Henry,
Thanks. I'll remember that, IF we ever upgrade to PeopleSoft8. Getting
migrated over from ManMan to PeropleSoft has been such a chore that there is a
move afoot to stay on 7.53 for a few years more.
Dick Goulet
____________________Reply Separator____________________
Author: "Henry Poras" <[EMAIL PROTECTED]>
Date: 1/30/2003 5:43 AM
Dick,
PeopleSoft's methodology changes slightly in version 8. Instead of creating
an Oracle user for each PeopleSoft user, there is just a single Oracle user
created as the ConnectID (default username is 'people'). The people user
works just like all of the individual usernames created in earlier versions;
a quick connect and scan of a few PeopleTools tables to find out security,
owner of the database tables (i.e. sysadm) and it's encrypted password, ...
Henry
-----Original Message-----
[EMAIL PROTECTED]
Sent: Wednesday, January 29, 2003 4:30 PM
To: Multiple recipients of list ORACLE-L
Dave,
We turned it off way back prior to implementation. Our biggest problem
with
the way PeopleSoft does database users is compounded by the fact that way
too
many of our users write their own scripts and/or use Access to create their
own
reports. That means that they needed public synonyms to most of the
PeopleSoft
tables as well as select access on them and they really do use temp and
sometimes default tablespace space.
We actually did the password thing backwards. The stored package stuff
has
a static password inside itself that even we the DBA's have forgotten.
After
the user is created then the PeopleSoft admin changes their password so that
we
all are in sync.
Dick Goulet
____________________Reply Separator____________________
Author: "david davis" <[EMAIL PROTECTED]>
Date: 1/29/2003 7:19 AM
Dick,
The grant users option has been around since release 2 (was on installation
table back then). I had not tested turning it off. Our practice is create
the userid then change the default tablespaces then notify clients of new
userid. It works for us, because the DBA's happen to be the security
administrators.
If you are creating the Oracle side of the user account, how are you doing
password synchronisation?
PeopleSoft 8 has password aging done within the application, but to use pure
database password aging prior to PeopleSoft 8 you can use Braintree's
SQLSecure product. The peopleSoft software has DLL/database integration with
the product if you have it installed. It also does cross database password
synchronisation.
I thought the lowest common denominator was DB2 guess its been lowered. The
do Windows development on SQLServer, but Unix is done on UDB. I wonder if
PeopleSoft will move away from SQLServer as a source development platform
now the Microsoft is trying to get into the CRM business. Direct
competition.
David Davis
>From: [EMAIL PROTECTED]
>To: "david davis" <[EMAIL PROTECTED]>, Multiple recipients of list
>ORACLE-L <[EMAIL PROTECTED]>
>Subject: Re[2]: Peoplesoft & Oracle
>Date: Wed, 29 Jan 2003 09:44:23 -0500
>
>David & Lisa,
>
> 1st point is that were still on PeopleTools 7.53 so this may be
>somewhat
>dated. Anyway, go to Peopletools, utilities, use Peopletools options.
>Uncheck
>the "Grant Access" option & low & behold, PeopleTools will not try to
>create a
>user via the "grant connect to " syntax that is so out dated as to be
>atrocious.
> The down side is that you now have to create the user manually, but we
>did put
>together a trigger/dbms_job system that does it automatically as we wanted.
> Now
>why in tarnation would one want to do that, Well as it turns out if you use
>that
>syntax, as Lisa noted, everyone is assigned SYSTEM as their default and
>temp
>tablespace. Well that's not so bad since their there only for a very brief
>period of time before changing over to SYSADMIN or whatever else you happen
>to
>use. The problem is that PeopleSoft in their VAST wisdom coded the first 2
>select statements with a "group by" in them, just incase there was a
>duplication
>of data in ps.psdbowner and/or psoprdefn. Now I do not want to bad mouth
>them
>because that was not a bad idea. The bad point is that you end up with
>temp
>segments in system and a fragmented system tablespace. YUCK!! OH for 9i
>and a
>system wide default temp tablespace!!
>
>OH, also one item of extreme note. DON'T setup password aging for your
>users.
>PeopleTools doesn't appreciate it at all.
