RE: Starting Database from OEM 9.2 gives ORA-12500 Failed to star

[Igor Neyman]

Yes, I'm sure.

If in the services control panel you change OracleService starup
properties, it does not affect "ORA__AUTOSTART" key in  
"HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE\HOME0" (and does not change the way
the database is started when the service is started).  
What it does, it changes the value of "Start" key in
"HKEY_LOCAL_MACHINE\CurrentControlSet\Services\OracleService" (and
the way service is started when the machine is rebooted -
Automatic/Manual).

So, if you have "Start" key in
"HKEY_LOCAL_MACHINE\CurrentControlSet\Services\OracleService" set
to "2" (which means "automatic") and you have "ORA__AUTOSTART" key
in  
"HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE\HOME0" set to "FALSE", then on
reboot OracleService will start automatically, but the database
will not startup.  So, then (whenever you ready) you can do:

set oracle_sid=instance_name
sqlplus /nolog
connect sys/password as sysdba
startup

which will startup the database.

Igor Neyman, OCP DBA
[EMAIL PROTECTED]



-Original Message-
Jacques Kilchoer
Sent: Friday, January 30, 2004 4:04 PM
To: Multiple recipients of list ORACLE-L
star

> -Original Message-
> Igor Neyman
> 
> OracleServiceSID starts the database automatically, because by default
> the registry key "ORA__AUTOSTART" IN
> "HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE\HOME0" is set to "TRUE".
> If you don't want your OracleServiceSID to start the database
> automatically, change the value to "FALSE".
> This way service will be still running, but you should be able to
> startup the database from OEM.
> 
> Igor Neyman, OCP DBA
> [EMAIL PROTECTED]


Are you sure about that?
This is the way I thought it worked with Oracle 8.1 and 9.2 (I just
tried it again today using Oracle 8.1.7 on Windows 2000)

If in the services control panel the database service has Startup Type
Automatic, then the registry entry you mention will have
ORA_sid_AUTOSTART TRUE, and when the machine is rebooted, the service
will start up AND the instance will be started up.

If you want to startup the instance manually on system reboot, you
should set the Startup Type for the service to Manual (either in the
Services control panel or the registry). Then once the machine is
rebooted, you can

1) go to the Services control panel and start the Service, which will
start the service and the instance

OR

2) At a command prompt type in
set ORACLE_SID=instance_name
oradim -startup -sid %ORACLE_SID%
which will start the service and the instance

OR

3) At a command prompt type in
set ORACLE_SID=instance_name
oradim -startup -sid %ORACLE_SID% -starttype srvc
which will start the service, then
oradim -startup -sid %ORACLE_SID% -starttype inst
which will start the instance

OR

4) At a command prompt type in
set ORACLE_SID=instance_name
oradim -startup -sid %ORACLE_SID% -starttype srvc
which will start the service, then
sqlplus /nolog
connect sys/password as sysdba
startup
which will start the instance

I personally use method 4.
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jacques Kilchoer
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Igor Neyman
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: Starting Database from OEM 9.2 gives ORA-12500 Failed to star

[Dharminder Softhome]

Igor,
What you have mentioned is right i.e. if I set "ORA__AUTOSTART" to
"FALSE" for the database in question and set OraceServiceSID startmode to
Automatic then as windows starts it starts the OracleSID service (or I
should say background services needed for the database to run and I believe
I need to study about this more), but not the database. And then from OEM
now I can startup the database.

My impression was that OEM should be able to do all these tasks itself.

Thanks to all others who have replied as well.



-Original Message-
Igor Neyman
Sent: Friday, January 30, 2004 3:04 PM
To: Multiple recipients of list ORACLE-L
star


Dharminder,

OracleServiceSID starts the database automatically, because by default
the registry key "ORA__AUTOSTART" IN
"HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE\HOME0" is set to "TRUE".
If you don't want your OracleServiceSID to start the database
automatically, change the value to "FALSE".
This way service will be still running, but you should be able to
startup the database from OEM.

Igor Neyman, OCP DBA
[EMAIL PROTECTED]



-Original Message-
Dharminder Softhome
Sent: Friday, January 30, 2004 2:20 PM
To: Multiple recipients of list ORACLE-L
star

Tom,
As stated earlier, here the intention is to startup the database using
OEM
only and without using windows service. As for as I understand if the
OracleServiceSID is properly setup and if startmode for the service is
set
to automatic then it will startup the database automatically once you
boot
the machine.
Thanks.

-Original Message-
Mercadante, Thomas F
Sent: Friday, January 30, 2004 10:44 AM
To: Multiple recipients of list ORACLE-L
star


Dharminder,

Changes the service to AutoStart when the machine reboots.  As Thomas
said,
the NT service has to be running for you to be able to start the
database.
The service will stay running even if you shut the database down.  Think
of
the service as a backgrouond placeholder for the database.  It needs to
be
running for the database to run, but you can still shut the database
down as
normal and keep the background service running.

hope this helps.

Tom Mercadante
Oracle Certified Professional


-Original Message-
Sent: Friday, January 30, 2004 10:34 AM
To: Multiple recipients of list ORACLE-L
start a


Thomas,
That is the real problem. I can start the database using Windows 2000
OracleServiceSID.
But I want to start up the database using OEM only.

Thanks.


-Original Message-
Thomas Day
Sent: Friday, January 30, 2004 9:19 AM
To: Multiple recipients of list ORACLE-L
start a



Go to the SERVICES and start the service.




  "Dharminder
  Softhome"To:  Multiple
recipients
of list ORACLE-L <[EMAIL PROTECTED]>
 Subject: Starting
Database
from OEM 9.2 gives ORA-12500 Failed to start a dedicated
  Sent by: 
  ml-errors


  01/29/2004 06:14
  PM
  Please respond
  to ORACLE-L






Hey all,
Following is the environment.
Windows 2000
Oracle Enterprise 9.2,
OEM 9.2

I have two 9.2 database installed on my system. OEM is configured
properly.
One of the database is in automatic startmode and this DB contains OEM
repository.

I start the machine, open OEM, login to OEM and then try to start the
other
database, but it does not start the DB, instead I get
ORA-12500 Failed to start a dedicated

OEM doc says that with OEM, you can start/shutdown the database using
OEM.
Can someone point to me what I am doing wrong. I am using sys
username/password for the startup of the second database.

Thanks.


--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Dharminder Softhome
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).




--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Thomas Day
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line contain

RE: Starting Database from OEM 9.2 gives ORA-12500 Failed to star

[Jacques Kilchoer]

> -Original Message-
> Igor Neyman
> 
> OracleServiceSID starts the database automatically, because by default
> the registry key "ORA__AUTOSTART" IN
> "HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE\HOME0" is set to "TRUE".
> If you don't want your OracleServiceSID to start the database
> automatically, change the value to "FALSE".
> This way service will be still running, but you should be able to
> startup the database from OEM.
> 
> Igor Neyman, OCP DBA
> [EMAIL PROTECTED]


Are you sure about that?
This is the way I thought it worked with Oracle 8.1 and 9.2 (I just tried it again 
today using Oracle 8.1.7 on Windows 2000)

If in the services control panel the database service has Startup Type Automatic, then 
the registry entry you mention will have ORA_sid_AUTOSTART TRUE, and when the machine 
is rebooted, the service will start up AND the instance will be started up.

If you want to startup the instance manually on system reboot, you should set the 
Startup Type for the service to Manual (either in the Services control panel or the 
registry). Then once the machine is rebooted, you can

1) go to the Services control panel and start the Service, which will start the 
service and the instance

OR

2) At a command prompt type in
set ORACLE_SID=instance_name
oradim -startup -sid %ORACLE_SID%
which will start the service and the instance

OR

3) At a command prompt type in
set ORACLE_SID=instance_name
oradim -startup -sid %ORACLE_SID% -starttype srvc
which will start the service, then
oradim -startup -sid %ORACLE_SID% -starttype inst
which will start the instance

OR

4) At a command prompt type in
set ORACLE_SID=instance_name
oradim -startup -sid %ORACLE_SID% -starttype srvc
which will start the service, then
sqlplus /nolog
connect sys/password as sysdba
startup
which will start the instance

I personally use method 4.
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jacques Kilchoer
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: Starting Database from OEM 9.2 gives ORA-12500 Failed to star

[Igor Neyman]

Dharminder,

OracleServiceSID starts the database automatically, because by default
the registry key "ORA__AUTOSTART" IN
"HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE\HOME0" is set to "TRUE".
If you don't want your OracleServiceSID to start the database
automatically, change the value to "FALSE".
This way service will be still running, but you should be able to
startup the database from OEM.

Igor Neyman, OCP DBA
[EMAIL PROTECTED]



-Original Message-
Dharminder Softhome
Sent: Friday, January 30, 2004 2:20 PM
To: Multiple recipients of list ORACLE-L
star

Tom,
As stated earlier, here the intention is to startup the database using
OEM
only and without using windows service. As for as I understand if the
OracleServiceSID is properly setup and if startmode for the service is
set
to automatic then it will startup the database automatically once you
boot
the machine.
Thanks.

-Original Message-
Mercadante, Thomas F
Sent: Friday, January 30, 2004 10:44 AM
To: Multiple recipients of list ORACLE-L
star


Dharminder,

Changes the service to AutoStart when the machine reboots.  As Thomas
said,
the NT service has to be running for you to be able to start the
database.
The service will stay running even if you shut the database down.  Think
of
the service as a backgrouond placeholder for the database.  It needs to
be
running for the database to run, but you can still shut the database
down as
normal and keep the background service running.

hope this helps.

Tom Mercadante
Oracle Certified Professional


-Original Message-
Sent: Friday, January 30, 2004 10:34 AM
To: Multiple recipients of list ORACLE-L
start a


Thomas,
That is the real problem. I can start the database using Windows 2000
OracleServiceSID.
But I want to start up the database using OEM only.

Thanks.


-Original Message-
Thomas Day
Sent: Friday, January 30, 2004 9:19 AM
To: Multiple recipients of list ORACLE-L
start a



Go to the SERVICES and start the service.




  "Dharminder
  Softhome"To:  Multiple
recipients
of list ORACLE-L <[EMAIL PROTECTED]>
     Subject: Starting
Database
from OEM 9.2 gives ORA-12500 Failed to start a dedicated
  Sent by: 
  ml-errors


  01/29/2004 06:14
  PM
  Please respond
  to ORACLE-L






Hey all,
Following is the environment.
Windows 2000
Oracle Enterprise 9.2,
OEM 9.2

I have two 9.2 database installed on my system. OEM is configured
properly.
One of the database is in automatic startmode and this DB contains OEM
repository.

I start the machine, open OEM, login to OEM and then try to start the
other
database, but it does not start the DB, instead I get
ORA-12500 Failed to start a dedicated

OEM doc says that with OEM, you can start/shutdown the database using
OEM.
Can someone point to me what I am doing wrong. I am using sys
username/password for the startup of the second database.

Thanks.


--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Dharminder Softhome
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).




--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Thomas Day
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Dharminder Softhome
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: U

RE: Starting Database from OEM 9.2 gives ORA-12500 Failed to star

[Mercadante, Thomas F]

Well, you can't.  Windows is different from other systems in that you have
these "services" that have to be running in the background.  Once the
services are running, you can use OEM to shutdown and startup the database.

But the service has to be running first.

Sorry.

Have you looked at OEM Jobs?  Maybe you can create an OEM job to start the
service.  The DOS command is:

NET START OracleServiceSID

and

NET STOP OracleServiceSID

Good Luck!

Tom Mercadante
Oracle Certified Professional


-Original Message-
Sent: Friday, January 30, 2004 2:20 PM
To: Multiple recipients of list ORACLE-L
star


Tom,
As stated earlier, here the intention is to startup the database using OEM
only and without using windows service. As for as I understand if the
OracleServiceSID is properly setup and if startmode for the service is set
to automatic then it will startup the database automatically once you boot
the machine.
Thanks.

-Original Message-
Mercadante, Thomas F
Sent: Friday, January 30, 2004 10:44 AM
To: Multiple recipients of list ORACLE-L
star


Dharminder,

Changes the service to AutoStart when the machine reboots.  As Thomas said,
the NT service has to be running for you to be able to start the database.
The service will stay running even if you shut the database down.  Think of
the service as a backgrouond placeholder for the database.  It needs to be
running for the database to run, but you can still shut the database down as
normal and keep the background service running.

hope this helps.

Tom Mercadante
Oracle Certified Professional


-Original Message-
Sent: Friday, January 30, 2004 10:34 AM
To: Multiple recipients of list ORACLE-L
start a


Thomas,
That is the real problem. I can start the database using Windows 2000
OracleServiceSID.
But I want to start up the database using OEM only.

Thanks.


-Original Message-
Thomas Day
Sent: Friday, January 30, 2004 9:19 AM
To: Multiple recipients of list ORACLE-L
start a



Go to the SERVICES and start the service.




  "Dharminder
  Softhome"To:  Multiple recipients
of list ORACLE-L <[EMAIL PROTECTED]>
 Subject: Starting Database
from OEM 9.2 gives ORA-12500 Failed to start a dedicated
  Sent by: 
  ml-errors


  01/29/2004 06:14
  PM
  Please respond
  to ORACLE-L






Hey all,
Following is the environment.
Windows 2000
Oracle Enterprise 9.2,
OEM 9.2

I have two 9.2 database installed on my system. OEM is configured properly.
One of the database is in automatic startmode and this DB contains OEM
repository.

I start the machine, open OEM, login to OEM and then try to start the other
database, but it does not start the DB, instead I get
ORA-12500 Failed to start a dedicated....

OEM doc says that with OEM, you can start/shutdown the database using OEM.
Can someone point to me what I am doing wrong. I am using sys
username/password for the startup of the second database.

Thanks.


--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Dharminder Softhome
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).




--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Thomas Day
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Dharminder Softhome
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, incl

RE: Starting Database from OEM 9.2 gives ORA-12500 Failed to star

[Thomas Day]

That's true.



   

  "Dharminder  

  Softhome"To:  Multiple recipients of list 
ORACLE-L <[EMAIL PROTECTED]>
 Subject: RE: Starting Database from OEM 
9.2 gives ORA-12500 Failed to star  
  Sent by: 

  ml-errors

   

   

  01/30/2004 02:19 

  PM   

  Please respond   

  to ORACLE-L  

   

   





Tom,
As stated earlier, here the intention is to startup the database using OEM
only and without using windows service. As for as I understand if the
OracleServiceSID is properly setup and if startmode for the service is set
to automatic then it will startup the database automatically once you boot
the machine.
Thanks.

-Original Message-
Mercadante, Thomas F
Sent: Friday, January 30, 2004 10:44 AM
To: Multiple recipients of list ORACLE-L
star


Dharminder,

Changes the service to AutoStart when the machine reboots.  As Thomas said,
the NT service has to be running for you to be able to start the database.
The service will stay running even if you shut the database down.  Think of
the service as a backgrouond placeholder for the database.  It needs to be
running for the database to run, but you can still shut the database down
as
normal and keep the background service running.

hope this helps.

Tom Mercadante
Oracle Certified Professional


-Original Message-
Sent: Friday, January 30, 2004 10:34 AM
To: Multiple recipients of list ORACLE-L
start a


Thomas,
That is the real problem. I can start the database using Windows 2000
OracleServiceSID.
But I want to start up the database using OEM only.

Thanks.


-Original Message-
Thomas Day
Sent: Friday, January 30, 2004 9:19 AM
To: Multiple recipients of list ORACLE-L
start a



Go to the SERVICES and start the service.




  "Dharminder
  Softhome"To:  Multiple recipients
of list ORACLE-L <[EMAIL PROTECTED]>
     Subject: Starting Database
from OEM 9.2 gives ORA-12500 Failed to start a dedicated
  Sent by: 
  ml-errors


  01/29/2004 06:14
  PM
  Please respond
  to ORACLE-L






Hey all,
Following is the environment.
Windows 2000
Oracle Enterprise 9.2,
OEM 9.2

I have two 9.2 database installed on my system. OEM is configured properly.
One of the database is in automatic startmode and this DB contains OEM
repository.

I start the machine, open OEM, login to OEM and then try to start the other
database, but it does not start the DB, instead I get
ORA-12500 Failed to start a dedicated

OEM doc says that with OEM, you can start/shutdown the database using OEM.
Can someone point to me what I am doing wrong. I am using sys
username/password for the startup of the second database.

Thanks.


--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Dharminder Softhome
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line con

RE: Starting Database from OEM 9.2 gives ORA-12500 Failed to star

[Dharminder Softhome]

Tom,
As stated earlier, here the intention is to startup the database using OEM
only and without using windows service. As for as I understand if the
OracleServiceSID is properly setup and if startmode for the service is set
to automatic then it will startup the database automatically once you boot
the machine.
Thanks.

-Original Message-
Mercadante, Thomas F
Sent: Friday, January 30, 2004 10:44 AM
To: Multiple recipients of list ORACLE-L
star


Dharminder,

Changes the service to AutoStart when the machine reboots.  As Thomas said,
the NT service has to be running for you to be able to start the database.
The service will stay running even if you shut the database down.  Think of
the service as a backgrouond placeholder for the database.  It needs to be
running for the database to run, but you can still shut the database down as
normal and keep the background service running.

hope this helps.

Tom Mercadante
Oracle Certified Professional


-Original Message-
Sent: Friday, January 30, 2004 10:34 AM
To: Multiple recipients of list ORACLE-L
start a


Thomas,
That is the real problem. I can start the database using Windows 2000
OracleServiceSID.
But I want to start up the database using OEM only.

Thanks.


-Original Message-
Thomas Day
Sent: Friday, January 30, 2004 9:19 AM
To: Multiple recipients of list ORACLE-L
start a



Go to the SERVICES and start the service.




  "Dharminder
  Softhome"To:  Multiple recipients
of list ORACLE-L <[EMAIL PROTECTED]>
 Subject: Starting Database
from OEM 9.2 gives ORA-12500 Failed to start a dedicated
  Sent by: 
  ml-errors


  01/29/2004 06:14
  PM
  Please respond
  to ORACLE-L






Hey all,
Following is the environment.
Windows 2000
Oracle Enterprise 9.2,
OEM 9.2

I have two 9.2 database installed on my system. OEM is configured properly.
One of the database is in automatic startmode and this DB contains OEM
repository.

I start the machine, open OEM, login to OEM and then try to start the other
database, but it does not start the DB, instead I get
ORA-12500 Failed to start a dedicated

OEM doc says that with OEM, you can start/shutdown the database using OEM.
Can someone point to me what I am doing wrong. I am using sys
username/password for the startup of the second database.

Thanks.


--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Dharminder Softhome
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).




--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Thomas Day
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Dharminder Softhome
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Mercadante, Thomas F
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of '

RE: Starting Database from OEM 9.2 gives ORA-12500 Failed to start a dedicated ....

[Dharminder Softhome]

Mauricio
I do 
not think it is a memory issue because I can startup the database using Windows 
2000 OracleServiceSID service and it does not fail. 
Thanks.

  -Original Message-From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]On Behalf Of Mauricio 
  VilezSent: Friday, January 30, 2004 12:39 PMTo: Multiple 
  recipients of list ORACLE-LSubject: Re: Starting Database from OEM 
  9.2 gives ORA-12500 Failed to start a dedicated 
  There is not enough memory to start a dedicated connection. 
  so change the server mode from dedicated to shared, (you can do it change 
  some parameters in init_sid.ora file see oracle documentation).
   
  If you are going to change the server mode to shared and you have two 
  database on the same machine, then you have to assign one 
  listener port for each database.
   
  hope this helps
   
  Mauricio Vilez
  Oracle DBA
   
   
  Dharminder Softhome <[EMAIL PROTECTED]> 
  wrote: 
  Hey 
all,Following is the environment.Windows 2000Oracle Enterprise 
    9.2,OEM 9.2I have two 9.2 database installed on my system. OEM 
is configured properly.One of the database is in automatic startmode and 
this DB contains OEMrepository.I start the machine, open OEM, 
login to OEM and then try to start the otherdatabase, but it does not 
start the DB, instead I getORA-12500 Failed to start a 
dedicated....OEM doc says that with OEM, you can start/shutdown the 
database using OEM.Can someone point to me what I am doing wrong. I am 
using sysusername/password for the startup of the second 
database.Thanks.-- Please see the official ORACLE-L 
FAQ: http://www.orafaq.net-- Author: Dharminder SofthomeINET: 
[EMAIL PROTECTED]Fat City Network Services -- 858-538-5051 
http://www.fatcity.comSan Diego, California -- Mailing list and web 
hosting 
services-To 
REMOVE yourself from this mailing list, send an E-Mail messageto: 
[EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and inthe 
message BODY, include a line containing: UNSUB ORACLE-L(or the name of 
mailing list you want to be removed from). You mayalso send the HELP 
command for other information (like subscribing).
  
