DS 6.3.1 and chained suffix
Problem description:
Trying to search content of chained suffix and requesting 'dn' only, results in no entries in response. Changing search request to return attributes 'dn' and 'uid', for example, returns data as expected.
Details about configuration:
internal.ds.server - Directory Server 6.3.1 on Solaris 10 x86
extternal.ds.server - Directory Server 6.3.1 on Solaris 10 x86
Chained suffix o=external was created from ldif on internal.ds.server. Access to o=external on external.ds.server uses identity of dedicated user with proxy right granted.
Local ACI checking is set on internal.ds.server. This configuration was set to make possible use Access Manager in internal environment to authenticate against users in both, internal and external environments.
User used for search is uid=siebelviewer,ou=people,dc=ds,dc=server and has full set of rights (allows (all) in ACI ) on dc=ds,dc=server data tree on internal.ds.server.
Debugging results (till now):
When local ACI check is set, processing of search request is recorded in log file of both LDAP servers. On external.ds.server is recorded number of returned entries (>0). On internal.ds.server 0 returned entries is recorded.
Turning on debugging ACI processing and reporting into error log on internal.ds.server shows failed attempt to access due to insufficient access right:
# ldapsearch -h internal.ds.server -p 389 -D "uid=siebelviewer,ou=people,dc=ds,dc=server" -b "o=external,dc=ds,dc=server" uid=*sadm* dn
# less errors
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Operation extension 16e4a38 deallocated
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Operation extension 16e4a38 allocated
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - acl_init_userGroup: found in cache for dn:uid=siebelviewer,ou=people,dc=ds,dc=server
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for:o=external,dc=ds,dc=server: container:-1
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for:dc=ds,dc=server: container:2
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for:dc=server: container:-1
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for:: container:0
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Index: 0 2
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Index: 1 0
*[03/Aug/2011:17:01:38 +0200] - DEBUG - conn=-1 op=-1 msgId=-1 - acl: access to entry not allowed*
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Copying the Context CURR ENTRY context cache
[03/Aug/2011:17:01:38 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Copying the Context (from ACLPB to ACLCB)If another attrinute (uid) is expected in result, it works:
# ldapsearch -h internal.dc=ds,dc=server -p 389 -D "uid=siebelviewer,ou=people,dc=ds,dc=server" -b "o=external,dc=ds,dc=server" uid=*sadm* dn uid
Enter bind password:
version: 1
dn: uid=SADMIN,ou=People,o=external,dc=ds,dc=server
uid: SADMIN
# less errors
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Operation extension 16e4a38 deallocated
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Operation extension 16e4a38 allocated
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - acl_init_userGroup: found in cache for dn:uid=siebelviewer,ou=people,dc=ds,dc=server
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for:o=external,dc=ds,dc=server: container:-1
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for:dc=ds,dc=server: container:2
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for:dc=server: container:-1
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for:: container:0
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Index: 0 2
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Index: 1 0
*[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - ####################ACCESS_ALLOWED START #######*
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for update:uid=sadmin,ou=people,o=external,dc=ds,dc=server: container:-1
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Searching AVL tree for update:ou=people,o=external,dc=ds,dc=server: container:-1
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Index AFTER PREPARE: 0 2
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Index AFTER PREPARE: 1 0
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - ************ RESOURCE INFO STARTS *********
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Client DN: uid=siebelviewer,ou=people,dc=ds,dc=server
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - resource type:256(read target_DN )
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - Slapi_Entry DN: uid=sadmin,ou=people,o=external,dc=ds,dc=server
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - ATTR: uid
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - rights:read
[03/Aug/2011:17:09:05 +0200] - INFORMATION - NSACLPlugin - conn=-1 op=-1 msgId=-1 - ************ RESOURCE INFO ENDS *********Removing local ACI checking (nschecklocalaci: off) on internal.ds.server makes possible to search with request to return only 'dn' attribute. But local ACI checking is solution for another issue. :-(
Note: This is not about discussion "why chained suffix and not directory proxy server?"
Note2: The fact about obsoleted chained suffix in DS 6.3.1 is known as well, but ...
Hello,
Yes I've very close relationship with Directory;-)
Regarding the justification, your full entire use case seems complex, so getting back to basis might help. The examples you posted show the issue: A search with attribute list {dn,uid} returns both attributes. In the same context, a search with {dn} only does not return anything. This behaviour is incorrect from a LDAP point of view.
Hope this helps
-Sylvain
Similar Messages
-
Write access to chained suffix?
Hi,
I created a chained suffix in my Sun DS 5.2P6. From my DS I can browse the tree on the remote server (again a Sun DS 5.2) where I granted "(all,proxy)" to proxy user.
But when I try to write (MOD) an entry on the chained tree, I see "RESULT err=50". Insufficient access.
I can make write operations only accessing directly to the server which really contains the tree.
