Re: Canada and US friends

2003-08-17 Thread Mladen Gogala
Please, please send us some candles and torchlights. If you
can, please send in some John Smith Extra Smooth and Bailey's
Irish Cream. When I come to think of it, you can skip candles
and lights and start sending in the good stuff.
On 2003.08.18 00:44, Sinardy Xing wrote:
Hi Canada and US friends,

Can your systems survive the blackout disaster?

Do you need recovery? Everything is ok out there?

Sinardy

--
Mladen Gogala
Oracle DBA
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Mladen Gogala
 INET: [EMAIL PROTECTED]
Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


Re: Oracle 9i and connect as sys

2003-08-17 Thread Arup Nanda
A manager who has to create public synonyms himself! Ordinarily I would have
had nothing but pure respect for the man who is obviously such a grease
monkey; but he proved to be just a monkey.

Damagement title with sys password; boy how I hate to be DBA there! No, to
be _anything_ there.

Arup Nanda

- Original Message - 
To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]>
Sent: Sunday, August 17, 2003 11:39 PM


> Babette,
>
> This is how database security unravels.  Pretty soon, the password to SYS
is
> embedded everywhere, used everywhere, and everyone knows it.  Thus, the
DBA
> ends up with the pager and responsibility for fixing stuff, but everyone
> else can cause that pager to go off with a stupid goof at 3:00am where
they
> shouldn't have been able to goof up.
>
> It sounds like the patching utility only needs a couple privileges, but
> instead all of the goddess-like privileges of SYS are provided.  Pretty
> soon, it seems normal for people and programs to connect as SYS on a
regular
> basis.  And so it goes...
>
> A couple alternatives:
>
> * use 9i "GRANT ANY OBJECT PRIVILEGE" to let another account have
>   an incredible amount of authority, which is OK if you don't know
>   exactly what permissions will be needed ahead of time...
> * grant specific permissions WITH GRANT OPTION to another user, a
>   more focused approach than the shotgun "GRANT ANY OBJECT PRIVILEGE"
>   approach, provided you know what permissions will be needed ahead
>   of time.  This has been around forever...
> * encapsulate such actions within a stored procedure owed by SYS,
>   which may seem cumbersome but allows all kinds of control.  Not just
>   "who can do what" (which is basically what permissions and roles
>   provide), but also "during what time", "from where", "from what
>   program", "from what location", etc...
>
> Just this Friday, I was wrapping up an installation engagement and one of
> the last things we did was change all the passwords.  Standard practice.
> Immediately, one of the development managers comes boiling out of his
office
> screaming "Who changed the passwords to SYS and SYSTEM?".  I 'fessed up
and
> asked him why he thought he needed it.  He turned red and snarled that he
> just needed it and never you mind, turned on his heel and went in the
CIO's
> office, then came boiling back with approval.  We turned it over, and
within
> 5 minutes I logged back onto the system and saw SQL*Plus running with the
> SYS/SYSTEM password visible to anyone and everyone who can run the UNIX
"ps"
> command.  I looked at the scripts he was running, noticed that all he
wanted
> SYS/SYSTEM for was to create PUBLIC SYNONYMs.  I left to catch my plane...
>
> Hope this helps...
>
> -Tim
>
>
>
> on 8/17/03 6:09 PM, Babette Turner-Underwood at [EMAIL PROTECTED] wrote:
>
> > Tim / Peter / Michael
> >
> > Thanks for the information. I was afraid of that.
> > We have a patching mechanism and need to logon as
> > sys to grant access to sys objects for part of
> > the process. (to grant select on sys.dba_free_space
> > and execute on sys.dbms_util).
> >
> > However, the patching mechanism only does a regular
> > connect and not "as sysdba"--- DARN! - Will have to
> > change automation scripts if we upgrade ... and I was
> > hoping this would be easy to slide in :-(
> >
> > - Babette
> >
> > -Original Message-
> > Tim Gorman
> > Sent: Sunday, August 17, 2003 1:09 AM
> > To: Multiple recipients of list ORACLE-L
> >
> >
> > It's a 9i thing, across all platforms.
> >
> >
> >
> > on 8/16/03 9:29 PM, Babette Turner-Underwood at [EMAIL PROTECTED]
wrote:
> >
> >>
> >> I have created my first 9i database on OS/390 v2.10.
> >>
> >> On my Oracle 8i instance, I can connect to the database
> >> using:
> >>
> >> sys/[EMAIL PROTECTED]
> >>
> >> HOWEVER, In Oracle 9i, I cannot do this. I am FORCED
> >>
> >> to connect using:
> >> sys/[EMAIL PROTECTED] as sysdba
> >>
> >> I was wondering if this was a new 9i "feature"
> >> or if it was configurable? Or just a weird thing
> >> because of the mainframe environment.
> >>
> >> Comments please.
> >>
> >> Thanks in Advance
> >> - Babette
>
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: Tim Gorman
>   INET: [EMAIL PROTECTED]
>
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
>
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Arup Nanda
  INET: [EMAIL PROTECTED]

