10.2.0.3 does not use a index

Hi
I have a simple query which in 9i uses a index but after upgrading to 10.2.0.3 has stopped useing the index and instead prefers a hash join and a full table scan.
Any idea if this is a bug in 10.2.0.3 or how do i go about doing this investigation
SELECT sum((col1)/(col2+col1))*col1*100/(col3)
    FROM tab1a, tab2 b 
    WHERE     a.tab2_id  = b.id 
          AND a.col2 = 26538  
          AND b.col3    > 0 
| Id  | Operation                     | Name                     | Starts | E-Rows | A-Rows |   A-Time   | Buffers | Reads  |
|   1 |  SORT AGGREGATE               |                          |      1 |      1 |      1 |00:00:00.30 |   64362 |      2 |
|   2 |   NESTED LOOPS                |                          |      1 |  23662 |  21348 |00:00:00.27 |   64362 |      2 |
|   3 |    TABLE ACCESS BY INDEX ROWID| tab1                 |      1 |  23662 |  21348 |00:00:00.03 |     316 |      1 |
|*  4 |     INDEX RANGE SCAN          | col2_idx    |      1 |  23662 |  21348 |00:00:00.01 |      51 |      0 |
|*  5 |    TABLE ACCESS BY INDEX ROWID| tab2                |  21348 |      1 |  21348 |00:00:00.21 |   64046 |      1 |
|*  6 |     INDEX UNIQUE SCAN         | tab2_PK             |  21348 |      1 |  21348 |00:00:00.12 |   42698 |      0 |
Predicate Information (identified by operation id):
   4 - access("A"."col2"=26538)
   5 - filter("B"."col3">0)
   6 - access("A"."tab2_ID"="B"."ID")
Plan in 10g 10.2.0.3
PLAN_TABLE_OUTPUT
Plan hash value: 2369063540
| Id  | Operation                     | Name                     | Starts | E-Rows | A-Rows |   A-Time   | Buffers | Reads  |  OMem |  1Mem | Used-Mem |
|   1 |  SORT AGGREGATE               |                          |      1 |      1 |      1 |00:00:45.80 |     196K|    193K|       |       |          |
|   3 |    TABLE ACCESS BY INDEX ROWID| tab1                |      1 |  24189 |  21348 |00:00:00.02 |     318 |      0 |       |       |          |
|*  4 |     INDEX RANGE SCAN          | col2_idx |      1 |  24189 |  21348 |00:00:00.01 |      51 |      0 |       |       |          |
|*  5 |    TABLE ACCESS FULL          | tab2                |      1 |     12M|     12M|00:00:37.20 |     196K|    193K|       |       |          |
Predicate Information (identified by operation id):
PLAN_TABLE_OUTPUT
   2 - access("A"."tab2_ID"="B"."ID")
   4 - access("A"."col2"=26538)
   5 - filter("B"."col3">0)Any idea how do i find out why the index usage has been stopped

Hi
Here are the plans on the 10gr2 database with and without the hints.
The index plan uses some milliseconds to get the answer whereas the full table acesses gets the result in about 2 minutes which is not acceptable
I am trying to generate the 10053 trace
I am not in favour of fiddling around with the Optimizer parameters as i am not sure what could go wrong with other queries
| Id  | Operation                     | Name                     | Rows  | Bytes | Cost (%CPU)| Time     |
|   0 | SELECT STATEMENT              |                          |     1 |    36 |  8955  (16)| 00:00:43 |
|   1 |  SORT AGGREGATE               |                          |     1 |    36 |            |          |
|*  2 |   HASH JOIN                   |                          | 24605 |   865K|  8955  (16)| 00:00:43 |
|   3 |    TABLE ACCESS BY INDEX ROWID| tab1                     | 24605 |   360K|   374   (1)| 00:00:02 |
|*  4 |     INDEX RANGE SCAN          | tab1_col2_I              | 24605 |       |    61   (2)| 00:00:01 |
|*  5 |    TABLE ACCESS FULL          | tab2                     |    12M|   248M|  8398  (15)| 00:00:40 |
Predicate Information (identified by operation id):
   2 - access("A"."tab2_ID"="B"."ID")
   4 - access("A"."col2"=31108)
   5 - filter("B"."col3">0)
19 rows selected.
Elapsed: 00:00:00.01
explain plan for
SELECT /*+ INDEX(b tab2_PK) */
     sum((col1)/(col2+col1))*col1*100/(col3)
FROM tab1 a, tab2 b
WHERE     a.tab2_id  = b.id
AND a.col2 = 31108
AND b.col3    > 0
PLAN_TABLE_OUTPUT
Plan hash value: 3651119713
| Id  | Operation                     | Name                     | Rows  | Bytes | Cost (%CPU)| Time     |
|   0 | SELECT STATEMENT              |                          |     1 |    36 | 49644   (1)| 00:03:56 |
|   1 |  SORT AGGREGATE               |                          |     1 |    36 |            |          |
|   2 |   NESTED LOOPS                |                          | 24605 |   865K| 49644   (1)| 00:03:56 |
|   3 |    TABLE ACCESS BY INDEX ROWID| tab1                       | 24605 |   360K|   374   (1)| 00:00:02 |
|*  4 |     INDEX RANGE SCAN          | tab1_col2_I            | 24605 |       |    61   (2)| 00:00:01 |
|*  5 |    TABLE ACCESS BY INDEX ROWID| tab2                     |     1 |    21 |     2   (0)| 00:00:01 |
|*  6 |     INDEX UNIQUE SCAN         | tab2_PK                  |     1 |       |     1   (0)| 00:00:01 |
Predicate Information (identified by operation id):
   4 - access("A"."col2"=31108)
   5 - filter("B"."col3">0)
   6 - access("A"."tab2_ID"="B"."ID")
20 rows selected.
Elapsed: 00:00:00.01
{code}
regards
Hrishy
Edited by: hrishy on Dec 19, 2008 2:10 AM
Edited by: hrishy on Dec 19, 2008 2:15 AM                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       

