How to find out version and install security patches?
A. Farber
I have unfortunately no Oracle experience,
but will have to maintain a server at my new job
(this will be 1 of my 50 other tasks).
After lots of searching I've managed to install
version 9i.2 at a CentOS 5 Linux machine.
(And I really don't understand, why would
Oracle use a Java installer and also compile
lots of stuff during the "Linking" phase instead
of providing a well-tested binary rpm-package).
A consultant has installed their program then.
Now I'd like to install security patches.
I have a Metalink account and have read their
wordy FAQ but still don't have an idea,
where to download their patches and how
to install them (is there another GUI for that?)
Also I don't know which version do I actually
have, is it 9.2.0.4? Where could I check?
Can anyone please advise me?
Can I do anything else to improve the security?
(Change some default passwords etc.)
Also is there maybe an easy way for me to
create daily snapshots of the program database?
For PostgreSQL I have a cronjob
pg_dump phpbb > /mnt/backups/pg-`date +\%F`.sql
and know that I can at least roll back to it
if I do something stupid as a would-be-admin.
Is there something as simple for Oracle?
Thank you very much
Alex
sybr...@hccnet.nl
On Sat, 31 May 2008 15:54:07 -0700 (PDT), "A. Farber"
<Alexande...@gmail.com> wrote:
>Hello fellow Oracle users,
>
>I have unfortunately no Oracle experience,
>but will have to maintain a server at my new job
>(this will be 1 of my 50 other tasks).
It appears this isn't true: Apparently this forum is going to
administrate this server by providing you a free Oracle tutorial.
I am afraid this is not going to happen.l
>
>After lots of searching I've managed to install
>version 9i.2 at a CentOS 5 Linux machine.
9iR2 was desupported on July 31, 2007
>(And I really don't understand, why would
>Oracle use a Java installer and also compile
>lots of stuff during the "Linking" phase instead
>of providing a well-tested binary rpm-package).
Excellent choice to start criticizing Oracle right away.
Oracle runs on many platforms. There is one installer for all of these
platforms. Now why would they have done that?
>
>A consultant has installed their program then.
>
>Now I'd like to install security patches.
You'll need 9.2.0.8 to install Critical Patch Updates aka CPUs
>I have a Metalink account and have read their
>wordy FAQ but still don't have an idea,
>where to download their patches and how
>to install them (is there another GUI for that?)
You didn't see a tab labeled 'Patches' on Metalink?
Woulodn't that be very obvious?
>
>Also I don't know which version do I actually
>have, is it 9.2.0.4? Where could I check?
>
select * from v$version;
>Can anyone please advise me?
>
>Can I do anything else to improve the security?
>(Change some default passwords etc.)
>
>Also is there maybe an easy way for me to
>create daily snapshots of the program database?
>
>For PostgreSQL I have a cronjob
>pg_dump phpbb > /mnt/backups/pg-`date +\%F`.sql
>and know that I can at least roll back to it
>if I do something stupid as a would-be-admin.
>
>Is there something as simple for Oracle?
There is RMAN. There is a backup and recovery manual online at
http:/./tahiti,oracle.com
Please do not ask to abstract it, Please do not ask to provide free
scripts. Please do not ask to do your work.
If you can't do it, hire someone who can.
>
>Thank you very much
>Alex
>
--
Sybrand Bakker
Senior Oracle DBA
A. Farber
thanks for your reply, so I have
SQL> select * from v$version;
BANNER
----------------------------------------------------------------
Oracle9i Release 9.2.0.4.0 - Production
PL/SQL Release 9.2.0.4.0 - Production
CORE 9.2.0.3.0 Production
TNS for Linux: Version 9.2.0.4.0 - Production
NLSRTL Version 9.2.0.4.0 - Production
> Excellent choice to start criticizing Oracle right away.
> Oracle runs on many platforms. There is one installer for all of these
> platforms. Now why would they have done that?
Yes, why would've Oracle hire a person to test and
provide Linux packages (similar to PostgreSQL and MySQL)?