  
  Do you Yahoo!?Yahoo! SiteBuilder - Free web site building tool. Try 
  it!

Re: Starting Database from OEM 9.2 gives ORA-12500 Failed to start a dedicated ....

[Vélez]

There is not enough memory to start a dedicated connection. so change the server mode from dedicated to shared, (you can do it change some parameters in init_sid.ora file see oracle documentation).
 
If you are going to change the server mode to shared and you have two database on the same machine, then you have to assign one listener port for each database.
 
hope this helps
 
Mauricio Vélez
Oracle DBA
 
 
Dharminder Softhome <[EMAIL PROTECTED]> wrote:
Hey all,Following is the environment.Windows 2000Oracle Enterprise 9.2,OEM 9.2I have two 9.2 database installed on my system. OEM is configured properly.One of the database is in automatic startmode and this DB contains OEMrepository.I start the machine, open OEM, login to OEM and then try to start the otherdatabase, but it does not start the DB, instead I getORA-12500 Failed to start a dedicated....OEM doc says that with OEM, you can start/shutdown the database using OEM.Can someone point to me what I am doing wrong. I am using sysusername/password for the startup of the second database.Thanks.-- Please see the official ORACLE-L FAQ: http://www.orafaq.net-- Author: Dharminder SofthomeINET: [EMAIL PROTECTED]Fat City Network Services -- 858-538-5051
 http://www.fatcity.comSan Diego, California -- Mailing list and web hosting services-To REMOVEE yourself from this mailing list, send an E-Mail messageto: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and inthe message BODY, include a line containing: UNSUB ORACLE-L(or the name of mailing list you want to be removed from). You mayalso send the HELP command for other information (like subscribing).
Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it!

RE: Starting Database from OEM 9.2 gives ORA-12500 Failed to star

[Jared . Still]

The Windows service implements Oracle's VOS ( virtual OS )

This is not noticed on *versions, as there is no separate step.

See James Morle's book 'Scaling Oracle 8i'.

Jared







"Mercadante, Thomas F" <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]
 01/30/2004 07:44 AM
 Please respond to ORACLE-L

        
        To:        Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]>
        cc:        
        Subject:        RE: Starting Database from OEM 9.2 gives ORA-12500 Failed to star


Dharminder,

Changes the service to AutoStart when the machine reboots.  As Thomas said,
the NT service has to be running for you to be able to start the database.
The service will stay running even if you shut the database down.  Think of
the service as a backgrouond placeholder for the database.  It needs to be
running for the database to run, but you can still shut the database down as
normal and keep the background service running.

hope this helps.

Tom Mercadante
Oracle Certified Professional


-Original Message-
Sent: Friday, January 30, 2004 10:34 AM
To: Multiple recipients of list ORACLE-L
start a


Thomas,
That is the real problem. I can start the database using Windows 2000
OracleServiceSID.
But I want to start up the database using OEM only.

Thanks.


-Original Message-
Thomas Day
Sent: Friday, January 30, 2004 9:19 AM
To: Multiple recipients of list ORACLE-L
start a



Go to the SERVICES and start the service.




                      "Dharminder
                      Softhome"                To:      Multiple recipients
of list ORACLE-L <[EMAIL PROTECTED]>
                      
                      @softhome.net>           Subject: Starting Database
from OEM 9.2 gives ORA-12500 Failed to start a dedicated
                      Sent by:                 
                      ml-errors


                      01/29/2004 06:14
                      PM
                      Please respond
                      to ORACLE-L






Hey all,
Following is the environment.
Windows 2000
Oracle Enterprise 9.2,
OEM 9.2

I have two 9.2 database installed on my system. OEM is configured properly.
One of the database is in automatic startmode and this DB contains OEM
repository.

I start the machine, open OEM, login to OEM and then try to start the other
database, but it does not start the DB, instead I get
ORA-12500 Failed to start a dedicated

OEM doc says that with OEM, you can start/shutdown the database using OEM.
Can someone point to me what I am doing wrong. I am using sys
username/password for the startup of the second database.

Thanks.


--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Dharminder Softhome
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).




--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Thomas Day
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Dharminder Softhome
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Mercadante, Thomas F
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
-

RE: Starting Database from OEM 9.2 gives ORA-12500 Failed to star

[Mercadante, Thomas F]

Dharminder,

Changes the service to AutoStart when the machine reboots.  As Thomas said,
the NT service has to be running for you to be able to start the database.
The service will stay running even if you shut the database down.  Think of
the service as a backgrouond placeholder for the database.  It needs to be
running for the database to run, but you can still shut the database down as
normal and keep the background service running.

hope this helps.

Tom Mercadante
Oracle Certified Professional


-Original Message-
Sent: Friday, January 30, 2004 10:34 AM
To: Multiple recipients of list ORACLE-L
start a


Thomas,
That is the real problem. I can start the database using Windows 2000
OracleServiceSID.
But I want to start up the database using OEM only.

Thanks.


-Original Message-
Thomas Day
Sent: Friday, January 30, 2004 9:19 AM
To: Multiple recipients of list ORACLE-L
start a



Go to the SERVICES and start the service.




  "Dharminder
  Softhome"To:  Multiple recipients
of list ORACLE-L <[EMAIL PROTECTED]>
 Subject: Starting Database
from OEM 9.2 gives ORA-12500 Failed to start a dedicated
  Sent by: 
  ml-errors


  01/29/2004 06:14
  PM
  Please respond
  to ORACLE-L






Hey all,
Following is the environment.
Windows 2000
Oracle Enterprise 9.2,
OEM 9.2

I have two 9.2 database installed on my system. OEM is configured properly.
One of the database is in automatic startmode and this DB contains OEM
repository.

I start the machine, open OEM, login to OEM and then try to start the other
database, but it does not start the DB, instead I get
ORA-12500 Failed to start a dedicated

OEM doc says that with OEM, you can start/shutdown the database using OEM.
Can someone point to me what I am doing wrong. I am using sys
username/password for the startup of the second database.

Thanks.


--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Dharminder Softhome
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).




--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Thomas Day
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Dharminder Softhome
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Mercadante, Thomas F
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: Starting Database from OEM 9.2 gives ORA-12500 Failed to start a

[Dharminder Softhome]

Thomas,
That is the real problem. I can start the database using Windows 2000
OracleServiceSID.
But I want to start up the database using OEM only.

Thanks.


-Original Message-
Thomas Day
Sent: Friday, January 30, 2004 9:19 AM
To: Multiple recipients of list ORACLE-L
start a



Go to the SERVICES and start the service.




  "Dharminder
  Softhome"To:  Multiple recipients
of list ORACLE-L <[EMAIL PROTECTED]>
 Subject: Starting Database
from OEM 9.2 gives ORA-12500 Failed to start a dedicated
  Sent by: 
  ml-errors


  01/29/2004 06:14
  PM
  Please respond
  to ORACLE-L






Hey all,
Following is the environment.
Windows 2000
Oracle Enterprise 9.2,
OEM 9.2

I have two 9.2 database installed on my system. OEM is configured properly.
One of the database is in automatic startmode and this DB contains OEM
repository.

I start the machine, open OEM, login to OEM and then try to start the other
database, but it does not start the DB, instead I get
ORA-12500 Failed to start a dedicated

OEM doc says that with OEM, you can start/shutdown the database using OEM.
Can someone point to me what I am doing wrong. I am using sys
username/password for the startup of the second database.

Thanks.


--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Dharminder Softhome
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).




--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Thomas Day
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Dharminder Softhome
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: Starting Database from OEM 9.2 gives ORA-12500 Failed to start a

[Thomas Day]

Go to the SERVICES and start the service.



   

  "Dharminder  

  Softhome"To:  Multiple recipients of list 
ORACLE-L <[EMAIL PROTECTED]>
 Subject: Starting Database from OEM 9.2 
gives ORA-12500 Failed to start a dedicated 
  Sent by: 

  ml-errors

   

   

  01/29/2004 06:14 

  PM   

  Please respond   

  to ORACLE-L  

   

   





Hey all,
Following is the environment.
Windows 2000
Oracle Enterprise 9.2,
OEM 9.2

I have two 9.2 database installed on my system. OEM is configured properly.
One of the database is in automatic startmode and this DB contains OEM
repository.

I start the machine, open OEM, login to OEM and then try to start the other
database, but it does not start the DB, instead I get
ORA-12500 Failed to start a dedicated

OEM doc says that with OEM, you can start/shutdown the database using OEM.
Can someone point to me what I am doing wrong. I am using sys
username/password for the startup of the second database.

Thanks.


--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Dharminder Softhome
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).




-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Thomas Day
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Starting Database from OEM 9.2 gives ORA-12500 Failed to start a dedicated ....

[Dharminder Softhome]

Hey all,
Following is the environment.
Windows 2000
Oracle Enterprise 9.2,
OEM 9.2

I have two 9.2 database installed on my system. OEM is configured properly.
One of the database is in automatic startmode and this DB contains OEM
repository.

I start the machine, open OEM, login to OEM and then try to start the other
database, but it does not start the DB, instead I get
ORA-12500 Failed to start a dedicated

OEM doc says that with OEM, you can start/shutdown the database using OEM.
Can someone point to me what I am doing wrong. I am using sys
username/password for the startup of the second database.

Thanks.


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Dharminder Softhome
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Looking for OEM 9i book(s)

[Boivin, Patrice J]

Title: Message



Are there any good 3rd party OEM 9i books 
out there?
 
I know OEM 10G is the new version, but I am 
looking for a 9i one right now.
 
Specifically on PM and on CP.
 
Thanks.
 
Patrice.

RE: 9i OEM/tools to monitor 8i instances

[Nikhil Khimani]

Repost ...


-Original Message-
Sent: Wednesday, January 14, 2004 9:14 AM
To: '[EMAIL PROTECTED]'


L&G,

Has there been any issue monitoring and administering 8i databases using 9i
tools? I am seeing some strange behavior when using 9i OEM tools to monitor
8.1.7.0 database and unfortunately I can not reproduce on a consistent
basis.
TIA,

Nikhil
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Nikhil Khimani
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

9i OEM/tools to monitor 8i instances

[Nikhil Khimani]

L&G,

Has there been any issue monitoring and administering 8i databases using 9i
tools? I am seeing some strange behavior when using 9i OEM tools to monitor
8.1.7.0 database and unfortunately I can not reproduce on a consistent
basis.
TIA,

Nikhil
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Nikhil Khimani
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

password hash and db link is a risk (was OEM permissions)

[Pete Finnigan]

Hi

There are risks with knowing the password hash for any user not just
system. Unfortunately reading it from dba_users is not the only way to
get it. There are a number of other options as well that i won't go into
here.

As Arup pointed out the password hash is calculated from the username
and password and hence it is possible to get the same hash from
different username / password combos. I have written about this fact
previously and also this is how most of the PL/SQL alter user password
crackers work, see http://home.earthlink.net/~adamshalon/oracle_password
_cracker - there is also a more sofisticated one written by some Russian
guys, i cannot remember the link off hand at the moment - but if anyone
wants it i can find it. PL/SQL crackers using alter user commands are
not much use for cracking passwords though as the performance is dire.
BUT if done offline and with a reasonable size dictionary even this
method can be used to find weak passwords. Brute forcing would not be an
option with these tools though unless the password was weak or short.

It is not possible to reverse the clear text password from the hash as
the algorithm is not reversible. Oracle uses a password algorithm and it
has not been made public as they wish it to remain secret. Some of the
commercial oracle security audit tools include a real password cracker
that do perform as they are probably written in C such as AppDetective
from www.appsecinc.com and use this algorithm, so these could be used
for dictionary attacks on known hashes or brute force attacks. 

The hack shown by Yong and Jared doesn't work as Jared pointed out the
password is cached and you need to log back in and for that you need the
password. BUT I have been able to exploit this issue of a current user
database link, a known hash and not known password using a different
approach. In the interests of not revealing how to hack Oracle on a
public forum i won't go into details. I am also working on a second
method to exploit a known hash and a current user link. I will report
what i have found to Oracle secalert after I have written it up.

The bottom line is protect the password hashes as although it is not
easy to exploit a known hash it is easier to crack a known hash given
time.

kind regards

Pete
-- 
Pete Finnigan
email:[EMAIL PROTECTED]
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Pete Finnigan
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: Risk of knowing password hash value (Was: OEM permissions)

[Bellow, Bambi]

Looks like they're using VMS's algorithm.  *That's* a shocker!

-Original Message-
Sent: Tuesday, December 23, 2003 3:45 PM
To: Multiple recipients of list ORACLE-L


Actually, the concatenated string of userid and password is hashed. So if
that is same, you got yourself the same hashed password.

Consider this:

SQL> create user ABC identified by DEF;

User created.

SQL> create user ABCD identified by EF;

User created.

SQL> select password from dba_users where username in ('ABC','ABCD');

PASSWORD
--
016811C1486D026B
016811C1486D026B

They have the same password hash, even though the password is different.
It's a trick we use in auditing for security holes in the database.

HTH.

Arup



- Original Message - 
To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]>
Sent: Tuesday, December 23, 2003 3:59 PM


> No.  Two different users with the same password would have different hash
> values.
>
> So you would have to loop through a "dictionary list" for each user within
> your local database.  Once you got a match, then you could logon to the
> target database with that user/password combo.
>
> -
> Alan Davey
> Senior Analyst/Project Leader
> Oracle 9i OCA; 3/4 OCP
> w) 973.267.5990 x458
> w) 212.295.3458
>
>
>
> -Original Message-
> Sent: Tuesday, December 23, 2003 3:29 PM
> To: Multiple recipients of list ORACLE-L
>
>
> Not really... you could easily compile a list of passwords and their
> associated hashes.  Once this is done, it's just a simple matter of
matching
> the hashes.
>
> -Original Message-
> Jared Still
> Sent: Tuesday, December 23, 2003 1:24 PM
> To: Multiple recipients of list ORACLE-L
>
>
> As long Oracle can manage to keep its modified DES algorithm
> secret, this should make it somewhat difficult to crack passwords
> in the manner that can be done with unix passwords.
>
> It could still be done, but the time required would make
> it just too time consuming IMO.
>
> Jared
>
>
> On Tue, 2003-12-23 at 09:44, [EMAIL PROTECTED] wrote:
> >
> > When I brought the issue up, I didn't know if one could in fact
> maliciously
> > use that info.  And, as I originally stated, it was something I had not
> > tried.  But paranoia (healthy, I think) dictates there's gotta be a way.
> > When one looks at the Unix password world which brought about the
> necessity
> > for a shadow file, and the evils of the old NIS where ypcat was
available,
> > you have to wonder why allowing access to the encrypted passwords for
Unix
> > is considered a dumb thing to do, but somehow in Oracle it would be an
OK
> > thing to do.  I'm inclined to say that Oracle restricted access to the
> views
> > and underlying tables for reasons more substantial than just to
frustrate
> > non-privileged users.  And, if I'm not mistaken, the specs on the views
> are
> > "subject to change without notice".  I have enough to do without trying
to
> > stay on top of every stinkin' view in Oracle in every stinkin' release
and
> > how one might use that view in naughty ways.
> >
> > For what it's worth, after haggling and fussing, we were able to
> compromise
> > on this.  We haven't tried to tear each of these apart to see how it
might
> > be abused.  If any of you have some warnings to provide, please do!
> >
> > -- Must run this as SYS
> >
> > create role DBARTISAN_USER_ROLE;
> >
> > grant SELECT on SYS.V_$PROCESS to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SESSION to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LATCH to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LATCHNAME to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LATCHHOLDER to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LOCK to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SESSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$MYSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SYSSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$STATNAME to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$ACCESS to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$FILESTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$ROLLNAME to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$ROLLSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SGA to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$PARAMETER to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$ROWCACHE to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LIBRARYCACHE to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$INSTANCE to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$DISPATCHER to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SQLAREA to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SQLTEXT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SQLTEXT_WITH_NEWLINES to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$OPEN_CURSOR to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$PQ_SYSSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SGASTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on 

RE: Risk of knowing password hash value (Was: OEM permissions)

[Davey, Alan]

Very Nice.  I didn't know how the 2 values were used within the hashing
algorithm.

I would have thought it was a little more complex.

-
Alan Davey
Senior Analyst/Project Leader
Oracle 9i OCA; 3/4 OCP
w) 973.267.5990 x458
w) 212.295.3458



-Original Message-
Sent: Tuesday, December 23, 2003 4:45 PM
To: Multiple recipients of list ORACLE-L


Actually, the concatenated string of userid and password is hashed. So if
that is same, you got yourself the same hashed password.

Consider this:

SQL> create user ABC identified by DEF;

User created.

SQL> create user ABCD identified by EF;

User created.

SQL> select password from dba_users where username in ('ABC','ABCD');

PASSWORD
--
016811C1486D026B
016811C1486D026B

They have the same password hash, even though the password is different.
It's a trick we use in auditing for security holes in the database.

HTH.

Arup



- Original Message - 
To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]>
Sent: Tuesday, December 23, 2003 3:59 PM


> No.  Two different users with the same password would have different hash
> values.
>
> So you would have to loop through a "dictionary list" for each user within
> your local database.  Once you got a match, then you could logon to the
> target database with that user/password combo.
>
> -
> Alan Davey
> Senior Analyst/Project Leader
> Oracle 9i OCA; 3/4 OCP
> w) 973.267.5990 x458
> w) 212.295.3458
>
>
>
> -Original Message-
> Sent: Tuesday, December 23, 2003 3:29 PM
> To: Multiple recipients of list ORACLE-L
>
>
> Not really... you could easily compile a list of passwords and their
> associated hashes.  Once this is done, it's just a simple matter of
matching
> the hashes.
>
> -Original Message-
> Jared Still
> Sent: Tuesday, December 23, 2003 1:24 PM
> To: Multiple recipients of list ORACLE-L
>
>
> As long Oracle can manage to keep its modified DES algorithm
> secret, this should make it somewhat difficult to crack passwords
> in the manner that can be done with unix passwords.
>
> It could still be done, but the time required would make
> it just too time consuming IMO.
>
> Jared
>
>
> On Tue, 2003-12-23 at 09:44, [EMAIL PROTECTED] wrote:
> >
> > When I brought the issue up, I didn't know if one could in fact
> maliciously
> > use that info.  And, as I originally stated, it was something I had not
> > tried.  But paranoia (healthy, I think) dictates there's gotta be a way.
> > When one looks at the Unix password world which brought about the
> necessity
> > for a shadow file, and the evils of the old NIS where ypcat was
available,
> > you have to wonder why allowing access to the encrypted passwords for
Unix
> > is considered a dumb thing to do, but somehow in Oracle it would be an
OK
> > thing to do.  I'm inclined to say that Oracle restricted access to the
> views
> > and underlying tables for reasons more substantial than just to
frustrate
> > non-privileged users.  And, if I'm not mistaken, the specs on the views
> are
> > "subject to change without notice".  I have enough to do without trying
to
> > stay on top of every stinkin' view in Oracle in every stinkin' release
and
> > how one might use that view in naughty ways.
> >
> > For what it's worth, after haggling and fussing, we were able to
> compromise
> > on this.  We haven't tried to tear each of these apart to see how it
might
> > be abused.  If any of you have some warnings to provide, please do!
> >
> > -- Must run this as SYS
> >
> > create role DBARTISAN_USER_ROLE;
> >
> > grant SELECT on SYS.V_$PROCESS to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SESSION to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LATCH to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LATCHNAME to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LATCHHOLDER to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LOCK to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SESSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$MYSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SYSSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$STATNAME to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$ACCESS to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$FILESTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$ROLLNAME to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$ROLLSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SGA to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$PARAMETER to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$ROWCACHE to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LIBRARYCACHE to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$INSTANCE to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$DISPATCHER to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SQLAREA to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SQLTEXT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SQLTEXT_WITH_NEWLINES to DBARTIS

RE: Risk of knowing password hash value (Was: OEM permissions)

[Jared Still]

You could conceivably do this, much like lopht or crack.

It would take a rather large password database, and a 
cracker with some intelligence.  This is the same reason
that unix now uses shadow passwords.

