RE: Encryption - Question about the key
What we do is have the application manage the encryption keys. The DBA therefore only has access to the encrypted data. Being the DBA in this equation, I am exonerated from having easy access to the keys, and therefore exonerated when it comes time to hunt down perpetrators (well, nearly!) :). I further suggested that they split the key into parts and allow the DBA, root, and the application owner to put in parts to derive the actual key that is not stored anywhere, but exists only in the memory of the app. This did not go over well. :) We're also looking at procedures to change the keys, since any set of encrypted data is a target, and if you change the keys, it's a "moving" target. hope this is interesting if not amusing. sa -Original Message- Sent: Tuesday, December 18, 2001 3:55 PM To: Multiple recipients of list ORACLE-L Believe it or not Jared, one of your script gave me following idea (the wrapper sql for decrypt/encrypt on your site). 1. I have a system users table, I can add a column to store user's key in a column that only that user has access to. 2. Create a DBA owned package to handle encryption/decryption. 3. The key will be picked up in this package and used (maybe I'll use user key is used to derive the actual key). 4. The package will be deployed as 'wrapped' in production, so by looking at dba_source you won't find much. I'll have to test this though but I think this will make it a bit more secure. The question is "Can I trust myself?" The answer is 'Yes". Can someone see any drawbacks? Raj __ Rajendra Jamadagni MIS, ESPN Inc. Rajendra dot Jamadagni at ESPN dot com Any opinion expressed here is personal and doesn't reflect that of ESPN Inc. QOTD: Any clod can have facts, but having an opinion is an art! -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Austin, Steve S INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Encryption - Question about the key
No problems with this system; troubleshooting has not been an issue. The key is actually also stored in management's hidden place of choice (I have no knowledge; it's probably in all likelihood either a cleartext file in email or on a few people's hard drives.) But changing keys is something we're going to need to do, especially as attrition sets in. I had suggested keeping another column on each row as a sort of key sequence (if we convert from one key to another "organically" as the app uses the data) or key seeding value. You could potentially store millions of "keys" in a table further obfuscating the true key -- again -- the main idea here is to split the key management work into the application logic to make it more difficult to get the true key. Key management is just as tricky as all the other parts, and certainly what we're doing is a lot better than plainly storing the key in the database, but it's got its own weaknesses. I like the idea of using a hardware device to store/manage the keys -- and have all the encrypt/decrypt happen there, so the key is never sent anywhere. That's about as secure as you can get. As long as you implicitly trust that device .. and have a backup of it so there's no single point of failure.. The way I look at security is (mostly) working to keep the honest people honest. You won't *stop* the truly malicious; your best bet is to set traps to alert yourself to their presence and hope to the deity of choice that they fall for your honeypots. Steve -Original Message- Sent: Tuesday, December 18, 2001 7:49 PM To: [EMAIL PROTECTED]; Austin, Steve S This sounds great until something doesn't work properly. Bet it's difficult to toubleshoot. Has this setup given you any problems in that regard? Jared On Tuesday 18 December 2001 16:25, Austin, Steve S wrote: > What we do is have the application manage the encryption keys. The DBA > therefore only has access to the encrypted data. Being the DBA in this > equation, I am exonerated from having easy access to the keys, and > therefore exonerated when it comes time to hunt down perpetrators (well, > nearly!) :). I further suggested that they split the key into parts and > allow the DBA, root, and the application owner to put in parts to derive > the actual key that is not stored anywhere, but exists only in the memory > of the app. This did not go over well. :) We're also looking at > procedures to change the