Similar Messages

  • Query on virtual column that is defined in XMLIndex does not use the index

    Hello,
    I am facing an issue in executing queries on a virtual column that is defined in an XMLIndex: it appears as if the index is not used.
    Database details:
    Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
    PL/SQL Release 11.2.0.3.0 - Production
    CORE 11.2.0.3.0 Production
    TNS for 64-bit Windows: Version 11.2.0.3.0 - Production
    NLSRTL Version 11.2.0.3.0 - Production
    For this use case the XML documents adhere to the following XSD and are stored in an XMLType column in a table:
    <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
        xmlns="http://a_name_space/v1"
        targetNamespace="http://a_name_space/v1"
        elementFormDefault="qualified" attributeFormDefault="unqualified" version="1.0">
        <xsd:element name="fields">
            <xsd:complexType>
                <xsd:sequence>
                    <xsd:element name="field" maxOccurs="unbounded">
                        <xsd:complexType>
                            <xsd:choice>
                                <xsd:element name="value" minOccurs="1" maxOccurs="1">
                                    <xsd:complexType>
                                        <xsd:simpleContent>
                                            <xsd:extension base="notEmptyString4000Type"/>
                                        </xsd:simpleContent>
                                    </xsd:complexType>
                                </xsd:element>
                                <xsd:element name="values" minOccurs="1" maxOccurs="1">
                                    <xsd:complexType>
                                        <xsd:sequence>
                                            <xsd:element name="value" minOccurs="1" maxOccurs="1">
                                                <xsd:complexType>
                                                    <xsd:simpleContent>
                                                        <xsd:extension base="notEmptyString4000Type">
                                                            <xsd:attribute name="startDate" type="xsd:date" use="required"/>
                                                            <xsd:attribute name="endDate" type="xsd:date" />
                                                        </xsd:extension>
                                                    </xsd:simpleContent>
                                                </xsd:complexType>
                                            </xsd:element>
                                        </xsd:sequence>
                                    </xsd:complexType>
                                </xsd:element>
                            </xsd:choice>
                            <xsd:attribute name="name" type="string30Type" use="required"/>
                            <xsd:attribute name="type" type="dataType" use="required"/>
                        </xsd:complexType>
                    </xsd:element>
                </xsd:sequence>
            </xsd:complexType>
        </xsd:element>
        <xsd:simpleType name="dataType">
            <xsd:annotation>
                <xsd:documentation>Char, Date, Number</xsd:documentation>
            </xsd:annotation>
            <xsd:restriction base="xsd:string">
                <xsd:enumeration value="C"/>
                <xsd:enumeration value="D"/>
                <xsd:enumeration value="N"/>
            </xsd:restriction>
        </xsd:simpleType>
        <xsd:simpleType name="string30Type">
            <xsd:restriction base="xsd:string">
                <xsd:maxLength value="30"/>
            </xsd:restriction>
        </xsd:simpleType>
        <xsd:simpleType name="notEmptyString4000Type">
            <xsd:restriction base="xsd:string">
                <xsd:maxLength value="4000"/>
                <xsd:pattern value=".+"/>
            </xsd:restriction>
        </xsd:simpleType>
    </xsd:schema>A field can have a single value as well as multiple values.
    The XMLIndex is defined as follows:
    CREATE INDEX test_xmltype_idx ON test_xmltype (additional_fields) INDEXTYPE IS XDB.XMLIndex
    PARAMETERS
    XMLTable dt_fld_tab (TABLESPACE "TAB_SPACE" COMPRESS FOR OLTP) ''fields/field''
    COLUMNS
    name varchar2(30 char) PATH ''@name''
    ,dataType varchar2(1 char) PATH ''@type''
    ,val varchar2(4000 char) PATH ''value/text()''
    ,vals XMLType PATH ''values/value'' VIRTUAL
    XMLTable dt_fld_multi_value_tab (TABLESPACE "TAB_SPACE" COMPRESS FOR OLTP) ''value'' passing vals
    COLUMNS
    val varchar2(4000) PATH ''text()''
    ,startDate varchar2(30 char) PATH ''@startDate''
    ,endDate varchar2(30 char) PATH ''@endDate''
    ');The following b-tree indexes are defined:
    create index dt_field_name_idx on dt_fld_tab (name);
    create index dt_field_value_idx on dt_fld_tab (val);
    create index dt_field_values_idx on dt_fld_multi_value_tab (val);And stats are properly computed before the queries are executed:
    call dbms_stats.gather_table_stats(user, 'test_xmltype', estimate_percent => null);Queries for single values are cost efficient and fast. With 600K rows in the table these return with 0.002 seconds.
    Queries for multi-valued fields / elements are not though, these result in a full table scan.
    Sample XML snippet:
    <fields>
      <field name="multiVal" type="C">
        <values>
          <value startDate="2013-01-01" endDate="2013-01-01">100</value>
          <value startDate="2014-01-01">120</value>
        </values>
      </field>
    </fields>Examples of costly and slow queries:
    select id from test_xmltype
    where xmlexists('/fields/field/@name="multiVal"' passing additional_fields)
    and xmlexists('/fields/field/values/value[@startDate="2013-01-01"]' passing additional_fields)
    and xmlexists('/fields/field/values/value[text()="100"]' passing additional_fields)
    select id from test_xmltype
    where xmlexists('/fields/field/@name="multiVal"' passing additional_fields)
    and xmlexists('/fields/field/values/value[@startDate="2013-01-01" and .="100"]' passing additional_fields);Whereas the following query on the multi valued field is fast:
    select id from test_xmltype
    where xmlexists('/fields/field/@name="multiVal"' passing additional_fields)
    and xmlexists('/fields/field/values/value[@startDate="2013-01-01"]' passing additional_fields);For the XPath /fields/field/values/value[@startDate="2013-01-01"] the index is used.
    Suspected cause: XPath issue for the value of a multi valued field, e.g. /fields/field/values/value[text()="aValue"].
    Any hints are appreciated: what am I overlooking here?
    Thanks in advance,
    -Sjoerd
    Edited by: user615230 on May 27, 2013 7:46 AM

