Hardening Solaris for Oracle

Using Titan 4.0 as a hardening tool (part of the hardening process anyway). Question is not so much what to do but what not to do? Is anyone aware of possible issues using the Titan 4.0 hardening scripts (or any other known security measures) that might cause problems for Oracle?
TIA

god only knows

Similar Messages

  • Hardening Linux for Oracle 10g

    I have been working on creating a bare-bones RHEL 5 installation which will act as an Oracle 10g database server. For hardening Linux, I have restricted to a bare minimum of packages to make it more secure. This installation did not have X-Windows, Gnome/KDE and a host of other services that will not be required on Production servers. I selected only the BASE installation which was further customized to include just the following (there is scope to trim this further, so feedback is welcome):
    NetworkManager
    readahead
    smartmontools
    yum-updatesd
    irqbalance
    acpid
    crash
    cryptsetup-luks
    dos2unix
    dump
    finger
    gnugpg
    ksh
    libaio
    logwatch
    m2crypto
    man-pages
    mdadm
    nano
    numactl
    openssh-clients
    openssh-servers
    pam_ccreds
    pam_krb5
    pam_passwdqc
    sendmail
    setuptools
    stunnel
    sudo
    symlinks
    system-config-network
    tree
    unix2dos
    unzip
    vconfig
    wget
    which
    yum
    yum-rhn-plugin
    yum-security
    zip
    Since I do not intend to use nfs, nis, samba – associated packages were not included. Further hardening was achieved by deleting non-required services (kudzu, avahi, gpm, atd, netfs, ip6tables).
    The challenge comes when I begin setting up Oracle 10g using the oracle validated rpm method. In an attempt to resolve dependencies, YUM ends up installing 70 packages that do not apparently seem to have anything to do with an RDBMS (sound libraries, Gnome, X libraries and tools etc.). For me the libraries/binaries required for linking appear to be justified but the rest appear to be installed only for the Installer.
    This package addition also ends up installing gamin which provides the gam_server which has bugs in it that lead to > 90% CPU consumption.
    I further tried erasing some of the packages to see if anything broke. Till now nothing is broken and the database is running fine. Till now I have removed:
    gamin
    gamin-python
    gnome-mount
    gnome-vfs2
    libbonoboui
    libgnome
    libgnomeui
    oracle-validated
    yum-updatesd
    esound
    hicolor-icon-theme
    GConf2
    gnome-keyring
    gtk2
    libglade2
    libgnomecanvas
    libnotify
    libwnck
    notification-daemon
    audiofile
    cups-libs
    gnome-mime-data
    cairo
    pango
    My questions:
    • How have you created a production/hardened Linux based Oracle installation?
    • Can you share your experiences in hardening Linux for Oracle and deploying the Oracle 10g RDBMS without installing the scores of packages which themselves might compromise the server?
    • What exactly is the dependency for the Oracle 10g RDBMS on X11, Gnome, Gamin and graphic libraries such as Cairo and Pango (to name a few)?
    • Which Linux system services are really mandatory for Oracle?
    • Does a non-default secure installation compromise Oracle support?
    The current memory footprint for this setup (without any workload) is (figures in MB):
    total used free shared buffers cached
    Mem: 1010 458 552 0 19 377
    -/+ buffers/cache: 61 949
    Swap: 2047 0 2047
    …of this 290 MB belongs to Oracle ☺
    I will be working with the other route – without using the oracle-validated rpm.
    Please let me have your feedback.
    BR
    Aniruddha