keys, since any set of encrypted data is a target, > and if you change the keys, it's a "moving" target. > > hope this is interesting if not amusing. > sa > > -Original Message- > Sent: Tuesday, December 18, 2001 3:55 PM > To: Multiple recipients of list ORACLE-L > > > Believe it or not Jared, one of your script gave me following idea (the > wrapper sql for decrypt/encrypt on your site). > > 1. I have a system users table, I can add a column to store user's key in a > column that only that user has access to. > 2. Create a DBA owned package to handle encryption/decryption. > 3. The key will be picked up in this package and used (maybe I'll use user > key is used to derive the actual key). > 4. The package will be deployed as 'wrapped' in production, so by looking > at dba_source you won't find much. > > I'll have to test this though but I think this will make it a bit more > secure. > > The question is "Can I trust myself?" The answer is 'Yes". > > Can someone see any drawbacks? > > Raj > __ > Rajendra JamadagniMIS, ESPN Inc. > Rajendra dot Jamadagni at ESPN dot com > Any opinion expressed here is personal and doesn't reflect that of ESPN > Inc. > > QOTD: Any clod can have facts, but having an opinion is an art! -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Austin, Steve S INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Weid exp/imp problem
Title: Weid exp/imp problem You may need to use consistent=y on the export to ensure that the view for the entire export run is from one snapshot in time. If your application is busy changing data during the export, then as export moves through the list of tables (alphabetically I think) then you'll get some tables at the beginning of the list from one time, and tables late in the list from another with possible referential problems just as exhibited below. hope this helps, Steve -Original Message-From: Daiminger, Helmut [mailto:[EMAIL PROTECTED]]Sent: Wednesday, December 19, 2001 2:25 AMTo: Multiple recipients of list ORACLE-LSubject: Weid exp/imp problem Hi! I'm experiencing a weird problem here... I'm about to move one user's object from the development box to a test box. The user's rights on both boxes are identical. What I do is this: - export user (using exp) from development. Works flawlessly. - import user into the other box (user setup and tablespaces are identical) An I get the following errors which doesn't make a lot of sense to me... ... . . importing table "TABELLEN" 37 rows imported . . importing table "TABELLEN_ZUORDNUNGEN" 28 rows imported . . importing table "TMP$TEST" 1 rows imported . . importing table "TMP_FUNKTIONS_PARAMETER" 0 rows imported . . importing table "TMP_FUNKTIONS_SPALTEN" 0 rows imported . . importing table "USEREXIT" 5 rows imported . . importing table "USEREXIT_TYPE" 3 rows imported . . importing table "ZYKLUS" 7 rows imported IMP-00017: following statement failed with ORACLE error 2270: "ALTER TABLE "BENUTZER_GRUPPEN_ZUORD" ADD CONSTRAINT "BNGRZ_BNGR_FK" FOREIGN" " KEY ("BNGR_ID") REFERENCES "BENUTZER_GRUPPEN" ("ID") ENABLE NOVALIDATE" IMP-3: ORACLE error 2270 encountered ORA-02270: no matching unique or primary key for this column-list IMP-00017: following statement failed with ORACLE error 2270: "ALTER TABLE "BENUTZER_GRUPPEN_ZUORD" ADD CONSTRAINT "BNGRZ_OW_FK" FOREIGN K" "EY ("OW_ID") REFERENCES "OWNER" ("ID") ENABLE NOVALIDATE" IMP-3: ORACLE error 2270 encountered ORA-02270: no matching unique or primary key for this column-list ... Any ideas why this is happening? This is 8.1.7 on Sun Solaris. Thanks, Helmut
RE: Rman ... what do YOU need
I'm currently struggling with the MML & Veritas NetBackup. What I'd like is cohesive definition and examples showing use of the views (v$backup_sync_io and v$backup_async_io) that are there to supposedly let me know if the tape is streaming, and to compare throughput from the point of view of RMAN with theoretical throughput for both the tape devices and the disk devices. I'm using asynchronous IO, slaved IO processes and multiple channels to tape in an attempt to get a data warehouse backed up in a reasonable time. This takes a great deal of large pool memory, which I'd like to override at times (e.g. when running a job that should give a small amount of output, it'd be nice to be able to override the large pool use, sort of like forcing a dedicated server with sqlnet.ora from the client when connecting to an MTS listener.) Some indication of the balancing act between backup times and recovery times would also be good. So I guess the ideas boil down to this: o how to tell if you're getting the most from your RMAN config o how to plan resources for optimal use by RMAN o balancing time-to-backup with time-to-recovery Hope this helps... Steve -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Austin, Steve S INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: OT - RE: Digestive
