RE: Cold Fusion and Bind Variables

2004-01-13 Thread Vordos, Suzy




Hi 
Jared,

Look at 
QFQUERYPARM:

Usage

 The CFQUERYPARAM is designed to do the following 
things:

 Allows the use of SQL bind 
parameters. Allows long text 
fields to be updated from an SQL 
statement. Improves 
performance.

 The ColdFusion ODBC, DB2, Informix, Oracle 7 and 
Oracle 8 driverssupport SQL bind parameters. 
However, at present, the ColdFusion Sybase 11 driver 
and Sybase native driver do not support SQL bind 
parameters.

 If a database does not support bind parameters, 
ColdFusion still performs validation and substitutes 
the validated parameter value back into the string. 
If validation fails, an error message is returned. 

Suzy

  -Original Message-From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]On Behalf Of 
  [EMAIL PROTECTED]Sent: Monday, January 12, 2004 6:49 
  PMTo: Multiple recipients of list ORACLE-LSubject: Cold 
  Fusion and Bind VariablesDear List, We have a 
  developer here that is pretty good with the web stuff, but his strong 
  suit is not databases, or at least not 
  Oracle. He develops primarily in 
  Cold Fusion, which I know little about. I'm trying to teach him the difference between literal and bind 
  variables, and the importance of 
  knowing the difference. While it is easy to demonstrate this 
  in PL/SQL or Perl, I have no idea how to do 
  so in CF. A few minutes of 
  googling didn't really turn up anything useful. I'm looking for some examples of using bind variables 
  in SQL as used in Cold Fusion that 
  connects to Oracle 8i. If you have one, the virtual beer is on me. :) Jared 


rogue SYS connections

2003-12-10 Thread Vordos, Suzy

Solaris 2.8 Oracle 8.1.7.0.  We have session auditing enabled, and see rogue 
connections as SYS from several remote databases.  The os_user of the remote system is 
always oracle and there are several different remote hosts involved.

I can't figure out how they are gaining access this way.  Our SYS password is set to a 
random string, not the default, and we change it frequently.   There are no 
corresponding telnet sessions indicating access is local from our server, and we also 
change our oracle password frequently.   

I know the listener has vulnerabilities and we should apply those patches, but want to 
be sure we don't have an obvious configuration problem that is allowing these 
connections.   Any ideas?

-- init.ora
remote_login_passwordfile=NONE
remote_os_authent=FALSE

-- sqlnet.ora 
sqlnet.authentication_services=(NONE)

Here is a snippet from the audit trail:

-- sys.aud$
select timestamp#, userid, userhost, terminal, action# returncode,
comment$text from sys.aud$
where userid = 'SYS';

DEC-09-03 15:13:10   SYS UNKNOWN   101
Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=10.0.19
2.236)(PORT=63519))

-- dba_audit_session
select username,os_username,action_name action,terminal,timestamp,returncode
from dba_audit_session
where username = 'SYS';

USERNAME OS_USERNAME  ACTION TERMINAL   TIMESTAMP  RETURNCODE
  -- -- -- --
SYS  oracle   LOGOFF UNKNOWNDEC-09-03 15:13:10  0

-- listener log
09-DEC-2003 15:13:10 * 
(CONNECT_DATA=(SID=mnet03bP)(CID=(PROGRAM=)(HOST=hpcad200)(USER=oracle))) * 
(ADDRESS=(PROTOCOL=tcp)(HOST=10.0.192.236)(PORT=63519)) * establish * mnet03bP * 0

Thanks,
Suzy
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Vordos, Suzy
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


RE: rogue SYS connections

2003-12-10 Thread Vordos, Suzy

Thanks Ron.

No, we use SQL-Backtrack instead of RMAN.   However SQL-Backtrack does show a diff 
flavor of rogue connections of ###NOBODY.   

The remote database systems that are connecting to our database as SYS are not ones we 
support.  What is common about these databases is they do have logins to our database. 
 Those logins have only 'create session' privileges with select grants on views we 
created for our application.

Suzy

-Original Message-
Ron Rogers
Sent: Wednesday, December 10, 2003 1:24 PM
To: Multiple recipients of list ORACLE-L


Suzy,
 Do you use RMAN to perform backups? Do you use a catalog with RMAN?
Rman uses sys to perform the connections to the target database.

Just a thought,
Ron

 [EMAIL PROTECTED] 12/10/2003 3:09:33 PM 

Solaris 2.8 Oracle 8.1.7.0.  We have session auditing enabled, and see
rogue connections as SYS from several remote databases.  The os_user of
the remote system is always oracle and there are several different
remote hosts involved.