Jared

On Tue, 2003-12-23 at 12:29, Norris, Gregory T [ITS] wrote:
> Not really... you could easily compile a list of passwords and their associated 
> hashes.  Once this is done, it's just a simple matter of matching the hashes.
> 
> -Original Message-
> Jared Still
> Sent: Tuesday, December 23, 2003 1:24 PM
> To: Multiple recipients of list ORACLE-L
> 
> 
> As long Oracle can manage to keep its modified DES algorithm
> secret, this should make it somewhat difficult to crack passwords
> in the manner that can be done with unix passwords.
> 
> It could still be done, but the time required would make
> it just too time consuming IMO.  
> 
> Jared
> 
> 
> On Tue, 2003-12-23 at 09:44, [EMAIL PROTECTED] wrote:
> > 
> > When I brought the issue up, I didn't know if one could in fact maliciously
> > use that info.  And, as I originally stated, it was something I had not
> > tried.  But paranoia (healthy, I think) dictates there's gotta be a way.
> > When one looks at the Unix password world which brought about the necessity
> > for a shadow file, and the evils of the old NIS where ypcat was available,
> > you have to wonder why allowing access to the encrypted passwords for Unix
> > is considered a dumb thing to do, but somehow in Oracle it would be an OK
> > thing to do.  I'm inclined to say that Oracle restricted access to the views
> > and underlying tables for reasons more substantial than just to frustrate
> > non-privileged users.  And, if I'm not mistaken, the specs on the views are
> > "subject to change without notice".  I have enough to do without trying to
> > stay on top of every stinkin' view in Oracle in every stinkin' release and
> > how one might use that view in naughty ways.
> > 
> > For what it's worth, after haggling and fussing, we were able to compromise
> > on this.  We haven't tried to tear each of these apart to see how it might
> > be abused.  If any of you have some warnings to provide, please do!
> > 
> > -- Must run this as SYS
> > 
> > create role DBARTISAN_USER_ROLE;
> > 
> > grant SELECT on SYS.V_$PROCESS to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SESSION to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LATCH to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LATCHNAME to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LATCHHOLDER to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LOCK to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SESSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$MYSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SYSSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$STATNAME to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$ACCESS to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$FILESTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$ROLLNAME to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$ROLLSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SGA to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$PARAMETER to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$ROWCACHE to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LIBRARYCACHE to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$INSTANCE to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$DISPATCHER to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SQLAREA to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SQLTEXT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SQLTEXT_WITH_NEWLINES to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$OPEN_CURSOR to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$PQ_SYSSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SGASTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SHARED_SERVER to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$DATAFILE to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$TABLESPACE to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SESS_IO to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.ALL_OBJECTS to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.DBA_ROLLBACK_SEGS to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.PRODUCT_COMPONENT_VERSION to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.DBA_EXTENTS to DBARTISAN_USER_ROLE;
> > 
> > grant DBARTISAN_USER_ROLE to USER_WE_DONT_LIKE;
> > 
> > -- 
> > Please see the official ORACLE-L FAQ: http://www.orafaq.net
> > -- 
> > Author: <[EMAIL PROTECTED]
> >   INET: [EMAIL PROTECTED]
> > 
> > Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> > San Diego, California-- Mailing list and web hosting services
> > -
> > To REMOVE yourself from this mailing list, send an E-Mail message
> > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB ORACLE-L
> > (or the name of mailing list you want to be 

Re: Risk of knowing password hash value (Was: OEM permissions)

[Arup Nanda]

Actually, the concatenated string of userid and password is hashed. So if
that is same, you got yourself the same hashed password.

Consider this:

SQL> create user ABC identified by DEF;

User created.

SQL> create user ABCD identified by EF;

User created.

SQL> select password from dba_users where username in ('ABC','ABCD');

PASSWORD
--
016811C1486D026B
016811C1486D026B

They have the same password hash, even though the password is different.
It's a trick we use in auditing for security holes in the database.

HTH.

Arup



- Original Message - 
To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]>
Sent: Tuesday, December 23, 2003 3:59 PM


> No.  Two different users with the same password would have different hash
> values.
>
> So you would have to loop through a "dictionary list" for each user within
> your local database.  Once you got a match, then you could logon to the
> target database with that user/password combo.
>
> -
> Alan Davey
> Senior Analyst/Project Leader
> Oracle 9i OCA; 3/4 OCP
> w) 973.267.5990 x458
> w) 212.295.3458
>
>
>
> -Original Message-
> Sent: Tuesday, December 23, 2003 3:29 PM
> To: Multiple recipients of list ORACLE-L
>
>
> Not really... you could easily compile a list of passwords and their
> associated hashes.  Once this is done, it's just a simple matter of
matching
> the hashes.
>
> -Original Message-
> Jared Still
> Sent: Tuesday, December 23, 2003 1:24 PM
> To: Multiple recipients of list ORACLE-L
>
>
> As long Oracle can manage to keep its modified DES algorithm
> secret, this should make it somewhat difficult to crack passwords
> in the manner that can be done with unix passwords.
>
> It could still be done, but the time required would make
> it just too time consuming IMO.
>
> Jared
>
>
> On Tue, 2003-12-23 at 09:44, [EMAIL PROTECTED] wrote:
> >
> > When I brought the issue up, I didn't know if one could in fact
> maliciously
> > use that info.  And, as I originally stated, it was something I had not
> > tried.  But paranoia (healthy, I think) dictates there's gotta be a way.
> > When one looks at the Unix password world which brought about the
> necessity
> > for a shadow file, and the evils of the old NIS where ypcat was
available,
> > you have to wonder why allowing access to the encrypted passwords for
Unix
> > is considered a dumb thing to do, but somehow in Oracle it would be an
OK
> > thing to do.  I'm inclined to say that Oracle restricted access to the
> views
> > and underlying tables for reasons more substantial than just to
frustrate
> > non-privileged users.  And, if I'm not mistaken, the specs on the views
> are
> > "subject to change without notice".  I have enough to do without trying
to
> > stay on top of every stinkin' view in Oracle in every stinkin' release
and
> > how one might use that view in naughty ways.
> >
> > For what it's worth, after haggling and fussing, we were able to
> compromise
> > on this.  We haven't tried to tear each of these apart to see how it
might
> > be abused.  If any of you have some warnings to provide, please do!
> >
> > -- Must run this as SYS
> >
> > create role DBARTISAN_USER_ROLE;
> >
> > grant SELECT on SYS.V_$PROCESS to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SESSION to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LATCH to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LATCHNAME to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LATCHHOLDER to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LOCK to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SESSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$MYSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SYSSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$STATNAME to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$ACCESS to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$FILESTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$ROLLNAME to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$ROLLSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SGA to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$PARAMETER to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$ROWCACHE to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$LIBRARYCACHE to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$INSTANCE to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$DISPATCHER to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SQLAREA to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SQLTEXT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SQLTEXT_WITH_NEWLINES to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$OPEN_CURSOR to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$PQ_SYSSTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SGASTAT to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$SHARED_SERVER to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$DATAFILE to DBARTISAN_USER_ROLE;
> > grant SELECT on SYS.V_$TABLESPACE to DBARTISAN_USER_ROLE;
> > gran

RE: Spam: RE: Risk of knowing password hash value (Was: OEM permi

[Stephen.Lee]

I wonder if there is a pre-encrypted list available of all Monty Python
words, Babylon 5 words, Star Trek words, etc. etc.  Actually, I can't think
of any better password than LEXADOIG.

> -Original Message-
> 
> Not really... you could easily compile a list of passwords 
> and their associated hashes.  Once this is done, it's just a 
> simple matter of matching the hashes.
> 
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: <[EMAIL PROTECTED]
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: Risk of knowing password hash value (Was: OEM permissions)

[Norris, Gregory T [ITS]]

Ah, you're right... the username is taken into account when the password is hashed.  
Quite a few applications have forced usernames, however, so I'm still a bit uneasy.  
It's clearly not as bad as I thought, however.

-Original Message-
Davey, Alan
Sent: Tuesday, December 23, 2003 2:59 PM
To: Multiple recipients of list ORACLE-L


No.  Two different users with the same password would have different hash
values. 

So you would have to loop through a "dictionary list" for each user within
your local database.  Once you got a match, then you could logon to the
target database with that user/password combo.  

-
Alan Davey
Senior Analyst/Project Leader
Oracle 9i OCA; 3/4 OCP
w) 973.267.5990 x458
w) 212.295.3458



-Original Message-
Sent: Tuesday, December 23, 2003 3:29 PM
To: Multiple recipients of list ORACLE-L


Not really... you could easily compile a list of passwords and their
associated hashes.  Once this is done, it's just a simple matter of matching
the hashes.

-Original Message-
Jared Still
Sent: Tuesday, December 23, 2003 1:24 PM
To: Multiple recipients of list ORACLE-L


As long Oracle can manage to keep its modified DES algorithm
secret, this should make it somewhat difficult to crack passwords
in the manner that can be done with unix passwords.

It could still be done, but the time required would make
it just too time consuming IMO.  

Jared


On Tue, 2003-12-23 at 09:44, [EMAIL PROTECTED] wrote:
> 
> When I brought the issue up, I didn't know if one could in fact
maliciously
> use that info.  And, as I originally stated, it was something I had not
> tried.  But paranoia (healthy, I think) dictates there's gotta be a way.
> When one looks at the Unix password world which brought about the
necessity
> for a shadow file, and the evils of the old NIS where ypcat was available,
> you have to wonder why allowing access to the encrypted passwords for Unix
> is considered a dumb thing to do, but somehow in Oracle it would be an OK
> thing to do.  I'm inclined to say that Oracle restricted access to the
views
> and underlying tables for reasons more substantial than just to frustrate
> non-privileged users.  And, if I'm not mistaken, the specs on the views
are
> "subject to change without notice".  I have enough to do without trying to
> stay on top of every stinkin' view in Oracle in every stinkin' release and
> how one might use that view in naughty ways.
> 
> For what it's worth, after haggling and fussing, we were able to
compromise
> on this.  We haven't tried to tear each of these apart to see how it might
> be abused.  If any of you have some warnings to provide, please do!
> 
> -- Must run this as SYS
> 
> create role DBARTISAN_USER_ROLE;
> 
> grant SELECT on SYS.V_$PROCESS to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SESSION to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LATCH to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LATCHNAME to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LATCHHOLDER to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LOCK to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SESSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$MYSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SYSSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$STATNAME to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$ACCESS to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$FILESTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$ROLLNAME to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$ROLLSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SGA to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$PARAMETER to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$ROWCACHE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LIBRARYCACHE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$INSTANCE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$DISPATCHER to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SQLAREA to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SQLTEXT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SQLTEXT_WITH_NEWLINES to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$OPEN_CURSOR to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$PQ_SYSSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SGASTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SHARED_SERVER to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$DATAFILE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$TABLESPACE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SESS_IO to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.ALL_OBJECTS to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.DBA_ROLLBACK_SEGS to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.PRODUCT_COMPONENT_VERSION to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.DBA_EXTENTS to DBARTISAN_USER_ROLE;
> 
> grant DBARTISAN_USER_ROLE to USER_WE_DONT_LIKE;
> 
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: <[EMAIL PROTECTED]
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-

RE: Risk of knowing password hash value (Was: OEM permissions)

[Davey, Alan]

No.  Two different users with the same password would have different hash
values. 

So you would have to loop through a "dictionary list" for each user within
your local database.  Once you got a match, then you could logon to the
target database with that user/password combo.  

-
Alan Davey
Senior Analyst/Project Leader
Oracle 9i OCA; 3/4 OCP
w) 973.267.5990 x458
w) 212.295.3458



-Original Message-
Sent: Tuesday, December 23, 2003 3:29 PM
To: Multiple recipients of list ORACLE-L


Not really... you could easily compile a list of passwords and their
associated hashes.  Once this is done, it's just a simple matter of matching
the hashes.

-Original Message-
Jared Still
Sent: Tuesday, December 23, 2003 1:24 PM
To: Multiple recipients of list ORACLE-L


As long Oracle can manage to keep its modified DES algorithm
secret, this should make it somewhat difficult to crack passwords
in the manner that can be done with unix passwords.

It could still be done, but the time required would make
it just too time consuming IMO.  

Jared


On Tue, 2003-12-23 at 09:44, [EMAIL PROTECTED] wrote:
> 
> When I brought the issue up, I didn't know if one could in fact
maliciously
> use that info.  And, as I originally stated, it was something I had not
> tried.  But paranoia (healthy, I think) dictates there's gotta be a way.
> When one looks at the Unix password world which brought about the
necessity
> for a shadow file, and the evils of the old NIS where ypcat was available,
> you have to wonder why allowing access to the encrypted passwords for Unix
> is considered a dumb thing to do, but somehow in Oracle it would be an OK
> thing to do.  I'm inclined to say that Oracle restricted access to the
views
> and underlying tables for reasons more substantial than just to frustrate
> non-privileged users.  And, if I'm not mistaken, the specs on the views
are
> "subject to change without notice".  I have enough to do without trying to
> stay on top of every stinkin' view in Oracle in every stinkin' release and
> how one might use that view in naughty ways.
> 
> For what it's worth, after haggling and fussing, we were able to
compromise
> on this.  We haven't tried to tear each of these apart to see how it might
> be abused.  If any of you have some warnings to provide, please do!
> 
> -- Must run this as SYS
> 
> create role DBARTISAN_USER_ROLE;
> 
> grant SELECT on SYS.V_$PROCESS to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SESSION to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LATCH to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LATCHNAME to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LATCHHOLDER to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LOCK to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SESSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$MYSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SYSSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$STATNAME to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$ACCESS to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$FILESTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$ROLLNAME to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$ROLLSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SGA to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$PARAMETER to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$ROWCACHE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LIBRARYCACHE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$INSTANCE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$DISPATCHER to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SQLAREA to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SQLTEXT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SQLTEXT_WITH_NEWLINES to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$OPEN_CURSOR to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$PQ_SYSSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SGASTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SHARED_SERVER to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$DATAFILE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$TABLESPACE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SESS_IO to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.ALL_OBJECTS to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.DBA_ROLLBACK_SEGS to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.PRODUCT_COMPONENT_VERSION to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.DBA_EXTENTS to DBARTISAN_USER_ROLE;
> 
> grant DBARTISAN_USER_ROLE to USER_WE_DONT_LIKE;
> 
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: <[EMAIL PROTECTED]
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a li

RE: Risk of knowing password hash value (Was: OEM permissions)

[Norris, Gregory T [ITS]]

Not really... you could easily compile a list of passwords and their associated 
hashes.  Once this is done, it's just a simple matter of matching the hashes.

-Original Message-
Jared Still
Sent: Tuesday, December 23, 2003 1:24 PM
To: Multiple recipients of list ORACLE-L


As long Oracle can manage to keep its modified DES algorithm
secret, this should make it somewhat difficult to crack passwords
in the manner that can be done with unix passwords.

It could still be done, but the time required would make
it just too time consuming IMO.  

Jared


On Tue, 2003-12-23 at 09:44, [EMAIL PROTECTED] wrote:
> 
> When I brought the issue up, I didn't know if one could in fact maliciously
> use that info.  And, as I originally stated, it was something I had not
> tried.  But paranoia (healthy, I think) dictates there's gotta be a way.
> When one looks at the Unix password world which brought about the necessity
> for a shadow file, and the evils of the old NIS where ypcat was available,
> you have to wonder why allowing access to the encrypted passwords for Unix
> is considered a dumb thing to do, but somehow in Oracle it would be an OK
> thing to do.  I'm inclined to say that Oracle restricted access to the views
> and underlying tables for reasons more substantial than just to frustrate
> non-privileged users.  And, if I'm not mistaken, the specs on the views are
> "subject to change without notice".  I have enough to do without trying to
> stay on top of every stinkin' view in Oracle in every stinkin' release and
> how one might use that view in naughty ways.
> 
> For what it's worth, after haggling and fussing, we were able to compromise
> on this.  We haven't tried to tear each of these apart to see how it might
> be abused.  If any of you have some warnings to provide, please do!
> 
> -- Must run this as SYS
> 
> create role DBARTISAN_USER_ROLE;
> 
> grant SELECT on SYS.V_$PROCESS to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SESSION to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LATCH to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LATCHNAME to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LATCHHOLDER to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LOCK to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SESSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$MYSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SYSSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$STATNAME to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$ACCESS to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$FILESTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$ROLLNAME to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$ROLLSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SGA to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$PARAMETER to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$ROWCACHE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LIBRARYCACHE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$INSTANCE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$DISPATCHER to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SQLAREA to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SQLTEXT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SQLTEXT_WITH_NEWLINES to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$OPEN_CURSOR to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$PQ_SYSSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SGASTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SHARED_SERVER to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$DATAFILE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$TABLESPACE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SESS_IO to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.ALL_OBJECTS to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.DBA_ROLLBACK_SEGS to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.PRODUCT_COMPONENT_VERSION to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.DBA_EXTENTS to DBARTISAN_USER_ROLE;
> 
> grant DBARTISAN_USER_ROLE to USER_WE_DONT_LIKE;
> 
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: <[EMAIL PROTECTED]
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
> 


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jared Still
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing l

RE: Risk of knowing password hash value (Was: OEM permissions)

[Jared Still]

As long Oracle can manage to keep its modified DES algorithm
secret, this should make it somewhat difficult to crack passwords
in the manner that can be done with unix passwords.

It could still be done, but the time required would make
it just too time consuming IMO.  

Jared


On Tue, 2003-12-23 at 09:44, [EMAIL PROTECTED] wrote:
> 
> When I brought the issue up, I didn't know if one could in fact maliciously
> use that info.  And, as I originally stated, it was something I had not
> tried.  But paranoia (healthy, I think) dictates there's gotta be a way.
> When one looks at the Unix password world which brought about the necessity
> for a shadow file, and the evils of the old NIS where ypcat was available,
> you have to wonder why allowing access to the encrypted passwords for Unix
> is considered a dumb thing to do, but somehow in Oracle it would be an OK
> thing to do.  I'm inclined to say that Oracle restricted access to the views
> and underlying tables for reasons more substantial than just to frustrate
> non-privileged users.  And, if I'm not mistaken, the specs on the views are
> "subject to change without notice".  I have enough to do without trying to
> stay on top of every stinkin' view in Oracle in every stinkin' release and
> how one might use that view in naughty ways.
> 
> For what it's worth, after haggling and fussing, we were able to compromise
> on this.  We haven't tried to tear each of these apart to see how it might
> be abused.  If any of you have some warnings to provide, please do!
> 
> -- Must run this as SYS
> 
> create role DBARTISAN_USER_ROLE;
> 
> grant SELECT on SYS.V_$PROCESS to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SESSION to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LATCH to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LATCHNAME to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LATCHHOLDER to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LOCK to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SESSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$MYSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SYSSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$STATNAME to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$ACCESS to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$FILESTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$ROLLNAME to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$ROLLSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SGA to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$PARAMETER to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$ROWCACHE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$LIBRARYCACHE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$INSTANCE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$DISPATCHER to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SQLAREA to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SQLTEXT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SQLTEXT_WITH_NEWLINES to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$OPEN_CURSOR to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$PQ_SYSSTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SGASTAT to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SHARED_SERVER to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$DATAFILE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$TABLESPACE to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.V_$SESS_IO to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.ALL_OBJECTS to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.DBA_ROLLBACK_SEGS to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.PRODUCT_COMPONENT_VERSION to DBARTISAN_USER_ROLE;
> grant SELECT on SYS.DBA_EXTENTS to DBARTISAN_USER_ROLE;
> 
> grant DBARTISAN_USER_ROLE to USER_WE_DONT_LIKE;
> 
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: <[EMAIL PROTECTED]
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
> 


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jared Still
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscri

RE: Risk of knowing password hash value (Was: OEM permissions)

[Stephen.Lee]

When I brought the issue up, I didn't know if one could in fact maliciously
use that info.  And, as I originally stated, it was something I had not
tried.  But paranoia (healthy, I think) dictates there's gotta be a way.
When one looks at the Unix password world which brought about the necessity
for a shadow file, and the evils of the old NIS where ypcat was available,
you have to wonder why allowing access to the encrypted passwords for Unix
is considered a dumb thing to do, but somehow in Oracle it would be an OK
thing to do.  I'm inclined to say that Oracle restricted access to the views
and underlying tables for reasons more substantial than just to frustrate
non-privileged users.  And, if I'm not mistaken, the specs on the views are
"subject to change without notice".  I have enough to do without trying to
stay on top of every stinkin' view in Oracle in every stinkin' release and
how one might use that view in naughty ways.

For what it's worth, after haggling and fussing, we were able to compromise
on this.  We haven't tried to tear each of these apart to see how it might
be abused.  If any of you have some warnings to provide, please do!