I vastly prefer the "real beer" taste of Celis White, if one must pick a Texas beer. At the insistence of friends, I'm just beginning to cultivate a taste for scotch, but I already have an expensive wine monkey and with this economy I don't need any new holes in my pocket for booze or cigars. :) Steve Dallas, TX -Original Message- [mailto:[EMAIL PROTECTED]] Sent: Wednesday, June 13, 2001 3:42 PM To: Multiple recipients of list ORACLE-L Was there any doubt??? I am truly affronted... ;-) Scott Shafer San Antonio, TX 210-581-6217 "I hate the country, all those animals walking around un-cooked." > -Original Message- > From: Norrell, Brian [SMTP:[EMAIL PROTECTED]] > Sent: Wednesday, June 13, 2001 3:13 PM > To: Multiple recipients of list ORACLE-L > Subject: RE: OT - RE: Digestive > > That draft would be Shiner Bock, right? Otherwise we other Texans will > have > you declared a yankee. > > Brian Norrell > Manager, MPI Development > QuadraMed > 511 E John Carpenter Frwy, Su 500 > Irving, TX 75062 > (972) 831-6600 > > > -Original Message- > [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, June 13, 2001 10:46 AM > To: Multiple recipients of list ORACLE-L > > > Gee, What ever happened to a cold draft and a shot of rye? > > Scott Shafer > San Antonio, TX > 210-581-6217 > > -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Austin, Steve S INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: backup Oracle on Sun Cluster 2.2 ???
I believe under the version we use, it's simply haoracle stop to stop the Oracle monitoring. Then you can run your cold backup, and restart the monitoring afterwards with haoracle start Of course, I think we're a major rev behind, and all the "ha*" commands were moving to the scadmin format. This is probably enough to get you pointed the right way? Steve -Original Message- Sent: Sunday, July 22, 2001 8:10 PM To: Multiple recipients of list ORACLE-L Hi all, I want to perform Oracle cold backup, Since I am using Sun Cluster 2.2, after I stop my cluster, those clustered partitions are not mounted. How can I shutdown my database while my cluster is working (How to shutdown my Oracle with mounted partitions) Best Regards Sinardy -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Sinardy INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Austin, Steve S INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Sun cluster vs Veritas cluster
I have used both and somewhat prefer VCS. In both systems, we've had problems where the cluster was in an unknown state and any action to change the state was risky to all the services in the cluster. This is rare for both products. Our Sun support required for us to pay them to certify our stuff before they'd support the implementation. Don't know if you're subject to this too, but VCS has no such rule. The tests were interesting, but we could conduct the tests without their involvement. Command-line jocks may at first prefer Sun, but I think Veritas is a better bet since it's not as tied to the hardware vendor, and is more likely to be common across Unixes, if you're in a site where you've got more than one Unix vendor's stuff to support, like I am. We are in the process of migrating from Sun cluster to VCS, fyi. my 2¢ Steve -Original Message-From: KC [mailto:[EMAIL PROTECTED]]Sent: Tuesday, July 24, 2001 7:51 AMTo: Multiple recipients of list ORACLE-LSubject: Sun cluster vs Veritas cluster List, Just wondering if anyone on the list who had experience on both Sun clustering and Veritas clustering software share their experience on both products, strength and weakness or any comparison?? KC
RE: MTS IS CONFIGURED BUT STILL DEDICATED CONNECTIONS USED