What is the configuration to grant write access for MOD,ADD in a chained tree?
Thank you very much
Best Regards
MarcoUhm,
I make tests with Directory Manager, but it really seems that if I write from another user with write access I can modify the chained tree!
So, it seems that only Directory Manager can't modify entries on chained tree. And ACI is sufficient whit proxy permission.
So... all working for my purpose.
Regards
Marco -
Hi Folks,
I used expdp utility to export all Oracle scheduler jobs and chains with below method, after that generate sql script by impdp, later on executing sql script encountered some errors.
Only chain step and chain rule for executing script. Does anyone bright me some light? Thanks!
My env: Oracle 11g + Oracle Linux 5.5
My steps as below:
1. export(expdp) oracle scheduler job(chain)
2. generate sql script by impdp.
3. remove orginal scheduler job(chain)
4. execute sql script
5. job with no chain well but job with chain failed
[oracle@linux1 ~]$ expdp scott/tiger directory=db_dump_dir dumpfile=scott_job.dmp include=procobj:\" in \(select \
> name from sys.obj$ where type\# in \(46,59,66,67,68,69,72,74,79\)\)\" schemas=scott
Export: Release 11.2.0.1.0 - Production on Tue Dec 3 17:42:31 2013
Copyright (c) 1982, 2009, Oracle and/or its affiliates. All rights reserved.
Connected to: Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
With the Partitioning, Real Application Clusters, OLAP, Data Mining
and Real Application Testing options
Starting "SCOTT"."SYS_EXPORT_SCHEMA_01": scott/******** directory=db_dump_dir dumpfile=scott_job.dmp include=procobj:" in (select name from sys.obj$ where type# in (46,59,66,67,68,69,72,74,79))" schemas=scott
Estimate in progress using BLOCKS method...
Processing object type SCHEMA_EXPORT/TABLE/TABLE_DATA
Total estimation using BLOCKS method: 0 KB
Processing object type SCHEMA_EXPORT/POST_SCHEMA/PROCOBJ
Master table "SCOTT"."SYS_EXPORT_SCHEMA_01" successfully loaded/unloaded
Dump file set for SCOTT.SYS_EXPORT_SCHEMA_01 is:
/u03/database/usbo/BNR/dump/scott_job.dmp
Job "SCOTT"."SYS_EXPORT_SCHEMA_01" successfully completed at 17:42:54
[oracle@linux1 ~]$ impdp scott/tiger sqlfile=scott_job.sql directory=db_dump_dir dumpfile=scott_job.dmp logfile=imp_scott_job.log
Import: Release 11.2.0.1.0 - Production on Tue Dec 3 17:43:04 2013
Copyright (c) 1982, 2009, Oracle and/or its affiliates. All rights reserved.
Connected to: Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
With the Partitioning, Real Application Clusters, OLAP, Data Mining
and Real Application Testing options
Master table "SCOTT"."SYS_SQL_FILE_FULL_01" successfully loaded/unloaded
Starting "SCOTT"."SYS_SQL_FILE_FULL_01": scott/******** sqlfile=scott_job.sql directory=db_dump_dir dumpfile=scott_job.dmp logfile=imp_scott_job.log
Processing object type SCHEMA_EXPORT/POST_SCHEMA/PROCOBJ
Job "SCOTT"."SYS_SQL_FILE_FULL_01" successfully completed at 17:43:07
[oracle@linux1 ~]$ more /u03/database/usbo/BNR/dump/scott_job.
scott_job.dmp scott_job.sql
[oracle@linux1 ~]$ more /u03/database/usbo/BNR/dump/scott_job.sql
-- CONNECT SCOTT
ALTER SESSION SET EVENTS '10150 TRACE NAME CONTEXT FOREVER, LEVEL 1';
ALTER SESSION SET EVENTS '10904 TRACE NAME CONTEXT FOREVER, LEVEL 1';
ALTER SESSION SET EVENTS '25475 TRACE NAME CONTEXT FOREVER, LEVEL 1';
ALTER SESSION SET EVENTS '10407 TRACE NAME CONTEXT FOREVER, LEVEL 1';
ALTER SESSION SET EVENTS '10851 TRACE NAME CONTEXT FOREVER, LEVEL 1';
ALTER SESSION SET EVENTS '22830 TRACE NAME CONTEXT FOREVER, LEVEL 192 ';
-- new object type path: SCHEMA_EXPORT/POST_SCHEMA/PROCOBJ
BEGIN
BEGIN
dbms_rule_imp_obj.import_rule('"SCOTT"','"CHAIN_RULE_1"','1=1',NULL, 'First link in the chain.',0,NULL);
END;
COMMIT;
END;
BEGIN
BEGIN
dbms_rule_imp_obj.import_rule('"SCOTT"','"CHAIN_RULE_2"',':"CHAIN_STEP_1".COMPLETED = ''TRUE''',NULL, 'Second link in the chain.',0,NULL);
END;
COMMIT;
END;
BEGIN
BEGIN
dbms_rule_imp_obj.import_rule('"SCOTT"','"CHAIN_RULE_3"',':"CHAIN_STEP_2".COMPLETED = ''TRUE''',NULL, 'Third link in the chain.',0,NULL);
END;
COMMIT;
END;
BEGIN
BEGIN
dbms_rule_imp_obj.import_rule('"SCOTT"','"CHAIN_RULE_4"',':"CHAIN_STEP_3".COMPLETED = ''TRUE''',NULL, 'End of the chain.',0,NULL);
END;
COMMIT;
END;
BEGIN
BEGIN
dbms_rule_imp_obj.import_rule_set('"SCHED_RULESET$1"','"SCHED_EV_CTX$1"',NULL, 0);
END;
COMMIT;
END;
BEGIN
dbms_scheduler.create_program('"TEST_PROC_1"','PLSQL_BLOCK',
'BEGIN
INSERT INTO tb_schduler (id, descr, cr_date)
VALUES (tb_schduler_seq.NEXTVAL, ''test_proc_1'', SYSDATE);
COMMIT;
END;'
,0, TRUE,
'Program for first link in the chain.'