I can't figure out how they are gaining access this way.  Our SYS
password is set to a random string, not the default, and we change it
frequently.   There are no corresponding telnet sessions indicating
access is local from our server, and we also change our oracle password
frequently.   

I know the listener has vulnerabilities and we should apply those
patches, but want to be sure we don't have an obvious configuration
problem that is allowing these connections.   Any ideas?

-- init.ora
remote_login_passwordfile=NONE
remote_os_authent=FALSE

-- sqlnet.ora 
sqlnet.authentication_services=(NONE)

Here is a snippet from the audit trail:

-- sys.aud$
select timestamp#, userid, userhost, terminal, action# returncode,
comment$text from sys.aud$
where userid = 'SYS';

DEC-09-03 15:13:10   SYS UNKNOWN   
   101
Authenticated by: DATABASE; Client address:
(ADDRESS=(PROTOCOL=tcp)(HOST=10.0.19
2.236)(PORT=63519))

-- dba_audit_session
select username,os_username,action_name
action,terminal,timestamp,returncode
from dba_audit_session
where username = 'SYS';

USERNAME OS_USERNAME  ACTION TERMINAL   TIMESTAMP 
RETURNCODE
  -- -- --
--
SYS  oracle   LOGOFF UNKNOWNDEC-09-03 15:13:10 
0

-- listener log
09-DEC-2003 15:13:10 *
(CONNECT_DATA=(SID=mnet03bP)(CID=(PROGRAM=)(HOST=hpcad200)(USER=oracle)))
* (ADDRESS=(PROTOCOL=tcp)(HOST=10.0.192.236)(PORT=63519)) * establish *
mnet03bP * 0

Thanks,
Suzy
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net 
-- 
Author: Vordos, Suzy
  INET: [EMAIL PROTECTED] 

Fat City Network Services-- 858-538-5051 http://www.fatcity.com 
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Ron Rogers
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Vordos, Suzy
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


Veritas disk groups

2003-12-10 Thread Vordos, Suzy

A very long time ago, there was a whitepaper on implementing Veritas for Oracle 
systems.  I think it was published by Veritas.  I've googled and searched veritas.com 
and can't find it anywhere.  

IIRC, one of the recommendations in the whitepaper was to not use rootdg for database 
files, instead create a separate disk group.  Does anyone have a link to some 
documentation or best practices?Our sys-admin insists on creating filesystems for 
Oracle on rootdg, but I seem to recall there are some risks in doing this.   Maybe I'm 
hallucinating.

Thanks,
Suzy

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Vordos, Suzy
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


RE: download metalink articles - save target as

2003-09-22 Thread Vordos, Suzy

MS Outlook a.k.a Outhouse Mail.

-Original Message-
Sent: Monday, September 22, 2003 1:55 PM
To: Multiple recipients of list ORACLE-L


Paula,

I think the problem may lie in MetaLink's use of the icky icky frame
construct (See http://www.useit.com/ for explanation of why frames are bad
and aren't even needed).  You don't say what browser you're using, but I can
guess.  Toss out that virus-toting piece of dung, IEeee.  Actually, keep
it on your system, but make sure you have Work Offline checked before
closing it for the last time.  That way, your MS Outlook (Lookout!) mail
won't be able to automatically retrieve junk off of the web when you preview
or read messages.  This will help keep your spam count low.

So, in Mozilla (or other Gecko variant like Firebird or perhaps even
Netscape) or Opera 7.2.0, right click on the link to the article you want.
In the popup menu that appears, choose Open link in another tab or Open
link in another window or whatever option you have.  With the link in it's
own space, you should be able to figure out how to save the article locally.
One thing to watch for when using this technique is that the MetaLink pages
are often coded to open new links in a frame ([EMAIL PROTECTED]@#% frames!) from your
original MetaLink window/tab, unless you right-click every link into a new
window/tab.  Mozilla and it's variants also offer a middle-click to
automagically pop the link into a new window/tab.

These other browsers have the nice intended effect of being available on
multiple platforms, so you have the ability to call up MetaLink without
needing an MS Windohs box.  :)

HTH!  GL!
Rich

Rich Jesse   System/Database Administrator
[EMAIL PROTECTED]  Quad/Tech Inc, Sussex, WI USA


-Original Message-
Sent: Monday, September 22, 2003 1:45 PM
To: Multiple recipients of list ORACLE-L


When I right click on a metalink article to try to save it to a local
directory and use save target as - it only provides a blank file.  What's
the easiest way to save these files locally?  I want to because sometimes
the more useful ones go away.
Thanks, 
Paula 
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jesse, Rich
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Vordos, Suzy
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


ref_cursor's

2003-09-17 Thread Vordos, Suzy

I've RTFM'd looking for advantages/disadvantages of ref_cursors vs. out
parameters.  We have a developer who insists on using out parameters instead
of ref_cursors.  He hasn't coded PL/SQL since Oracle7.  The application
program that calls the PL/SQL package is written in C#.