Check the client's sqlnet.ora. It can override the server config with USE_DEDICATED_SERVER=ON setting. Steve -Original Message- Sent: Wednesday, July 25, 2001 10:36 AM To: Multiple recipients of list ORACLE-L Hi, I have configured the server to use MTS and still dedicated connections r used. What might be the reasondatabase is 8.1.6.3.4 LSNRCTL> services Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC0))) Services Summary... ora2000 has 6 service handler(s) DISPATCHER established:0 refused:0 current:0 max:1022 state:ready D004 (ADDRESS=(PROTOCOL=tcp)(HOST=ora2000)(PORT=1393)) DISPATCHER established:0 refused:0 current:0 max:1022 state:ready D003 (ADDRESS=(PROTOCOL=tcp)(HOST=ora2000)(PORT=1391)) DISPATCHER established:0 refused:0 current:0 max:1022 state:ready D002 (ADDRESS=(PROTOCOL=tcp)(HOST=ora2000)(PORT=1390)) DISPATCHER established:0 refused:0 current:0 max:1022 state:ready D001 (ADDRESS=(PROTOCOL=tcp)(HOST=ora2000)(PORT=1387)) DISPATCHER established:0 refused:0 current:0 max:1022 state:ready D000 (ADDRESS=(PROTOCOL=tcp)(HOST=ora2000)(PORT=1385)) PLSExtProchas 1 service handler(s) DEDICATED SERVER established:0 refused:0 LOCAL SERVER ora2000 has 6 service handler(s) DISPATCHER established:0 refused:0 current:0 max:1022 state:ready D004 (ADDRESS=(PROTOCOL=tcp)(HOST=ora2000)(PORT=1393)) DISPATCHER established:0 refused:0 current:0 max:1022 state:ready D003 (ADDRESS=(PROTOCOL=tcp)(HOST=ora2000)(PORT=1391)) DISPATCHER established:0 refused:0 current:0 max:1022 state:ready D002 (ADDRESS=(PROTOCOL=tcp)(HOST=ora2000)(PORT=1390)) DISPATCHER established:0 refused:0 current:0 max:1022 state:ready D001 (ADDRESS=(PROTOCOL=tcp)(HOST=ora2000)(PORT=1387)) DISPATCHER established:0 refused:0 current:0 max:1022 state:ready D000 (ADDRESS=(PROTOCOL=tcp)(HOST=ora2000)(PORT=1385)) ora2000 has 1 service handler(s) DEDICATED SERVER established:0 refused:0 LOCAL SERVER ora2000 has 6 service handler(s) DEDICATED SERVER established:76 refused:0 LOCAL SERVER The command completed successfully init.ora looks like: mts_dispatchers = "TCP,5" mts_max_dispatchers=50 mts_servers=20 mts_max_servers=50 LOCAL_LISTENER = "(ADDRESS_LIST = (Address = (Protocol = TCP) (Host=ora2000) (Port=1521)))" Thanks Harvinder -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Harvinder Singh INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Austin, Steve S INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Sun cluster vs Veritas cluster
We're using Sun Cluster 2.2 and a mix of VCS implementations, all on Solaris -- 2.6, 2.7 and 8. It seems likely our HP Service Guard will also migrate to VCS as well. The SC2.2 product has had more sensitivity to the Oracle version than the VCS product. It also seems to have more of its "guts" exposed, while VCS is better encapsulated in its GUI. I have no experience with SC3.0. We don't use OPS here yet, but it looks like Veritas has an option to support it; not sure if it's in the base VCS product or not -- knowing their $trategie$, it probably i$n't included in the ba$e package. Check out this URL to see the press release on "VERITAS Database Edition/Advanced Cluster for Oracle" that talks about supporting OPS: http://www.veritas.com/news/press/PressReleaseDetail.jhtml?NewsId=9436 :) sa -Original Message- Sent: Wednesday, July 25, 2001 4:37 AM To: Multiple recipients of list ORACLE-L We had a study made by a third party between Sun cluster and Veritas cluster both version 2.X and 3.x After that study, we have chosen Veritas cluster 2.x Sun Cluster 3 requires Solaris 8, all our boxes are on 7 and Sun Cluster 2.X doesn't handle T300 disk box which we have. Sun software doesn't handle all Sun hardware... --- KC <[EMAIL PROTECTED]> a écrit : > Steve, > > Thanks for your input, I had previously used HP > Service Guard on HP-UX platform, it worked for us. I > am now on Sun platform and looking at HA solution > using either Sun or Veritas clustering solution, I > also heard that the older version of Sun clustering > is not very sophisticated compared to other > clustering solution, are you using 2.x or the latest > 3.0, from what I read on Sun web site, v3.0 seems to > do a lot more than the old version, any comments > from the list?? The other things I need to check is > rather OPS is supported with Veritas Cluster on Sun > platform, anyone know?? > > KC > -Original Message- > From: Austin, Steve S <[EMAIL PROTECTED]> > To: Multiple recipients of list ORACLE-L > <[EMAIL PROTECTED]> > Date: Wednesday, July 25, 2001 5:31 AM > Subject: RE: Sun cluster vs Veritas