    Hi,
    I'll paste the rpm -qa of a RHEL5 server I have installed through rpm -ivh (not yum at all)
    aspell-0.60.3-7.1
    aspell-en-6.0-2.1
    aspell-es-0.50-13.2.2
    at-3.1.8-82.fc6
    atk-1.12.2-1.fc6
    audit-libs-1.7.13-2.el5
    audit-libs-1.7.13-2.el5
    audit-libs-python-1.7.13-2.el5
    authconfig-5.3.21-6.el5
    avahi-0.6.16-6.el5
    avahi-compat-libdns_sd-0.6.16-6.el5
    basesystem-8.0-5.1.1
    bash-3.2-24.el5
    bc-1.06-21
    binutils-2.17.50.0.6-12.el5
    bitmap-fonts-0.3-5.1.1
    bitstream-vera-fonts-1.10-7
    bzip2-1.0.3-4.el5_2
    bzip2-libs-1.0.3-4.el5_2
    cairo-1.2.4-5.el5
    checkpolicy-1.33.1-4.el5
    chkconfig-1.3.30.1-2
    compat-libstdc++-33-3.2.3-61
    compat-libstdc++-33-3.2.3-61
    coreutils-5.97-23.el5
    cpio-2.6-23.el5
    cpp-4.1.2-46.el5
    cracklib-2.8.9-3.3
    cracklib-dicts-2.8.9-3.3
    crontabs-1.10-8
    cryptsetup-luks-1.0.3-5.el5
    cups-1.3.7-11.el5
    cups-libs-1.3.7-11.el5
    cyrus-sasl-2.1.22-5.el5
    cyrus-sasl-lib-2.1.22-5.el5
    db4-4.3.29-10.el5
    db4-4.3.29-10.el5
    dbus-1.1.2-12.el5
    dbus-glib-0.73-8.el5
    dbus-libs-1.1.2-12.el5
    dbus-python-0.70-7.el5
    Deployment_Guide-en-US-5.2-11
    Deployment_Guide-es-ES-5.2-11
    desktop-file-utils-0.10-7
    device-mapper-1.02.32-1.el5
    device-mapper-1.02.32-1.el5
    device-mapper-event-1.02.32-1.el5
    device-mapper-multipath-0.4.7-30.el5
    diffutils-2.8.1-15.2.3.el5
    dmidecode-2.9-1.el5
    dmraid-1.0.0.rc13-53.el5
    dmraid-events-1.0.0.rc13-53.el5
    e2fsprogs-1.39-23.el5
    e2fsprogs-devel-1.39-23.el5
    e2fsprogs-devel-1.39-23.el5
    e2fsprogs-libs-1.39-23.el5
    e2fsprogs-libs-1.39-23.el5
    ed-0.2-39.el5_2
    eject-2.1.5-4.2.el5
    elfutils-0.137-3.el5
    elfutils-libelf-0.137-3.el5
    elfutils-libelf-devel-0.137-3.el5
    elfutils-libelf-devel-static-0.137-3.el5
    elfutils-libs-0.137-3.el5
    ethtool-6-3.el5
    expat-1.95.8-8.2.1
    file-4.17-15.el5_3.1
    filesystem-2.4.0-2
    findutils-4.2.27-6.el5
    fipscheck-1.2.0-1.el5
    fipscheck-lib-1.2.0-1.el5
    fontconfig-2.4.1-7.el5
    freetype-2.2.1-21.el5_3
    freetype-2.2.1-21.el5_3
    gawk-3.1.5-14.el5
    gcc-4.1.2-46.el5
    gcc-c++-4.1.2-46.el5
    gdbm-1.8.0-26.2.1
    gettext-0.14.6-4.el5
    glib2-2.12.3-4.el5_3.1
    glib2-2.12.3-4.el5_3.1
    glib2-devel-2.12.3-4.el5_3.1
    glib2-devel-2.12.3-4.el5_3.1
    glibc-2.5-42
    glibc-2.5-42
    glibc-common-2.5-42
    glibc-devel-2.5-42
    glibc-devel-2.5-42
    glibc-headers-2.5-42
    gnutls-1.4.1-3.el5_2.1
    grep-2.5.1-55.el5
    groff-1.18.1.1-11.1
    grub-0.97-13.5
    gtk2-2.10.4-20.el5
    gzip-1.3.5-10.el5
    hal-0.5.8.1-52.el5
    hdparm-6.6-2
    hesiod-3.1.0-8
    hicolor-icon-theme-0.9-2.1