-- Must run this as SYS

create role DBARTISAN_USER_ROLE;

grant SELECT on SYS.V_$PROCESS to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$SESSION to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$LATCH to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$LATCHNAME to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$LATCHHOLDER to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$LOCK to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$SESSTAT to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$MYSTAT to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$SYSSTAT to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$STATNAME to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$ACCESS to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$FILESTAT to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$ROLLNAME to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$ROLLSTAT to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$SGA to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$PARAMETER to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$ROWCACHE to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$LIBRARYCACHE to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$INSTANCE to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$DISPATCHER to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$SQLAREA to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$SQLTEXT to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$SQLTEXT_WITH_NEWLINES to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$OPEN_CURSOR to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$PQ_SYSSTAT to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$SGASTAT to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$SHARED_SERVER to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$DATAFILE to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$TABLESPACE to DBARTISAN_USER_ROLE;
grant SELECT on SYS.V_$SESS_IO to DBARTISAN_USER_ROLE;
grant SELECT on SYS.ALL_OBJECTS to DBARTISAN_USER_ROLE;
grant SELECT on SYS.DBA_ROLLBACK_SEGS to DBARTISAN_USER_ROLE;
grant SELECT on SYS.PRODUCT_COMPONENT_VERSION to DBARTISAN_USER_ROLE;
grant SELECT on SYS.DBA_EXTENTS to DBARTISAN_USER_ROLE;

grant DBARTISAN_USER_ROLE to USER_WE_DONT_LIKE;

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: <[EMAIL PROTECTED]
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: Risk of knowing password hash value (Was: OEM permissions)

[Norris, Gregory T [ITS]]

Same here...

SQL> select password from dba_users where username = 'SCOTT';

PASSWORD
--
F894844C34402B67

-Original Message-
Michael Thomas
Sent: Monday, December 22, 2003 10:44 PM
To: Multiple recipients of list ORACLE-L


Hi,

Okay. I'm almost a believer of this as a problem. How
about 9.2.0.4 on RH9.3.

1) What does anyone/everyone get for my this query (my
results shown):

connect system/[EMAIL PROTECTED];
alter user scott identified by tiger;
--
select password
from dba_users
where username = 'SCOTT';

PASSWORD

F894844C34402B67

2) If you all get the same, then I'm concerned.

Regards,

Mike Thomas
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Norris, Gregory T [ITS]
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: Risk of knowing password hash value (Was: OEM permissions)

[Jamadagni, Rajendra]

[EMAIL PROTECTED]> . oraenv
ORACLE_SID = [OLDNCS1] ? DEVL
[EMAIL PROTECTED]> sys

SQL*Plus: Release 9.2.0.2.0 - Production on Tue Dec 23 08:30:45 2003
Copyright (c) 1982, 2002, Oracle Corporation.  All rights reserved.
Connected to:
Oracle9i Enterprise Edition Release 9.2.0.2.0 - 64bit Production
With the Partitioning, Real Application Clusters, OLAP and Oracle Data Mining options
JServer Release 9.2.0.2.0 - Production

08:30:51 SQL> alter user scott identified by tiger;
User altered.
08:31:01 SQL> select password from dba_users where username = 'SCOTT';
PASSWORD
--
F894844C34402B67

9202 on AIX5L.


So much for 40 bit one way encryption ...
Raj

Rajendra dot Jamadagni at nospamespn dot com
All Views expressed in this email are strictly personal.
QOTD: Any clod can have facts, having an opinion is an art !
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jamadagni, Rajendra
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: Risk of knowing password hash value (Was: OEM permissions)

[Scott Canaan]

This is what I got, Oracle 8.1.7.4 on Sun Solaris (I dropped the user):

Connected to:
Oracle8i Enterprise Edition Release 8.1.7.4.0 - Production
With the Partitioning option
JServer Release 8.1.7.4.0 - Production

SQL> create user scott identified by tiger;

User created.

SQL> select password
  2  from dba_users
  3  where username = 'SCOTT'; 

PASSWORD
--
F894844C34402B67

SQL>

Scott Canaan ([EMAIL PROTECTED])
(585) 475-7886
"Life is like a sewer, what you get out of it depends on what you put
into it." - Tom Lehrer.


-Original Message-
rahul sharma
Sent: Tuesday, December 23, 2003 1:14 AM
To: Multiple recipients of list ORACLE-L

8.1.7 on win2000

SQL> select password
  2  from dba_users
  3  where username = 'SCOTT';

PASSWORD
--
F894844C34402B67




- Original Message - 
To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]>
Sent: Tuesday, December 23, 2003 11:44 AM


> Hi,
> 
> Okay. I'm almost a believer of this as a problem. How
> about 9.2.0.4 on RH9.3.
> 
> 1) What does anyone/everyone get for my this query (my
> results shown):
> 
> connect system/[EMAIL PROTECTED];
> alter user scott identified by tiger;
> --
> select password
> from dba_users
> where username = 'SCOTT';
> 
> PASSWORD
> 
> F894844C34402B67
> 
> 2) If you all get the same, then I'm concerned.
> 
> Regards,
> 
> Mike Thomas
> 
> --- Yong Huang <[EMAIL PROTECTED]> wrote:
> > Jared,
> > 
> > I see you log out and log back in as SYSTEM to DB2.
> > But how do you know the
> > password for SYSTEM to log back in with after you
> > change it?
> > 
> > What if you don't log out? When I tried that (i.e.
> > not logging out), I got
> > ORA-1017.
> > 
> > Yong Huang
> > 
> > --- Jared Still <[EMAIL PROTECTED]> wrote:
> > > Environment:
> > > 
> > > DB1: RH 8.0 with Oracle EE 9.2.0.4
> > > 
> > > DB2: Win2k SP3 with Oracle EE 9.2.0.1
> > > 
> > > SYSTEM user on each database initially have
> > different passwords.
> > > 
> 
> 
> __
> Do you Yahoo!?
> Protect your identity with Yahoo! Mail AddressGuard
> http://antispam.yahoo.com/whatsnewfree
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: Michael Thomas
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
> 

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: rahul sharma
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Scott Canaan
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: Risk of knowing password hash value (Was: OEM permissions)

[Rachel Carmichael]

9.2.0.2 on Sun Solaris... and yes, I got the same encrypted password


--- Michael Thomas <[EMAIL PROTECTED]> wrote:
> Hi,
> 
> Okay. I'm almost a believer of this as a problem. How
> about 9.2.0.4 on RH9.3.
> 
> 1) What does anyone/everyone get for my this query (my
> results shown):
> 
> connect system/[EMAIL PROTECTED];
> alter user scott identified by tiger;
> --
> select password
> from dba_users
> where username = 'SCOTT';
> 
> PASSWORD
> 
> F894844C34402B67
> 
> 2) If you all get the same, then I'm concerned.
> 
> Regards,
> 
> Mike Thomas
> 
> --- Yong Huang <[EMAIL PROTECTED]> wrote:
> > Jared,
> > 
> > I see you log out and log back in as SYSTEM to DB2.
> > But how do you know the
> > password for SYSTEM to log back in with after you
> > change it?
> > 
> > What if you don't log out? When I tried that (i.e.
> > not logging out), I got
> > ORA-1017.
> > 
> > Yong Huang
> > 
> > --- Jared Still <[EMAIL PROTECTED]> wrote:
> > > Environment:
> > > 
> > > DB1: RH 8.0 with Oracle EE 9.2.0.4
> > > 
> > > DB2: Win2k SP3 with Oracle EE 9.2.0.1
> > > 
> > > SYSTEM user on each database initially have
> > different passwords.
> > > 
> 
> 
> __
> Do you Yahoo!?
> Protect your identity with Yahoo! Mail AddressGuard
> http://antispam.yahoo.com/whatsnewfree
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: Michael Thomas
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).


__
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard
http://antispam.yahoo.com/whatsnewfree
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Rachel Carmichael
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: Risk of knowing password hash value (Was: OEM permissions)

[rahul sharma]

8.1.7 on win2000

SQL> select password
  2  from dba_users
  3  where username = 'SCOTT';

PASSWORD
--
F894844C34402B67




- Original Message - 
To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]>
Sent: Tuesday, December 23, 2003 11:44 AM


> Hi,
> 
> Okay. I'm almost a believer of this as a problem. How
> about 9.2.0.4 on RH9.3.
> 
> 1) What does anyone/everyone get for my this query (my
> results shown):
> 
> connect system/[EMAIL PROTECTED];
> alter user scott identified by tiger;
> --
> select password
> from dba_users
> where username = 'SCOTT';
> 
> PASSWORD
> 
> F894844C34402B67
> 
> 2) If you all get the same, then I'm concerned.
> 
> Regards,
> 
> Mike Thomas
> 
> --- Yong Huang <[EMAIL PROTECTED]> wrote:
> > Jared,
> > 
> > I see you log out and log back in as SYSTEM to DB2.
> > But how do you know the
> > password for SYSTEM to log back in with after you
> > change it?
> > 
> > What if you don't log out? When I tried that (i.e.
> > not logging out), I got
> > ORA-1017.
> > 
> > Yong Huang
> > 
> > --- Jared Still <[EMAIL PROTECTED]> wrote:
> > > Environment:
> > > 
> > > DB1: RH 8.0 with Oracle EE 9.2.0.4
> > > 
> > > DB2: Win2k SP3 with Oracle EE 9.2.0.1
> > > 
> > > SYSTEM user on each database initially have
> > different passwords.
> > > 
> 
> 
> __
> Do you Yahoo!?
> Protect your identity with Yahoo! Mail AddressGuard
> http://antispam.yahoo.com/whatsnewfree
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: Michael Thomas
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
> 

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: rahul sharma
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: Risk of knowing password hash value (Was: OEM permissions)

[Jared Still]

Yes, I misunderstood.

Once I change the password, I can no longer connect to the account.

My hasty little test was missing an important condition: I should
have pretended I didn't know the password to the other database,
which would prevent me from logging back on exploiting the db link.

Wonder if there's a way around it though?

I spent a few minutes looking for a way around that problem, and
couldn't find one.  Oracle may have covered the bases on this, they've
had a few years to perfect it.

Jared

On Mon, 2003-12-22 at 21:19, Yong Huang wrote:
> Hey, you're working late!
> 
> OK. I think you misunderstood. I know you take SYSTEM as an example user. Let's
> say it's SCOTT who has select_catalog_role. If you login to your own database
> as SCOTT and change his password hash value, you don't know the clear text
> password any more. How can you log out and log back in as SCOTT? That's why I
> ask if you can use the link without logging out after changing the password?
> 
> Yong
> 
> --- Jared Still <[EMAIL PROTECTED]> wrote:
> > It doesn't matter which account I logged into DB2 with, as
> > long as that account has privileges to read DBA_USERS.
> > 
> > SYSTEM was used simply because it was the only account
> > on the database that could be logged into remotely, so
> > my test could be run without switching between machines.
> > 
> > If I had granted SELECT_CATALOG_ROLE  to scott, I could 
> > have logged in  as SCOTT and done the same.
> > 
> > Jared
> > 
> > On Mon, 2003-12-22 at 20:19, Yong Huang wrote:
> > > Jared,
> > > 
> > > I see you log out and log back in as SYSTEM to DB2. But how do you know the
> > > password for SYSTEM to log back in with after you change it?
> > > 
> > > What if you don't log out? When I tried that (i.e. not logging out), I got
> > > ORA-1017.
> > > 
> > > Yong Huang
> > > 
> > > --- Jared Still <[EMAIL PROTECTED]> wrote:
> > > > Environment:
> > > > 
> > > > DB1: RH 8.0 with Oracle EE 9.2.0.4
> > > > 
> > > > DB2: Win2k SP3 with Oracle EE 9.2.0.1
> > > > 
> > > > SYSTEM user on each database initially have different passwords.
> > > > 
> > > > It goes something like this:
> > > > 
> > > > DB1:
> > > > 
> > > > select password from dba_users where username = 'SYSTEM';
> > > > 
> > > > Let's say the result is 'AC424SDK4398'
> > > > 
> > > > DB2:
> > > > 
> > > > Logon to DB2 as SYSTEM.
> > > > 
> > > > alter user SYSTEM identified by values 'AC424SDK4398';
> > > > create database link systemlink using 'DB1';
> > > > 
> > > > Logout, and log back on to DB2 as SYSTEM.
> > > > 
> > > > select count(*) from [EMAIL PROTECTED];
> > > > 
> > > > Works for me in this environment.  DB2 is compromised.
> > > > 
> > > > HTH
> > > > 
> > > > Jared
> > > > 
> > > > 
> > > > 
> > > > On Mon, 2003-12-22 at 08:29, Yong Huang wrote:
> > > > 
> > > > > Hi, Gregory,
> > > > > 
> > > > > I only have access to Oracle 9.2 on my laptop. Here's my test. I have
> > ORCL
> > > > and
> > > > > AUX1 databases, the latter created by RMAN DUPLICATE some time ago. I
> > logon
> > > > > AUX1 as SYSTEM. Set SYSTEM password hash value to the same as in ORCL.
> > > > Create
> > > > > link L to ORCL without password. Selecting from a table in ORCL @L
> > (i.e.
> > > > select
> > > > > * from [EMAIL PROTECTED]) throws ORA-1017 invalid username/password.
> > > > > 
> > > > > Alternatively, I logon as SYS and create a procedure owned by SYSTEM,
> > with
> > > > one
> > > > > line execute imediate('select count(*) from [EMAIL PROTECTED]'). When I
> > execute
> > > > > system. as SYS, I get ORA-1005 null password given. (I
> > > > could
> > > > > use DBMS_SYS_SQL but using the execute immediate trick obviates the
> > need to
> > > > > remember the syntax in that undocumented package).
> > > > > 
> > > > > If I use connect to current_user to create the link, I always get
> > ORA-28030
> > > > > Server encountered problems accessing LDAP directory service.
> > > > > 
> > > > > Could you try on your databases and show how you do it? As I said, this
> > may
> > > > be
> > > > > a security problem. I'm just too ignorant of it and can't reproduce it
> > for
> > > > now.
> > > > > 
> > > > > Yong Huang
> > > > > 
> > > > > Norris, Gregory T [ITS] wrote:
> > > > > 
> > > > > There's no reason I can see that he couldn't create the dblink first,
> > and
> > > > then 
> > > > > reset the password using the encrypted value.  Alternately, the dblink
> > > > could be
> > > > > 
> > > > > created using the DBMS_SYS_SQL package... no knowledge of the current
> > > > password 
> > > > > required.
> > > > > 
> > > > >   create database link foo
> > > > >  connect to current_user
> > > > >  using 'bar';
> > > 
> > > __
> > > Do you Yahoo!?
> > > New Yahoo! Photos - easier uploading and sharing.
> > > http://photos.yahoo.com/
> > > 
> > 
> > 
> 
> 
> __
> Do you Yahoo!?
> New Yahoo! Photos - easier uploading and sharing.
> http://photos.yahoo.com/
> 

Re: Risk of knowing password hash value (Was: OEM permissions)

[Jared Still]

On RH 8.0 Oracle 9.2.0.4: F894844C34402B67

It is required that a password for a particular users always
hashes to the same value, regardless of platform or Oracle version. 

This has been true for as long as I have used oracle: since 7.0.13.

If not, export/import would not be able to recreate users, and
database links without a password would not work.

Good reason to protect DBA_USERS, no?

Jared



On Mon, 2003-12-22 at 20:44, Michael Thomas wrote:
> Hi,
> 
> Okay. I'm almost a believer of this as a problem. How
> about 9.2.0.4 on RH9.3.
> 
> 1) What does anyone/everyone get for my this query (my
> results shown):
> 
> connect system/[EMAIL PROTECTED];
> alter user scott identified by tiger;
> --
> select password
> from dba_users
> where username = 'SCOTT';
> 
> PASSWORD
> 
> F894844C34402B67
> 
> 2) If you all get the same, then I'm concerned.
> 
> Regards,
> 
> Mike Thomas
> 
> --- Yong Huang <[EMAIL PROTECTED]> wrote:
> > Jared,
> > 
> > I see you log out and log back in as SYSTEM to DB2.
> > But how do you know the
> > password for SYSTEM to log back in with after you
> > change it?
> > 
> > What if you don't log out? When I tried that (i.e.
> > not logging out), I got
> > ORA-1017.
> > 
> > Yong Huang
> > 
> > --- Jared Still <[EMAIL PROTECTED]> wrote:
> > > Environment:
> > > 
> > > DB1: RH 8.0 with Oracle EE 9.2.0.4
> > > 
> > > DB2: Win2k SP3 with Oracle EE 9.2.0.1
> > > 
> > > SYSTEM user on each database initially have
> > different passwords.
> > > 
> 
> 
> __
> Do you Yahoo!?
> Protect your identity with Yahoo! Mail AddressGuard
> http://antispam.yahoo.com/whatsnewfree
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: Michael Thomas
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
> 


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jared Still
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: Risk of knowing password hash value (Was: OEM permissions)

[Jared Still]

It doesn't matter which account I logged into DB2 with, as
long as that account has privileges to read DBA_USERS.

SYSTEM was used simply because it was the only account
on the database that could be logged into remotely, so
my test could be run without switching between machines.

If I had granted SELECT_CATALOG_ROLE  to scott, I could 
have logged in  as SCOTT and done the same.

Jared

PS. Forgot this in private post to Yong:  The password is
cached, I assume in the PGA.  This doesn't work without
reconnecting.  Logging out isn't strictly necessary, but
the way my shell is setup, it takes quite a few less keystrokes
to logout/logon than the type 'connect system/[EMAIL PROTECTED]'.



On Mon, 2003-12-22 at 20:19, Yong Huang wrote:
> Jared,
> 
> I see you log out and log back in as SYSTEM to DB2. But how do you know the
> password for SYSTEM to log back in with after you change it?
> 
> What if you don't log out? When I tried that (i.e. not logging out), I got
> ORA-1017.
> 
> Yong Huang
> 
> --- Jared Still <[EMAIL PROTECTED]> wrote:
> > Environment:
> > 
> > DB1: RH 8.0 with Oracle EE 9.2.0.4
> > 
> > DB2: Win2k SP3 with Oracle EE 9.2.0.1
> > 
> > SYSTEM user on each database initially have different passwords.
> > 
> > It goes something like this:
> > 
> > DB1:
> > 
> > select password from dba_users where username = 'SYSTEM';
> > 
> > Let's say the result is 'AC424SDK4398'
> > 
> > DB2:
> > 
> > Logon to DB2 as SYSTEM.
> > 
> > alter user SYSTEM identified by values 'AC424SDK4398';
> > create database link systemlink using 'DB1';
> > 
> > Logout, and log back on to DB2 as SYSTEM.
> > 
> > select count(*) from [EMAIL PROTECTED];
> > 
> > Works for me in this environment.  DB2 is compromised.
> > 
> > HTH
> > 
> > Jared
> > 
> > 
> > 
> > On Mon, 2003-12-22 at 08:29, Yong Huang wrote:
> > 
> > > Hi, Gregory,
> > > 
> > > I only have access to Oracle 9.2 on my laptop. Here's my test. I have ORCL
> > and
> > > AUX1 databases, the latter created by RMAN DUPLICATE some time ago. I logon
> > > AUX1 as SYSTEM. Set SYSTEM password hash value to the same as in ORCL.
> > Create
> > > link L to ORCL without password. Selecting from a table in ORCL @L (i.e.
> > select
> > > * from [EMAIL PROTECTED]) throws ORA-1017 invalid username/password.
> > > 
> > > Alternatively, I logon as SYS and create a procedure owned by SYSTEM, with
> > one
> > > line execute imediate('select count(*) from [EMAIL PROTECTED]'). When I execute
> > > system. as SYS, I get ORA-1005 null password given. (I
> > could
> > > use DBMS_SYS_SQL but using the execute immediate trick obviates the need to
> > > remember the syntax in that undocumented package).
> > > 
> > > If I use connect to current_user to create the link, I always get ORA-28030
> > > Server encountered problems accessing LDAP directory service.
> > > 
> > > Could you try on your databases and show how you do it? As I said, this may
> > be
> > > a security problem. I'm just too ignorant of it and can't reproduce it for
> > now.
> > > 
> > > Yong Huang
> > > 
> > > Norris, Gregory T [ITS] wrote:
> > > 
> > > There's no reason I can see that he couldn't create the dblink first, and
> > then 
> > > reset the password using the encrypted value.  Alternately, the dblink
> > could be
> > > 
> > > created using the DBMS_SYS_SQL package... no knowledge of the current
> > password 
> > > required.
> > > 
> > >   create database link foo
> > >  connect to current_user
> > >  using 'bar';
> 
> __
> Do you Yahoo!?
> New Yahoo! Photos - easier uploading and sharing.
> http://photos.yahoo.com/
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: Yong Huang
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
> 


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jared Still
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: Risk of knowing password hash value (Was: OEM permissions)

[Michael Thomas]

Hi,

Okay. I'm almost a believer of this as a problem. How
about 9.2.0.4 on RH9.3.

1) What does anyone/everyone get for my this query (my
results shown):

connect system/[EMAIL PROTECTED];
alter user scott identified by tiger;
--
select password
from dba_users
where username = 'SCOTT';

PASSWORD

F894844C34402B67

2) If you all get the same, then I'm concerned.