cluster > > > I have used both and somewhat prefer VCS. In > both systems, we've had problems where the cluster > was in an unknown state and any action to change the > state was risky to all the services in the cluster. > This is rare for both products. > > Our Sun support required for us to pay them to > certify our stuff before they'd support the > implementation. Don't know if you're subject to > this too, but VCS has no such rule. The tests were > interesting, but we could conduct the tests without > their involvement. > > Command-line jocks may at first prefer Sun, but > I think Veritas is a better bet since it's not as > tied to the hardware vendor, and is more likely to > be common across Unixes, if you're in a site where > you've got more than one Unix vendor's stuff to > support, like I am. > > We are in the process of migrating from Sun > cluster to VCS, fyi. > > my 2¢ > Steve > -Original Message- > From: KC [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, July 24, 2001 7:51 AM > To: Multiple recipients of list ORACLE-L > Subject: Sun cluster vs Veritas cluster > > > List, > > Just wondering if anyone on the list who had > experience on both Sun clustering and Veritas > clustering software share their experience on both > products, strength and weakness or any comparison?? > > KC > = Stéphane Paquette DBA Oracle, consultant entrepôt de données Oracle DBA, datawarehouse consultant [EMAIL PROTECTED] ___ Do You Yahoo!? -- Vos albums photos en ligne, Yahoo! Photos : http://fr.photos.yahoo.com -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: =?iso-8859-1?q?paquette=20stephane?= INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Austin, Steve S INET:
OT -- RE: Sun cluster vs Veritas cluster
You're showing your age. ;) I'm more akin the the $6.0 E+06 homo sapien. You know, "a man barely alive"; "we have the technology," blahblahblah -- all that Six Million Dollar Man stuff (whose character was -also- "Steve Austin" for those who haven't caught it in reruns). It's amazing how much of that junk actually applies in this weird wired world. You wouldn't believe the bionic things my classmates teased me for doing in 4th grade when that show came out in the 70s! Since the wrassler has also made fame with *my* name, I've received phone calls from all over the world (I live in Dallas, TX.) The worst was from a fellow in Japan who could speak four languages, but none of them English, Spanish or French. The best I could do was say "No" over and over again. Sad. Now my number is unlisted and life is better. Some of my more twisted friends said I should offer to sell signed photographs, cash only. I already have enough karma, so I was straightfoward with all the kiddos. :) sa -Original Message- Sent: Wednesday, July 25, 2001 10:56 AM To: Multiple recipients of list ORACLE-L > Austin, Steve Hey, didn't I see you on Monday Night Raw and Smackdown?? :o) -Original Message- Sent: Wednesday, July 25, 2001 10:26 AM To: Multiple recipients of list ORACLE-L We're using Sun Cluster 2.2 and a mix of VCS implementations, all on Solaris -- 2.6, 2.7 and 8. It seems likely our HP Service Guard will also migrate to VCS as well. The SC2.2 product has had more sensitivity to the Oracle version than the VCS product. It also seems to have more of its "guts" exposed, while VCS is better encapsulated in its GUI. I have no experience with SC3.0. We don't use OPS here yet, but it looks like Veritas has an option to support it; not sure if it's in the base VCS product or not -- knowing their $trategie$, it probably i$n't included in the ba$e package. Check out this URL to see the press release on "VERITAS Database Edition/Advanced Cluster for Oracle" that talks about supporting OPS: http://www.veritas.com/news/press/PressReleaseDetail.jhtml?NewsId=9436 :) sa -Original Message- Sent: Wednesday, July 25, 2001 4:37 AM To: Multiple recipients of list ORACLE-L We had a study made by a third party between Sun cluster and Veritas cluster both version 2.X and 3.x After that study, we have chosen Veritas cluster 2.x Sun Cluster 3 requires Solaris 8, all our boxes are on 7 and Sun Cluster 2.X doesn't handle T300 disk box which we have. Sun software doesn't handle all Sun hardware... --- KC <[EMAIL PROTECTED]> a écrit : > Steve, > > Thanks for your input, I had previously used HP > Service Guard on HP-UX platform, it