    Hello,
    This is using binary XML. The table creation script is:
    create table test_xmltype
    (id number(14,0) not null primary key
    ,member_code varchar2(30 char) not null
    ,period_code varchar2(30 char) not null
    ,amount number(12,2) not null
    ,additional_fields xmltype
    );The schema is not registered in the database. Is that required? It is primarily used to generate Java classes that will be used in order to construct the XML documents.
    And you are right: for our initial investigation the sample XML documents are generated with a PLSQL routine and do not contain namespaces. But for the single valued fields there are also no namespaces and the queries on these are executed with very satisfactory plans.
    Thanks for the swift reply.
    -Sjoerd

  • Why is Oracle not using the index??

    Hi,
    I have a table called 'arc_errors' which has an index on 'member_number' as follows:- Create/Recreate indexes
    create index DWO.DW_ARC_CERRORS_MNO on DWO.DW_ARC_CERRORS (MEMBER_NUMBER);
    But surpisingly, when I execute the following query, it does not use the index.
    SELECT member_number,
    COUNT(*) error_count
    FROM arc_errors a
    WHERE member_number = 68534152 AND
    ( tx_type = 'SDIC' AND
    error_number IN (4, 7, 12, 13, 15, 17, 18, 705) )
    OR
    ( tx_type = 'AUTH' AND
    error_number IN (100, 104, 107, 111, 116) )
    OR
    ( tx_type = 'BHO' AND
    error_number IN (708,710) )
    OR
    ( tx_type = 'XLGN' AND
    ( error_number BETWEEN 102 AND 105 OR
    error_number BETWEEN 107 AND 120 OR
    error_number BETWEEN 300 AND 304 ) )
    OR
    ( tx_type = 'None' AND
    ( error_number IN (20, 112) OR
    error_number BETWEEN 402 AND 421 ) )
    OR
    ( tx_type = 'HYBR' AND
    error_number IN (303, 304) )
    GROUP BY member_number;
    This is what 'explain plan' tell me
    SELECT STATEMENT, GOAL = RULE               237907     502923     15087690     
    SORT GROUP BY               237907     502923     15087690     
    PARTITION RANGE ALL                              
    TABLE ACCESS FULL     DWO     DW_ARC_CERRORS     237209     502923     15087690     
    Can someone tell me why a 'table acess full' is required here?
    Thanks in advance,
    Rajesh

    Sorry, I just found the solution myself. I need to put an extra pair of braces around the set of conditions seperated by OR.

  • The application does not use the  screen and run in the background

    Hi
    I have downloaded a package of j2me Midlet
    from [link] here [link]
    and try to reuse the code
    but I get the following error when running the code:-
    The application does not use the screen and run in the background
    I think the error into one of these two classes
    package main;
    import javax.microedition.midlet.*;
    import javax.microedition.midlet.*;
    import javax.microedition.lcdui.*;
    import javax.microedition.media.Manager;
    import javax.microedition.media.MediaException;
    import javax.microedition.media.Player;
    import java.io.IOException;
    import java.io.InputStream;
    public class MainMidlet extends MIDlet implements CommandListener {
        private SSGameCanvas gameCanvas ;
        private Command exitCommand ;
        private Player player = null;
        public void startApp() {
      try {
           //   create new game thread
              gameCanvas = new SSGameCanvas();
              gameCanvas.start(); // start game thread
              exitCommand = new Command("Exit",Command.EXIT,1);
              gameCanvas.addCommand(exitCommand);
              gameCanvas.setCommandListener(this);
                Display.getDisplay(this).setCurrent(gameCanvas);
       catch (java.io.IOException e)
                e.printStackTrace();
            try {
                // start sounds
                InputStream in = getClass().getResourceAsStream("/resource/startfly.wav");
                player = Manager.createPlayer(in,"audio/x-wav");
                player.setLoopCount(1);
                player.start();
            catch (MediaException ex)
                ex.printStackTrace();
             catch (IOException ex)
                ex.printStackTrace();
        public void pauseApp() {
        public void destroyApp(boolean unconditional) {
            if (player != null) {
                player.close();
            System.gc();
      public void commandAction(Command command, Displayable displayable) {
           if (command == exitCommand)
                 destroyApp(true);
                 notifyDestroyed();
    package main;
    import java.io.IOException;
    import javax.microedition.lcdui.*;
    import javax.microedition.lcdui.game.*;
    public class SSGameCanvas extends GameCanvas implements Runnable {
        protected GameManager gameManager;
        protected boolean running;
        private int tick=0;
        private static int WIDTH;
        private static int HEIGHT;
        private int mDelay = 20;
        Form mainForm;
        Display display;
        //private int MaxTime;
        public SSGameCanvas() throws IOException{
            super(true);
            gameManager = new GameManager(5,5,getHeight()-10,getWidth()-10,this);
        public void start() {
                this.running = true;
                Thread t = new Thread(this);
                t.start();
        public void stop() {
            running = false;
        public void render(Graphics g) {
            WIDTH = getWidth();
            HEIGHT = getHeight();
            // Clear the Canvas.
            g.setColor(0, 0, 50);
            g.fillRect(0,0,WIDTH-1,HEIGHT-1);
            // draw border
            g.setColor(200,0,0);
            g.drawRect(0,0,WIDTH-1,HEIGHT-1);
            // draw game canvas
            gameManager.paint(g);
        public void run() {
            while (running) {
                // draw graphics
                render(getGraphics());
                // advance to next graphics
                advance(tick++);
                // display
                flushGraphics();
                try { Thread.sleep(mDelay); }
                catch (InterruptedException ie) {}
        public void advance(int ticks) {
            // advance to next game canvas
            gameManager.advance(ticks);
            this.paint(getGraphics());
    }Edited by: VANPERSIE on Jul 10, 2012 12:26 PM

    Hi Andi,
    Thanks for your reply.
    Yes, I have waited for a while and the result doesn't change.
    The Porblem here is the application is seen started in visual administrator.Only restart brings up the page back.
    Can you please suggest anything.
    Thanks and regards
    Nagaraj

  • How to invoke a jsp page from java which does not use Servlets?