COMMIT;
END;
BEGIN
dbms_scheduler.create_program('"TEST_PROC_3"','PLSQL_BLOCK',
'BEGIN
INSERT INTO tb_schduler (id, descr, cr_date)
VALUES (tb_schduler_seq.NEXTVAL, ''test_proc_3'', SYSDATE);
COMMIT;
END;'
,0, TRUE,
'Program for last link in the chain.'
COMMIT;
END;
BEGIN
dbms_scheduler.create_program('"TEST_PROC_2"','PLSQL_BLOCK',
'BEGIN
INSERT INTO tb_schduler (id, descr, cr_date)
VALUES (tb_schduler_seq.NEXTVAL, ''test_proc_2'', SYSDATE);
COMMIT;
END;'
,0, TRUE,
'Program for second link in the chain.'
COMMIT;
END;
BEGIN
dbms_scheduler.create_chain('"TEST_CHAIN_1"', evaluation_interval=>NULL, comments=>'A test chain.'
, rule_set_name=>'"SCHED_RULESET$1" '
dbms_scheduler.define_chain_step('"TEST_CHAIN_1"', step_name=>'"CHAIN_STEP_1"', program_name=>'"TEST_PROC_1"');
dbms_scheduler.define_chain_step('"TEST_CHAIN_1"', step_name=>'"CHAIN_STEP_2"', program_name=>'"TEST_PROC_2"');
dbms_scheduler.define_chain_step('"TEST_CHAIN_1"', step_name=>'"CHAIN_STEP_3"', program_name=>'"TEST_PROC_3"');
COMMIT;
END;
BEGIN
dbms_scheduler.create_job('"TEST_CHAIN_1_JOB"',
job_type=>'CHAIN', job_action=>
'test_chain_1'
, number_of_arguments=>0,
start_date=>TO_TIMESTAMP_TZ('03-DEC-2013 05.38.56.718161000 PM +08:00','DD-MON-RRRR HH.MI.SSXFF AM TZR','NLS_DATE_LANGUAGE=english'), repeat_interval=>
'freq=minutely; interval=2'
, end_date=>TO_TIMESTAMP_TZ('03-DEC-2013 06.08.56.000000000 PM +08:00','DD-MON-RRRR HH.MI.SSXFF AM TZR','NLS_DATE_LANGUAGE=english'),
job_class=>'"DEFAULT_JOB_CLASS"', enabled=>FALSE, auto_drop=>TRUE,comments=>
NULL
COMMIT;
END;
[oracle@linux1 ~]$ export ORACLE_SID=usbo
[oracle@linux1 ~]$ sqlplus / as sysdba
SQL*Plus: Release 11.2.0.1.0 Production on Tue Dec 3 17:44:43 2013
Copyright (c) 1982, 2009, Oracle. All rights reserved.
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
With the Partitioning, Real Application Clusters, OLAP, Data Mining
and Real Application Testing options
sys@USBO> show parameter db_name
NAME TYPE VALUE
db_name string usbo
sys@USBO> conn scott/tiger;
Connected.
--remove job and chain.
scott@USBO> EXEC DBMS_SCHEDULER.drop_job(job_name => 'test_chain_1_job');
EXEC DBMS_SCHEDULER.drop_chain (chain_name => 'test_chain_1');
EXEC DBMS_SCHEDULER.drop_program (program_name => 'test_proc_1');
EXEC DBMS_SCHEDULER.drop_program (program_name => 'test_proc_2');
EXEC DBMS_SCHEDULER.drop_program (program_name => 'test_proc_3');
PL/SQL procedure successfully completed.
scott@USBO> @/u03/database/usbo/BNR/dump/scott_job.sql
Session altered.