worked for us. I > am now on Sun platform and looking at HA solution > using either Sun or Veritas clustering solution, I > also heard that the older version of Sun clustering > is not very sophisticated compared to other > clustering solution, are you using 2.x or the latest > 3.0, from what I read on Sun web site, v3.0 seems to > do a lot more than the old version, any comments > from the list?? The other things I need to check is > rather OPS is supported with Veritas Cluster on Sun > platform, anyone know?? > > KC > -Original Message- > From: Austin, Steve S <[EMAIL PROTECTED]> > To: Multiple recipients of list ORACLE-L > <[EMAIL PROTECTED]> > Date: Wednesday, July 25, 2001 5:31 AM > Subject: RE: Sun cluster vs Veritas cluster > > > I have used both and somewhat prefer VCS. In > both systems, we've had problems where the cluster > was in an unknown state and any action to change the > state was risky to all the services in the cluster. > This is rare for both products. > > Our Sun support required for us to pay them to > certify our stuff before they'd support the > implementation. Don't know if you're subject to > this too, but VCS has no such rule. The tests were > interesting, but we could conduct the tests without > their involvement. > > Command-line jocks may at first prefer Sun, but > I think Veritas is a better bet since it's not as > tied to the hardware vendor, and is more likely to > be common across Unixes, if you're in a site where > you've got more than one Unix vendor's stuff to > support, like I am. > > We are in the process of migrating from Sun > cluster to VCS, fyi. > > my 2¢ > Steve > -Original Message- > From: KC [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, July 24, 2001 7:51 AM > To: Multiple recipients of list ORACLE-L > Subject: Sun cluster vs Veritas clust
RE: Solaris Release Vs. Version
The module that is responding to uname -a is SunOS. This is different from Solaris, but it's confusing why. I guess historically the primary interface was command-line, and not CDE? (i.e. maybe solaris:sunos :: gui:command-line) Here's a table I found on the web that may help... SunOS 5.3 = Solaris 2.3 SunOS 5.4 = Solaris 2.4 SunOS 5.5 = Solaris 2.5 SunOS 5.5.1 = Solaris 2.5.1 SunOS 5.6 = Solaris 2.6 SunOS 5.7 = Solaris 7 (aka Solaris 2.7) SunOS 5.8 = Solaris 8 (aka Solaris 2.8) .. .and before you get too riled up, ask yourself why Oracle 8.1.6 is also known as "8iv2" :) happy weekend everyone! Steve -Original Message- Sent: Friday, July 27, 2001 10:11 AM To: Multiple recipients of list ORACLE-L Hi thanq for responding . but still i am not clear about it. can you clarify. because in oracle we call version 8.1.7 ... but here what is the release and version. can you go more deep? 2.6 is version 6 of oracle is it any hardware release. prasad --- Christopher Spence <[EMAIL PROTECTED]> wrote: > There is probably something wrong or it is truly > 2.7. > > 2.6 is Version 6 of Solaris > 2.7 is Version 7 of Solaris > > They are completely different versions. Nothing > about them is similar in > terms of release. > > "Walking on water and developing software from a > specification are easy if > both are frozen." > > Christopher R. Spence > Oracle DBA > Fuelspot > > > > -Original Message- > Sent: Friday, July 27, 2001 7:11 AM > To: Multiple recipients of list ORACLE-L > > > hi dba's > > can any body tell me the difference between the > release and version of Sun solaris. > > i am working on solaris platform. > > when i login to the server, i get prompt Sun 5.7 > > where the version is 2.6 > > what is the difference between these 2? > > prasad. > > > __ > Do You Yahoo!? > Make international calls for as low as $.04/minute > with Yahoo! Messenger > http://phonecard.yahoo.com/ > -- > Please see the official ORACLE-L FAQ: > http://www.orafaq.com > -- > Author: prasad maganti > INET: [EMAIL PROTECTED] > > Fat City Network Services-- (858) 538-5051 FAX: > (858) 538-5051 > San Diego, California-- Public Internet > access / Mailing Lists > > To REMOVE yourself from this mailing list, send an > E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of > 'ListGuru') and in the > message BODY, include a line containing: UNSUB > ORACLE-L (or the name of > mailing list you want to be removed from). You may > also send the HELP > command for other information (like subscribing). > -- > Please see