Hi,

Here is a suggestion --
------------------

Apparently DBAs access to /opt/VRTSdbed was at installation time.

See the snippet from the Installation Guide below.


------------------------------------------------------------------

Setting Administrative Permissions      

The VxDBA utility and GUI for database administration require permission 
changes to allow for database administrators to access these tools. The default 
settings at installation time for the /opt/VRTSdbed directory allow only the 
root login to access the directory. 
You are asked during the installation process if you want to allow database 
administrators access to the VxDBA utility. If you did not make the permission 
changes to allow database administrator access to the /opt/VRTSdbed directory 
during installation, you can do so at a later time. 

▼  To allow the user “oracle” access to the VxDBA utility and the GUI Use the 
chown and chmod commands, as follows: 

# chown oracle /opt/VRTSdbed

# chmod 500 /opt/VRTSdbed

▼  To allow users in the group “dba” access to the VxDBA utility and the GUI 
Use the chgrp and chmod commands, as follows: 

# chgrp dba /opt/VRTSdbed

# chmod 550 /opt/VRTSdbed
 
------------------

Regards,
Scott

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Tuesday, June 03, 2008 4:37 AM
To: veritas-vx@mailman.eng.auburn.edu
Subject: [Veritas-vx] SFORA + checkpoints

Hello,

we are evaluating SFORA (enterprise edition for Solaris 10) and faced the 
following problem. While trying to create storage checkpoints the manual of 
dbed_ckptcreate says:
[...]
NOTES
     dbed_ckptcreate must be run as  the  Oracle  DBA  user.  The
     superuser  cannot create Storage Checkpoints, since there is
     no guarantee that the database status can be correctly iden-
     tified.
[...]
However, access rights for directory where dbed_ckptcreate resides is as below:
bash-3.00# ls -al /opt/VRTSdbed
total 22
drwx------   8 bin      bin          512 Mar 12 08:29 .
drwxrwxr-x  54 root     root        1536 May 30 12:15 ..
drwxr-xr-x   2 bin      bin         1536 Mar 12 14:06 .dba
drwxr-xr-x   2 bin      bin         1024 Mar 12 14:06 bin
drwxr-xr-x   2 bin      bin          512 Mar 12 14:06 lib
lrwxrwxrwx   1 root     root          13 Mar 12 08:29 man ->
/opt/VRTS/man
drwxr-xr-x   3 bin      bin          512 Mar 12 08:29 msg
drwxr-xr-x   2 bin      bin          512 Mar 12 08:29 stats
drwxr-xr-x   3 root     root         512 Mar  7 15:42 usr

So no rights for DBA to run the dbed_ckptcreate.
I know that I can use ACLs but I don't think it is right solution here. Can 
anybody tell me how to allow DBA to run dbed_ckptcreate ?
And why the /opt/VRTSdbed is so restricted ?

Regards
przemol

--
http://przemol.blogspot.com/





















----------------------------------------------------------------------
Tanie rozmowy!
Sprawdz >>> http://link.interia.pl/f1e20 


_______________________________________________
Veritas-vx maillist  -  Veritas-vx@mailman.eng.auburn.edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-vx
_______________________________________________
Veritas-vx maillist  -  Veritas-vx@mailman.eng.auburn.edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-vx

Reply via email to