Session altered.
Session altered.
Session altered.
Session altered.
Session altered.
PL/SQL procedure successfully completed.
PL/SQL procedure successfully completed.
PL/SQL procedure successfully completed.
PL/SQL procedure successfully completed.
BEGIN
ERROR at line 1:
ORA-24150: evaluation context SCOTT.SCHED_EV_CTX$1 does not exist
ORA-06512: at "SYS.DBMS_RULEADM_INTERNAL", line 28
ORA-06512: at "SYS.DBMS_RULE_IMP_OBJ", line 40
ORA-06512: at line 3
PL/SQL procedure successfully completed.
PL/SQL procedure successfully completed.
PL/SQL procedure successfully completed.
BEGIN
ERROR at line 1:
ORA-24141: rule set SCOTT.SCHED_RULESET$1 does not exist
ORA-06512: at "SYS.DBMS_SYS_ERROR", line 95
ORA-06512: at "SYS.DBMS_ISCHED", line 1694
ORA-01403: no data found
ORA-06512: at "SYS.DBMS_SCHEDULER", line 1638
ORA-06512: at line 5
PL/SQL procedure successfully completed.Thanks all of you!
Hi DK2010,
I took some test that the data dict(dba_rule_sets/dba_evaluation_contexts) no any data returned after I had removed the job.
So I tried to create evaluation context and re-executed script(only exception setion.) the first error has gone. For the second still have some issue.
---->no any returned
scott@USBO> select * from dba_rule_sets where rule_set_owner='SCOTT';
no rows selected
scott@USBO> select * from dba_evaluation_contexts WHERE evaluation_context_owner='SCOTT';
no rows selected
-->add new EVALUATION CONTEXT
scott@USBO> exec DBMS_RULE_ADM.CREATE_EVALUATION_CONTEXT('SCOTT.SCHED_EV_CTX$1');
PL/SQL procedure successfully completed.
--->now it looks fine
scott@USBO> BEGIN
2 BEGIN
3 dbms_rule_imp_obj.import_rule_set('"SCHED_RULESET$1"','"SCHED_EV_CTX$1"',NULL, 0);
4 END;
5
6 COMMIT;
7 END;
8 /
PL/SQL procedure successfully completed.
--->add new rule set, it prompt aleady exists
scott@USBO> exec DBMS_RULE_ADM.CREATE_RULE_SET('SCOTT.SCHED_RULESET$1')
BEGIN DBMS_RULE_ADM.CREATE_RULE_SET('SCOTT.SCHED_RULESET$1'); END;
ERROR at line 1:
ORA-24153: rule set SCOTT.SCHED_RULESET$1 already exists
ORA-06512: at "SYS.DBMS_RULEADM_INTERNAL", line 28
ORA-06512: at "SYS.DBMS_RULE_ADM", line 138
ORA-06512: at line 1
-->chain rule still could not find.
scott@USBO> @job_chain_rules.sql
no rows selected
-->rerun
scott@USBO> BEGIN
2 dbms_scheduler.create_chain('"TEST_CHAIN_1"', evaluation_interval=>NULL, comments=>'A test chain.'
3 , rule_set_name=>'"SCHED_RULESET$1" '
4 );
5 dbms_scheduler.define_chain_step('"TEST_CHAIN_1"', step_name=>'"CHAIN_STEP_1"', program_name=>'"TEST_PROC_1"');
6 dbms_scheduler.define_chain_step('"TEST_CHAIN_1"', step_name=>'"CHAIN_STEP_2"', program_name=>'"TEST_PROC_2"');
7 dbms_scheduler.define_chain_step('"TEST_CHAIN_1"', step_name=>'"CHAIN_STEP_3"', program_name=>'"TEST_PROC_3"');
8 COMMIT;
9 END;
10 /
BEGIN
ERROR at line 1:
ORA-27477: "SCOTT.TEST_CHAIN_1" already exists
ORA-06512: at "SYS.DBMS_ISCHED", line 1148
ORA-06512: at "SYS.DBMS_SCHEDULER", line 1598
ORA-06512: at line 2
-->drop chain
scott@USBO> exec dbms_scheduler.drop_chain('TEST_CHAIN_1');
BEGIN dbms_scheduler.drop_chain('TEST_CHAIN_1'); END;
ERROR at line 1:
ORA-27479: Cannot drop "SCOTT.TEST_CHAIN_1" because other objects depend on it
ORA-06512: at "SYS.DBMS_ISCHED", line 1319
ORA-06512: at "SYS.DBMS_ISCHED", line 1222
ORA-06512: at "SYS.DBMS_SCHEDULER", line 1854
ORA-06512: at line 1
scott@USBO> exec dbms_scheduler.drop_chain('TEST_CHAIN_1',force=>TRUE);
PL/SQL procedure successfully completed.
scott@USBO> BEGIN
2 dbms_scheduler.create_chain('"TEST_CHAIN_1"', evaluation_interval=>NULL, comments=>'A test chain.'