the official ORACLE-L FAQ: > http://www.orafaq.com > -- > Author: Christopher Spence > INET: [EMAIL PROTECTED] > > Fat City Network Services-- (858) 538-5051 FAX: > (858) 538-5051 > San Diego, California-- Public Internet > access / Mailing Lists > > To REMOVE yourself from this mailing list, send an > E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of > 'ListGuru') and in > the message BODY, include a line containing: UNSUB > ORACLE-L > (or the name of mailing list you want to be removed > from). You may > also send the HELP command for other information > (like subscribing). __ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: prasad maganti INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Austin, Steve S INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
any way to stop rollback for dml?/8.1.7.1/Solaris 8
Does anyone know of a way to inhibit rollback from being generated for DML? We've got a data warehouse load process that we're trying to speed up (involving sqlldr and then some DML afterwards.) The staging tables it uses are entirely for this process -- there's no need to rollback if it fails; we'd truncate them and start again with that set of data. Aside from sqlldr direct mode and import direct mode, can anyone think of ways to do this? Thanks, Steve -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Austin, Steve S INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: any way to stop rollback for dml?/8.1.7.1/Solaris 8
Yes; many thanks! Unfortunately some of this process is updates, but some of it is inserts, so it will still help... Also the link to sqlldr stuff seems helpful as well. There seems to be quite a bit able to be done here; need to get busy with the docs... Thanks also to those who responded with "nologging" -- but this affects redo, not rollback. I've already set the tables as nologging, but the rollback to undo the transaction is another set of overhead that if I could eliminate would speed things up... But thank you for the helpful spirit in which the message was sent... :) happy weekend... Steve -Original Message- [mailto:[EMAIL PROTECTED]] Sent: Friday, July 27, 2001 3:11 PM To: Multiple recipients of list ORACLE-L Steve, Even we do have the same kind of requirement. AFAIK, there is no way except INSERT with APPEND hint (Direct Load Insert). See Direct-load Insert chapter in concepts manual. Unfortunately Direct load insert works with Insert .. select, not Insert .. values syntax. hth, prasad "Austin, Steve S" To: Multiple recipients of list ORACLE-L [EMAIL PROTECTED]> cc: Sent by: Subject: any way to stop rollback for root@fatcity.dml?/8.1.7.1/Solaris 8 com 07/27/2001 03:02 PM Please respond to ORACLE-L Does anyone know of a way to inhibit rollback from being generated for DML? We've got a data warehouse load process that we're trying to speed up (involving sqlldr and then some DML afterwards.) The staging tables it uses are entirely for this process -- there's no need to rollback if it fails; we'd truncate them and start again with that set of data. Aside from sqlldr direct mode and import direct mode, can anyone think of ways to do this? Thanks, Steve -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Austin, Steve S INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Austin, Steve S INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: Unix File Open & Port Open
The only I know of way to see which process has a port open in Solaris is to use lsof (there's a package on sunfreeware.com -- including source). netstat and /proc aren't enough as far as I can see... It's not clear what exactly you need to know, but hope this helps... Steve -Original Message- Sent: Wednesday, May 30, 2001 8:40 PM To: Multiple recipients of list ORACLE-L Hello, This is an off topic, UNIX question. Can any one please tell me how to get the Unix File Open and Port Open in SCO or AIX, or SUN? I am not sure whether they are part of sar output, so please help. I am not sure whether I can get this kind of information. thanks every one in advance. rgds, raja Get 250 color business cards for FREE! http://businesscards.lycos.com/vp/fastpath/ -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Viraj Luthra INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Austin, Steve S INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
real-time scheduler in Solaris?