>
>BTW: I would not say that PeopleSoft does not know databases, they just
>minored
>in them instead. The real problem is that they code to the least common
>denominator in the dbms market, namely SqlServer. So be prepared for lots
>of
>fun, and do watch Customer Connection. They every once in a while come out
>with
>a note or patch that is Oracle specific and really does help. One would
>think
>that there'd be more of them since something like 75% of PeopleSoft's
>installs
>are on Oracle. Of course their development is on Sql Server. Go figure!!
>
>Dick Goulet
>
>____________________Reply Separator____________________
>Subject: Re: Peoplesoft & Oracle
>Author: "david davis" <[EMAIL PROTECTED]>
>Date: 1/28/2003 8:13 PM
>
>There is a resolution 19368 on customer connection which discusses which
>rights the SYSADM account requires and which ones can be revoked. Though it
>was somewhat better formatted when I retrieved it in 1999. It was last
>modified in 2002.
>
>I am curious how you turn off the create user? I didn't think you could do
>that, only control the grants that take place.
>
>A little gotcha I ran into a couple of years ago when I revoked access was
>that had errors in app designer. The DLL referenced DBA_TABLES (oops) I
>think that was in V7.0.
>
>David Davis
>
>
>
> >From: [EMAIL PROTECTED]
> >Reply-To: [EMAIL PROTECTED]
> >To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]>
> >Subject: Re: Peoplesoft & Oracle
> >Date: Tue, 28 Jan 2003 14:39:21 -0800
> >
> >Lisa,
> > Sounds like a default install of PeopleSoft. Step 1 that you can do is
> >re-assign everyone to use a real temp tablespace. Step 2 is break up that
> >db
> >onto seperate spindles. Step 3 is to turn off autoextend exept for those
> >tablespaces that are nearing say 90% full, then set autoextend to
>something
> >sensible. As far as the user accounts are concerned that's normal. I for
> >one
> >would revoke DBA from sysadmin & grant "alter any user" instead.
> >Afterwards, I'd
> >get into PeopleTools & turn off the "creat user" function. I could write
> >more,
> >but this should keep you VERY busy.
> >
> >Dick Goulet
> >
> >"Koivu; Lisa" <[EMAIL PROTECTED]> wrote on 1/28/03 1:08 pm:
> >
> >Hello everyone,
> >
> >My apologies for bombarding the list with more questions than answers as
>of
> >late. This one is pretty desparate.
> >
> >For those of you who support Peoplesoft databases - Are there any
>websites
> >that
> >you frequent to check for quirks, weird anomalies, etc. related to your
> >specific
> >Peoplesoft/Oracle combination?
> >
> >I've just inherited this environment. It's Oracle 8.1.7 on AIX. I don't
> >know
> >the version of AIX and I don't know the version(s) of the Peoplesoft
> >modules
> >being used. However I am seeing some very weird things - not the least
>of
> >which
> >is every tablespace is dictionary managed, all are on autoextend, there
>are
> >600
> >open database accounts but it looks like the app only connects as SYSADM,
> >all
> >users have SYSTEM for default/temp ts, the entire freaking database is on
> >one
> >disk, all redologs (one in each group) are on one disk, etc., etc., etc.
> >The
> >list goes on. I'm afraid to turn this environment upside down and fix it
> >because management is only interested in keeping the system alive, not
> >improving
> >it. The previous DBA is elusive at best, probably because I yelled at
>him
> >last
> >year after catching him creating objects on the fly in my databases :)
> >
> >I'll do the obvious things like add redologs and check backup and
>recovery,
> >etc.
> > User error is extraordinarily high in this environment. Everything
>else
> >I am
> >afraid to touch without doing my homework first. Any websites,
> >suggestions,
> >comments, etc. would be greatly appreciated.
> >
> >The only good thing to come of all this is I'M BAAAAAAAAAAAAAACK in Unix
> >again
> >!!! Woo Hoo!!!!!!!
> >
> >Lisa Koivu
> >Oracle Database Administrator
> >Fairfield Resorts, Inc.