Fat 

Canada and US friends

2003-08-17 Thread Sinardy Xing



Hi Canada and US 
friends,
 
Can your systems 
survive the blackout disaster?
 
Do you need 
recovery? Everything is ok out there?
 
 
Sinardy


Urgent Business Proposal (Nigerian scam, with a twist)

2003-08-17 Thread Mladen Gogala
DEAR SIR/MADAM:

I AM MR. DARL MCBRIDE CURRENTLY SERVING AS THE PRESIDENT AND CHIEF EXECUTIVE 
OFFICER OF THE SCO GROUP, FORMERLY KNOWN AS CALDERA SYSTEMS INTERNATIONAL, IN 
LINDON, UTAH, UNITED STATES OF AMERICA. I KNOW THIS LETTER MIGHT SURPRISE YOUR 
BECAUSE WE HAVE HAD NO PREVIOUS COMMUNICATIONS OR BUSINESS DEALINGS BEFORE NOW.

MY ASSOCIATES HAVE RECENTLY MADE CLAIM TO COMPUTER SOFTWARES WORTH AN 
ESTIMATED $1 BILLION U.S. DOLLARS. I AM WRITING TO YOU IN CONFIDENCE BECAUSE 
WE URGENTLY REQUIRE YOUR ASSISTANCE TO OBTAIN THESE FUNDS.

IN THE EARLY 1970S THE AMERICAN TELEPHONE AND TELEGRAPH CORPORATION DEVELOPED 
AT GREAT EXPENSE THE COMPUTER OPERATING SYSTEM SOFTWARE KNOWN AS UNIX. 
UNFORTUNATELY THE LAWS OF MY COUNTRY PROHIBITED THEM FROM SELLING THESE 
SOFTWARES AND SO THEIR VALUABLE SOURCE CODES REMAINED PRIVATELY HELD. UNDER A 
SPECIAL ARRANGEMENT SOME PROGRAMMERS FROM THE CALIFORNIA UNIVERSITY OF 
BERKELEY DID ADD MORE CODES TO THIS OPERATING SYSTEM, INCREASING ITS VALUE, 
BUT NOT IN ANY WAY TO DILUTE OR DISPARAGE OUR FULL AND RIGHTFUL OWNERSHIP OF 
THESE CODES, DESPITE ANY AGREEMENT BETWEEN AMERICAN TELEPHONE AND TELEGRAPH 
AND THE CALIFORNIA UNIVERSITY OF BERKELEY, WHICH AGREEMENT WE DENY AND DISAVOW.