    Hello,
    I am working in Documentum. I am trying to invoke a jsp page from another java page which does not use Servlets.
    I tried doing this by just instantiating the java class related to the jsp page from my present java class.In my java class related to the jsp page, I have defined onInit() and onRender() methods.
    Now, I am trying to call the jsp page from my present java class by just instantiating the java class related to the jsp page. This throws a java.lang.NullPointerException.
    Any comments or suggestions on this.Any help would be appreciated.
    Thanks,
    Ranjith M.V

    RanjithM.V wrote:
    Hello,
    Thanks for the reply. One important thing I forgot to mention. I am also using xml component.And?
    As this is the standard way used for coding in Documentum, I do not want to use Beans.Well, JSP's should, in and of themselves, contain no functional code. It should all be only display.
    Without that is it not possible?What did I say? I said,
    masijade wrote:
    It is possible, but I very, very, very, much doubt, that it would be worth the effort.And, if you don't know how, a forum is not truely going to be able to help you implement it (at least not in less than a few years time, at which point it would be outdated).
    >
    Appreciate your understanding and help.
    Thanks,
    Ranjith M.V

  • Pam.conf does not use ldap for password length check when changing passwd

    I have already posted this in the directory server forum but since it is to do with pam not using ldap I thought there might be some pam experts who check this forum.
    I have dsee 6.0 installed on a solaris 10 server (client).
    I have a solaris 9 server (server) set up to use ldap authentication.
    bash-2.05# cat /var/ldap/ldap_client_file
    # Do not edit this file manually; your changes will be lost.Please use ldapclient (1M) instead.
    NS_LDAP_FILE_VERSION= 2.0
    NS_LDAP_SERVERS= X, Y
    NS_LDAP_SEARCH_BASEDN= dc=A,dc= B,dc= C
    NS_LDAP_AUTH= tls:simple
    NS_LDAP_SEARCH_REF= FALSE
    NS_LDAP_SEARCH_SCOPE= one
    NS_LDAP_SEARCH_TIME= 30
    NS_LDAP_SERVER_PREF= X.A.B.C, Y.A.B.C
    NS_LDAP_CACHETTL= 43200
    NS_LDAP_PROFILE= tls_profile
    NS_LDAP_CREDENTIAL_LEVEL= proxy
    NS_LDAP_SERVICE_SEARCH_DESC= passwd:ou=People,dc=A,dc=B,dc=com?one
    NS_LDAP_SERVICE_SEARCH_DESC= group:ou=People,dc=A,dc=B,dc=C?one
    NS_LDAP_SERVICE_SEARCH_DESC= shadow:ou=People,dc=A,dc=B,dc=C?one
    NS_LDAP_BIND_TIME= 10
    bash-2.05# cat /var/ldap/ldap_client_cred
    # Do not edit this file manually; your changes will be lost.Please use ldapclient (1M) instead.
    NS_LDAP_BINDDN= cn=proxyagent,ou=profile,dc=A,dc=B,dc=C
    NS_LDAP_BINDPASSWD= {NS1}6ff7353e346f87a7
    bash-2.05# cat /etc/nsswitch.conf
    # /etc/nsswitch.ldap:
    # An example file that could be copied over to /etc/nsswitch.conf; it
    # uses LDAP in conjunction with files.
    # "hosts:" and "services:" in this file are used only if the
    # /etc/netconfig file has a "-" for nametoaddr_libs of "inet" transports.
    # the following two lines obviate the "+" entry in /etc/passwd and /etc/group.
    passwd: files ldap
    group: files ldap
    # consult /etc "files" only if ldap is down.
    hosts: files dns
    ipnodes: files
    # Uncomment the following line and comment out the above to resolve
    # both IPv4 and IPv6 addresses from the ipnodes databases. Note that
    # IPv4 addresses are searched in all of the ipnodes databases before
    # searching the hosts databases. Before turning this option on, consult
    # the Network Administration Guide for more details on using IPv6.
    #ipnodes: ldap [NOTFOUND=return] files
    networks: files
    protocols: files
    rpc: files
    ethers: files
    netmasks: files
    bootparams: files
    publickey: files
    netgroup: ldap
    automount: files ldap
    aliases: files ldap
    # for efficient getservbyname() avoid ldap
    services: files ldap
    sendmailvars: files
    printers: user files ldap
    auth_attr: files ldap
    prof_attr: files ldap
    project: files ldap
    bash-2.05# cat /etc/pam.conf
    #ident "@(#)pam.conf 1.20 02/01/23 SMI"
    # Copyright 1996-2002 Sun Microsystems, Inc. All rights reserved.
    # Use is subject to license terms.
    # PAM configuration
    # Unless explicitly defined, all services use the modules
    # defined in the "other" section.
    # Modules are defined with relative pathnames, i.e., they are
    # relative to /usr/lib/security/$ISA. Absolute path names, as
    # present in this file in previous releases are still acceptable.
    # Authentication management
    # login service (explicit because of pam_dial_auth)
    login auth requisite pam_authtok_get.so.1 debug
    login auth required pam_dhkeys.so.1 debug
    login auth required pam_dial_auth.so.1 debug
    login auth binding pam_unix_auth.so.1 server_policy debug
    login auth required pam_ldap.so.1 use_first_pass debug
    # rlogin service (explicit because of pam_rhost_auth)
    rlogin auth sufficient pam_rhosts_auth.so.1
    rlogin auth requisite pam_authtok_get.so.1
    rlogin auth required pam_dhkeys.so.1
    rlogin auth binding pam_unix_auth.so.1 server_policy
    rlogin auth required pam_ldap.so.1 use_first_pass
    # rsh service (explicit because of pam_rhost_auth,
    # and pam_unix_auth for meaningful pam_setcred)
    rsh auth sufficient pam_rhosts_auth.so.1
    rsh auth required pam_unix_auth.so.1
    # PPP service (explicit because of pam_dial_auth)
    ppp auth requisite pam_authtok_get.so.1
    ppp auth required pam_dhkeys.so.1
    ppp auth required pam_dial_auth.so.1
    ppp auth binding pam_unix_auth.so.1 server_policy
    ppp auth required pam_ldap.so.1 use_first_pass
    # Default definitions for Authentication management
    # Used when service name is not explicitly mentioned for authenctication
    other auth requisite pam_authtok_get.so.1 debug
    other auth required pam_dhkeys.so.1 debug
    other auth binding pam_unix_auth.so.1 server_policy debug
    other auth required pam_ldap.so.1 use_first_pass debug
    # passwd command (explicit because of a different authentication module)
    passwd auth binding pam_passwd_auth.so.1 server_policy debug
    passwd auth required pam_ldap.so.1 use_first_pass debug
    # cron service (explicit because of non-usage of pam_roles.so.1)
    cron account required pam_projects.so.1
    cron account required pam_unix_account.so.1
    # Default definition for Account management
    # Used when service name is not explicitly mentioned for account management
    other account requisite pam_roles.so.1 debug
    other account required pam_projects.so.1 debug
    other account binding pam_unix_account.so.1 server_policy debug