Regards,

Mike Thomas

--- Yong Huang <[EMAIL PROTECTED]> wrote:
> Jared,
> 
> I see you log out and log back in as SYSTEM to DB2.
> But how do you know the
> password for SYSTEM to log back in with after you
> change it?
> 
> What if you don't log out? When I tried that (i.e.
> not logging out), I got
> ORA-1017.
> 
> Yong Huang
> 
> --- Jared Still <[EMAIL PROTECTED]> wrote:
> > Environment:
> > 
> > DB1: RH 8.0 with Oracle EE 9.2.0.4
> > 
> > DB2: Win2k SP3 with Oracle EE 9.2.0.1
> > 
> > SYSTEM user on each database initially have
> different passwords.
> > 


__
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard
http://antispam.yahoo.com/whatsnewfree
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Michael Thomas
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: Risk of knowing password hash value (Was: OEM permissions)

[Yong Huang]

Jared,

I see you log out and log back in as SYSTEM to DB2. But how do you know the
password for SYSTEM to log back in with after you change it?

What if you don't log out? When I tried that (i.e. not logging out), I got
ORA-1017.

Yong Huang

--- Jared Still <[EMAIL PROTECTED]> wrote:
> Environment:
> 
> DB1: RH 8.0 with Oracle EE 9.2.0.4
> 
> DB2: Win2k SP3 with Oracle EE 9.2.0.1
> 
> SYSTEM user on each database initially have different passwords.
> 
> It goes something like this:
> 
> DB1:
> 
> select password from dba_users where username = 'SYSTEM';
> 
> Let's say the result is 'AC424SDK4398'
> 
> DB2:
> 
> Logon to DB2 as SYSTEM.
> 
> alter user SYSTEM identified by values 'AC424SDK4398';
> create database link systemlink using 'DB1';
> 
> Logout, and log back on to DB2 as SYSTEM.
> 
> select count(*) from [EMAIL PROTECTED];
> 
> Works for me in this environment.  DB2 is compromised.
> 
> HTH
> 
> Jared
> 
> 
> 
> On Mon, 2003-12-22 at 08:29, Yong Huang wrote:
> 
> > Hi, Gregory,
> > 
> > I only have access to Oracle 9.2 on my laptop. Here's my test. I have ORCL
> and
> > AUX1 databases, the latter created by RMAN DUPLICATE some time ago. I logon
> > AUX1 as SYSTEM. Set SYSTEM password hash value to the same as in ORCL.
> Create
> > link L to ORCL without password. Selecting from a table in ORCL @L (i.e.
> select
> > * from [EMAIL PROTECTED]) throws ORA-1017 invalid username/password.
> > 
> > Alternatively, I logon as SYS and create a procedure owned by SYSTEM, with
> one
> > line execute imediate('select count(*) from [EMAIL PROTECTED]'). When I execute
> > system. as SYS, I get ORA-1005 null password given. (I
> could
> > use DBMS_SYS_SQL but using the execute immediate trick obviates the need to
> > remember the syntax in that undocumented package).
> > 
> > If I use connect to current_user to create the link, I always get ORA-28030
> > Server encountered problems accessing LDAP directory service.
> > 
> > Could you try on your databases and show how you do it? As I said, this may
> be
> > a security problem. I'm just too ignorant of it and can't reproduce it for
> now.
> > 
> > Yong Huang
> > 
> > Norris, Gregory T [ITS] wrote:
> > 
> > There's no reason I can see that he couldn't create the dblink first, and
> then 
> > reset the password using the encrypted value.  Alternately, the dblink
> could be
> > 
> > created using the DBMS_SYS_SQL package... no knowledge of the current
> password 
> > required.
> > 
> > create database link foo
> >connect to current_user
> >using 'bar';

__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Yong Huang
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: Risk of knowing password hash value (Was: OEM permissions)

[Jared Still]

Environment:

DB1: RH 8.0 with Oracle EE 9.2.0.4

DB2: Win2k SP3 with Oracle EE 9.2.0.1

SYSTEM user on each database initially have different passwords.

It goes something like this:

DB1:

select password from dba_users where username = 'SYSTEM';

Let's say the result is 'AC424SDK4398'

DB2:

Logon to DB2 as SYSTEM.

alter user SYSTEM identified by values 'AC424SDK4398';
create database link systemlink using 'DB1';

Logout, and log back on to DB2 as SYSTEM.

select count(*) from [EMAIL PROTECTED];

Works for me in this environment.  DB2 is compromised.

HTH

Jared



On Mon, 2003-12-22 at 08:29, Yong Huang wrote:

> Hi, Gregory,
> 
> I only have access to Oracle 9.2 on my laptop. Here's my test. I have ORCL and
> AUX1 databases, the latter created by RMAN DUPLICATE some time ago. I logon
> AUX1 as SYSTEM. Set SYSTEM password hash value to the same as in ORCL. Create
> link L to ORCL without password. Selecting from a table in ORCL @L (i.e. select
> * from [EMAIL PROTECTED]) throws ORA-1017 invalid username/password.
> 
> Alternatively, I logon as SYS and create a procedure owned by SYSTEM, with one
> line execute imediate('select count(*) from [EMAIL PROTECTED]'). When I execute
> system. as SYS, I get ORA-1005 null password given. (I could
> use DBMS_SYS_SQL but using the execute immediate trick obviates the need to
> remember the syntax in that undocumented package).
> 
> If I use connect to current_user to create the link, I always get ORA-28030
> Server encountered problems accessing LDAP directory service.
> 
> Could you try on your databases and show how you do it? As I said, this may be
> a security problem. I'm just too ignorant of it and can't reproduce it for now.
> 
> Yong Huang
> 
> Norris, Gregory T [ITS] wrote:
> 
> There's no reason I can see that he couldn't create the dblink first, and then 
> reset the password using the encrypted value.  Alternately, the dblink could be
> 
> created using the DBMS_SYS_SQL package... no knowledge of the current password 
> required.
> 
>   create database link foo
>  connect to current_user
>  using 'bar';
> 
> __
> Do you Yahoo!?
> New Yahoo! Photos - easier uploading and sharing.
> http://photos.yahoo.com/
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: Yong Huang
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
> 


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jared Still
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Risk of knowing password hash value (Was: OEM permissions)

[Yong Huang]

Hi, Gregory,

I only have access to Oracle 9.2 on my laptop. Here's my test. I have ORCL and
AUX1 databases, the latter created by RMAN DUPLICATE some time ago. I logon
AUX1 as SYSTEM. Set SYSTEM password hash value to the same as in ORCL. Create
link L to ORCL without password. Selecting from a table in ORCL @L (i.e. select
* from [EMAIL PROTECTED]) throws ORA-1017 invalid username/password.

Alternatively, I logon as SYS and create a procedure owned by SYSTEM, with one
line execute imediate('select count(*) from [EMAIL PROTECTED]'). When I execute
system. as SYS, I get ORA-1005 null password given. (I could
use DBMS_SYS_SQL but using the execute immediate trick obviates the need to
remember the syntax in that undocumented package).

If I use connect to current_user to create the link, I always get ORA-28030
Server encountered problems accessing LDAP directory service.

Could you try on your databases and show how you do it? As I said, this may be
a security problem. I'm just too ignorant of it and can't reproduce it for now.

Yong Huang

Norris, Gregory T [ITS] wrote:

There's no reason I can see that he couldn't create the dblink first, and then 
reset the password using the encrypted value.  Alternately, the dblink could be

created using the DBMS_SYS_SQL package... no knowledge of the current password 
required.

create database link foo
   connect to current_user
   using 'bar';

__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Yong Huang
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM permissions

[Norris, Gregory T [ITS]]

There's no reason I can see that he couldn't create the dblink first, and then reset 
the password using the encrypted value.  Alternately, the dblink could be created 
using the DBMS_SYS_SQL package... no knowledge of the current password required.

create database link foo
   connect to current_user
   using 'bar';

-Original Message-
Yong Huang
Sent: Saturday, December 20, 2003 2:29 PM
To: Multiple recipients of list ORACLE-L


Hi,

I think you're describing a real security hole. But I'm not sure how it's
exploited exactly. Let's say John Doe sets up his database on his desktop,
which is part of the production database network. He sees the hash value of
SYSTEM's password on production and sets the hash value for his own SYSTEM user
to be the same. Since now he doesn't know the clear text password for SYSTEM
(Pete Finnigan may know how to find it, though), he can't easily create a
private database link owned by SYSTEM. He can still create a public link, or a
private link owned by somebody else, his SYS user e.g. Then what?

(He can still create a link owned by SYSTEM from another account such as SYS
using a little bit hacking. But he won't know SYSTEM's password. I don't know
how security of the production database is compromised in any way)

Yong Huang

you wrote:

Maybe I'm a being a bit touchy here; but it seems that my comments about
having access to dba_users went completely unnoticed.  Let's put it this
way: There is NO WAY you can prevent somebody from setting up their own
private oracle instance.  It they have access to dba_users in your database,
they can create the SAME users with the SAME passwords in their private
database.  And they can create database links in their private database.

Now, is this a problem?

__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Yong Huang
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Norris, Gregory T [ITS]
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM permissions

[Thomas A. La Porte]

I believe the point is not that you can create links to SYS or 
SYSTEM accounts, but instead to application accounts, e.g. if I 
created a link from my private database to the company's HR 
database using a duplicated HR_MANAGER schema, I may be able to 
access data that I otherwise should not have.

 -- Tom

Thomas A. La Porte, DreamWorks SKG
  

On Sat, 20 Dec 2003, Yong Huang wrote:

>Hi,
>
>I think you're describing a real security hole. But I'm not sure how it's
>exploited exactly. Let's say John Doe sets up his database on his desktop,
>which is part of the production database network. He sees the hash value of
>SYSTEM's password on production and sets the hash value for his own SYSTEM user
>to be the same. Since now he doesn't know the clear text password for SYSTEM
>(Pete Finnigan may know how to find it, though), he can't easily create a
>private database link owned by SYSTEM. He can still create a public link, or a
>private link owned by somebody else, his SYS user e.g. Then what?
>
>(He can still create a link owned by SYSTEM from another account such as SYS
>using a little bit hacking. But he won't know SYSTEM's password. I don't know
>how security of the production database is compromised in any way)
>
>Yong Huang
>
>you wrote:
>
>Maybe I'm a being a bit touchy here; but it seems that my comments about
>having access to dba_users went completely unnoticed.  Let's put it this
>way: There is NO WAY you can prevent somebody from setting up their own
>private oracle instance.  It they have access to dba_users in your database,
>they can create the SAME users with the SAME passwords in their private
>database.  And they can create database links in their private database.
>
>Now, is this a problem?
>
>__
>Do you Yahoo!?
>New Yahoo! Photos - easier uploading and sharing.
>http://photos.yahoo.com/
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Thomas A. La Porte
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM permissions

[Jared Still]

You could use protocol.ora to specify which machines are
allowed to make a connection to the database.

In some environments this would be fairly painless.

SAP for example.  The users do not connect to the database,
they connect to the app server.  The number of machines
that legitimately require a connection to the database
could be very limited.

This would reduce the possibility of someone sneaking in
through a database link.

Jared

On Sat, 2003-12-20 at 12:29, Yong Huang wrote:
> Hi,
> 
> I think you're describing a real security hole. But I'm not sure how it's
> exploited exactly. Let's say John Doe sets up his database on his desktop,
> which is part of the production database network. He sees the hash value of
> SYSTEM's password on production and sets the hash value for his own SYSTEM user
> to be the same. Since now he doesn't know the clear text password for SYSTEM
> (Pete Finnigan may know how to find it, though), he can't easily create a
> private database link owned by SYSTEM. He can still create a public link, or a
> private link owned by somebody else, his SYS user e.g. Then what?
> 
> (He can still create a link owned by SYSTEM from another account such as SYS
> using a little bit hacking. But he won't know SYSTEM's password. I don't know
> how security of the production database is compromised in any way)
> 
> Yong Huang
> 
> you wrote:
> 
> Maybe I'm a being a bit touchy here; but it seems that my comments about
> having access to dba_users went completely unnoticed.  Let's put it this
> way: There is NO WAY you can prevent somebody from setting up their own
> private oracle instance.  It they have access to dba_users in your database,
> they can create the SAME users with the SAME passwords in their private
> database.  And they can create database links in their private database.
> 
> Now, is this a problem?
> 
> __
> Do you Yahoo!?
> New Yahoo! Photos - easier uploading and sharing.
> http://photos.yahoo.com/
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: Yong Huang
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jared Still
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM permissions

[Yong Huang]

Hi,

I think you're describing a real security hole. But I'm not sure how it's
exploited exactly. Let's say John Doe sets up his database on his desktop,
which is part of the production database network. He sees the hash value of
SYSTEM's password on production and sets the hash value for his own SYSTEM user
to be the same. Since now he doesn't know the clear text password for SYSTEM
(Pete Finnigan may know how to find it, though), he can't easily create a
private database link owned by SYSTEM. He can still create a public link, or a
private link owned by somebody else, his SYS user e.g. Then what?

(He can still create a link owned by SYSTEM from another account such as SYS
using a little bit hacking. But he won't know SYSTEM's password. I don't know
how security of the production database is compromised in any way)

Yong Huang

you wrote:

Maybe I'm a being a bit touchy here; but it seems that my comments about
having access to dba_users went completely unnoticed.  Let's put it this
way: There is NO WAY you can prevent somebody from setting up their own
private oracle instance.  It they have access to dba_users in your database,
they can create the SAME users with the SAME passwords in their private
database.  And they can create database links in their private database.

Now, is this a problem?

__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Yong Huang
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM permissions

[Jamadagni, Rajendra]

That's why we have scripts which give us a report every few days on users that have 
db_links, any of the *_ANY_* privs (like alter any table), dba privs etc, also a list 
of some sensitive schemas too.

Our application support needed to work with users to grant/revoke roles and private 
synonyms. So, I wrote a package owned by "system" and completely controlled. Every 
action gets logged, even errors do get logged. If it finds unusual input, it goes to 
trace file. We are happy, app support is happy. That's the way we like it.

Raj 

-Original Message-
Sent: Friday, December 19, 2003 1:49 PM
To: Multiple recipients of list ORACLE-L



Maybe I'm a being a bit touchy here; but it seems that my comments about
having access to dba_users went completely unnoticed.  Let's put it this
way: There is NO WAY you can prevent somebody from setting up their own
private oracle instance.  It they have access to dba_users in your database,
they can create the SAME users with the SAME passwords in their private
database.  And they can create database links in their private database.

Now, is this a problem?
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jamadagni, Rajendra
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM permissions

[Jesse, Rich]

Sure it does, just not by default.  Check out the
07_DICTIONARY_ACCESSIBILITY parameter.

Enjoy!
Rich

Rich Jesse   System/Database Administrator
[EMAIL PROTECTED]  Quad/Tech Inc, Sussex, WI USA


-Original Message-
Sent: Friday, December 19, 2003 11:49 AM
To: Multiple recipients of list ORACLE-L


Hi, Raj,

9i doesn't allow a user with select any table privilege to view any object
owned by SYS. So the sys.link$ risk is gone. But select any dictionary, a
new
privilege in 9i, allows that. In practice, I always grant
select_catalog_role
to any developer, but refrain from granting select any dictionary or select
any
table. As DBAs, we should encourage developers to make full use of data
dictionary views and open the database to them as much as they can study it.
I
would help the consultant in your case instead of just throw back a "NO" to
him.

Yong Huang
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jesse, Rich
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM permissions

[Stephen.Lee]

Maybe I'm a being a bit touchy here; but it seems that my comments about
having access to dba_users went completely unnoticed.  Let's put it this
way: There is NO WAY you can prevent somebody from setting up their own
private oracle instance.  It they have access to dba_users in your database,
they can create the SAME users with the SAME passwords in their private
database.  And they can create database links in their private database.

Now, is this a problem?

> -Original Message-
> From: Michael Thomas [mailto:[EMAIL PROTECTED]
> Sent: Friday, December 19, 2003 12:34 PM
> To: Multiple recipients of list ORACLE-L
> Subject: RE: OEM permissions
> 
> 
> A possibly related question:
> I'm curious if everyone allows your developers to see
> V$SQL... views?  If not, then ... whatever ... no
> comment.
> 
> I'm disappointed with some perspectives in these
> threads regarding developers. Rather than close doors,
> why not use 'development' instances, and role based
> privs on the 'production' instance and grant the
> access required to the developers. E.g. Help them
> determine which Data Dictionary tables support their
> development?
> 
> Good luck.
> 
> --- Yong Huang <[EMAIL PROTECTED]> wrote:
> > Hi, Raj,
> > 
> > 9i doesn't allow a user with select any table
> > privilege to view any object
> > owned by SYS. So the sys.link$ risk is gone. But
> > select any dictionary, a new
> > privilege in 9i, allows that. In practice, I always
> > grant select_catalog_role
> > to any developer, but refrain from granting select
> > any dictionary or select any
> > table. As DBAs, we should encourage developers to
> > make full use of data
> > dictionary views and open the database to them as
> > much as they can study it. I
> > would help the consultant in your case instead of
> > just throw back a "NO" to
> > him.
> > 
> > Yong Huang
> > 
> > Jamadagni, Rajendra wrote:
> > 
> > Dennis,
> > 
> > "select any table" has to be a big no no ... anyone
> > can select from sys.link$.
> > But I am still trying how OEM can be used for
> > _development_?? what am I
> > missing? As for ...
> > One of our groups hired a new consultant and he
> > (claimed to have DBA
> > background) immediately shot off an email saying he
> > needed "select any table"
> > and "select catalog role" to do his work. We shot
> > off reply "Thanks for your
> > email, while we appreciate your requirements for
> > development, the privileges
> > you are requesting are a tad different than we grant
> > other developers. However
> > we request that you submit a justification for these
> > privileges and tell us how
> > your development would be affected without these and
> > we will accommodate your
> > request". This was 3 months ago and we _still_
> > haven't heard back.
> > 
> > __
> > Do you Yahoo!?
> > New Yahoo! Photos - easier uploading and sharing.
> > http://photos.yahoo.com/
> > -- 
> > Please see the official ORACLE-L FAQ:
> > http://www.orafaq.net
> > -- 
> > Author: Yong Huang
> >   INET: [EMAIL PROTECTED]
> > 
> > Fat City Network Services-- 858-538-5051
> > http://www.fatcity.com
> > San Diego, California-- Mailing list and web
> > hosting services
> >
> -
> > To REMOVE yourself from this mailing list, send an
> > E-Mail message
> > to: [EMAIL PROTECTED] (note EXACT spelling of
> > 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB
> > ORACLE-L
> > (or the name of mailing list you want to be removed
> > from).  You may
> > also send the HELP command for other information
> > (like subscribing).
> 
> 
> __
> Do you Yahoo!?
> Protect your identity with Yahoo! Mail AddressGuard
> http://antispam.yahoo.com/whatsnewfree
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: Michael Thomas
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message B

RE: OEM permissions

[Michael Thomas]

A possibly related question:
I'm curious if everyone allows your developers to see
V$SQL... views?  If not, then ... whatever ... no
comment.

I'm disappointed with some perspectives in these
threads regarding developers. Rather than close doors,
why not use 'development' instances, and role based
privs on the 'production' instance and grant the
access required to the developers. E.g. Help them
determine which Data Dictionary tables support their
development?

Good luck.

--- Yong Huang <[EMAIL PROTECTED]> wrote:
> Hi, Raj,
> 
> 9i doesn't allow a user with select any table
> privilege to view any object
> owned by SYS. So the sys.link$ risk is gone. But
> select any dictionary, a new
> privilege in 9i, allows that. In practice, I always
> grant select_catalog_role
> to any developer, but refrain from granting select
> any dictionary or select any
> table. As DBAs, we should encourage developers to
> make full use of data
> dictionary views and open the database to them as
> much as they can study it. I
> would help the consultant in your case instead of
> just throw back a "NO" to
> him.
> 
> Yong Huang
> 
> Jamadagni, Rajendra wrote:
> 
> Dennis,
> 
> "select any table" has to be a big no no ... anyone
> can select from sys.link$.
> But I am still trying how OEM can be used for
> _development_?? what am I
> missing? As for ...
> One of our groups hired a new consultant and he
> (claimed to have DBA
> background) immediately shot off an email saying he
> needed "select any table"
> and "select catalog role" to do his work. We shot
> off reply "Thanks for your
> email, while we appreciate your requirements for
> development, the privileges
> you are requesting are a tad different than we grant
> other developers. However
> we request that you submit a justification for these
> privileges and tell us how
> your development would be affected without these and
> we will accommodate your
> request". This was 3 months ago and we _still_
> haven't heard back.
> 
> __
> Do you Yahoo!?
> New Yahoo! Photos - easier uploading and sharing.
> http://photos.yahoo.com/
> -- 
> Please see the official ORACLE-L FAQ:
> http://www.orafaq.net
> -- 
> Author: Yong Huang
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051
> http://www.fatcity.com
> San Diego, California-- Mailing list and web
> hosting services
>
-
> To REMOVE yourself from this mailing list, send an
> E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of
> 'ListGuru') and in
> the message BODY, include a line containing: UNSUB
> ORACLE-L
> (or the name of mailing list you want to be removed
> from).  You may
> also send the HELP command for other information
> (like subscribing).