I'm at a loss for words.  I'm not a PL/SQL expert, but it seems that
ref_cursors have the advantage of not needing to define PL/SQL variables,
and that it's easier to pass a result set back to the calling program.  I
also assume that ref_cursors have better performance.

Can someone clarify this?  Maybe I'm confused.

Thanks,
Suzy
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Vordos, Suzy
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


RE: SHARED Memory Sema phores on SUN / LINUX for Oracle.

2003-08-21 Thread Vordos, Suzy
Here's what I have for Sun.  This info was derived from some docs at
SunSolve which I can't find anymore, and the Sun Perf Tuning book by Adrian
Cockcroft.
 
* --
* Semaphores/Shared Memory for ORACLE
* --
* shmmax = max size per shared memory segment
* shmmin = min size per shared memory segment
* shmmni = max num shared memory identifiers
* shmseg = max num shared memory segments per process
* semmns = max num semaphores system wide (=semmni*semmsl)
* semmni = max num semaphore sets system wide (=semmnu)
* semmsl = max num semaphores per semaphore set (=semopm)
* semmnu = max num sempahore undo structures (=semmni)
* semmap = max entries per semaphore map (=semmni*semmsl)
* semopm = max operations per semop call (=semmsl)
* semume = max undo entries per process (=semmsl)
* semvmx = max value of a semaphore (cannot be  32767)
 
set shmsys:shminfo_shmmax=4294967295
set shmsys:shminfo_shmmin=1
set shmsys:shminfo_shmmni=100
set shmsys:shminfo_shmseg=10
set semsys:seminfo_semmns=4000
set semsys:seminfo_semmni=40
set semsys:seminfo_semmsl=100
set semsys:seminfo_semmnu=40
set semsys:seminfo_semmap=4000
set semsys:seminfo_semopm=100
set semsys:seminfo_semume=100
set semsys:seminfo_semvmx=32767


-Original Message- 
Sent: Thu 8/21/2003 9:01 AM 
To: Multiple recipients of list ORACLE-L 
Cc: 



Dear Friends, 

Any good article to explain the above subject, SHARED Memory  Sema phores 
on SUN / LINUX for Oracle. I just know what is shared memory , sema phores 
are. But never involved practically much. Please also send me some typical 
configurations , with explanation(if possible ) 

Please send me details about ur UNIX production Oracle systems, and lot of 
examples. Any good we site with pictorial information. 

NOTE: This is just for information only. 

Thanks  a lot. 
Regards 
Rajuveera 
** 
This email (including any attachments) is intended for the sole use of the 
intended recipient/s and may contain material that is CONFIDENTIAL AND 
PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying or 
distribution or forwarding of any or all of the contents in this message is 
STRICTLY PROHIBITED. If you are not the intended recipient, please contact 
the sender by email and delete all copies; your cooperation in this regard 
is appreciated. 
** 
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
http://www.orafaq.net  
-- 
Author: Veeraraju_Mareddi 
  INET: [EMAIL PROTECTED] 

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
http://www.fatcity.com  
San Diego, California-- Mailing list and web hosting services 
- 
To REMOVE yourself from this mailing list, send an E-Mail message 
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in 
the message BODY, include a line containing: UNSUB ORACLE-L 
(or the name of mailing list you want to be removed from).  You may 
also send the HELP command for other information (like subscribing). 

application/ms-tnef

RE: BLOB question/JDBC

2003-08-18 Thread Vordos, Suzy
Title: Message



IIRC, 
the thin driver doesn't support LOBs


-Original Message-From: Robert 
Foley [mailto:[EMAIL PROTECTED] Sent: Friday, August 
15, 2003 8:26 AMTo: Multiple recipients of list 
ORACLE-LSubject: BLOB question/JDBC

  Hi,
   I'm fairly new to the 
  area of JDBC and Orcale but I was hoping some of you may be able to help me 
  out with this one. I may have the wrong list as its a Java related question. 
  If so could someone please direct me to the correct list. 
  
  I'm trying to write a large file into a BLOB 
  column of an Oracle 9I DB, using a set of classes as follows ..
  