    other account required pam_ldap.so.1 no_pass debug
    # Default definition for Session management
    # Used when service name is not explicitly mentioned for session management
    other session required pam_unix_session.so.1
    # Default definition for Password management
    # Used when service name is not explicitly mentioned for password management
    other password required pam_dhkeys.so.1 debug
    other password requisite pam_authtok_get.so.1 debug
    other password requisite pam_authtok_check.so.1 debug
    other password required pam_authtok_store.so.1 server_policy debug
    # Support for Kerberos V5 authentication (uncomment to use Kerberos)
    #rlogin auth optional pam_krb5.so.1 try_first_pass
    #login auth optional pam_krb5.so.1 try_first_pass
    #other auth optional pam_krb5.so.1 try_first_pass
    #cron account optional pam_krb5.so.1
    #other account optional pam_krb5.so.1
    #other session optional pam_krb5.so.1
    #other password optional pam_krb5.so.1 try_first_pass
    I can ssh into client with user VV which does not exist locally but exists in the directory server. This is from /var/adm/messages on the ldap client):
    May 17 15:25:07 client sshd[26956]: [ID 634615 auth.debug] pam_authtok_get:pam_sm_authenticate: flags = 0
    May 17 15:25:11 client sshd[26956]: [ID 896952 auth.debug] pam_unix_auth: entering pam_sm_authenticate()
    May 17 15:25:11 client sshd[26956]: [ID 285619 auth.debug] ldap pam_sm_authenticate(sshd VV), flags = 0
    May 17 15:25:11 client sshd[26956]: [ID 509786 auth.debug] roles pam_sm_authenticate, service = sshd user = VV ruser = not set rhost = h.A.B.C
    May 17 15:25:11 client sshd[26956]: [ID 579461 auth.debug] pam_unix_account: entering pam_sm_acct_mgmt()
    May 17 15:25:11 client sshd[26956]: [ID 724664 auth.debug] pam_ldap pam_sm_acct_mgmt: illegal option no_pass
    May 17 15:25:11 client sshd[26956]: [ID 100510 auth.debug] ldap pam_sm_acct_mgmt(VV), flags = 0
    May 17 15:25:11 client sshd[26953]: [ID 800047 auth.info] Accepted keyboard-interactive/pam for VV from 10.115.1.251 port 2703 ssh2
    May 17 15:25:11 client sshd[26953]: [ID 914923 auth.debug] pam_dhkeys: no valid mechs found. Trying AUTH_DES.
    May 17 15:25:11 client sshd[26953]: [ID 499478 auth.debug] pam_dhkeys: get_and_set_seckey: could not get secret key for keytype 192-0
    May 17 15:25:11 client sshd[26953]: [ID 507889 auth.debug] pam_dhkeys: mech key totals:
    May 17 15:25:11 client sshd[26953]: [ID 991756 auth.debug] pam_dhkeys: 0 valid mechanism(s)
    May 17 15:25:11 client sshd[26953]: [ID 898160 auth.debug] pam_dhkeys: 0 secret key(s) retrieved
    May 17 15:25:11 client sshd[26953]: [ID 403608 auth.debug] pam_dhkeys: 0 passwd decrypt successes
    May 17 15:25:11 client sshd[26953]: [ID 327308 auth.debug] pam_dhkeys: 0 secret key(s) set
    May 17 15:25:11 client sshd[26958]: [ID 965073 auth.debug] pam_dhkeys: cred reinit/refresh ignored
    If I try to then change the password with the `passwd` command it does not use the password policy on the directory server but the default defined in /etc/default/passwd
    bash-2.05$ passwd
    passwd: Changing password for VV
    Enter existing login password:
    New Password:
    passwd: Password too short - must be at least 8 characters.
    Please try again
    May 17 15:26:17 client passwd[27014]: [ID 285619 user.debug] ldap pam_sm_authenticate(passwd VV), flags = 0
    May 17 15:26:17 client passwd[27014]: [ID 509786 user.debug] roles pam_sm_authenticate, service = passwd user = VV ruser = not set rhost = not set
    May 17 15:26:17 client passwd[27014]: [ID 579461 user.debug] pam_unix_account: entering pam_sm_acct_mgmt()
    May 17 15:26:17 client passwd[27014]: [ID 724664 user.debug] pam_ldap pam_sm_acct_mgmt: illegal option no_pass
    May 17 15:26:17 client passwd[27014]: [ID 100510 user.debug] ldap pam_sm_acct_mgmt(VV), flags = 80000000
    May 17 15:26:17 client passwd[27014]: [ID 985558 user.debug] pam_dhkeys: entered pam_sm_chauthtok()
    May 17 15:26:17 client passwd[27014]: [ID 988707 user.debug] read_authtok: Copied AUTHTOK to OLDAUTHTOK
    May 17 15:26:20 client passwd[27014]: [ID 558286 user.debug] pam_authtok_check: pam_sm_chauthok called
    May 17 15:26:20 client passwd[27014]: [ID 271931 user.debug] pam_authtok_check: minimum length from /etc/default/passwd: 8
    May 17 15:26:20 client passwd[27014]: [ID 985558 user.debug] pam_dhkeys: entered pam_sm_chauthtok()
    May 17 15:26:20 client passwd[27014]: [ID 417489 user.debug] pam_dhkeys: OLDRPCPASS already set
    I am using the default policy on the directory server which states a minimum password length of 6 characters.
    server:root:LDAP_Master:/var/opt/SUNWdsee/dscc6/dcc/ads/ldif#dsconf get-server-prop -h server -p 389|grep ^pwd-
    pwd-accept-hashed-pwd-enabled : N/A
    pwd-check-enabled : off
    pwd-compat-mode : DS6-mode
    pwd-expire-no-warning-enabled : on
    pwd-expire-warning-delay : 1d
    pwd-failure-count-interval : 10m
    pwd-grace-login-limit : disabled
    pwd-keep-last-auth-time-enabled : off
    pwd-lockout-duration : disabled
    pwd-lockout-enabled : off
    pwd-lockout-repl-priority-enabled : on
    pwd-max-age : disabled
    pwd-max-failure-count : 3
    pwd-max-history-count : disabled
    pwd-min-age : disabled
    pwd-min-length : 6
    pwd-mod-gen-length : 6
    pwd-must-change-enabled : off
    pwd-root-dn-bypass-enabled : off
    pwd-safe-modify-enabled : off
    pwd-storage-scheme : CRYPT
    pwd-strong-check-dictionary-path : /opt/SUNWdsee/ds6/plugins/words-english-big.txt
    pwd-strong-check-enabled : off
    pwd-strong-check-require-charset : lower
    pwd-strong-check-require-charset : upper
    pwd-strong-check-require-charset : digit
    pwd-strong-check-require-charset : special
    pwd-supported-storage-scheme : CRYPT
    pwd-supported-storage-scheme : SHA
    pwd-supported-storage-scheme : SSHA
    pwd-supported-storage-scheme : NS-MTA-MD5
    pwd-supported-storage-scheme : CLEAR
    pwd-user-change-enabled : off
    Whereas /etc/default/passwd on the ldap client says passwords must be 8 characters. This is seen with the pam_authtok_check: minimum length from /etc/default/passwd: 8
    . It is clearly not using the policy from the directory server but checking locally. So I can login ok using the ldap server for authentication but when I try to change the password it does not use the policy from the server which says I only need a minimum lenght of 6 characters.
    I have read that pam_ldap is only supported for directory server 5.2. Because I am running ds6 and with password compatability in ds6 mode maybe this is my problem. Does anyone know of any updated pam_ldap modules for solaris 9?
    Edited by: ericduggan on Sep 8, 2008 5:30 AM