They better provide a graphical installer (i.e. installing
over SSH isn't an option), then let the paying customer
spend few days trying to find a workaround for the
installer not running (the Java/libwait error), then another
few days for "Linking" stage failing (the libgcc error).
> You'll need 9.2.0.8 to install Critical Patch Updates aka CPUs
So I can't install CPUs for 9.2.0.4?
> You didn't see a tab labeled 'Patches' on Metalink?
> Woulodn't that be very obvious?
Really I don't see it at Metalink. I see only (tried FF and MSIE):
Headlines, Knowledge, Service Request, SCM, Certify.
> There is RMAN. There is a backup and recovery manual online at
> http:/./tahiti,oracle.com
Thanks, I'll read it.
> It appears this isn't true: Apparently this forum is going to
> administrate this server by providing you a free Oracle tutorial.
....
> Please do not ask to abstract it, Please do not ask to provide free
> scripts. Please do not ask to do your work.
> If you can't do it, hire someone who can.
I'm still allowed to ask (even stupid one) questions in this
newsgroup without having to hire you right away, don't I?
> --
> Sybrand Bakker
> Senior Oracle DBA
Regards
Alex
sybr...@hccnet.nl
On Sun, 1 Jun 2008 00:39:16 -0700 (PDT), "A. Farber"
<Alexande...@gmail.com> wrote:
>Hello Sybrand,
>
>thanks for your reply, so I have
>
> SQL> select * from v$version;
>
> BANNER
> ----------------------------------------------------------------
> Oracle9i Release 9.2.0.4.0 - Production
> PL/SQL Release 9.2.0.4.0 - Production
> CORE 9.2.0.3.0 Production
> TNS for Linux: Version 9.2.0.4.0 - Production
> NLSRTL Version 9.2.0.4.0 - Production
>
>> Excellent choice to start criticizing Oracle right away.
>> Oracle runs on many platforms. There is one installer for all of these
>> platforms. Now why would they have done that?
>
>Yes, why would've Oracle hire a person to test and
>provide Linux packages (similar to PostgreSQL and MySQL)?
>
Obviously to cut doiwn on cost. Happens everywhere.
If you don't like that, why don't you stick to toy databases like
PostgreSQL and MySQL, instead of posting stupid comments?
Nobody forces you to use Oracle.
>They better provide a graphical installer (i.e. installing
>over SSH isn't an option),
Oracle comes with a graphical installer, and installing over SSH works
like a charm. Everyone uses that. Oracle is not the problem. You are!
then let the paying customer
>spend few days trying to find a workaround for the
>installer not running (the Java/libwait error), then another
>few days for "Linking" stage failing (the libgcc error).
>
>> You'll need 9.2.0.8 to install Critical Patch Updates aka CPUs
>
>So I can't install CPUs for 9.2.0.4?
>
Nope.
>> You didn't see a tab labeled 'Patches' on Metalink?
>> Woulodn't that be very obvious?
>
>Really I don't see it at Metalink. I see only (tried FF and MSIE):
>Headlines, Knowledge, Service Request, SCM, Certify.
So your Metalink profile hasn't been set up correctly. Please see your
CSI administrator.
>
>> There is RMAN. There is a backup and recovery manual online at
>> http:/./tahiti,oracle.com
>
>Thanks, I'll read it.
>
>> It appears this isn't true: Apparently this forum is going to
>> administrate this server by providing you a free Oracle tutorial.
>....
>> Please do not ask to abstract it, Please do not ask to provide free
>> scripts. Please do not ask to do your work.
>> If you can't do it, hire someone who can.
>
>I'm still allowed to ask (even stupid one) questions in this
>newsgroup without having to hire you right away, don't I?
>
You are likely to be ignored.
Bashing Oracle fior no good reason on your very first post is not
especially appreciated.
Continue to bash Oracle for no good reason on subsequent posts
qualifies as whining. Usually it is not Oracle's fault, but the fault
of the poster, who 'thinks' Oracle 'should' work in a certain way they
learned using a different product.
This shows more attitude than aptitude to learn.
A. Farber
> > You'll need 9.2.0.8 to install Critical Patch Updates aka CPUs
> So I can't install CPUs for 9.2.0.4?