__
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard
http://antispam.yahoo.com/whatsnewfree
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Michael Thomas
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM permissions

[Yong Huang]

Hi, Raj,

9i doesn't allow a user with select any table privilege to view any object
owned by SYS. So the sys.link$ risk is gone. But select any dictionary, a new
privilege in 9i, allows that. In practice, I always grant select_catalog_role
to any developer, but refrain from granting select any dictionary or select any
table. As DBAs, we should encourage developers to make full use of data
dictionary views and open the database to them as much as they can study it. I
would help the consultant in your case instead of just throw back a "NO" to
him.

Yong Huang

Jamadagni, Rajendra wrote:

Dennis,

"select any table" has to be a big no no ... anyone can select from sys.link$.
But I am still trying how OEM can be used for _development_?? what am I
missing? As for ...
One of our groups hired a new consultant and he (claimed to have DBA
background) immediately shot off an email saying he needed "select any table"
and "select catalog role" to do his work. We shot off reply "Thanks for your
email, while we appreciate your requirements for development, the privileges
you are requesting are a tad different than we grant other developers. However
we request that you submit a justification for these privileges and tell us how
your development would be affected without these and we will accommodate your
request". This was 3 months ago and we _still_ haven't heard back.

__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Yong Huang
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM permissions

[jo_holvoet]

I believe a role 'OEM_MONITOR' is created in 9i when you create a DB; 
pre-9i you can create it yourself (via catsnmp.sql or something like that) 
and you can use that instead of granting specific other privileges. Oracle 
claims that it contains a minimum set of privileges for OEM use, but maybe 
you can trim it down further for your specific needs.
There are several notes on MetaLink about this; e.g. 216731.1.

mvg/regards

Jo






DENNIS WILLIAMS <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]
12/18/2003 16:34
Please respond to ORACLE-L

 
To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]>
cc: 
    Subject:RE: OEM permissions


Raj - Thanks for your reply. Were this a consultant, my reply would mirror
yours, and maybe not so diplomatically. 
   But basically I manage these databases on behalf of this manager, so 
when
he asks for "read-only" access, I can't really refuse. And I think he is
pretty competent as a DBA. He says that he prefers to use OEM instead of
Toad.
   What I'm really asking is what could these grants be used for besides
just reading data? If there are other actions that could be done, I could 
at
least ask him not to perform those actions, so if something bad happens I
have provided an alert ahead of time.
   For those who use OEM in your environment, does the SELECT_CATALOG_ROLE
and SELECT ANY DICTIONARY privileges sound pretty usual for OEM to be able
to scout out the info it needs to paint the pretty displays?
   Yes, I am checking out how this exposes links and what is available on
the other systems the links point to. I have also asked his group not to
create any database links. Fortunately we have relatively few links.
   Again, thanks for your advice.

Dennis Williams
DBA
Lifetouch, Inc.
[EMAIL PROTECTED] 

-Original Message-
Sent: Thursday, December 18, 2003 7:54 AM
To: Multiple recipients of list ORACLE-L


Dennis,

"select any table" has to be a big no no ... anyone can select from
sys.link$. But I am still trying how OEM can be used for _development_??
what am I missing? As for 

One of our groups hired a new consultant and he (claimed to have DBA
background) immediately shot off an email saying he needed "select any
table" and "select catalog role" to do his work. We shot off reply "Thanks
for your email, while we appreciate your requirements for development, the
privileges you are requesting are a tad different than we grant other
developers. However we request that you submit a justification for these
privileges and tell us how your development would be affected without 
these
and we will accommodate your request". This was 3 months ago and we 
_still_
haven't heard back.

Raj


Rajendra dot Jamadagni at nospamespn dot com
All Views expressed in this email are strictly personal.
QOTD: Any clod can have facts, having an opinion is an art !


-Original Message-
Sent: Thursday, December 18, 2003 8:24 AM
To: Multiple recipients of list ORACLE-L


We have a new manager that wants his group to use OEM for development
access, as an alternative to Toad. He has requested a special Oracle 
userid
with the following grants:
 SELECT_CATALOG_ROLE
 SELECT ANY DICTIONARY
 SELECT ANY TABLE

Does this seem reasonable for OEM? The manager is responsible for the data
in the database, so I don't see a problem with him viewing the data. There
are few database links, and I'll be reviewing them. Any ideas on what
mischief could occur? Thanks.




**
This e-mail message is confidential, intended only for the named
recipient(s) above and may contain information that is privileged, 
attorney
work product or exempt from disclosure under applicable law. If you have
received this message in error, or are not the named recipient(s), please
immediately notify corporate MIS at (860) 766-2000 and delete this e-mail
message from your computer, Thank you.

**5
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jamadagni, Rajendra
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: DEN

RE: OEM permissions - thanks!

[DENNIS WILLIAMS]

Raj, Thomas, Brad, Bill, anyone I forgot - I feel better about the situation
now. Thanks for letting me run this issue past you.

Dennis Williams
DBA
Lifetouch, Inc.
[EMAIL PROTECTED] 

-Original Message-
Sent: Thursday, December 18, 2003 9:35 AM
To: Multiple recipients of list ORACLE-L


Raj - Thanks for your reply. Were this a consultant, my reply would mirror
yours, and maybe not so diplomatically. 
   But basically I manage these databases on behalf of this manager, so when
he asks for "read-only" access, I can't really refuse. And I think he is
pretty competent as a DBA. He says that he prefers to use OEM instead of
Toad.
   What I'm really asking is what could these grants be used for besides
just reading data? If there are other actions that could be done, I could at
least ask him not to perform those actions, so if something bad happens I
have provided an alert ahead of time.
   For those who use OEM in your environment, does the SELECT_CATALOG_ROLE
and SELECT ANY DICTIONARY privileges sound pretty usual for OEM to be able
to scout out the info it needs to paint the pretty displays?
   Yes, I am checking out how this exposes links and what is available on
the other systems the links point to. I have also asked his group not to
create any database links. Fortunately we have relatively few links.
   Again, thanks for your advice.

Dennis Williams
DBA
Lifetouch, Inc.
[EMAIL PROTECTED] 

-Original Message-
Sent: Thursday, December 18, 2003 7:54 AM
To: Multiple recipients of list ORACLE-L


Dennis,

"select any table" has to be a big no no ... anyone can select from
sys.link$. But I am still trying how OEM can be used for _development_??
what am I missing? As for 

One of our groups hired a new consultant and he (claimed to have DBA
background) immediately shot off an email saying he needed "select any
table" and "select catalog role" to do his work. We shot off reply "Thanks
for your email, while we appreciate your requirements for development, the
privileges you are requesting are a tad different than we grant other
developers. However we request that you submit a justification for these
privileges and tell us how your development would be affected without these
and we will accommodate your request". This was 3 months ago and we _still_
haven't heard back.

Raj


Rajendra dot Jamadagni at nospamespn dot com
All Views expressed in this email are strictly personal.
QOTD: Any clod can have facts, having an opinion is an art !


-Original Message-
Sent: Thursday, December 18, 2003 8:24 AM
To: Multiple recipients of list ORACLE-L


We have a new manager that wants his group to use OEM for development
access, as an alternative to Toad. He has requested a special Oracle userid
with the following grants:
 SELECT_CATALOG_ROLE
 SELECT ANY DICTIONARY
 SELECT ANY TABLE

Does this seem reasonable for OEM? The manager is responsible for the data
in the database, so I don't see a problem with him viewing the data. There
are few database links, and I'll be reviewing them. Any ideas on what
mischief could occur? Thanks.




**
This e-mail message is confidential, intended only for the named
recipient(s) above and may contain information that is privileged, attorney
work product or exempt from disclosure under applicable law. If you have
received this message in error, or are not the named recipient(s), please
immediately notify corporate MIS at (860) 766-2000 and delete this e-mail
message from your computer, Thank you.

**5
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jamadagni, Rajendra
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: DENNIS WILLIAMS
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, inc

RE: OEM permissions

[Odland, Brad]

I would say OEM for dbas only. To difficult to manage for developers.

Dangerous. Too much low level stuff for managers and developers to poke
around with.

OEM is not really a development tool. 

2 cents




-Original Message-
Sent: Thursday, December 18, 2003 8:24 AM
To: Multiple recipients of list ORACLE-L



Wouldn't this allow viewing DBA_USERS?
I haven't tried this myself, but it seems that I could set up another oracle
instance, create a user identified by values, then create database link.

> -Original Message-
> 
> We have a new manager that wants his group to use OEM for development
> access, as an alternative to Toad. He has requested a special 
> Oracle userid
> with the following grants:
>  SELECT_CATALOG_ROLE
>  SELECT ANY DICTIONARY
>  SELECT ANY TABLE
> 
> Does this seem reasonable for OEM? The manager is responsible 
> for the data
> in the database, so I don't see a problem with him viewing 
> the data. There
> are few database links, and I'll be reviewing them. Any ideas on what
> mischief could occur? Thanks.
> 
> Dennis Williams
> DBA
> Lifetouch, Inc.
> [EMAIL PROTECTED] 
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: DENNIS WILLIAMS
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
> 
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: <[EMAIL PROTECTED]
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Odland, Brad
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM permissions

[Mercadante, Thomas F]

Dennis,

I think you are probably ok with this.  But the best way to do this is to
create an Oracle account, grant what he asks, and start OEM using that
account.  Try and change things and see what happens.  Then you will know
for sure what the impact is.

Good Luck!

Tom Mercadante
Oracle Certified Professional


-Original Message-
Sent: Thursday, December 18, 2003 10:35 AM
To: Multiple recipients of list ORACLE-L


Raj - Thanks for your reply. Were this a consultant, my reply would mirror
yours, and maybe not so diplomatically. 
   But basically I manage these databases on behalf of this manager, so when
he asks for "read-only" access, I can't really refuse. And I think he is
pretty competent as a DBA. He says that he prefers to use OEM instead of
Toad.
   What I'm really asking is what could these grants be used for besides
just reading data? If there are other actions that could be done, I could at
least ask him not to perform those actions, so if something bad happens I
have provided an alert ahead of time.
   For those who use OEM in your environment, does the SELECT_CATALOG_ROLE
and SELECT ANY DICTIONARY privileges sound pretty usual for OEM to be able
to scout out the info it needs to paint the pretty displays?
   Yes, I am checking out how this exposes links and what is available on
the other systems the links point to. I have also asked his group not to
create any database links. Fortunately we have relatively few links.
   Again, thanks for your advice.

Dennis Williams
DBA
Lifetouch, Inc.
[EMAIL PROTECTED] 

-Original Message-
Sent: Thursday, December 18, 2003 7:54 AM
To: Multiple recipients of list ORACLE-L


Dennis,

"select any table" has to be a big no no ... anyone can select from
sys.link$. But I am still trying how OEM can be used for _development_??
what am I missing? As for 

One of our groups hired a new consultant and he (claimed to have DBA
background) immediately shot off an email saying he needed "select any
table" and "select catalog role" to do his work. We shot off reply "Thanks
for your email, while we appreciate your requirements for development, the
privileges you are requesting are a tad different than we grant other
developers. However we request that you submit a justification for these
privileges and tell us how your development would be affected without these
and we will accommodate your request". This was 3 months ago and we _still_
haven't heard back.

Raj


Rajendra dot Jamadagni at nospamespn dot com
All Views expressed in this email are strictly personal.
QOTD: Any clod can have facts, having an opinion is an art !


-Original Message-
Sent: Thursday, December 18, 2003 8:24 AM
To: Multiple recipients of list ORACLE-L


We have a new manager that wants his group to use OEM for development
access, as an alternative to Toad. He has requested a special Oracle userid
with the following grants:
 SELECT_CATALOG_ROLE
 SELECT ANY DICTIONARY
 SELECT ANY TABLE

Does this seem reasonable for OEM? The manager is responsible for the data
in the database, so I don't see a problem with him viewing the data. There
are few database links, and I'll be reviewing them. Any ideas on what
mischief could occur? Thanks.




**
This e-mail message is confidential, intended only for the named
recipient(s) above and may contain information that is privileged, attorney
work product or exempt from disclosure under applicable law. If you have
received this message in error, or are not the named recipient(s), please
immediately notify corporate MIS at (860) 766-2000 and delete this e-mail
message from your computer, Thank you.

**5
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jamadagni, Rajendra
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: DENNIS WILLIAMS
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from th

RE: OEM permissions

[DENNIS WILLIAMS]

Raj - Thanks for your reply. Were this a consultant, my reply would mirror
yours, and maybe not so diplomatically. 
   But basically I manage these databases on behalf of this manager, so when
he asks for "read-only" access, I can't really refuse. And I think he is
pretty competent as a DBA. He says that he prefers to use OEM instead of
Toad.
   What I'm really asking is what could these grants be used for besides
just reading data? If there are other actions that could be done, I could at
least ask him not to perform those actions, so if something bad happens I
have provided an alert ahead of time.
   For those who use OEM in your environment, does the SELECT_CATALOG_ROLE
and SELECT ANY DICTIONARY privileges sound pretty usual for OEM to be able
to scout out the info it needs to paint the pretty displays?
   Yes, I am checking out how this exposes links and what is available on
the other systems the links point to. I have also asked his group not to
create any database links. Fortunately we have relatively few links.
   Again, thanks for your advice.

Dennis Williams
DBA
Lifetouch, Inc.
[EMAIL PROTECTED] 

-Original Message-
Sent: Thursday, December 18, 2003 7:54 AM
To: Multiple recipients of list ORACLE-L


Dennis,

"select any table" has to be a big no no ... anyone can select from
sys.link$. But I am still trying how OEM can be used for _development_??
what am I missing? As for 

One of our groups hired a new consultant and he (claimed to have DBA
background) immediately shot off an email saying he needed "select any
table" and "select catalog role" to do his work. We shot off reply "Thanks
for your email, while we appreciate your requirements for development, the
privileges you are requesting are a tad different than we grant other
developers. However we request that you submit a justification for these
privileges and tell us how your development would be affected without these
and we will accommodate your request". This was 3 months ago and we _still_
haven't heard back.

Raj


Rajendra dot Jamadagni at nospamespn dot com
All Views expressed in this email are strictly personal.
QOTD: Any clod can have facts, having an opinion is an art !


-Original Message-
Sent: Thursday, December 18, 2003 8:24 AM
To: Multiple recipients of list ORACLE-L


We have a new manager that wants his group to use OEM for development
access, as an alternative to Toad. He has requested a special Oracle userid
with the following grants:
 SELECT_CATALOG_ROLE
 SELECT ANY DICTIONARY
 SELECT ANY TABLE

Does this seem reasonable for OEM? The manager is responsible for the data
in the database, so I don't see a problem with him viewing the data. There
are few database links, and I'll be reviewing them. Any ideas on what
mischief could occur? Thanks.




**
This e-mail message is confidential, intended only for the named
recipient(s) above and may contain information that is privileged, attorney
work product or exempt from disclosure under applicable law. If you have
received this message in error, or are not the named recipient(s), please
immediately notify corporate MIS at (860) 766-2000 and delete this e-mail
message from your computer, Thank you.

**5
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jamadagni, Rajendra
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: DENNIS WILLIAMS
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM permissions

[Stephen.Lee]

Wouldn't this allow viewing DBA_USERS?
I haven't tried this myself, but it seems that I could set up another oracle
instance, create a user identified by values, then create database link.

> -Original Message-
> 
> We have a new manager that wants his group to use OEM for development
> access, as an alternative to Toad. He has requested a special 
> Oracle userid
> with the following grants:
>  SELECT_CATALOG_ROLE
>  SELECT ANY DICTIONARY
>  SELECT ANY TABLE
> 
> Does this seem reasonable for OEM? The manager is responsible 
> for the data
> in the database, so I don't see a problem with him viewing 
> the data. There
> are few database links, and I'll be reviewing them. Any ideas on what
> mischief could occur? Thanks.
> 
> Dennis Williams
> DBA
> Lifetouch, Inc.
> [EMAIL PROTECTED] 
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: DENNIS WILLIAMS
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
> 
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: <[EMAIL PROTECTED]
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM permissions

[Jamadagni, Rajendra]

Dennis,

"select any table" has to be a big no no ... anyone can select from sys.link$. But I 
am still trying how OEM can be used for _development_?? what am I missing? As for 

One of our groups hired a new consultant and he (claimed to have DBA background) 
immediately shot off an email saying he needed "select any table" and "select catalog 
role" to do his work. We shot off reply "Thanks for your email, while we appreciate 
your requirements for development, the privileges you are requesting are a tad 
different than we grant other developers. However we request that you submit a 
justification for these privileges and tell us how your development would be affected 
without these and we will accommodate your request". This was 3 months ago and we 
_still_ haven't heard back.

Raj

Rajendra dot Jamadagni at nospamespn dot com
All Views expressed in this email are strictly personal.
QOTD: Any clod can have facts, having an opinion is an art !


-Original Message-
Sent: Thursday, December 18, 2003 8:24 AM
To: Multiple recipients of list ORACLE-L


We have a new manager that wants his group to use OEM for development
access, as an alternative to Toad. He has requested a special Oracle userid
with the following grants:
 SELECT_CATALOG_ROLE
 SELECT ANY DICTIONARY
 SELECT ANY TABLE

Does this seem reasonable for OEM? The manager is responsible for the data
in the database, so I don't see a problem with him viewing the data. There
are few database links, and I'll be reviewing them. Any ideas on what
mischief could occur? Thanks.



**
This e-mail message is confidential, intended only for the named recipient(s) above 
and may contain information that is privileged, attorney work product or exempt from 
disclosure under applicable law. If you have received this message in error, or are 
not the named recipient(s), please immediately notify corporate MIS at (860) 766-2000 
and delete this e-mail message from your computer, Thank you.
**5
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jamadagni, Rajendra
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

OEM permissions

[DENNIS WILLIAMS]

We have a new manager that wants his group to use OEM for development
access, as an alternative to Toad. He has requested a special Oracle userid
with the following grants:
 SELECT_CATALOG_ROLE
 SELECT ANY DICTIONARY
 SELECT ANY TABLE

Does this seem reasonable for OEM? The manager is responsible for the data
in the database, so I don't see a problem with him viewing the data. There
are few database links, and I'll be reviewing them. Any ideas on what
mischief could occur? Thanks.

Dennis Williams
DBA
Lifetouch, Inc.
[EMAIL PROTECTED] 
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: DENNIS WILLIAMS
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

OEM: How to add Tunneling DB?

[jaysingh1]

Hi List,

I have OEM which is running on my local NT box. OEM repository is located in my local 
database/NT box.

I am connecting to all the databases which is running on Solaris thru tunneling for 
all DML and DDl activity.
Now I would like to add the databases which are running on Solaris to my OEM console 
(NOT standalone mode). How to accomplish this?

I cannot discover the node because the unix box is invisible from my local box.

Any help would be really appreciated.


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: 
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

OEM: Could not locate dispatch for OEM SDK

[jaysingh1]

Hi List,

When I try to open SQL Analyze utility from OEM, getting the following error in pop-up 
window.

"Could not locate dispatch for OEM SDK."

"VDOShell.exe" CLSIDFromProgID failed for ProgID OracleSMPConsole2"

Any help would be appreciated.






-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: 
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Unable to view reports in web browser using OEM console.

[dharminder]

I have been using the following setup.
Windows 2000 Prof. / Oracle 9.0.1 / OEM 9.0.1
While using OEM console, when I want to view the database report, it just 
popup a DOS windows, but it does not show the report in the web browser. But 
on the other hand, I can view the reports by opening the web browser to 
reporting web site http://myserver:3339/. 

Any idea what I can do to integrate my web browser with the OEM console.
Thanks. 

Dharminder Kumar 
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: 
 INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: how to drop an oem repository?

[Jose Luis Delgado]

Ryan...

try this:

1.- Backup your $ORACLE_HOME/sysman/config directory
files

2.- Delete them (or rename them, as you wish).

3.- Try again your DBCA.

HTH
JL

--- Ryan <[EMAIL PROTECTED]> wrote:
> I dropped an oem repository using the oem
> configuration assistant. Im now trying to use the
> GUI to create a new one. It says that I cannot
> create a new one, becuase another OEM 'service'
> exists. I dropped the user and the tablespace. How
> do i get rid of the service so i can make a new one?
> 
> 
> 1. I click configure local management server
> 2 says OMS on this machine is already configured do
> you want to edit?
> 3. then i cant login because i have dropped the
> user? 
> 


__
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jose Luis Delgado
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

how to drop an oem repository?