    you can try passwd -r ldap for changing the ldap passwds...

  • Mail does not use correct outgoing server

    Problem
    Mail in Mavericks (and also IOS6 snf 7) does not use the outgoing smtp server associated with the account being used. This results in either a failure to send or mail being put into the wrong "Sent" folder.
    Background
    I have most of my non-icloud mail pulled down to a home server from which my laptops and ios devices access various accounts using imap. The local home server also provides smtp and relays all mail to my ISP. Recently I have been switching from an old home server (Mac Mini) to a new one (Raspberry pi running the debian Raspbian version with fetchmail,  Dovecot and postfix setup).
    While making the changeover I had access to both the old server and the new server enabled on my laptop. Naturally the majority of the settings (Name, email address etc) were the same although the name and address of the server to be used for both incoming and outgoing mail were different. This seemed tp work fine for incoming. However when I tested outgoing mail the copy that should appear in the "sentt" box  went missing. This usually indicates some mistake in the setting of the sent mail folder on the accounts but this all checked out.
    I eventually found the missing outgoing mail intended to go through the new server in the sent box on the old server. Further trials showed that no matter what I did the outgoing would always default to the old (and therefore first set up) outgoing server.
    Deleting the old account and the old outgoing server of course should cure the problem and will eventually be the solution for me when I kill the old server. But i wanted to get to the bottom of the problem in case it reappeared in other contexts. Checking the "use only this server" box produced failure to send rather than the correct result.
    Trialing various alterntaive settings showed that the problem occurs when there are two outgoing servers with the email address in the settings and the user name on the outgoing server name being the same. I had assumed that changing the description field would distinguish between the various settings; however this did not work. Changing the Name Field did work eg by putting (O) after my name.
    It appears therefore that mail selects the outgoing server on the basis of email address (with the full name included) and user name (trrespective of the actual server or the Description that shows in the smtp server listing. In some ways this is logical but it produces problems in the context I have described and would also be a difficulty if you wanted to use an alternative server when in a different location.
    I have trawled support and elsewhere for any thing similar. Lots of mail problems (don't get me started on the way icloud loses outgoing each time you edit the list!) but I have not found any posts on precisiely this point.
    IOS devices seem to have similar problems, but a quick attempt at a similar solution does not work, and I cannot be bothered  to test the options. I will simply clean them out and put in the new accounts.
    Advice
    Grateful for any comments or advice from people who have encountered similar problems and whether my diagnosis if correct. Have I missed any obvious corrections that would clear this up. I do not know whether this is a Mavericks issue or also appears in earlier OSX versions.
    CPE