Folks, Does anyone know how to exploit the real-time scheduler in Solaris? I can only find vague references to this on the web. We're considering using the real-time scheduler for Oracle background processes on our busiest Solaris boxes (that support 2-3k connections). We want to make Unix bias the Oracle background processes for CPU, all other things being equal. We had some consultants suggesting our MTS config wasn't getting the cycles it needed after we called into question their SQL (which is too long a story for me to get into -- I'll begin ranting about big consulting companies. :) Thanks, Steve Steve Austin DBA for Unix-based systems Enterprise Data Center Operations, XO Communications email: [EMAIL PROTECTED] -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Austin, Steve S INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
RE: real-time scheduler in Solaris?
We could do that, but some processes spawn and die (e.g. MTS dispatchers, servers) based on changing load, and I'm not sure they'd get the same priority. I had read in Steve Adams' book on internals that exploiting the real-time scheduler is something to consider, so since I've seen him post, I thought I'd ask. :) [Actually, a review of this material brings to mind another set of questions about 'priority fixing facility' that I'll research on Solaris before posting again.] I had not heard about Oracle not wanting you to change priorities, but it makes sense. It's sort of like the 'pin a process on a cpu' thread -- many minds have worked on the scheduler, so why muck with the behavior of that code? We're likely only to make things worse. However, as a bit twiddler at heart (dare I say "h*cker"?) my curiosity is piqued about other scheduling classes. Given we trust that Oracle's processes are well behaved and sleep when there's no work, I think this may have merit on CPU-starved systems or those with a huge number of processes. thanks, Steve -Original Message- Sent: Wednesday, June 13, 2001 10:21 AM To: Multiple recipients of list ORACLE-L Two comments: 1) Why not just re-NICE the shadow (or offending procs) 2) Last I heard oracle does not recommend running their procs at differing NICE levels. -Original Message- Sent: Tuesday, June 12, 2001 6:33 PM To: Multiple recipients of list ORACLE-L Folks, Does anyone know how to exploit the real-time scheduler in Solaris? I can only find vague references to this on the web. We're considering using the real-time scheduler for Oracle background processes on our busiest Solaris boxes (that support 2-3k connections). We want to make Unix bias the Oracle background processes for CPU, all other things being equal. We had some consultants suggesting our MTS config wasn't getting the cycles it needed after we called into question their SQL (which is too long a story for me to get into -- I'll begin ranting about big consulting companies. :) Thanks, Steve Steve Austin DBA for Unix-based systems Enterprise Data Center Operations, XO Communications email: [EMAIL PROTECTED] -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Austin, Steve S INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Mohan, Ross INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Austin, Steve S INET: [EMAIL PROTECTED] Fat City Network Services-- (858) 538-5051 FAX: (858) 538-5051 San Diego, California-- Public Internet access / Mailing Lists To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).