    hmaccalc-0.9.6-1.el5
    htmlview-4.0.0-2.el5
    hwdata-0.213.16-1.el5
    info-4.8-14.el5
    initscripts-8.45.30-2.el5
    iproute-2.6.18-10.el5
    iptables-1.3.5-5.3.el5
    iptables-ipv6-1.3.5-5.3.el5
    iputils-20020927-46.el5
    kbd-1.12-21.el5
    kernel-2.6.18-164.el5
    kernel-headers-2.6.18-164.el5
    keyutils-libs-1.2-1.el5
    kpartx-0.4.7-30.el5
    krb5-libs-1.6.1-36.el5
    ksh-20080202-2.el5
    kudzu-1.2.57.1.21-1
    less-394-6.el5
    libacl-2.2.39-3.el5
    libaio-0.3.106-3.2
    libaio-0.3.106-3.2
    libaio-devel-0.3.106-3.2
    libattr-2.4.32-1.1
    libcap-1.10-26
    libdaemon-0.10-5.el5
    libdmx-1.0.2-3.1
    libdrm-2.0.2-1.1
    libgcc-4.1.2-46.el5
    libgcc-4.1.2-46.el5
    libgcrypt-1.4.4-5.el5
    libgomp-4.4.0-6.el5
    libgomp-4.4.0-6.el5
    libgpg-error-1.4-2
    libhugetlbfs-1.3-3.el5
    libhugetlbfs-1.3-3.el5
    libICE-1.0.1-2.1
    libICE-1.0.1-2.1
    libjpeg-6b-37
    libpng-1.2.10-7.1.el5_3.2
    libselinux-1.33.4-5.5.el5
    libselinux-1.33.4-5.5.el5
    libselinux-python-1.33.4-5.5.el5
    libselinux-utils-1.33.4-5.5.el5
    libsemanage-1.9.1-4.4.el5
    libsepol-1.15.2-2.el5
    libsepol-1.15.2-2.el5
    libSM-1.0.1-3.1
    libSM-1.0.1-3.1
    libstdc++-4.1.2-46.el5
    libstdc++-4.1.2-46.el5
    libstdc++-devel-4.1.2-46.el5
    libstdc++-devel-4.1.2-46.el5
    libsysfs-2.0.0-6
    libtermcap-2.0.8-46.1
    libtermcap-2.0.8-46.1
    libtiff-3.8.2-7.el5_3.4
    libusb-0.1.12-5.1
    libuser-0.54.7-2.el5.5
    libvolume_id-095-14.21.el5
    libvolume_id-095-14.21.el5
    libX11-1.0.3-11.el5
    libX11-1.0.3-11.el5
    libXau-1.0.1-3.1
    libXau-1.0.1-3.1
    libXau-devel-1.0.1-3.1
    libXaw-1.0.2-8.1
    libXcursor-1.1.7-1.1
    libXdmcp-1.0.1-2.1
    libXdmcp-1.0.1-2.1
    libXext-1.0.1-2.1
    libXext-1.0.1-2.1
    libXfixes-4.0.1-2.1
    libXft-2.1.10-1.1
    libXi-1.0.1-3.1
    libXinerama-1.0.1-2.1
    libxml2-2.6.26-2.1.2.8
    libxml2-python-2.6.26-2.1.2.8
    libXmu-1.0.2-5
    libXp-1.0.0-8.1.el5
    libXp-1.0.0-8.1.el5
    libXp-devel-1.0.0-8.1.el5
    libXpm-3.5.5-3
    libXrandr-1.1.1-3.1
    libXrender-0.9.1-3.1
    libXt-1.0.2-3.1.fc6
    libXt-1.0.2-3.1.fc6
    libXtst-1.0.1-3.1
    libXtst-1.0.1-3.1
    libXv-1.0.1-4.1
    libXxf86dga-1.0.1-3.1
    libXxf86misc-1.0.1-3.1
    libXxf86vm-1.0.1-3.1
    lm_sensors-2.10.7-4.el5
    logrotate-3.7.4-9
    lsscsi-0.17-3.el5
    lvm2-2.02.46-8.el5
    m4-1.4.5-3.el5.1
    mailx-8.1.1-44.2.2
    make-3.81-3.el5
    MAKEDEV-3.23-1.2
    man-1.6d-1.1
    man-pages-es-1.28-10.1.1
    mcstrans-0.2.11-3.el5
    mesa-libGL-6.5.1-7.7.el5
    microcode_ctl-1.17-1.48.el5
    mingetty-1.07-5.2.2
    mkinitrd-5.1.19.6-54
    mkinitrd-5.1.19.6-54
    mktemp-1.5-23.2.2