    Peter,
    Where ever the Sent and Trash folders show in the Sidebar, highlight first one, and then the other, followed by clicking on Mailbox in the Menubar, and choosing Use This Mailbox For, and choose the function.
    Keep us posted on your progress.
    Ernie

  • My table of contents does not use the entry style I select for words in the paragraph that have character styles applied to them in the chapter, so some of the letters are showing up as green, which is fine in the chapter but not in the TOC.

    My table of contents does not use the entry style I select for words in the paragraph that have character styles applied to them in the chapter, so some of the letters, specifically parameters, are showing up green, which is fine in the chapter but not in the TOC. I can manually fix this in the TOC by changing the character style to none after the toc  has been generated, but I don't want to do this.

    What application are you running? Please ask this in the forum of the product you're using.

  • My website is telling users to install a flash/shockwave plug in but my site does not use either.

    Like I said in the title we are getting the pop up bar asking users to install a flash plug in but there are not any flash objects on our site. I did an experiment and I found when I disable the shockwave plug-in on a machine that has it installed I get the pop-up and when I enable it on a machine that has it installed the pop-up goes away. I think I might have pin pointed the problem to a tracking script because when I remove the script the website does not ask for a plug-in. I contacted the people who made the script and they told me their script does not use flash in anyway. Does anyone have any idea why our useres are being asked to install the plug-in?
    Here is the pop-up:

    Do you have any advertising on the site that could be using shockwave? If not the script you mention must somehow be using it somehow, you have even confirmed this removing it and there is no prompt.
    What happens if you try it using another browser such as Firefox?
    regards
    Mike

  • [svn:fx-trunk] 16929: Add a [Mixin] class that will register the required class aliases in the event the mxml compiler generation   [RemoteClass(alias="")] code is not called because an application does not use the Flex UI framework .

    Revision: 16929
    Revision: 16929
    Author:   [email protected]
    Date:     2010-07-15 07:38:44 -0700 (Thu, 15 Jul 2010)
    Log Message:
    Add a class that will register the required class aliases in the event the mxml compiler generation  [RemoteClass(alias="")] code is not called because an application does not use the Flex UI framework.
    Add a reference to this class in the RPCClasses file so it always gets loaded.
    QE notes: Need a remoting and messaging regression test that doesn't use Flex UI.
    Bugs: Watson bug 2638788
    Modified Paths:
        flex/sdk/trunk/frameworks/projects/rpc/src/RPCClasses.as
    Added Paths:
        flex/sdk/trunk/frameworks/projects/rpc/src/mx/utils/RpcClassAliasInitializer.as

    Great exercise to document the problem like this.  It got me thinking about how an app with modules would be different from an app that does not use modules.  Solution: I moved the dummy reference of PersonPhotoView out to the main application file (as opposed to being inside the module) and it worked.  I've probably been lucky not to have experienced this problem earlier, because for most other entities I have an instance attached to my model which is linked / compiled with the main application.

  • Set a colour to a row in a table view which does not use an iterator

    Hi ,
      I have an application , which displays data using a table view.
    How can i set colour to a row based on the value of one of its coloums.
    The table view does not use an itertator.
    Thanks
    Arun

    you can use the following code in the ONMANIPULATION event to modify the color of the row. but be aware that if SAP changes rendering ot htmlb:tableview it may not work.
    this code sample set the bgcolor of row 2 to blue.
    DATA: httpbody TYPE string .
    CALL METHOD response->if_http_entity~get_cdata
      RECEIVING
        data = httpbody.
    REPLACE ALL OCCURRENCES OF '<tr rr="2"' IN httpbody WITH '<tr rr="2" bgcolor="blue"' IGNORING CASE .
    CALL METHOD response->if_http_entity~set_cdata
      EXPORTING
        data = httpbody.
    Regards
    Raja

  • A tech company just set up a wifi network in my house and does not use my existing TC; how do I get it in the network to serve as backup for my iMac? (I don't need it as a wifi access point anymore)

    a tech company just set up a wifi network in my house and does not use my existing TC; how do I get it in the network to serve as backup for my iMac? (I don't need it as a wifi access point anymore) thanks

    Just bridge the TC and plug it by ethernet into the main router.
    Bridge in v5 airport utility.
    In v6 it is under network.. change it from DHCP and NAT to Off bridge mode.
    Turn off the wireless.

  • Query does not uses indices

    I am using 10.2.0.1 database instance and wrote a SQL query which involves several tables but I had made sure all columns in where clause has got proper indexes. The query is fairly simple does not use any function etc. in where clause but inner joins.
    I have analyzed schema statistics using dbms_stats.gather_schema_stats... procedure and also added new required indexes to support this query.
    Now when I see explain plain for this query it still does full table scan? I do not understand why it is not using indices and does full table scan.
    Any comments?