Ok, nevermind that. I've found the Linux patch name
on Google (p4547809_92080_LINUX.zip, Metalink
wasn't helpful there) and upgraded 9.2.0.4 -> 9.2.0.8.
> > Please do not ask to provide free scripts.
If anyone has less bitterness in himself than Sybrand ;-)
and feels that it is in fact okay to share "free scripts"
with others on this newsgroup, then please send me
your useful admin/backup cronjobs/scripts
Greetings from Germany
Alex
sybr...@hccnet.nl
There is no bitterness.
There is frustration about incompetent idiot freeloaders like you, who
try do dump as much of their work in a forum of volunteers.
Why would anyone send you admin/backup cronjob/scripts, without
knowing anything about your environment, without requesting payment,
knowing you are too lazy to do any research/work of your oiwn?
Slavery has been abolished, the world is no longer suffering from Nazi
boots, and concentration camps have all closed down.
Please get lost.
Donkey Hot
4ax.com:
> boots, and concentration camps have all closed down.
>
Gitmo we know, and there propably is many more - owned by many nations -
that we do not know.
A. Farber
> There is frustration about incompetent idiot freeloaders like you, who
> Slavery has been abolished, the world is no longer suffering from Nazi
> boots, and concentration camps have all closed down.
>
> Please get lost.
Wow, I'm amazed how you're trying to get
personal throughout the whole conversation.
Alex
Mladen Gogala
> Also is there maybe an easy way for me to create daily snapshots of the
> program database?
>
> For PostgreSQL I have a cronjob
> pg_dump phpbb > /mnt/backups/pg-`date +\%F`.sql
The "pg_dump" program used with the .sql extension (without -F c) is
akin to Oracle export/import. As is the case with PgSQL, which produces
SQL script to be "restored" by psql, SQL format is much slower to restore
then the "custom" format, which is a physical backup to be restored by
pg_restore.
So, in the world of Oracle, you could create a "snapshot" by using the
export utility. Here I wholeheartedly advise you to go to at least oracle
10g as "data pump" versions are much faster and restartable.
If you want to create backup, you would normally use RMAN for that
purpose. RMAN is much faster because it backs up physical data files.
A. Farber
On Jun 1, 6:18 pm, Mladen Gogala <mgog...@yahoo.com> wrote:
> The "pg_dump" program used with the .sql extension (without -F c) is
> akin to Oracle export/import. As is the case with PgSQL, which produces
> SQL script to be "restored" by psql, SQL format is much slower to restore
> then the "custom" format, which is a physical backup to be restored by
> pg_restore.
>
> So, in the world of Oracle, you could create a "snapshot" by using the
> export utility. Here I wholeheartedly advise you to go to at least oracle
> 10g as "data pump" versions are much faster and restartable.
> If you want to create backup, you would normally use RMAN for that
> purpose. RMAN is much faster because it backs up physical data files.
Thanks for the info, I think I'll go with RMAN-backups
then (I'm reading up on it). Upgrading to 10g is not
an option, because the consultant told me the application
(Mercury QMC) needs Oracle 9 (which is probably BS)...
Regards
Alex
Mladen Gogala
> Thanks for the info, I think I'll go with RMAN-backups then (I'm reading
> up on it). Upgrading to 10g is not an option, because the consultant
> told me the application (Mercury QMC) needs Oracle 9 (which is probably
> BS)...
BTW, for small databases, like 20GB, PgSQL is an excellent choice,
especially for non-critical applications.
bhonaker
The depth of Sybrand's bitterness is fathomless.
Arch
Quite the friendly little viper pit, isn't it?
joel garry
> Hello fellow Oracle users,
>
> I have unfortunately no Oracle experience,
> but will have to maintain a server at my new job
> (this will be 1 of my 50 other tasks).
You might poke around at oracle.com and look for things like "2-day
DBA," though watch versions.
>
> After lots of searching I've managed to install
> version 9i.2 at a CentOS 5 Linux machine.
> (And I really don't understand, why would
> Oracle use a Java installer and also compile
> lots of stuff during the "Linking" phase instead
> of providing a well-tested binary rpm-package).