    module-init-tools-3.3-0.pre3.1.54.el5
    nano-1.3.12-1.1
    nash-5.1.19.6-54
    ncurses-5.5-24.20060715
    net-tools-1.60-78.el5
    newt-0.52.2-12.el5
    nspr-4.7.4-1.el5_3.1
    nspr-4.7.4-1.el5_3.1
    nss-3.12.3.99.3-1.el5_3.2
    nss-3.12.3.99.3-1.el5_3.2
    ntp-4.2.2p1-9.el5_3.2
    ocfs2-2.6.18-164.el5-1.4.2-1.el5
    ocfs2console-1.4.2-1.el5
    ocfs2-tools-1.4.2-1.el5
    ocfs2-tools-devel-1.4.2-1.el5
    openldap-2.3.43-3.el5
    openssh-4.3p2-36.el5
    openssh-clients-4.3p2-36.el5
    openssh-server-4.3p2-36.el5
    openssl-0.9.8e-12.el5
    oracleasm-2.6.18-164.el5-2.0.5-1.el5
    oracleasmlib-2.0.4-1.el5
    oracleasm-support-2.1.3-1.el5
    pam-0.99.6.2-6.el5
    pango-1.14.9-6.el5
    paps-0.6.6-18.el5
    passwd-0.73-1
    patch-2.5.4-29.2.3.el5
    pax-3.4-1.2.2
    pciutils-2.2.3-7.el5
    pcre-6.6-2.el5_1.7
    perl-5.8.8-27.el5
    pkgconfig-0.21-2.el5
    pm-utils-0.99.3-10.el5
    policycoreutils-1.33.12-14.6.el5
    popt-1.10.2.3-18.el5
    prelink-0.4.0-2.el5
    procmail-3.22-17.1
    procps-3.2.7-11.1.el5
    psmisc-22.2-7
    pycairo-1.2.0-1.1
    pygobject2-2.12.1-5.el5
    pygtk2-2.10.1-12.el5
    python-2.4.3-27.el5
    python-numeric-23.7-2.2.2
    readline-5.1-3.el5
    readline-5.1-3.el5
    redhat-logos-4.9.16-1
    redhat-lsb-3.1-12.3.EL
    redhat-menus-6.7.8-3.el5
    redhat-release-5Server-5.4.0.3
    redhat-release-notes-5Server-29
    rhpl-0.194.1-1
    rootfiles-8.1-1.1.1
    rpm-4.4.2.3-18.el5
    rpm-libs-4.4.2.3-18.el5
    rsh-0.17-38.el5
    rsync-2.6.8-3.1
    sed-4.1.5-5.fc6
    selinux-policy-2.4.6-255.el5
    selinux-policy-targeted-2.4.6-255.el5
    sendmail-8.13.8-2.el5
    setools-3.0-3.el5
    setserial-2.17-19.2.2
    setup-2.5.58-7.el5
    sgpio-1.2.0_10-2.el5
    shadow-utils-4.0.17-14.el5
    slang-2.0.6-4.el5
    smartmontools-5.38-2.el5
    sqlite-3.3.6-5
    sysfsutils-2.0.0-6
    sysklogd-1.4.1-44.el5
    sysstat-7.0.2-3.el5
    system-config-securitylevel-tui-1.6.29.1-2.1.el5
    SysVinit-2.86-15.el5
    tar-1.15.1-23.0.1.el5
    tcl-8.4.13-4.el5
    tcl-8.4.13-4.el5
    tcp_wrappers-7.6-40.7.el5
    tcp_wrappers-7.6-40.7.el5
    telnet-0.17-39.el5
    termcap-5.5-1.20060701.1
    time-1.7-27.2.2
    tmpwatch-2.9.7-1.1.el5.2
    tzdata-2009k-1.el5
    udev-095-14.21.el5
    udftools-1.0.0b3-0.1.el5
    unzip-5.52-3.el5
    usermode-1.88-3.el5.2
    util-linux-2.13-0.52.el5
    vim-common-7.0.109-6.el5
    vim-minimal-7.0.109-6.el5
    vixie-cron-4.1-76.el5
    vte-0.14.0-2.el5
    which-2.16-7
    wireless-tools-28-2.el5
    xorg-x11-filesystem-7.1-2.fc6
    xorg-x11-utils-7.1-2.fc6
    xorg-x11-xauth-1.0.1-2.1
    zabbix-agent-1.4.6-1.el5
    zip-2.31-2.el5
    zlib-1.2.3-3
    Hope to help,
    Mario Alcaide