> >5259 Coconut Creek Parkway
> >Ft. Lauderdale, FL, USA 33063
> >
> >
> >
> ><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML>
> ><HEAD>
> ><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
> >
> >
> >
> >
> ><META NAME="Generator" CONTENT="MS Exchange Server version 6.0.6249.1">
> ><TITLE>Peoplesoft & Oracle</TITLE>
> ></HEAD>
> ><BODY>
> ><!-- Converted from text/rtf format -->
> >
> ><P><FONT SIZE=2 FACE="Arial">Hello everyone, </FONT>
> ></P>
> >
> ><P><FONT SIZE=2 FACE="Arial">My apologies for bombarding the list with
>more
> >questions than answers as of late. This one is pretty desparate.
> ></FONT>
> ></P>
> >
> ><P><FONT SIZE=2 FACE="Arial">For those of you who support Peoplesoft
> >databases -
> >Are there any websites that you frequent to check for quirks, weird
> >anomalies,
> >etc. related to your specific Peoplesoft/Oracle combination?
> ></FONT></P>
> >
> ><P><FONT SIZE=2 FACE="Arial">I've just inherited this environment.
> >It's
> >Oracle 8.1.7 on AIX. I don't know the version of AIX and I don't
>know
> >the
> >version(s) of the Peoplesoft modules being used. However I am
>seeing
> >some
> >very weird things - not the least of which is every tablespace is
> >dictionary
> >managed, all are on autoextend, there are 600 open database accounts but
>it
> >looks like the app only connects as SYSADM, all users have SYSTEM for
> >default/temp ts, the entire freaking database is on one disk, all
>redologs
> >(one
> >in each group) are on one disk, etc., etc., etc. The list goes
> >on.
> >I'm afraid to turn this environment upside down and fix it because
> >management is
> >only interested in keeping the system alive, not improving it. The
> >previous DBA is elusive at best, probably because I yelled at him last
>year
> >after catching him creating objects on the fly in my databases
> >:)</FONT></P>
> >
> ><P><FONT SIZE=2 FACE="Arial">I'll do the obvious things like add redologs
> >and
> >check backup and recovery, etc. User error is extraordinarily high
>in
> >this
> >environment. Everything else I am afraid to touch without doing my
> >homework first. Any websites, suggestions, comments, etc. would be
> >greatly
> >appreciated. </FONT></P>
> >
> ><P><FONT SIZE=2 FACE="Arial">The only good thing to come of all this is
>I'M
> >BAAAAAAAAAAAAAACK in Unix again !!! Woo Hoo!!!!!!!</FONT>
> ></P>
> >
> ><P><FONT SIZE=2 FACE="Tahoma">Lisa Koivu</FONT>
> >
> ><BR><FONT SIZE=2
> >
> >*************************
> >This message has been truncated. The entire message is available on your
> >desktop
> >e-mail client.
> >
> >--
> >Please see the official ORACLE-L FAQ: http://www.orafaq.net
> >--
> >Author:
> > INET: [EMAIL PROTECTED]
> >
> >Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> >San Diego, California -- Mailing list and web hosting services
> >---------------------------------------------------------------------
> >To REMOVE yourself from this mailing list, send an E-Mail message
> >to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> >the message BODY, include a line containing: UNSUB ORACLE-L
> >(or the name of mailing list you want to be removed from). You may
> >also send the HELP command for other information (like subscribing).
>
>
>_________________________________________________________________
>MSN 8 with e-mail virus protection service: 2 months FREE*
>http://join.msn.com/?page=features/virus
>
>--
>Please see the official ORACLE-L FAQ: http://www.orafaq.net
>--
>Author: david davis
> INET: [EMAIL PROTECTED]
>
>Fat City Network Services -- 858-538-5051 http://www.fatcity.com
>San Diego, California -- Mailing list and web hosting services
>---------------------------------------------------------------------
>To REMOVE yourself from this mailing list, send an E-Mail message
>to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
>the message BODY, include a line containing: UNSUB ORACLE-L
>(or the name of mailing list you want to be removed from). You may
>also send the HELP command for other information (like subscribing).
_________________________________________________________________
MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*.
http://join.msn.com/?page=features/virus
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: david davis
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author:
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Henry Poras
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author:
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