IN THE YEAR 1984 A CHANGE OF REGIME IN MY COUNTRY ALLOWED THE AMERICAN 
TELEPHONE AND TELEGRAPH CORPORATION TO MAKE PROFITS FROM THESE SOFTWARES. IN 
THE YEAR 1990 OWNERSHIP OF THESE SOFTWARES WAS TRANSFERRED TO THE CORPORATION 
UNIX SYSTEM LABORATORIES. IN THE YEAR 1993 THIS CORPORATION WAS SOLD TO THE 
CORPORATION NOVELL. IN THE YEAR 1994 SOME EMPLOYEES OF NOVELL FORMED THE 
CORPORATION CALDERA SYSTEMS INTERNATIONAL, WHICH BEGAN TO DISTRIBUTE AN 
UPSTART OPERATING SYSTEM KNOWN AS LINUX. IN THE YEAR 1995 NOVELL SOLD THE UNIX 
SOFTWARE CODES TO SCO. IN THE YEAR 2001 OCCURRED A SEPARATION OF SCO, AND THE 
SCO BRAND NAME AND UNIX CODES WERE ACQUIRED BY THE CALDERA SYSTEMS 
INTERNATIONAL, AND IN THE FOLLOWING YEAR THE CALDERA SYSTEMS INTERNATIONAL WAS 
RENAMED SCO GROUP, OF WHICH I CURRENTLY SERVE AS CHIEF EXECUTIVE OFFICER.

MY ASSOCIATES AND I OF THE SCO GROUP ARE THEREFORE THE FULL AND RIGHTFUL 
OWNERS OF THE OPERATING SYSTEM SOFTWARES KNOWN AS UNIX. OUR ENGINEERS HAVE 
DISCOVERED THAT NO FEWER THAN SEVENTY (70) LINES OF OUR VALUABLE AND 
PROPRIETARY SOURCE CODES HAVE APPEARED IN THE UPSTART OPERATING SYSTEM LINUX. 
AS YOU CAN PLAINLY SEE, THIS GIVES US A CLAIM ON THE MILLIONS OF LINES OF 
VALUABLE SOFTWARE CODES WHICH COMPRISE THIS LINUX AND WHICH HAS BEEN SOLD AT 
GREAT PROFIT TO VERY MANY BUSINESS ENTERPRISES. OUR LEGAL EXPERTS HAVE ADVISED 
US THAT OUR CONTRIBUTION TO THESE CODES IS WORTH AN ESTIMATED ONE (1) BILLION 
U.S. DOLLARS.

UNFORTUNATELY WE ARE HAVING DIFFICULTY EXTRACTING OUR FUNDS FROM THESE 
COMPUTER SOFTWARES. TO THIS EFFECT I HAVE BEEN GIVEN THE MANDATE BY MY 
COLLEAGUES TO CONTACT YOU AND ASK FOR YOUR ASSISTANCE. WE ARE PREPARED TO SELL 
YOU A SHARE IN THIS ENTERPRISE, WHICH WILL SOON BE VERY PROFITABLE, THAT WILL 
GRANT YOU THE RIGHTS TO USE THESE VALUABLE SOFTWARES IN YOUR BUSINESS 
ENTERPRISE. UNFORTUNATELY WE ARE NOT ABLE AT THIS TIME TO SET A PRICE ON THESE 
RIGHTS. THEREFORE IT IS OUR RESPECTFUL SUGGESTION, THAT YOU MAY BE IMMEDIATELY 
A PARTY TO THIS ENTERPRISE, BEFORE OTHERS ACCEPT THESE LUCRATIVE TERMS, THAT 
YOU SEND US THE NUMBER OF A BANKING ACCOUNT WHERE WE CAN WITHDRAW FUNDS OF A 
SUITABLE AMOUNT TO GUARANTEE YOUR PARTICIPATION IN THIS ENTERPRISE. AS AN 
ALTERNATIVE YOU MAY SEND US THE NUMBER AND EXPIRATION DATE OF YOUR MAJOR 
CREDIT CARD, OR YOU MAY SEND TO US A SIGNED CHECK FROM YOUR BANKING ACCOUNT 
PAYABLE TO "SCO GROUP" AND WITH THE AMOUNT LEFT BLANK FOR US TO CONVENIENTLY 
SUPPLY.

KINDLY TREAT THIS REQUEST AS VERY IMPORTANT AND STRICTLY CONFIDENTIAL. I 
HONESTLY ASSURE YOU THAT THIS TRANSACTION IS 100% LEGAL AND RISK-FREE.