Is this production or test?
>
> A consultant has installed their program then.
>
> Now I'd like to install security patches.
> I have a Metalink account and have read their
> wordy FAQ but still don't have an idea,
> where to download their patches and how
> to install them (is there another GUI for that?)
Note that when you find the patch, there is a readme. Follow
directions exactly, even if they seem to have some circular
references.
>
> Also I don't know which version do I actually
> have, is it 9.2.0.4? Where could I check?
>
> Can anyone please advise me?
>
> Can I do anything else to improve the security?
> (Change some default passwords etc.)
Look around for "project lockdown" starting at
http://www.oracle.com/security/security-best-practices.html
>
> Also is there maybe an easy way for me to
> create daily snapshots of the program database?
What really matters is how you intend to restore. RMAN is generally
best for backup/restore, but if you say "snapshot," I wonder what
intentions you have. Some 3rd party products assume a logical backup,
which is often the wrong way to go about it, but it depends.
>
> For PostgreSQL I have a cronjob
> pg_dump phpbb > /mnt/backups/pg-`date +\%F`.sql
> and know that I can at least roll back to it
> if I do something stupid as a would-be-admin.
>
> Is there something as simple for Oracle?
Avoid most scripts found on the internet, many are way off. You need
to understand what you are trying to accomplish.
>
> Thank you very much
> Alex
Here is some more information about this group: http://www.dbaoracle.net/readme-cdos.htm
jg
--
@home.com is bogus.
Oh, it's a money thing: http://www.signonsandiego.com/news/tech/20080602-1147-ca-yahoo-lawsuit.html
word: burati
A. Farber
On Jun 2, 10:22 pm, joel garry <joel-ga...@home.com> wrote:
> On May 31, 3:54 pm, "A. Farber" <Alexander.Far...@gmail.com> wrote:
> You might poke around at oracle.com and look for things like "2-day
> DBA," though watch versions.
thanks, it looks good and I'll probably also make
my boss to spend me a few days DBA course,
but end of summer, not now - because of lack of time.
Anyone knows good Oracle DBA courses in Germany?
My little story is that I was doing developer/SW builds
support at a big corp. But now our site is being shut
down and I'm becoming one of 2 sysadmins at a 300
people car devices firm being split from the big corp.
I'd prefer finding a developer job (C/Perl/Unix), but a 2nd
kid is coming this or next week :-) so we aren't mobile...
So while reading about RMAN I also have to read on
Win 2003 AD+DNS+DHCP and Synergy administration
(ex-colleague gives me crash course) + other tasks...
> > After lots of searching I've managed to install
> > version 9i.2 at a CentOS 5 Linux machine.
>
> Is this production or test?
Unfortunately production. 30 users are using
the test program using this Oracle database.
They keep bugging me (important project bla bla)
but haven't even thought about patches/backups.
They want to start using it 16th of June.
> Look around for "project lockdown" starting athttp://www.oracle.com/security/security-best-practices.html
Ok I'll do, but is it possible to secure Oracle 9 at all
(since the version is so old)?
> > Also is there maybe an easy way for me to
> > create daily snapshots of the program database?
>
> What really matters is how you intend to restore. RMAN is generally
> best for backup/restore, but if you say "snapshot," I wonder what
> intentions you have. Some 3rd party products assume a logical backup,
> which is often the wrong way to go about it, but it depends.
I was initially intending to export complete database
every night to a file on a NetApp (we have 2 NetApps),
but now I'll better try to use RMAN.
Regards
Alex
joel garry
> I was initially intending to export complete database
> every night to a file on a NetApp (we have 2 NetApps),
> but now I'll better try to use RMAN.
>
Personally, if I have the room and processing time, I do both logical
and physical backups, with some extra redundancy on each. I can't
tell you how many times it's saved my butt, and I've saved a lot of
other people's. And it's really fun to watch the really serious
screwups people have done with *gres and SQL Server.
jg
--
@home.com is bogus.
http://www.signonsandiego.com/uniontrib/20080531/news_1b31bizbrfs.html
word: nesinga