of such a guide, but you might find something if you search
the internet hard enough. I can think of a few ways that it might be possible
but I would have to try them before I could confirm.

Regards
Paul 

[firebird-support] TCP connection issue

['Paul Beach' pabe...@waitrose.com [firebird-support]]

The firebird log file on a newly installed machine shows the following
messages

MAIN-PCFri Jan 09 15:01:03 2015
 INET/inet_error: read errno = 10054


MAIN-PCFri Jan 09 15:01:04 2015
 Unable to complete network request to host Main-PC.
 Error reading data from the connection.


This has happened a couple of times today, once in the morning and one
in the afternoon, with one of the client PCs reporting an ISC error this
morning but no error shown in the afternoon.

I have checked the system (Windows 7) event log and their doesn't appear
to be any errors.   The system is running the standard windows Firewall
and windows defender (no other security apps).

Does anyone have any suggestions of where to look next?


INET/inet_error: read errno = 10054
Winsock.h
WSAECONNRESET 10054 Connection reset by peer.

An existing connection was forcibly closed by the remote host. This normally 
results if the peer application on the remote host is
suddenly stopped, the host is rebooted, the host or remote network interface is 
disabled, or the remote host uses a hard close (see
setsockopt for more information on the SO_LINGER option on the remote socket).

This error may also result if a connection was broken due to keep-alive 
activity detecting a failure while one or more operations
are in progress. Operations that were in progress fail with WSAENETRESET. 
Subsequent operations fail with WSAECONNRESET.
This happens if a sockets client is actively sending or receiving data to or 
from a Firebird Server, and the network connection is
lost. If a client crashes or a network error occurs (for example, an 
intermediate router goes down), the server has no way of
knowing this, unless it tries to use send(). In this case send fails with the 
WSAECONNRESET error.

How does an application know that the remote end has terminated the connection? 
The answer depends on whether the remote end
terminated the connection gracefully or abortively. If the termination was 
abortive, then send() and recv() calls will fail with the
error WSAECONNRESET.
So, in simpler terms the socket that is the end point of the other connection 
has gone. Either the Firebird server has crashed, or
the application using the Firebird client has disconnected abnormally (the 
application may also have crashed). You need to make a
new connection, as the existing connection(s) can no longer be used. If these 
are infrequent, there is probably nothing to worry
about, a client may have rebooted their system, or has been turned off without 
disconnecting from the database server. However if
they are frequent, then you need to look at what may be causing the 
disconnections, either in the application or on the network.

Regards
Paul Beach
Tel (France): +33 (0) 2 47 58 30 43
Mob (France): +33 (0) 6 79 24 32 32