3 , rule_set_name=>'"SCHED_RULESET$1" '
4 );
5 dbms_scheduler.define_chain_step('"TEST_CHAIN_1"', step_name=>'"CHAIN_STEP_1"', program_name=>'"TEST_PROC_1"');
6 dbms_scheduler.define_chain_step('"TEST_CHAIN_1"', step_name=>'"CHAIN_STEP_2"', program_name=>'"TEST_PROC_2"');
7 dbms_scheduler.define_chain_step('"TEST_CHAIN_1"', step_name=>'"CHAIN_STEP_3"', program_name=>'"TEST_PROC_3"');
8 COMMIT;
9 END;
10 /
BEGIN
ERROR at line 1:
ORA-24141: rule set SCOTT.SCHED_RULESET$1 does not exist --->still returned no rule set
ORA-06512: at "SYS.DBMS_SYS_ERROR", line 95
ORA-06512: at "SYS.DBMS_ISCHED", line 1694
ORA-01403: no data found
ORA-06512: at "SYS.DBMS_SCHEDULER", line 1638
ORA-06512: at line 5
scott@USBO> exec DBMS_RULE_ADM.CREATE_RULE_SET('SCOTT.SCHED_RULESET$1')
PL/SQL procedure successfully completed.
scott@USBO> BEGIN
2 dbms_scheduler.create_chain('"TEST_CHAIN_1"', evaluation_interval=>NULL, comments=>'A test chain.'
3 , rule_set_name=>'"SCHED_RULESET$1" '
4 );
5 dbms_scheduler.define_chain_step('"TEST_CHAIN_1"', step_name=>'"CHAIN_STEP_1"', program_name=>'"TEST_PROC_1"');
6 dbms_scheduler.define_chain_step('"TEST_CHAIN_1"', step_name=>'"CHAIN_STEP_2"', program_name=>'"TEST_PROC_2"');
7 dbms_scheduler.define_chain_step('"TEST_CHAIN_1"', step_name=>'"CHAIN_STEP_3"', program_name=>'"TEST_PROC_3"');
8 COMMIT;
9 END;
10 /
BEGIN
ERROR at line 1:
ORA-27477: "SCOTT.TEST_CHAIN_1" already exists
ORA-06512: at "SYS.DBMS_ISCHED", line 1148
ORA-06512: at "SYS.DBMS_SCHEDULER", line 1598
ORA-06512: at line 2
scott@USBO> exec dbms_scheduler.drop_chain('TEST_CHAIN_1',force=>TRUE);
PL/SQL procedure successfully completed.
scott@USBO> BEGIN
2 dbms_scheduler.create_chain('"TEST_CHAIN_1"', evaluation_interval=>NULL, comments=>'A test chain.'
3 , rule_set_name=>'"SCHED_RULESET$1" '
4 );
5 dbms_scheduler.define_chain_step('"TEST_CHAIN_1"', step_name=>'"CHAIN_STEP_1"', program_name=>'"TEST_PROC_1"');
6 dbms_scheduler.define_chain_step('"TEST_CHAIN_1"', step_name=>'"CHAIN_STEP_2"', program_name=>'"TEST_PROC_2"');
7 dbms_scheduler.define_chain_step('"TEST_CHAIN_1"', step_name=>'"CHAIN_STEP_3"', program_name=>'"TEST_PROC_3"');
8 COMMIT;
9 END;
10 /
BEGIN
ERROR at line 1:
ORA-24141: rule set SCOTT.SCHED_RULESET$1 does not exist
ORA-06512: at "SYS.DBMS_SYS_ERROR", line 95
ORA-06512: at "SYS.DBMS_ISCHED", line 1694
ORA-01403: no data found
ORA-06512: at "SYS.DBMS_SCHEDULER", line 1638
ORA-06512: at line 5
Would you like to give me more clue?
Thanks again. -
Jpg and raw suffix not appearing on filename in aperture 3.4
Using macbook pro running mountain lion and aperture 3.4.5. org and jpg suffixes not displayed on filenames on jpg and raw pairs imported from olympus omd em-5. in addition the suffixes not displayed on older images previously imported from other cameras.
Thanks for your help.
MarkHave you ever seen the file name extension shown as part of a Metadata Overlay?
That is puzzling, Kirby - I have always seen the filename extension in Aperture; in the Inspector Info panel, the Viewer, the Browser.
I tested again with raw+jpeg pairs, to see, if there is something peculiar about pairs - if Aperture thinks, the filetype should be clear from badge, but I am seeing the extension always.
Even when I created the image file and imported it into Aperture while the Finder option "Show all Filename Extensions" has been disabled, Aperture would still show the extension.