[Ryan]

I dropped an oem repository using the oem 
configuration assistant. Im now trying to use the GUI to create a new one. It 
says that I cannot create a new one, becuase another OEM 'service' exists. I 
dropped the user and the tablespace. How do i get rid of the service so i can 
make a new one? 
 
1. I click configure local management 
server
2 says OMS on this machine is already configured do 
you want to edit?
3. then i cant login because i have dropped the 
user? 

Re: how to drop an oem repository?

[Ryan]

ignore i figured it out. 

  - Original Message - 
  From: 
  Ryan 
  To: Multiple recipients of list ORACLE-L 
  
  Sent: Tuesday, October 14, 2003 2:14 
  PM
  Subject: how to drop an oem 
  repository?
  
  I dropped an oem repository using the oem 
  configuration assistant. Im now trying to use the GUI to create a new one. It 
  says that I cannot create a new one, becuase another OEM 'service' exists. I 
  dropped the user and the tablespace. How do i get rid of the service so i can 
  make a new one? 
   
  1. I click configure local management 
  server
  2 says OMS on this machine is already configured 
  do you want to edit?
  3. then i cant login because i have dropped the 
  user? 

Re: OEM Problem?

[Gaja Krishna Vaidyanatha]

Ryan,

If your goal is to drop the user, then the following
should work:

SQL> drop user "OEM_RYAN-2LE36OFJCE_OEMREP" cascade;

Alternatively, if you still want to connect to this
user, the following should work too:

SQL> connect "OEM_RYAN-2LE36OFJCE_OEMREP"

Then when prompted for the password, type it in.
Bottom line is that you need to use "double quotes"
around the username,  needs to be in upper case.

Hope that helps,

Gaja
--- Ryan <[EMAIL PROTECTED]> wrote:
> for some reason when i created the OEM repositiory
> the OEM assistant created the following username. 
> 
> OEM_RYAN-2LE36OFJCE_OEMREP
> 
> I cant connect to this user, drop it or alter it
> because of '-' in the name. how do i get rid of the
> repository and start over? 
> 
> 
> 


=
Gaja Krishna Vaidyanatha
Principal Technical Product Manager, 
Application Performance Management, Veritas Corporation
E-mail : [EMAIL PROTECTED]  Phone: (650)-527-3180
Website: http://www.veritas.com

__
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Gaja Krishna Vaidyanatha
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

OEM Problem?

[Ryan]

for some reason when i created the OEM repositiory 
the OEM assistant created the following username. 
 
OEM_RYAN-2LE36OFJCE_OEMREP
 
I cant connect to this user, drop it or alter it 
because of '-' in the name. how do i get rid of the repository and start over? 

 
 

RE: probe database using OEM event or job

[Reardon, Bruce (CALBBAY)]

Hi,
Can you just use the built in OEM event "Database UpDown" - though perhaps this only 
comes with the Diagnostics Pack for OEM.

As for a user defined test - You could just do something like "select user from dual" 
and hope it comes back if it can't connect - I haven't tried this.
However, I think you'll find that user defined tests use the agent which connects via 
BEQ rather than via the listener so this won't help that much.

In the diagnostics pack you also have a listener SQLNet up down event

You could also write all this in a batch / perl / windows script / whatever language.

Have a look at Metalink notes to see all the events that are predefined:
Note:69563.1  Subject:  Overview of all the Event TCL files used by Enterprise Manager 
Note:69592.1  Subject:  Quick reference of the events available in Enterprise Manager 

The following forum has good info on user defined events:
From: Christian Lang 31-Oct-00 15:03 
Subject: User Defined SQL Test 

As for the sleep command - get it as its the easiest way (and part of resource kit)
However, there are some (obscure) ways to emulate this functionality, eg:

44. How to pause in a batch for a preset number of seconds?
===

You can use the MS-DOS CHOICE.COM command for the purpose as the
example below demonstrates
  @echo off
  echo Testing a delay, starting at ...
  echo.| time | find /v "new"
  choice /c:. /t:.,5 /n Pausing for five seconds
  echo ending at ...
  echo.| time | find /v "new"
The choice command was introduced with MS-DOS 6. If you have an
earlier MS-DOS version you can use my similar CHOOSE.EXE from
ftp://garbo.uwasa.fi/pc/ts/tsutlf16.zip.
   For pauses longer than 99 seconds see the item #64. For better
understanding the CHOICE parameter values, see the end of item #40.

Tom Lavedas points out that if one uses
  type nul | choice /c:. /t:.,5 /n Pausing for five seconds
"The piping of the output from the TYPE command into CHOICE acts to
defeat keyboard entry for the wait period."

Also see the later item "How can I write a "SLEEP" command to pause
for a certain time?" for more on this question.


64. How can I write a "SLEEP" command to pause for a certain time?
==

If the delay you want is no more than 99 seconds the answer is
fairly simple. All you need is the CHOICE command with appropriate
options. For example the following batch pauses for ten seconds. You
can, if you wish, break the wait by pressing the key b.
  @echo off
  choice /cb /t:b,10 /n > nul
  rem  ^^ "use b as the a break the wait key"
For longer waits a loop is needed. The following batch sets a ten
minute wait. Remove the line "echo %count_%" if you do not wish any
progress report output.
  @echo off
  set count_=.
  set target_=...
  :_loop
  echo %count_%
  choice /cb /t:b,60 /n > nul
  set count_=.%count_%
  if not "%count_%"=="%target_%" goto _loop
  :_end
As so many items, parts of this one owe to the insights of Tom
Lavedas, and parts are totally my own (un)doing.


For this and other useful (?) batch tricks see:
Resources NT batch specific


news:alt.msdos.batch.nt
http://groups.google.com/groups?oi=djq&as_ugroup=alt.msdos.batch.nt


UltraTech knowledge base
http://www.ultratech-llc.com/Personal/Files/?File=ResKit.TXT


JSI Windows NT/2000 Tips, Tricks, Registry Hacks and more...
http://www.jsiinc.com/Reghack.htm#Tip%20Index


NT/Win2k scripting - good on bat differences between NT and DOS
http://www.seanet.com/~shardy/ntscript.html




Resources batch general:


Batfiles: The DOS batch file programming handbook and tutorial - good
examples and hints / tricks
http://home7.inet.tele.dk/batfiles/

 
DOS Batch Language: A personal view by Ted Davis - good intro for beginners
http://131.151.112.77/~batch/batchtoc.htm


news:alt.msdos.batch
http://groups.google.com/groups?oi=djq&as_ugroup=alt.msdos.batch


Multilingual Batch Programs
http://gearbox.maem.umr.edu/~batch/multilingual.html


Programs by Prof. Timo Salmi  - THE author of the alt.msdos.batch FAQ
http://garbo.uwasa.fi/pc/ts.html  and then search for 
tsbat67.zip 184193 Mar 8 11:16
A collection of useful batch files and tricks, T.Salmi 

HTH,
Bruce Reardon

-Original Message-
Sent: Wednesday, 1 October 2003 9:54 AM
To: Multiple recipients of list ORACLE-L


On unix you could do:

while true; do tnsping ALIAS > out || mail [EMAIL PROTECTED] < out; sleep 300; done;

(obviously you have to replace ALIAS and e-mail address there)
It will send you the tnsping output if it happens to fail. (you'll get a failure 
message after every 300 seconds though).

On w

Re: probe database using OEM event or job

[Tanel Poder]

Title: probe database using OEM event or job



On unix you could do:
 
while true; do tnsping ALIAS > out || mail 
[EMAIL PROTECTED] < out; sleep 
300; done;
 
(obviously you have to replace ALIAS and e-mail 
address there)
It will send you the tnsping output if it 
happens to fail. (you'll get a failure message after every 300 seconds 
though).
 
On windows, you could play around with %ERRORLEVEL% 
and goto cycles... You have to download sleep command though, Windows does not 
have such extraordinarily complicated scientific tool in standard 
package.
 
Tanel.
 
 

  - Original Message - 
  From: 
  Baylis, 
  John 
  To: Multiple recipients of list ORACLE-L 
  
  Sent: Wednesday, October 01, 2003 2:14 
  AM
  Subject: probe database using OEM event 
  or job
  
  Can someone help me with this? 
  Running Oracle 9.2.0.3 under win2000 

  I have an application server that occasionally 
  looses connectivity with the listener on the database server although other 
  application servers have no problems connecting.
  I get error 'Fatal NI connect error 12535' 
  
  I would like to setup an OEM event (user defined?) 
  or user defined job that must run from the application server having the 
  problem which will test the connection to the listener on the database server 
  (could be like a tnsping XXX) and if it is unsuccessful, notify me via email, 
  pager, etc.
  has anyone done this? Can it be done with a TCL script? Any samples appreciated? 
  
  John Baylis Database Administrator Canadian Forest Products Ltd. Vancouver B.C. Canada 
  (604) 697-6476 
  (Office) (604) 
  313-6054 (Cell) 

probe database using OEM event or job

[Baylis, John]

Title: probe database using OEM event or job





Can someone help me with this?


Running Oracle 9.2.0.3 under win2000



I have an application server that occasionally looses connectivity with the listener on the database server although other application servers have no problems connecting.

I get error 'Fatal NI connect error 12535'


I would like to setup an OEM event (user defined?) or user defined job that must run from the application server having the problem which will test the connection to the listener on the database server (could be like a tnsping XXX) and if it is unsuccessful, notify me via email, pager, etc.

has anyone done this?
Can it be done with a TCL script? Any samples appreciated?




John Baylis
Database Administrator
Canadian Forest Products Ltd.
Vancouver B.C. Canada


(604) 697-6476 (Office)
(604) 313-6054 (Cell)

9iAS OEM web site screens

[Boivin, Patrice J]

Is there a way to speed up the response time from these screens?

(at port 1810)

Sometimes it takes up to a minute before the screens come back.

Patrice Boivin
Systems Analyst (Oracle Certified DBA)

Systems Admin & Operations | Admin. et Exploit. des systèmes
Technology Services| Services technologiques
Informatics Branch | Direction de l'informatique 
Maritimes Region, DFO  | Région des Maritimes, MPO

E-Mail: [EMAIL PROTECTED]

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Boivin, Patrice J
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: Jobs and OEM... how to

[Igor Neyman]

Since DBMS_JOB executes PL/SQL code (and that's what you want to use),
you'll have to write an external stored procedure, which calls Export,
wrap it in PL/SQL procedure, and call it from DBMS_JOB.

Igor Neyman, OCP DBA
[EMAIL PROTECTED]



-Original Message-
Jose Luis Delgado
Sent: Tuesday, September 09, 2003 10:29 AM
To: Multiple recipients of list ORACLE-L

Hi Stefick...

thanks for your input...

well, I was thinking about dbms_job, may be I was not
so clear...

thanks again.

Regards
JL

--- Stefick Ronald S Contr ESC/HRIDD
<[EMAIL PROTECTED]> wrote:
> Perl and cron.
> 
> 
> -Original Message-
> Sent: Tuesday, September 09, 2003 10:04 AM
> To: Multiple recipients of list ORACLE-L
> 
> 
> Hi to everybody!!
> 
> I would like to create a job that EXPort my
> database,
> but... I *do not* want to use OEM.
> 
> OEM uses tcl and the intelligent agent to schedule
> its
> jobs...
> 
> how can I create a job that can export my database?
> (no problem if I have to program with tcl files)
> 
> Any ideas? any sample (would be better :-)
> 
> TIA
> 
> JL
> 
> 
> __
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site
> design software
> http://sitebuilder.yahoo.com
> -- 
> Please see the official ORACLE-L FAQ:
> http://www.orafaq.net
> -- 
> Author: Jose Luis Delgado
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051
> http://www.fatcity.com
> San Diego, California-- Mailing list and web
> hosting services
>
-
> To REMOVE yourself from this mailing list, send an
> E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of
> 'ListGuru') and in the
> message BODY, include a line containing: UNSUB
> ORACLE-L (or the name of
> mailing list you want to be removed from).  You may
> also send the HELP
> command for other information (like subscribing).
> 


__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jose Luis Delgado
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Igor Neyman
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: Jobs and OEM... how to

[Jack van Zanen]

How about a shell script, scheduled with AT or CRON?


-Original Message-
Sent: Tuesday, September 09, 2003 5:04 PM
To: Multiple recipients of list ORACLE-L


Hi to everybody!!

I would like to create a job that EXPort my database,
but... I *do not* want to use OEM.

OEM uses tcl and the intelligent agent to schedule its
jobs...

how can I create a job that can export my database?
(no problem if I have to program with tcl files)

Any ideas? any sample (would be better :-)

TIA

JL


__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jose Luis Delgado
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the
message BODY, include a line containing: UNSUB ORACLE-L (or the name of
mailing list you want to be removed from).  You may also send the HELP
command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jack van Zanen
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: Jobs and OEM... how to

[Jose Luis Delgado]

Hi Stefick...

thanks for your input...

well, I was thinking about dbms_job, may be I was not
so clear...

thanks again.

Regards
JL

--- Stefick Ronald S Contr ESC/HRIDD
<[EMAIL PROTECTED]> wrote:
> Perl and cron.
> 
> 
> -Original Message-
> Sent: Tuesday, September 09, 2003 10:04 AM
> To: Multiple recipients of list ORACLE-L
> 
> 
> Hi to everybody!!
> 
> I would like to create a job that EXPort my
> database,
> but... I *do not* want to use OEM.
> 
> OEM uses tcl and the intelligent agent to schedule
> its
> jobs...
> 
> how can I create a job that can export my database?
> (no problem if I have to program with tcl files)
> 
> Any ideas? any sample (would be better :-)
> 
> TIA
> 
> JL
> 
> 
> __
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site
> design software
> http://sitebuilder.yahoo.com
> -- 
> Please see the official ORACLE-L FAQ:
> http://www.orafaq.net
> -- 
> Author: Jose Luis Delgado
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051
> http://www.fatcity.com
> San Diego, California-- Mailing list and web
> hosting services
>
-
> To REMOVE yourself from this mailing list, send an
> E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of
> 'ListGuru') and in the
> message BODY, include a line containing: UNSUB
> ORACLE-L (or the name of
> mailing list you want to be removed from).  You may
> also send the HELP
> command for other information (like subscribing).
> 


__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jose Luis Delgado
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: Jobs and OEM... how to

[Stefick Ronald S Contr ESC/HRIDD]

Title: RE: Jobs and OEM... how to





Perl and cron.



-Original Message-
From: Jose Luis Delgado [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, September 09, 2003 10:04 AM
To: Multiple recipients of list ORACLE-L
Subject: Jobs and OEM... how to



Hi to everybody!!


I would like to create a job that EXPort my database,
but... I *do not* want to use OEM.


OEM uses tcl and the intelligent agent to schedule its
jobs...


how can I create a job that can export my database?
(no problem if I have to program with tcl files)


Any ideas? any sample (would be better :-)


TIA


JL



__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jose Luis Delgado
  INET: [EMAIL PROTECTED]


Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California    -- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from).  You may also send the HELP command for other information (like subscribing).

Jobs and OEM... how to

[Jose Luis Delgado]

Hi to everybody!!

I would like to create a job that EXPort my database,
but... I *do not* want to use OEM.

OEM uses tcl and the intelligent agent to schedule its
jobs...

how can I create a job that can export my database?
(no problem if I have to program with tcl files)

Any ideas? any sample (would be better :-)

TIA

JL


__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jose Luis Delgado
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: OEM

[Nuno Souto]

S. Don't say that in front of
any of the Oracle boffins...
It's like a religion.

Cheers
Nuno Souto
[EMAIL PROTECTED]
- Original Message - 
To: "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]>
Sent: Monday, August 25, 2003 4:29 AM
> 
> Piece of junk.  I'll stick with the scripts.
> 


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Nuno Souto
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: OEM

[Jared Still]

Last night I decided to give OEM another try.

Launched the configuration manager, installed the repository, so
far, so good.

Tried to discover a couple of nodes.

First tried rsysdevdb, a linux box with 8.1.7 and 9.2.0 on it.

Since there is no agent running there, I had the opportunity to
manually configure it and add 2 databases.

So far, so good.

Next I added the rsyscimdev node.  Since there is apparently an
agent running on this Win2k box, it discovered the node without
a problem.

So far, so good.

Next I tried to add a database to the node, as the 'discovery'
process did not find it.  Right click on the node, click on 
'create database'.  This didn't seem right, but after clicking and
right clicking on everything in sight, (including all menu options)
it was the only option that looked remotely like a method of adding
a database to the node.

When I clicked on it, I was greeted with an error message
"No Active Session Selected".

Huh?  What's an "active session"?  Wouldn't it just be easier to tell
me what I should do, rather than tell me what I just did that was
wrong.

Piece of junk.  I'll stick with the scripts.

Jared


On Wed, 2003-08-20 at 10:39, Jay Hostetter wrote:
> In my experience, OEM doesn't work well with any version.
> 
> >>> [EMAIL PROTECTED] 08/20/03 12:59PM >>>
> Does OEM 9.2.0.1 works well with 8.1.7.4 database ? or in general with all versions 
> of databases (7.3,8.0,8i,9i ) ? Does it recognise underline db version and sends 
> commands appropriately . Any Idea ?
> 
> thanks,
> -ak
> 
> 
> 
> **DISCLAIMER
> This e-mail message and any files transmitted with it are intended for the use of 
> the individual or entity to which they are addressed and may contain information 
> that is privileged, proprietary and confidential. If you are not the intended 
> recipient, you may not use, copy or disclose to anyone the message or any 
> information contained in the message. If you have received this communication in 
> error, please notify the sender and delete this e-mail message. The contents do not 
> represent the opinion of D&E except to the extent that it relates to their official 
> business.
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: Jay Hostetter
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
> 


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jared Still
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: OEM

[Yechiel Adar]

We use OEM 9.2.01 with 8.16.
Some of the features does not work but everything that 
should work is working.
 
BTW - Anybody knows if the SQL tuner in OEM know about the 
CASE already?
 
Yechiel AdarMehish

  - Original Message - 
  From: 
  AK 
  To: Multiple recipients of list ORACLE-L 
  Sent: Wednesday, August 20, 2003 6:59 
  PM
  Subject: OEM
  
  Does OEM 9.2.0.1 works well with 8.1.7.4 database 
  ? or in general with all versions of databases (7.3,8.0,8i,9i ) ? Does it 
  recognise underline db version and sends commands appropriately . Any Idea 
  ?
   
  thanks,
  -ak
   

Re: OEM

[Hemant K Chitale]

I am able to use OEM 9.2.0.1 against 8.0.4-8.0.6 and 8.1.6-8.1.7
databases.  
Hemant

At 08:59 AM 20-08-03 -0800, you wrote:
Does OEM
9.2.0.1 works well with 8.1.7.4 database ? or in general with all
versions of databases (7.3,8.0,8i,9i ) ? Does it recognise underline db
version and sends commands appropriately . Any Idea ?
 
thanks,
-ak
 

Hemant K Chitale
Oracle 9i Database Administrator Certified Professional
My personal web site is : 
http://hkchital.tripod.com


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Hemant K Chitale
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM

[Ruth Gramolini]

Have a look at the compatibility matrix for OEM. 9.0.2.3 doesn't do
everything it should with 8.0.x and 8.1.7 doesn't run on XP machines.
There are alot of caveats so check the specs for your combination.

Ruth

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
> Jay Hostetter
> Sent: Wednesday, August 20, 2003 1:39 PM
> To: Multiple recipients of list ORACLE-L
> Subject: Re: OEM
>
>
> In my experience, OEM doesn't work well with any version.
>
> >>> [EMAIL PROTECTED] 08/20/03 12:59PM >>>
> Does OEM 9.2.0.1 works well with 8.1.7.4 database ? or in general
> with all versions of databases (7.3,8.0,8i,9i ) ? Does it
> recognise underline db version and sends commands appropriately .
> Any Idea ?
>
> thanks,
> -ak
>
>
>
> **DISCLAIMER
> This e-mail message and any files transmitted with it are
> intended for the use of the individual or entity to which they
> are addressed and may contain information that is privileged,
> proprietary and confidential. If you are not the intended
> recipient, you may not use, copy or disclose to anyone the
> message or any information contained in the message. If you have
> received this communication in error, please notify the sender
> and delete this e-mail message. The contents do not represent the
> opinion of D&E except to the extent that it relates to their
> official business.
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: Jay Hostetter
>   INET: [EMAIL PROTECTED]
>
> Fat City Network Services-- 858-538-5051 http://www.fatcity.com
> San Diego, California-- Mailing list and web hosting services
> -
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Ruth Gramolini
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: OEM

[Jay Hostetter]

In my experience, OEM doesn't work well with any version.