--
Mladen Gogala
Oracle DBA
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Mladen Gogala
 INET: [EMAIL PROTECTED]
Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


Re: Oracle 9i and connect as sys

2003-08-17 Thread Mladen Gogala
On 2003.08.17 23:39, Tim Gorman wrote:
Babette,

Just this Friday, I was wrapping up an installation engagement and one of
the last things we did was change all the passwords.  Standard practice.
Immediately, one of the development managers comes boiling out of his office
screaming "Who changed the passwords to SYS and SYSTEM?".  I 'fessed up and
asked him why he thought he needed it.  He turned red and snarled that he
just needed it and never you mind, turned on his heel and went in the CIO's
office, then came boiling back with approval.  We turned it over, and within
5 minutes I logged back onto the system and saw SQL*Plus running with the
SYS/SYSTEM password visible to anyone and everyone who can run the UNIX "ps"
command.  I looked at the scripts he was running, noticed that all he wanted
SYS/SYSTEM for was to create PUBLIC SYNONYMs.  I left to catch my plane...
I have a myriad of similar war stories. The best reaction is to collect them
and share with this email list. The company name should, of course, be kept
confidential, but we all know the PHB type of manager. Of course, having a 
manager create public synonyms on your database is, in itslef, a recipy for
disaster. Next time something goes wrong, they'll have to buy you a 1st class
ticket to your plane. I don't imagine that having Tim Gorman himself install
your database comes in cheap

--
Mladen Gogala
Oracle DBA
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Mladen Gogala
 INET: [EMAIL PROTECTED]
Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


Re: Oracle 9i and connect as sys

2003-08-17 Thread Tim Gorman
Babette,

This is how database security unravels.  Pretty soon, the password to SYS is
embedded everywhere, used everywhere, and everyone knows it.  Thus, the DBA
ends up with the pager and responsibility for fixing stuff, but everyone
else can cause that pager to go off with a stupid goof at 3:00am where they
shouldn't have been able to goof up.

It sounds like the patching utility only needs a couple privileges, but
instead all of the goddess-like privileges of SYS are provided.  Pretty
soon, it seems normal for people and programs to connect as SYS on a regular
basis.  And so it goes...

A couple alternatives:

* use 9i "GRANT ANY OBJECT PRIVILEGE" to let another account have
  an incredible amount of authority, which is OK if you don't know
  exactly what permissions will be needed ahead of time...
* grant specific permissions WITH GRANT OPTION to another user, a
  more focused approach than the shotgun "GRANT ANY OBJECT PRIVILEGE"
  approach, provided you know what permissions will be needed ahead
  of time.  This has been around forever...
* encapsulate such actions within a stored procedure owed by SYS,
  which may seem cumbersome but allows all kinds of control.  Not just
  "who can do what" (which is basically what permissions and roles
  provide), but also "during what time", "from where", "from what
  program", "from what location", etc...

Just this Friday, I was wrapping up an installation engagement and one of
the last things we did was change all the passwords.  Standard practice.
Immediately, one of the development managers comes boiling out of his office
screaming "Who changed the passwords to SYS and SYSTEM?".  I 'fessed up and
asked him why he thought he needed it.  He turned red and snarled that he
just needed it and never you mind, turned on his heel and went in the CIO's
office, then came boiling back with approval.  We turned it over, and within
5 minutes I logged back onto the system and saw SQL*Plus running with the
SYS/SYSTEM password visible to anyone and everyone who can run the UNIX "ps"
command.  I looked at the scripts he was running, noticed that all he wanted
SYS/SYSTEM for was to create PUBLIC SYNONYMs.  I left to catch my plane...

Hope this helps...