But I noticed, that in Basic View Aperture would give precedence to the version name and display the version name and not the filename, even if I selected the filename with a higher priority in the list of metadata tags. So I deleted the version name from the views and added the "Show metadata labels", to be sure to see the Filename extension. And surprise - Aperture had been showing version names in the basic view overlays instead of the filename, when both filenames and versionnames had been selected, even with the filenames selected first. -
What is the difference between Process Type TRIGGER AND CHAIN
What is the difference between these two process types. When I am looking process types, I want to provide information only about process chains and not individual steps of process chain. Looks like one can do using either.
Along the same line, I am looking at data from RSPCPROCESSLOG, no where this table has a column process chain id. So How od I find information about a process chain.
Thanks a lot,A "Chain Process" can be a a step in a Process Chain as well. For Example: So you could have the following Process Chain:
Process Chain Example
Step 1. TRIGGER (Execute Daily at 4am)
Step 2. DTP_LOAD Execute DSO Load
Step 3. DTP_LOAD Execute InfoCube Load
Step 4. CHAIN Execute Master Data Process Chain
I believe the "Master Chain" is called a "MetaChain" since it controls the start of another Process Chain.
Hope that helps... -
Buffer busy waits and chained rows
Hi,
I've a db with many buffer busy waits events.
This is caused by the application that run on it and many tablespaces that are in MSSM.
Many tables suffers of chained rows.
My question is, may chained rows create further impact on buffer busy waits?
Thanks.HI Stefan,
> Caused by the application due to what? High amount of INSERTs or what? Insufficient MSSM settings by database object creation? Bad physical database design (e.g. > 255 columns, column types)?
Applications and jobs perform every 30s DELETE, UPDATE and INSERT. Tablespace are in Manual Segment Space Management, not in AUTO (i think wrong database design).
>It depends. Do you mean intra-block row chaining or row chaining across various blocks? What kind of access path? Do you really experience chained
rows and not migrated rows (it is mixed up a lot of times)?
Migrated rows, row chaining across various block, caused by frequently update and delete. Migrated resolved with alter table move or exp/imp.
Thank you -
Database Link and domain suffix problem
Hi
I have two machines in the same workgroup with Oracle Server 8.1.6 and two instances, I don't have domain .When I create Database Link on one of them the name of the link appears with unknown suffix "US.ORACLE.COM" .The parameter DB_DOMAIN in the init file has no value.Is anybody know why Oracle adds this suffix every time when I'm trying to create database link?You have to check your SQLNET.ORA file. There is a parameter defined in that file called:
NAMES.DEFAULT_DOMAIN = <default domain to use>
You need to change this value according to your network settings. -
Job Request - read Z* Jobs and Chains from CPS
Dear Ladies and Gentlemen,
We are establishing Job Scheduling Management, using Job Requests and Job Documentation. In addition CPS (oem) is to be used.
If we place a Detailed Job Request, or create a Job Documentation, then we can only select the pre-defined global jobs. None of the self-created jobs or job chains is visible.
For Job Request the steps are:
- create detailed job request -> enter system, client -> tab "scheduling" -> value list in field "Job Definition" at the bottom
For Job Documentation the steps are:
- create job documentation -> tab "systems" -> add a logical component -> mark the system (bottom) -> press button "schedule" -> new IE window pops up -> Change -> button "Select Scheduler" and choose "SAP CPS" -> value list in field "Job Definition" at the bottom
Please also have a look at
/people/martin.lauer/blog/2009/05/28/monitoring-job-chains-with-sap-cps-by-redwood-and-sap-solution-manager how it may look like, this bug makes it impossible to follow this example.
Q: what has to be done to make this work?
Q: what is the reason of this misbehavior?
Best regards,
Peter MüllerHi Giovanni,
For details on how to configure service desk please check the
Knowledge kits on service.sap.com/rkt-solman
Also check:
Service Desk Functionality in Solution Manager:
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/f0c804fb-45ed-2c10-f7ba-d6ca6c2f6d08
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/f0c804fb-45ed-2c10-f7ba-d6ca6c2f6d08?QuickLink=index&overridelayout=true
Thansk
Regards,
Vikram -
.How to automatically insert a prefix and / or suffix to all outgoing calls and sms
Apple, can be implemented on iOS6 a function which can automatically add a prefix or suffix numbers in the phone book when you call? In order to have a dual pricing for private and business calls.
Anyone how to resolve?actually no possibility to do it without third part app like this
-
Hello,
i have job "MAIN_JOB" which raise event JOB_SUCCEEDED, second job "LITTLE_JOB" consume this event.
But i have one problem. MAIN_JOB starts chain "MAIN_CHAIN", and always when each step of this chain completed succesfull,
job "MAIN_JOB" raise event "JOB_SUCCEEDED".
How to do so "MAIN_JOB" raise event only once, not for each step?