  I'm creating a general java.sql.Connection as 
  follows ...
  
  
  dbUrl = "jdbc:" + dbProtocol + ":thin:@" + dbHost 
  + ":" +dbPort + ":" + dbName;
  Class.forName(oracle.jdbc.driver.OracleDriver);
  return 
  DriverManager.getConnection(dbUrl, dbUser, dbPass);
  
  So I'm returning from here with 
  a normal java.sql.Connection.
  Then I'm creating a the BLOB as 
  follows ...
  oracle.sql.BLOB 
  dataFile = new BLOB((OracleConnection) con, 
  dataAsBytes);
  Note here that I am casting the 
  java.sql.Connection to an OracleConnection and passing this as an argument. 
  Why does the connection need to be passed as an argument here ?? 
  I am then using a PreparedStatement to send the 
  BLOB to the DB.
  stmt.setBlob(1,dataFile);
  
  stmt.setString(2,time.toString());
  stmt.setLong(3,time.getTimeInMillis());
  stmt.executeUpdate();
  stmt.close();
  con.close();
  My problem is that I keep 
  getting the following exception 
  java.sql.SQLException: ORA-24813: cannot send or receive an 
  unsupported LOB
  at 
  oracle.jdbc.dbaccess.DBError.throwSqlException(DBError.java:134)
  at 
  oracle.jdbc.ttc7.TTIoer.processError(TTIoer.java:289)
  at 
  oracle.jdbc.ttc7.Oall7.receive(Oall7.java:579)
  at 
  oracle.jdbc.ttc7.TTC7Protocol.doOall7(TTC7Protocol.java:1894)
  at 
  oracle.jdbc.ttc7.TTC7Protocol.parseExecuteFetch(TTC7Protocol.java:1094)
  at 
  oracle.jdbc.driver.OracleStatement.executeNonQuery(OracleStatement.java:2132)
  at 
  oracle.jdbc.driver.OracleStatement.doExecuteOther(OracleStatement.java:2015)
  at 
  oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:2877)
  at 
  oracle.jdbc.driver.OraclePreparedStatement.executeUpdate(OraclePreparedStatement.java:608)
  at 
  com.changingworlds.nav.updatemanager.database.DatabaseManager.addToHistoryDB(DatabaseManager.java:138)
  
  I've been looking all over for a solution to this 
  exception andI'm finding that itsusually caused when I am using 
  thedifferent versions of oracle on server and client.
  I don't understand this because I am using the 
  correct oracle9i drivers.
  I hope somebodycanhelp me with this 
  as I'm really stuck.
  Yours sincerely,
  
  Robert Foley
  
  
  
  
  
  
  


RE: Semaphore problem

2003-08-14 Thread Vordos, Suzy

Look at the keral parm value for semopm.  It should be equal to the value of
semmsl.  Here's how the values for semaphores are calculated (if on
Solaris).

* semmns = max num semaphores system wide (=semmni*semmsl)
* semmni = max num semaphore sets system wide (=semmnu)
* semmsl = max num semaphores per semaphore set (=semopm)
* semmnu = max num sempahore undo structures (=semmni)
* semmap = max entries per semaphore map (=semmni*semmsl)
* semopm = max operations per semop call (=semmsl)
* semume = max undo entries per process (=semopm)
* semvmx = max value of a semaphore (cannot be  32767)

Hope this helps
Suzy

-Original Message-
Sent: Wednesday, August 13, 2003 12:30 PM
To: Multiple recipients of list ORACLE-L


You are getting an OS error.  Run kill -l on your machine (if on a unix
variant) and look at what 13 is.  On HP-UX that signal refers to a PIPE.

Allan

-Original Message-
Sent: Wednesday, August 13, 2003 12:10 PM
To: Multiple recipients of list ORACLE-L


Has anyone ever seen an error like:

ERROR: rbusy(SEMOP) (13; Permission denied)

There is no Oracle error associated with it.

Thanks!
Ron
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Smith, Ron L.
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the
message BODY, include a line containing: UNSUB ORACLE-L (or the name of
mailing list you want to be removed from).  You may also send the HELP
command for other information (like subscribing).



__
This email is intended solely for the person or entity to which it is
addressed and may contain confidential and/or privileged information.
Copying, forwarding or distributing this message by persons or entities
other than the addressee is prohibited. If you have received this email in
error, please contact the sender immediately and delete the material from
any computer.  This email may have been monitored for policy compliance.
[021216]

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Nelson, Allan
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Vordos, Suzy
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).