-Tim



on 8/17/03 6:09 PM, Babette Turner-Underwood at [EMAIL PROTECTED] wrote:

> Tim / Peter / Michael
> 
> Thanks for the information. I was afraid of that.
> We have a patching mechanism and need to logon as
> sys to grant access to sys objects for part of
> the process. (to grant select on sys.dba_free_space
> and execute on sys.dbms_util).
> 
> However, the patching mechanism only does a regular
> connect and not "as sysdba"--- DARN! - Will have to
> change automation scripts if we upgrade ... and I was
> hoping this would be easy to slide in :-(
> 
> - Babette
> 
> -Original Message-
> Tim Gorman
> Sent: Sunday, August 17, 2003 1:09 AM
> To: Multiple recipients of list ORACLE-L
> 
> 
> It's a 9i thing, across all platforms.
> 
> 
> 
> on 8/16/03 9:29 PM, Babette Turner-Underwood at [EMAIL PROTECTED] wrote:
> 
>> 
>> I have created my first 9i database on OS/390 v2.10.
>> 
>> On my Oracle 8i instance, I can connect to the database
>> using: 
>> 
>> sys/[EMAIL PROTECTED]
>> 
>> HOWEVER, In Oracle 9i, I cannot do this. I am FORCED
>> 
>> to connect using:
>> sys/[EMAIL PROTECTED] as sysdba
>> 
>> I was wondering if this was a new 9i "feature"
>> or if it was configurable? Or just a weird thing
>> because of the mainframe environment.
>> 
>> Comments please.
>> 
>> Thanks in Advance
>> - Babette

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Tim Gorman
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


Re: system tablespace at 50 pct_increase in 9i?

2003-08-17 Thread Tim Gorman
Title: Re: system tablespace at 50 pct_increase in 9i?



Better yet, use locally-managed SYSTEM tablespace and dispense with the issue altogether?


on 8/17/03 5:39 PM, Ryan at [EMAIL PROTECTED] wrote:

any idea why oracle has the system tablespace using 50 pct_increase in 9i? I k now it did that in the past, but why not set it to zero? 
 
Ryan








Re: Storage Cache - WriteThrough or WriteBack

2003-08-17 Thread Matthew Zito

Tragically, no.  Basically, though - the cache is just a big board with a
pile of memory chips on them.  Each chip in a region gets one bit of any
word of data that is going to be stored in cache.  Then, an extra set of
parity bits is generated and distributed amongst additional chips.  The
result is that the symm can correct any single-bit error and detect any
two-bit error (could also be correct two bits and detect three, but I'm
pretty sure its one-and-two).  So, the failure of any individual cache chip
results in the loss of one bit of data from a bunch of different words,
which is parity-correctable.  Once a cache board detects any single-bit
failure, it dials home.  An emc tech then dials into the box and determines
whether it was just a stray alpha particle or whether its indicative of an
actual problem.  If a cache board detects multiple single-bit failures in
the same cache region, indicating the possible imminent failure of a cache
chip or region, the cache board is failed out and all contents of that cache
board destaged to disk - EMC is called at the same time.

Much ado is made by competitive vendors about EMC's lack of mirrored cache,
and while there are some concerning aspects of it (someone could
theoretically yank out a cache board, causing data loss), I would be
absolutely comfortable putting my data on a symmetrix cache.  (Full
Disclosure: I used to work for EMC, though I was a customer long before I
was an employee -  I bought the kool-aid before I drank it. :)  ).

Talk to your EMC sales engineer chappie - he might be able to dig up better
docs on the cache protection scheme than my memory.

Thanks,
Matt

NB- I realized I wasn't specific in my previous post.  I was referring
specifically to the Symmetrix when talking about RAIDed cache.  The
Clariion, as I recall, uses mirrored cache (though that was never the core
product I worked with, so I could easily be wrong).  This is not an
indication of EMC admitting RAIDed cache is a bad idea, but an artifact from
the fact that Clariion as a product line was obtained through EMC's
acquisition of Data General, and has stayed a fairly different animal from
the Symmetrix ever since.