DBMS_SCHEDULER.CREATE_JOB
job_name => 'MAIN_JOB'
,schedule_name => 'ANY_SCHEDULE'
,job_class => 'DEFAULT_JOB_CLASS'
,job_type => 'CHAIN'
,job_action => 'MAIN_CHAIN'
DBMS_SCHEDULER.SET_ATTRIBUTE
( name => 'MAIN_JOB'
,attribute => 'RAISE_EVENTS'
,value => DBMS_SCHEDULER.JOB_SUCCEEDED);
DBMS_SCHEDULER.CREATE_EVENT_SCHEDULE
schedule_name => 'EVENT_SCHED'
,start_date => to_date('01.01.2012 00:00:00','dd.mm.yyyy hh24:mi:ss')
,event_condition => 'tab.user_data.object_name = ''MAIN_JOB'' and tab.user_data.event_type = ''JOB_SUCCEEDED'''
,queue_spec => 'SYS.SCHEDULER$_EVENT_QUEUE, REPORT'
,end_date => NULL
DBMS_SCHEDULER.CREATE_JOB
job_name => 'LITTLE_JOB'
,schedule_name => 'EVENT_SCHED'
,program_name => 'SOME_PROGRAMM'
,auto_drop => false
,enabled => true
Thx.
Edited by: dbms_alec on 13.05.2012 23:44This is because for each step of chain a job is run. For your request don't set job attribute to raise event but create a step for chain job that raise this event from code. Put this step as last step in chain job.
-
Iphoto 11 - Duplicates and confusing suffixes on External Edit
Just a warning. Iphoto 11 has some changes that make it difficult to use an external editor.
I use iphoto in my photo processing process to edit photo's externally with photoshop CS4. I like iphoto for cropping because it has standard frame sizes and I like its view on the database. I also like iphoto as easy to understand. I also use(d) iphoto because it is easy edit on my mac laptop and then finally import the new iphoto library into aperture when done.
Iphoto 11 now creates a duplicate file so you will have the original raw and duplicate when you are done, in your iphoto library. It is very confusing because they have the same names and you grab one thinking its the other.
In addition, I am getting all kinds of errors in transferring files from iphoto to CS4. I think what is happening is that iphoto is saving in tiff but putting a jpg suffix on it and CS4 is seeing it as a corrupt jpeg and won't open.
Anyway, until apple/adobe coordinate on this, iphoto is not longer easy to use with an external editor.
You might want to stay in iphoto 9 until they get the bugs out or consider moving to lightroom or aperture if you are a heavy photoshop user.
If I am wrong, I would appreciated feedback. I have struggled with it for 1/2 a day and given up for now.
ScottYEs - this is very frustrating. I was trying to use CaptureDX2 to edit the Raws - using it as an external editor. But when you open up the external program, iPhoto quickly creates a duplicate image in your library - a view of the browser shows that this thumbnail image in the library points to the original file, in this case the RAW file I was trying to edit. ARGHH. This, obviously, makes a mess of the library (with duplicate thumbnails every time you'd open the file to edit in the external editor. Does anyone have any ideas regarding this?
-
IPhone 4 "one computer" and "chained to iTunes"
Hello,
I have been reading reviews of the iPhone 4 and there have been two things mentioned that I want to clarify - that the iPhone 4 can only be "paired" with one chosen computer and that the iPhone 4 is "chained" to iTunes!!!
There was no further explanation of these points.
Can anybody help?
RegardsAll iPhones and iPods are the same, you can only sync it with 1 iTunes library at a time. What this means, is that if you sync your iPhone with computer-1 and then sync it with computer-2, it will erase all music, video, and app content from the iPhone then sync the music, video, and app content from computer-2 to the iPhone.
The iPhone can only be managed by iTunes to add music, apps, videos, and so forth. So if that's what you mean by chained, then yes. iTunes does a great job though, and you can import any music you have into iTunes and then sync it with your iPhone. Just because you can only use iTunes to manage your iPhone doesn't mean you have to purchase all music and videos from iTunes, you can still import your own stuff in. -
Just created index and reindexed suffix, still getting unindexed searches
Yesterday I created a pres and eq index for an attribute called usfmarketingannouncements
I then reindexed it by running:
db2index.pl -D "cn=directory manager" -w password -n userRoot -t usfmarketingannouncementsNow when I do a search:
ldapsearch -h migrrufeds01.usfreightways.com -p 2389 -D "cn=directory manager" -w password -b "ou=people,dc=usfcnet,dc=com" "(usfmarketingannouncements=yes)" snI get notes=U on the search in the access log.
In the error log:
[03/Oct/2005:15:49:04 -0400] - userRoot: Indexing attribute: usfmarketingannouncements
[03/Oct/2005:15:49:08 -0400] - userRoot: Indexed 1000 entries (0%).
[03/Oct/2005:15:49:11 -0400] - userRoot: Indexed 2000 entries (1%).