    Pgoel,
    The plan that you posted with the proper tags to help when reading the plan:
    | Id  | Operation                     | Name               | Rows  | Bytes | Cost  | Time      |
    | 0   | SELECT STATEMENT              |                    |       |       |   279 |           |
    | 1   |  HASH UNIQUE                  |                    |   692 |  130K |   279 |  00:00:04 |
    | 2   |   NESTED LOOPS                |                    |   692 |  130K |   247 |  00:00:03 |
    | 3   |    HASH JOIN                  |                    |    12 |  2184 |   223 |  00:00:03 |
    | 4   |     HASH JOIN                 |                    |    12 |  2028 |   212 |  00:00:03 |
    | 5   |      HASH JOIN                |                    |    12 |  1608 |   203 |  00:00:03 |
    | 6   |       HASH JOIN               |                    |  3855 |  248K |    45 |  00:00:01 |
    | 7   |        HASH JOIN              |                    |  3855 |  132K |    20 |  00:00:01 |
    | 8   |         TABLE ACCESS FULL     | COD_SCHED_ITEMS    |  3970 |   39K |     6 |  00:00:01 |
    | 9   |         HASH JOIN             |                    |  3064 |   75K |    13 |  00:00:01 |
    | 10  |          INDEX FAST FULL SCAN | COD_SCHED_POLICY_PK|  3064 |   24K |     3 |  00:00:01 |
    | 11  |          TABLE ACCESS FULL    | COD_SCHEDULE       |  3155 |   52K |     9 |  00:00:01 |
    | 12  |        TABLE ACCESS FULL      | COD_ASSET          |  4982 |  151K |    25 |  00:00:01 |
    | 13  |       TABLE ACCESS FULL       | COR_ACL            |   46K | 3124K |   157 |  00:00:02 |
    | 14  |      TABLE ACCESS FULL        | COR_POLGROUP       |  3236 |  111K |     8 |  00:00:01 |
    | 15  |     TABLE ACCESS FULL         | COR_BASE_PRICE     |  3247 |   41K |    11 |  00:00:01 |
    | 16  |    INDEX RANGE SCAN           | QAM_LOG_URI_IX     |    58 |   580 |     2 |  00:00:01 |
    ----------------------------------------------------------------------------------------------Obtaining the plan from the 10053 trace was likely a minor goal of Sybrand when he suggested activating the trace. The plan implies that the cost based optimizer determined that Oracle would require 0.04 seconds to execute the plan and return the data. Does it take much longer than 0.04 seconds for the query to execute?
    As Sybrand pointed out, the 10053 trace shows the decisions made by the cost based optimizer when trying to determine the most efficient plan. If a potential step in the plan is determined to be more expensive (costly, assumed to require more time to execute) than a previously found method, the potential plan step is aborted. This process continues until one of:
    * All join order possibilities have been tried (8! = 40,320 possible)
    * 2,000 join order possibities have been tried
    * The continued examination of join combinations will require more time than Oracle predicts for the execution of the query.
    * And probably something else.
    The process and decisions made by the cost based optimizer are included in the 10053 trace. For some reason, possibily bad statistics, inappropriate initialization parameters, cardiality calcuation problems, or something else, Oracle calculated that retrieving the data from the tables using a full tablescan is less costly than an index access path. The 10053 trace will show why that happened.
    Charles Hooper
    IT Manager/Oracle DBA
    K&M Machine-Fabricating, Inc.

  • Why does it not use the index?

    L.S.,
    We are using a table called IT_RFC_REGISTRATION. It is a relatively big table for our application.
    Its primary key is RFCNR, each new RFCNR getting the next value.
    Now for my intranet report I am interested in the last 40 records. But when I execute:
    SELECT *
    FROM IT_RFC_REGISTRATION
    ORDER BY RFCNR DESC
    the query takes ages to execute.
    When I do this:
    SELECT RFCNR
    FROM IT_RFC_REGISTRATION
    ORDER BY RFCNR DESC
    the result comes instantaneous because this query uses the index on RFCNR.
    Why does the former query not use the index to execute? It should be much faster to fetch ROWIDs from the index end to start and use those to get the records, than to load all the records and then sort them.
    Is there a trick with which I can use a join of the latter query and the former query to speed up the result?
    Greetings,
    Philbert de Zwart,
    Utrecht, The Netherlands.

    The difference you see in query run time is based on the amount data being sorted, then returned. In the first query, a full table scan is faster since if the index was used, Oracle would have to do a lookup in the index, get the rowid's and go look up the data in the table (TWO disk i/o's). It's faster to just scan the entire table.
    Indexes will generally not be used unless you have a where clause. If you only need a few fields from the table, you could include them all in an index. For instance, if you only need RFCNR & DESC create a concatenated index on those two columns and then only a scan of the index is required (very fast).

  • Login that does not use https

    I don't have access to https sites from my current work facility.
    Do you have a login method that does not use HTTPS?
    Is there any way that I can link my metalink account and my OTN account, and get to OTN through my metalink account?
    David

    Okay ... I fixed this, Oracle XE finally convinced them to let us have access to https at OTN.
    David

Maybe you are looking for

  • Admin pw every time I delete an APP

    Is it normal that I have to enter my admin pw every time I delete an app out of the programs folder?

  • InDesign CS6 crashes on large PDF export...

    I have my company's catalog done through InDesign.  We've done this the same way for years.  I've had this file for the last 3 years and have never had an issue exporting the full catalog as a PDF.  I can no longer say that. When I try to export the

  • Thai Text in Report

    Hi Experts, We are having a report which is used in all the languages. When logged in Thai language, the report alignment is not proper. The numbers are not even right aligned. But other two byte languages are coming fine. how to check whther the lan

  • Font Size on Websites

    When I go to certain websites, once they load, the font size is so large I can not view the website. Any ideas?

  • DIFFERENCES between BASIC SCHEDULING and LEAD-TIME SCHEDULING.

    Hello SAP Gurus, Kindly let me know the differences between BASIC SCHEDULING and LEAD-TIME SCHEDULING. Looking for your early feedback. Warm regards, Kaushik.