- Original Message -
To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]>
Sent: Thursday, August 14, 2003 7:19 PM


> Hi!
>
> I wonder do you have a fast link to drop about RAIDedness of EMC storage
> cache?
>
> Tanel.
>
> - Original Message -
> To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]>
> Sent: Thursday, August 14, 2003 7:29 PM
>
>
> >
> > As long as your cache is protected somehow, whether its RAIDed (a la
EMC)
> or
> > mirrored (a la Hitachi), the vast majority of risk associated with
> > write-back cache is mitigated.  Even with protected cache, I know of a
> > variety of failure scenarios that will result in loss of in-cache data,
> but
> > they definitely fall into the "cascading failure", aka "Act of God",
> > category of outages.
> >
> > Some arrays actually don't even give you the option of write-through
> cache -
> > on the symmetrix, for example, it is actually impossible for a write to
go
> > directly to disk.  You have no choice but to cache writes.  This is
> called,
> > in EMC marketing parlance, a "Fast Write".  When the cache is under
> pressure
> > and the symm decides it needs to make more room in cache for an incoming
> > write, it holds the write at the host port, flushes an in-cache write to
> > disk, then places the incoming write in cache and acknowledges it to the
> > host.  This is a "Delayed Fast Write" - I love marketing talk. :)
> >
> > Thanks,
> > Matt
> >
> > --
> > Matthew Zito
> > GridApp Systems
> > Email: [EMAIL PROTECTED]
> > Cell: 646-220-3551
> > Phone: 212-358-8211 x 359
> > http://www.gridapp.com
> >
> > > -Original Message-
> > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
> > > Behalf Of Jesse, Rich
> > > Sent: Thursday, August 14, 2003 11:49 AM
> > > To: Multiple recipients of list ORACLE-L
> > > Subject: RE: Storage Cache - WriteThrough or WriteBack
> > >
> > >
> > > Like any good DBA/SA should say "It depends."  WriteBack
> > > gives you better write performance since the IO only needs to
> > > hit the cache to report back as being completed, whereas
> > > WriteThru needs to verify the write hit the disk first.
> > > Either should give the same performance on reads, provided
> > > the cache isn't the point of contention because of heavy writes.
> > >
> > > For our SAN (if we ever get approval for it), we'll probably
> > > go with WriteBack.  The safety factor will be that the cache
> > > will be mirrored and battery-backed, like you mentioned.
> > > It's not failsafe (firmware error could conceivably corrupt
> > > the mirror, too), but I feel that we'd be hitting major
> > > diminishing returns by going farther than that.  You'll have
> > > to decide what's best for your situation.
> > >
> > > BTW, after having someone accidentally kick the power cord
> > > o

Re: Oracle 9i and connect as sys

2003-08-17 Thread Arup Nanda
Babette,

You can still achieve the objective using SYSTEM, which does not require a
SYSDBA connection. Or for that matter any user with DBA role. The trick is a
new privilege named "grant any object privilege"; any user with that
privilege can grant anything on objects owned by other schema. If you don't
want to use SYSTEM for this, you could create a special user and grant only
that system privilege directly to it.

Hope this helps.

Arup Nanda


- Original Message - 
To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]>
Sent: Sunday, August 17, 2003 9:09 PM


> Tim / Peter / Michael
>
> Thanks for the information. I was afraid of that.
> We have a patching mechanism and need to logon as
> sys to grant access to sys objects for part of
> the process. (to grant select on sys.dba_free_space
> and execute on sys.dbms_util).
>
> However, the patching mechanism only does a regular
> connect and not "as sysdba"--- DARN! - Will have to
> change automation scripts if we upgrade ... and I was
> hoping this would be easy to slide in :-(
>
> - Babette
>
> -Original Message-
> Tim Gorman
> Sent: Sunday, August 17, 2003 1:09 AM
> To: Multiple recipients of list ORACLE-L
>
>
> It's a 9i thing, across all platforms.
>
>
>
> on 8/16/03 9:29 PM, Babette Turner-Underwood at [EMAIL PROTECTED] wrote:
>
> >
> > I have created my first 9i database on OS/390 v2.10.
> >
> > On my Oracle 8i instance, I can connect to the database
> > using:
> >
> > sys/[EMAIL PROTECTED]
> >
> > HOWEVER, In Oracle 9i, I cannot do this. I am FORCED
> >
> > to connect using:
> > sys/[EMAIL PROTECTED] as sysdba
> >
> > I was wondering if this was a new 9i "feature"
> > or if it was configurable? Or just a weird thing
> > because of the mainframe environment.
> >
> > Comments please.
> >
> > Thanks in Advance
> > - Babette
>
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: Tim Gorman
>   INET: [EMAIL PROTECTED]
>
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: Babette Turner-Underwood
>   INET: [EMAIL PROTECTED]
>
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
>
>
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Arup Nanda
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