>>> [EMAIL PROTECTED] 08/20/03 12:59PM >>>
Does OEM 9.2.0.1 works well with 8.1.7.4 database ? or in general with all versions of 
databases (7.3,8.0,8i,9i ) ? Does it recognise underline db version and sends commands 
appropriately . Any Idea ?

thanks,
-ak



**DISCLAIMER
This e-mail message and any files transmitted with it are intended for the use of the 
individual or entity to which they are addressed and may contain information that is 
privileged, proprietary and confidential. If you are not the intended recipient, you 
may not use, copy or disclose to anyone the message or any information contained in 
the message. If you have received this communication in error, please notify the 
sender and delete this e-mail message. The contents do not represent the opinion of 
D&E except to the extent that it relates to their official business.
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jay Hostetter
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

OEM

[AK]

Does OEM 9.2.0.1 works well with 8.1.7.4 database ? 
or in general with all versions of databases (7.3,8.0,8i,9i ) ? Does it 
recognise underline db version and sends commands appropriately . Any Idea 
?
 
thanks,
-ak
 

change manager in OEM

[AK]

Do you guys use change Manager in OEM. At first 
instacce it looked appealing to me . I had seen other code management softwares 
but they were limited to "only program code " management  .Everytime some 
tables or schema change occure you have write bunch of scripts to propagate 
those changes to the target dbs .
Are there any similer tools , to compare with 
?
 
 
Thanks,-Ak

Oracle Tools Comparable with OEM ?

[VIVEK_SHARMA]

Any Oracle Tools Comparable with OEM having 
Free Evaluation Copy or Freeware for Download  ? 

 

Any names ,  Links etc ?

 

Thanks

 

RE: OEM Repository Problem

[Munish Bajaj]

Thanks Wolfgang,

The Solution provided by u was great and has worked.

Regards
Munish Bajaj

-Original Message-
Sent: Tuesday, July 15, 2003 18:00
To: Multiple recipients of list ORACLE-L


This is a shot in the dark, but try and delete (or rename) 
\sysman\config\omsconfig.properties

At 10:14 PM 7/14/2003 -0800, you wrote:
>Hi Listers,
>
>I had OEM repository on my database installed on my PC.
>
>Accidentally I dropped the database. Now I have recreated the database. 
>But an not able to use this database to create New OEM repository as the 
>OEM config assistant says that the database already had a repository 
>installed. If I try to drop the repository it gives me error as the 
>repository is not actually present. Please tell me if anyone of u knows 
>how to solve this problem. Do I have to reinstall the Oracle Software
again.

Wolfgang Breitling
Centrex Consulting Corporation
http://www.centrexcc.com

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Wolfgang Breitling
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Munish Bajaj
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: OEM Repository Problem

[Wolfgang Breitling]

This is a shot in the dark, but try and delete (or rename) 
\sysman\config\omsconfig.properties

At 10:14 PM 7/14/2003 -0800, you wrote:
Hi Listers,

I had OEM repository on my database installed on my PC.

Accidentally I dropped the database. Now I have recreated the database. 
But an not able to use this database to create New OEM repository as the 
OEM config assistant says that the database already had a repository 
installed. If I try to drop the repository it gives me error as the 
repository is not actually present. Please tell me if anyone of u knows 
how to solve this problem. Do I have to reinstall the Oracle Software again.
Wolfgang Breitling
Centrex Consulting Corporation
http://www.centrexcc.com
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Wolfgang Breitling
 INET: [EMAIL PROTECTED]
Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

OEM Repository Problem

[Munish Bajaj]

Hi Listers,
 
I had OEM repository on my 
database installed on my PC.
 
Accidentally I dropped the 
database. Now I have recreated the database. But an not able to use this 
database to create New OEM repository as the OEM config assistant says that the 
database already had a repository installed. If I try to drop the repository it 
gives me error as the repository is not actually present. Please tell me if 
anyone of u knows how to solve this problem. Do I have to reinstall the Oracle 
Software again.
 
Thanks to all in 
advance
 
Regards
Munish 
Bajaj

Re: OEM tools

[Gabriel Aragon]

mmm I dont have the Tuning Pack option in my Tools
menu, I dont understand, it's supossed to be the last
version:

Oracle(R) Entrepise Manager
Version 9.2.0.1.0 Production
Copyright 1998,2002, Oracle Corporation
 
maybe a bad installation?

--- Kirtikumar Deshpande
<[EMAIL PROTECTED]> wrote:
> 
> Tools -> Tuning Pack -> Tablespace Map
> 
> - Kirti
> 
> --- Gabriel Aragon <[EMAIL PROTECTED]> wrote:
> > Hi, I'm using the OEM 92010 with oracle 92 when I
> look
> > for the option "SHOW TABLESPACE MAP" I can't find
> it,
> > I remember using the OEM with 806 oracle DB and
> that
> > option was available choosing
> > STORAGE->TABLESPACES->tb_name and then click right
> > button, in the database's tree. 
> > 
> > What happened with the TS Map? Is it a problem
> with
> > the OEM version or am I missing something?
> > 
> > Any Ideas?
> > TIA
> > Gabriel
> > 
> >  
> > 
> 
> __
> Do you Yahoo!?
> SBC Yahoo! DSL - Now only $29.95 per month!
> http://sbc.yahoo.com
> -- 
> Please see the official ORACLE-L FAQ:
> http://www.orafaq.net
> -- 
> Author: Kirtikumar Deshpande
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services-- 858-538-5051
> http://www.fatcity.com
> San Diego, California-- Mailing list and web
> hosting services
>
-
> To REMOVE yourself from this mailing list, send an
> E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of
> 'ListGuru') and in
> the message BODY, include a line containing: UNSUB
> ORACLE-L
> (or the name of mailing list you want to be removed
> from).  You may
> also send the HELP command for other information
> (like subscribing).


=
"Any dream worth having is a dream worth fighting for"(Cualquier sueño que valga la 
pena tener, es un sueño por el que vale la pena luchar)Charles Xavier

__
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Gabriel Aragon
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM tools

[Jesse, Rich]

Click on:

$ -> $$ -> $$$

Just keep issuing the P.O.s to Oracle and sooner or later you'll get to
it...

Rich

Rich Jesse   System/Database Administrator
[EMAIL PROTECTED]  Quad/Tech Inc, Sussex, WI USA


> -Original Message-
> From: Kirtikumar Deshpande [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, July 09, 2003 1:40 PM
> To: Multiple recipients of list ORACLE-L
> Subject: Re: OEM tools
> 
> 
> 
> Tools -> Tuning Pack -> Tablespace Map
> 
> - Kirti
> 
> --- Gabriel Aragon <[EMAIL PROTECTED]> wrote:
> > Hi, I'm using the OEM 92010 with oracle 92 when I look
> > for the option "SHOW TABLESPACE MAP" I can't find it,
> > I remember using the OEM with 806 oracle DB and that
> > option was available choosing
> > STORAGE->TABLESPACES->tb_name and then click right
> > button, in the database's tree. 
> > 
> > What happened with the TS Map? Is it a problem with
> > the OEM version or am I missing something?
> > 
> > Any Ideas?
> > TIA
> > Gabriel
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jesse, Rich
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: OEM tools

[Kirtikumar Deshpande]

Tools -> Tuning Pack -> Tablespace Map

- Kirti

--- Gabriel Aragon <[EMAIL PROTECTED]> wrote:
> Hi, I'm using the OEM 92010 with oracle 92 when I look
> for the option "SHOW TABLESPACE MAP" I can't find it,
> I remember using the OEM with 806 oracle DB and that
> option was available choosing
> STORAGE->TABLESPACES->tb_name and then click right
> button, in the database's tree. 
> 
> What happened with the TS Map? Is it a problem with
> the OEM version or am I missing something?
> 
> Any Ideas?
> TIA
> Gabriel
> 
>  
> 

__
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Kirtikumar Deshpande
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM tools

[Mercadante, Thomas F]

It's still there.  It's labeled as "Show Tablespace Map" in the second
section.  Make sure that you have the Tablespace selected before you
right-click.

Tom Mercadante
Oracle Certified Professional


-Original Message-
Sent: Wednesday, July 09, 2003 2:15 PM
To: Multiple recipients of list ORACLE-L


Hi, I'm using the OEM 92010 with oracle 92 when I look
for the option "SHOW TABLESPACE MAP" I can't find it,
I remember using the OEM with 806 oracle DB and that
option was available choosing
STORAGE->TABLESPACES->tb_name and then click right
button, in the database's tree. 

What happened with the TS Map? Is it a problem with
the OEM version or am I missing something?

Any Ideas?
TIA
Gabriel

 

__
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Gabriel Aragon
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Mercadante, Thomas F
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

OEM tools

[Gabriel Aragon]

Hi, I'm using the OEM 92010 with oracle 92 when I look
for the option "SHOW TABLESPACE MAP" I can't find it,
I remember using the OEM with 806 oracle DB and that
option was available choosing
STORAGE->TABLESPACES->tb_name and then click right
button, in the database's tree. 

What happened with the TS Map? Is it a problem with
the OEM version or am I missing something?

Any Ideas?
TIA
Gabriel

 

__
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Gabriel Aragon
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: OEM 9i - saving/copying reports between repositories

[Kaing, Leng]

I've looked under oem_webstage and other directories but can't seem to find the files. 
oem_webstage has the index.html that shows the RESULTANT HTML of executing the report, 
but not the actual code to generate the report.

Have since logged a call to Oracle Support. Hope they come up with an answer rather 
than just the usual "not possible". Seems like I always get this reply with any 
questions relating to OEM. This thing looks good on the surface but if you try to do 
anything complicated...

---
 From: =?iso-8859-1?q?arun=20chakrapani=20rao?= <[EMAIL PROTECTED]>
 Date: Sat, 28 Jun 2003 05:08:12 +0100 (BST)
 Subject: Re: OEM 9i - saving/copying reports between repositories

--0-745746833-1056773292=:94064
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

the files are stored in oem_webstage directory
you will have to copy these files to the other location and give the path.
As you must be knowing  the oem reporting server should have the management server 
running on the same machine.
when you remove default reporting from the console it doesnt remove from the operating 
system side.
You can disable that report so that it doesnt show up on the webpage.

"Kaing, Leng" <[EMAIL PROTECTED]> wrote:
G'day all,

I've create a number of custom reports in one of our OMS and would copy them into 
another OMS. How does one go about doing this? Where are the reports stored? Is there 
a file that we can copy around? 

Or if we look at the problem in another way - OEM itself comes with a number of 
predefined reports. What if I accidentally removed it from my OMS? How do I get it 
back? Can we export and import OEM reports somehow? Or is there a file we can tell the 
OMS about? I don't really want to export and import the whole OEM schema. I just want 
certain reports to be copied from one OMS into another.

TIA,

Leng.

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Kaing, Leng
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Re: OEM 9i - saving/copying reports between repositories

[arun chakrapani rao]

the files are stored in oem_webstage directory
you will have to copy these files to the other location and give the path.
As you must be knowing  the oem reporting server should have the management server running on the same machine.
when you remove default reporting from the console it doesnt remove from the operating system side.
You can disable that report so that it doesnt show up on the webpage."Kaing, Leng" <[EMAIL PROTECTED]> wrote:
G'day all,I've create a number of custom reports in one of our OMS and would copy them into another OMS. How does one go about doing this? Where are the reports stored? Is there a file that we can copy around? Or if we look at the problem in another way - OEM itself comes with a number of predefined reports. What if I accidentally removed it from my OMS? How do I get it back? Can we export and import OEM reports somehow? Or is there a file we can tell the OMS about? I don't really want to export and import the whole OEM schema. I just want certain reports to be copied from one OMS into another.TIA,Leng.--Leng KaingEmail: [EMAIL PROTECTED]Phone: +61-3-9203-7589Mobile: +61-417-371-348-- Please see the official ORACLE-L FAQ: http://www.orafaq.net--
 Author: Kaing, LengINET: [EMAIL PROTECTED]Fat City Network Services -- 858-538-5051 http://www.fatcity.comSan Diego, California -- Mailing list and web hosting services-To REMOVE yourself from this mailing list, send an E-Mail messageto: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and inthe message BODY, include a line containing: UNSUB ORACLE-L(or the name of mailing list you want to be removed from). You mayalso send the HELP command for other information (like subscribing).
SMS using the Yahoo! 
Messenger;

Download latest version.

OEM 9i - saving/copying reports between repositories

[Kaing, Leng]

G'day all,

I've create a number of custom reports in one of our OMS and would copy them into 
another OMS. How does one go about doing this? Where are the reports stored? Is there 
a file that we can copy around? 

Or if we look at the problem in another way - OEM itself comes with a number of 
predefined reports. What if I accidentally removed it from my OMS? How do I get it 
back? Can we export and import OEM reports somehow? Or is there a file we can tell the 
OMS about? I don't really want to export and import the whole OEM schema. I just want 
certain reports to be copied from one OMS into another.

TIA,

Leng.



--
Leng Kaing
Email: [EMAIL PROTECTED]
Phone: +61-3-9203-7589
Mobile: +61-417-371-348

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Kaing, Leng
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM question

[Thater, William]

Stephen Lee scribbled on the wall in glitter crayon:

> The old simple snapshot replication is OK.  It's just that some of
> this later stuff makes you think they rounded up all the guys who
> have tape on their glasses and wear suspenders with their pants that
> are too short, gave them a drug to put them in an *extra* geeky mood,
> gave them unlimited amounts of Mountain Dew soda and whatever
> quantities of Jolt Cola that still existed, then turned them loose on
> replication and Advanced Queuing. 

hey!  i resemble that remark!;-)  OK well, i don't have tape on the
glasses.;-)  as for the Jolt "all the sugar and twice the caffeine" cola,
it's still made down the road in Rochester, NY.  and yes i still drink
it.;-)

--
Bill "Shrek" ThaterOracle DBA   BAARF Party member #25
   [EMAIL PROTECTED]
--
10 out of 5 doctors think it's OK to be schizofrenic. 
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Thater, William
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM question

[Stephen Lee]

The old simple snapshot replication is OK.  It's just that some of this
later stuff makes you think they rounded up all the guys who have tape on
their glasses and wear suspenders with their pants that are too short, gave
them a drug to put them in an *extra* geeky mood, gave them unlimited
amounts of Mountain Dew soda and whatever quantities of Jolt Cola that still
existed, then turned them loose on replication and Advanced Queuing.

> -Original Message-
> 
> > No No.  THOSE guys did replication.  Then the worst of the bunch
> > worked in conjunction with the authors of graduate Math 
> texts to come
> > up with Advanced Queuing.
> 
> somehow this makes me glad i work for cheap places that don't 
> use any of
> that.;-)
> 
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Stephen Lee
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM question

[Thater, William]

Stephen Lee scribbled on the wall in glitter crayon:

> No No.  THOSE guys did replication.  Then the worst of the bunch
> worked in conjunction with the authors of graduate Math texts to come
> up with Advanced Queuing.

somehow this makes me glad i work for cheap places that don't use any of
that.;-)

as for OEM, i always use it stand alone... but that's mostly because i'm too
dense to get it configured right to do anything else with it.;-)

--
Bill "Shrek" ThaterOracle DBA   BAARF Party member #25
   [EMAIL PROTECTED]
--
If the earth were flat one could equally well say that the apple fell on
Newton's head beacuse of gravity or that Newton's head hit the apple because
he and the surface of the earth were accelerating upward. - Albert Einstein
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Thater, William
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM question

[Stephen Lee]

No No.  THOSE guys did replication.  Then the worst of the bunch worked in
conjunction with the authors of graduate Math texts to come up with Advanced
Queuing.

-Original Message-
I have tried to automate various things with OEM jobs and events and
eventually decided that at and dbms_job worked perfectly adequately. bearing
in mind that DBMS_JOB is - I'm pretty sure - designed by a bunch of sadists
who have it in for Admin guys this is not a huge recommendation :( 

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Stephen Lee
  INET: [EMAIL PROTECTED]

Fat City Network Services-- 858-538-5051 http://www.fatcity.com
San Diego, California-- Mailing list and web hosting services
-
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: OEM question

[Niall Litchfield]

Title: Message



You 
are correct about the chicken/egg problem with the repository. You don't 
necessarily require a repository if you are using it as a management console 
rather than an application managament framework. 
 
I have 
tried to automate various things with OEM jobs and events and eventually decided 
that at and dbms_job worked perfectly adequately. bearing in mind that DBMS_JOB 
is - I'm pretty sure - designed by a bunch of sadists who have it in for Admin 
guys this is not a huge recommendation :( 
 
However OEM does allow you to generate a db change and then copy the 
correct sql syntax to your text editor.If your brain is fried this is kinda 
nice. 

Niall 
 

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
  Koivu, LisaSent: 17 June 2003 18:50To: Multiple 
  recipients of list ORACLE-LSubject: OEM 
  question
  Hello all, 
  I'm configuring OEM for the first time.  I see 
  it needs a repository to operate.  So for the db-up functionality, if the 
  database that contains your repository goes down, your db-up function is dead, 
  right?  Sounds like the rman catalog quandry.  YOu have a catalog to 
  backup your database, but then you have to backup your catalog...
  And just as a fyi:  I completed the upgrade 
  from 8.1.7.4->9.2.0.3 on Windows 2000 without incident last night.  It 
  actually went pretty quickly. 
  Thanks in advance for any comments about OEM. 
  
  Lisa Koivu Oracle Database Stressmonkey Fairfield Resorts, Inc. 5259 
  Coconut Creek Parkway Ft. Lauderdale, FL, 
  USA  33063 Office: 954-935-4117  
  Fax:    954-935-3639 
  Cell:    954-683-4459 
  "The sender 
  believes that this E-Mail and any attachments were free of any virus, worm, 
  Trojan horse, and/or malicious code when sent. This message and its 
  attachments could have been infected during transmission.  By reading the 
  message and opening any attachments, the recipient accepts full responsibility 
  for taking proactive and remedial action about viruses and other defects. The 
  sender's business entity is not liable for any loss or damage arising in any 
  way from this message or its attachments."-- Please see 
  the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Koivu, Lisa INET: 
  [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 
  http://www.fatcity.com San Diego, California -- Mailing list and web hosting 
  services - 
  To REMOVE yourself from this mailing list, send an E-Mail message to: 
  [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message 
  BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list 
  you want to be removed from). You may also send the HELP command for other 
  information (like subscribing).

Re: OEM question

[Ruth Gramolini]

Title: OEM question



Lisa, 
You can put the catalog in any database.  I 
have mine in a separate database right now and use rman to back it up.  I 
run it in archivelog mode of course.  It takes less than a minute to back 
it up, including the archivelogs.  I used to have it with my rman 
catalog but since I don't use rman to back up my rman catalog (I do cold backups 
of this when no backups are being run) it is easier to have it by 
itself.
 
Ruth

  - Original Message - 
  From: 
  Koivu, Lisa 
  To: Multiple recipients of list ORACLE-L 
  
  Sent: Tuesday, June 17, 2003 1:49 
PM
  Subject: OEM question
  
  Hello all, 
  I'm configuring OEM for the first time.  I see 
  it needs a repository to operate.  So for the db-up functionality, if the 
  database that contains your repository goes down, your db-up function is dead, 
  right?  Sounds like the rman catalog quandry.  YOu have a catalog to 
  backup your database, but then you have to backup your catalog...
  And just as a fyi:  I completed the upgrade 
  from 8.1.7.4->9.2.0.3 on Windows 2000 without incident last night.  It 
  actually went pretty quickly. 
  Thanks in advance for any comments about OEM. 
  
  Lisa Koivu Oracle Database Stressmonkey Fairfield Resorts, Inc. 5259 
  Coconut Creek Parkway Ft. Lauderdale, FL, 
  USA  33063 Office: 954-935-4117  
  Fax:    954-935-3639 
  Cell:    954-683-4459 
  "The sender 
  believes that this E-Mail and any attachments were free of any virus, worm, 
  Trojan horse, and/or malicious code when sent. This message and its 
  attachments could have been infected during transmission.  By reading the 
  message and opening any attachments, the recipient accepts full responsibility 
  for taking proactive and remedial action about viruses and other defects. The 
  sender's business entity is not liable for any loss or damage arising in any 
  way from this message or its attachments."-- Please see 
  the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Koivu, Lisa INET: 
  [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 
  http://www.fatcity.com San Diego, California -- Mailing list and web hosting 
  services - 
  To REMOVE yourself from this mailing list, send an E-Mail message to: 
  [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message 
  BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list 
  you want to be removed from). You may also send the HELP command for other 
  information (like subscribing).