All the way down to 100% and then
[03/Oct/2005:15:56:41 -0400] - userRoot: Finished indexing.
It then starts
[03/Oct/2005:19:00:05 -0400] - export userRoot: Processed 1000 entries (0%).
[03/Oct/2005:19:00:08 -0400] - export userRoot: Processed 2000 entries (1%).
[03/Oct/2005:19:00:11 -0400] - export userRoot: Processed 3000 entries (2%).
all the way through 100% and then it started back up today at 11:00
[04/Oct/2005:11:00:05 -0400] - export userRoot: Processed 1000 entries (0%).
[04/Oct/2005:11:00:07 -0400] - export userRoot: Processed 2000 entries (1%).
[04/Oct/2005:11:00:08 -0400] - export userRoot: Processed 3000 entries (2%).I am fairly new to directory server, but it appears that I created the index (first set from errors log) and then I reindexed the suffix using db2index.pl at 19:00. What I can't figure out is why the search is coming back unindexed and why the entries in the error log for today, exporting userRoot. I am the only one that would reindex a suffix and I didn't do that today.What I think is happening is that you are running into the allidsthreshold.
It looks as though you have something like 150 to 200 thousand entries in your directory, and guessing from your ldapsearch, it looks as though usfmarketingannouncements has just two values, yes or no.
Allidsthreshold is a limit over which the server gives up on buuilding an index for a particular value. The theory is that if a large proportion of the entries have an attribute which has the same value, it will be faster to just to a linear scan of the database than to maintain and use an index on that specific value.
By default, allidsthreshold is set to 5,000.
So assuming half your entries have usfmarketingannouncements set to yes, and half to no, there will be ~75,000 entris with yes, and ~75,000 entries with no -- both of these are well above the allidsthreshold and so will result in a linear DB scan (unindexed search).
See the tuning guide:
http://docs.sun.com/source/816-6697-10/indexing.html
for a description of allidsthreshold and a discussion on determining a reasonable value for it.
Hint: what you are trying to do probably isn't particularly well suited to LDAP, these sort of queries, if they are frequent and a major component of the projected usage would be better implemented with a RDBMS than with LDAP. -
Relation analyze schema and chaining?
Hi there,
I have some SQL's that I use daily to get some basic information about my database's health. One of them warns me about chaining or row migration.
- at first no warnings about chaining/row migr.
- then execute of analyze_schema utility
- now chaining/row migr.warnings for some tables.
Is there a relation? Can execution of dbms_utility.analyze_schema cause chaining/row migration?
Regards,
GeorgesCan execution of dbms_utility.analyze_schema cause chaining/row migration?No. The problmes were there prior running analyze, statistics just weren't up to date.
AFAIK one should nonetheless use dbms_stats.gather_schema_stats instead of dbms_utility.analyze_schema.
-Antti -
How do I get a prefix and suffix to print on an address label?
The "Mr and Mrs" shows up on addresses. When the prefix is "The" and the suffix is "Family" they don't appear on the label. Any ideas? Thanks.
I'm having perhaps the same problem with the Prefix field. It only prints when something is entered in the First (name) field, so
Fam. [First empty] De Loore-Castelyn
prints as De Loore-Castelyn
Whereas
Fam. J. De Loore-Castelyn
prints as Fam. J. De Loore-Castelyn
Annoying when the standard in Belgium is Fam. De Loore-Castelyn
Maybe you are looking for
-
Adobe Acrobat 8 Language problem with Cyrillic text
I scanned a Russian-language document--however, when I copy the text to a machine translation text box it fails to come up in Cyrillic (Russian). To rectify the situation, I went to Help and Uploaded the Language Update (the doc does not have an embe
-
I had bought a standard TV out
I had bought a standard TV out for my X6 - 16GB phone it worked with my old TV but it refuse to show the picture on my new TV out ... I ve tried to change all the options from PAL to NTCS or to put the flicker Filter on but still no picture .... Even
-
Prevent requisitioner field (EBAN-AFNAM) from PR to be copied to PO in ME59
Hi, Is it possible, throught customizing, to prevent the content of requisitioner field (EBAN-AFNAM) of PR to be copied to PO when converting the PR to PO via ME59? Thanks for your help in advance.
-
AcroPDF.dll User Licence and Allowed Usage
I am developing a VB.Net program, part of its functionality is dispalying a pdf document. I am using the SDK AcroPDF.dll (AcroPDFLib.AxAcroPDF object) which works fine. Can I distribute the .dll with my VB code for free even if I sell the program for
-
HELP! Copied the iPhoto Library folder to backup, but files are smaller
Help! To get more space on my laptop, I copied some photos to a backup hard drive, following the instructions in iPhoto help: "Copy the iPhoto Library folder on your hard disk to another disk." I then deleted many of the photos from my laptop. Now I'