Re: Oracle 9i and connect as sys

2003-08-17 Thread Mladen Gogala
Well, you don't need to log on  as sys to do that. There is a
new privilege in 9i (granted to DBA role, of course) called
"GRANT ANY OBJECT PRIVILEGE", which enables the DBA to grant
object privileges on objects belonging to other user. You can
easily log in as "system" and grant select on sys.dba_views or
whatever other table you need to grant. 

On 2003.08.17 21:09, Babette Turner-Underwood wrote:
Tim / Peter / Michael

Thanks for the information. I was afraid of that.
We have a patching mechanism and need to logon as
sys to grant access to sys objects for part of
the process. (to grant select on sys.dba_free_space
and execute on sys.dbms_util).
However, the patching mechanism only does a regular
connect and not "as sysdba"--- DARN! - Will have to
change automation scripts if we upgrade ... and I was
hoping this would be easy to slide in :-(
- Babette

-Original Message-
Tim Gorman
Sent: Sunday, August 17, 2003 1:09 AM
To: Multiple recipients of list ORACLE-L
It's a 9i thing, across all platforms.



on 8/16/03 9:29 PM, Babette Turner-Underwood at [EMAIL PROTECTED] wrote:

>
> I have created my first 9i database on OS/390 v2.10.
>
> On my Oracle 8i instance, I can connect to the database
> using:
>
> sys/[EMAIL PROTECTED]
>
> HOWEVER, In Oracle 9i, I cannot do this. I am FORCED
>
> to connect using:
> sys/[EMAIL PROTECTED] as sysdba
>
> I was wondering if this was a new 9i "feature"
> or if it was configurable? Or just a weird thing
> because of the mainframe environment.
>
> Comments please.
>
> Thanks in Advance
> - Babette
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Tim Gorman
  INET: [EMAIL PROTECTED]
Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Babette Turner-Underwood
  INET: [EMAIL PROTECTED]
Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
--
Mladen Gogala
Oracle DBA
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Mladen Gogala
 INET: [EMAIL PROTECTED]
Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


RE: Oracle 9i and connect as sys

2003-08-17 Thread Babette Turner-Underwood
Tim / Peter / Michael

Thanks for the information. I was afraid of that. 
We have a patching mechanism and need to logon as 
sys to grant access to sys objects for part of
the process. (to grant select on sys.dba_free_space
and execute on sys.dbms_util).

However, the patching mechanism only does a regular
connect and not "as sysdba"--- DARN! - Will have to 
change automation scripts if we upgrade ... and I was 
hoping this would be easy to slide in :-( 

- Babette

-Original Message-
Tim Gorman
Sent: Sunday, August 17, 2003 1:09 AM
To: Multiple recipients of list ORACLE-L


It's a 9i thing, across all platforms.



on 8/16/03 9:29 PM, Babette Turner-Underwood at [EMAIL PROTECTED] wrote:

> 
> I have created my first 9i database on OS/390 v2.10.
> 
> On my Oracle 8i instance, I can connect to the database
> using: 
> 
> sys/[EMAIL PROTECTED]
> 
> HOWEVER, In Oracle 9i, I cannot do this. I am FORCED
> 
> to connect using:
> sys/[EMAIL PROTECTED] as sysdba
> 
> I was wondering if this was a new 9i "feature"
> or if it was configurable? Or just a weird thing
> because of the mainframe environment.
> 
> Comments please.
> 
> Thanks in Advance
> - Babette

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Tim Gorman
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Babette Turner-Underwood
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).



system tablespace at 50 pct_increase in 9i?

2003-08-17 Thread Ryan



any idea why oracle has the system tablespace using 
50 pct_increase in 9i? I k now it did that in the past, but why not set it to 
zero? 
 
Ryan