  • Userexits on Unix solaris for Oracle forms 10g

    I have a Oracle forms error FRM-40832 variable FORMS_USEREXITS not set... but in UNIX????, it seems normal for Windows but why forms is asking for this variable?
    I have compiled succesfully frmwebx with my userexit code then restarted my OC4J_BI_Forms process after substitute my frmwebx, but what i missing???
    Than a lot for your help

    1.sir i am using firefox 3.5 and greater
    2. jintiator 1.3.1.22
    3. JRE 1.16 and latest
    but give error " additional plugin are required "
    sir how download lates verson of jintiator ?

  • Patch number of Solaris 9 SPARC for Oracle 9.2.0.4 - 9.2.0.7

    Hello!
    Could anybody point me the right document with information about
    Solaris 9 patch version for Oracle 9.2.0.4 and 9.2.0.7.
    Server: FS PRIMEPOWER 250 SPARC64™ V
    Thanks,
    Viacheslav

    Hi,
    such information is only available on metalink, you need a valid support contract, resp. a CSI (Customer Support Identifier) .
    Werner

  • Error in Setting Auto Start for Oracle DB on Sun Solaris 10

    Hi Gurus,
    I am trying to set my DB to auto start when server reboots. Fllowing is my setting and the error. The issue is that the DB starts but LISTENER is not running...
    Please please help me...
    This is what I used for setting the auto start.
    Thanks,
    Jayant
    SETTING:
    =======
    #!/sbin/sh
    #Match ORACLE_HOME with whatever is in ~oracle/.profile!!!
    ORACLE_HOME=<whatever is Orcale home is>
    case $1 in
    start)
    su - oracle -c $ORACLE_HOME/bin/dbstart
    su - oracle -c "$ORACLE_HOME/bin/lsnrctl start"
    exit 0
    stop)
    su - oracle -c "$ORACLE_HOME/bin/lsnrctl stop"
    su - oracle -c $ORACLE_HOME/bin/dbshut
    esac
    You're not done yet! You now have to dl
    ln -s ../init.d/oracle /etc/rc3.d/S95oracle
    ln -s ../init.d/oracle /etc/rc0.d/K15oracle
    chmod 0755 /etc/init.d/oracle
    ERROR:
    ======
    LSNRCTL for Solaris: Version 10.2.0.1.0 - Production on 02-DEC-2006 10:09:24
    Copyright (c) 1991, 2005, Oracle. All rights reserved.
    Message 1070 not found; No message file for product=network, facility=TNSTNS-12545: Message 12545 not found; No message file for product=network, facility=TNS
    TNS-12560: Message 12560 not found; No message file for product=network, facility=TNS
    TNS-00515: Message 515 not found; No message file for product=network, facility=TNS
    Solaris Error: 2: No such file or directory
    root@zngds1gk #

    Bingo.... I got it.
    Thanks for your hint about the ./.profile. I was setting env variables in .cshrc file and my default shell for "oracle" user was sh.
    Then I changed the default shell for oracle user to csh and viola..... it works.
    root@zngds1gk # su - oracle
    $ id
    uid=100(oracle) gid=101(dba)
    $ setenv
    HOME=/space/oracle
    PATH=/space/oracle/app/oracle/product/10.2.0/Db_2/bin:/usr/bin:
    LOGNAME=oracle
    HZ=100
    TERM=xterm
    SHELL=/bin/sh
    $ exit
    root@zngds1gk # usermod -u 100 -s /bin/csh oracle
    root@zngds1gk # su - oracle
    zngds1gk%
    zngds1gk% setenv
    HOME=/space/oracle
    PATH=/space/oracle/app/oracle/product/10.2.0/Db_2/bin:/usr/bin:
    LOGNAME=oracle
    HZ=100
    TERM=xterm
    SHELL=/bin/csh
    zngds1gk% cat .cshrc
    umask 022
    setenv ORACLE_BASE /space/oracle/app/oracle
    setenv ORACLE_SID adm
    setenv DISPLAY 47.102.212.108:0.0
    setenv ORACLE_HOME /space/oracle/app/oracle/product/10.2.0/Db_2
    setenv PATH /space/oracle/app/oracle/product/10.2.0/Db_2/bin:$PATH
    And now it works...
    Thanks.
    ~Jayant

  • Oracle 8i and Solaris For intel

    Hi All
    I need Your Help please
    I am trying to install oracle 8.1.7.0 at sun Solaris for Intel
    when I Run the /install/Solaris/runInstaller
    it's tell me please wait and the gave me this error
    arg list too long <----------------This is the Problem
    when I check Metal link Support I Found A topic tell me the reason for this error is:-
    E2BIG Arg list too long
    The argument list passed to the exec command
    is longer than the limit
    allowed in the operating system.
    but my Unix Kernel Parameters is :
    I add this parameter at ------> /etc/system
    set shmsys:shminfo_shmmax=4294967295
    set shmsys:shminfo_shmmin=1
    set shmsys:shminfo_shmmni=100
    set shmsys:shminfo_sshmseg=10
    set semsys:seminfo_semmni=100
    set semsys:seminfo_semmsl=100
    set semsys:seminfo_semmns=110
    set semsys:seminfo_semopm=100
    set semsys:seminfo_semvmx=32767
    Notes :
    this is the Default Values From the Installation Guide R2 for Solaris Intel
    My Environment Variable is:
    I add this Parameters at -----------------> .profile for oracle user
    umask 022
    DISPLAY=ksolaris:0.0
    ORACLE_HOME=/home/oracle/u01/app/oracle/product/8.1.6
    ORACLE_BASE=/home/oracle/u01/app/oracle
    NLS_LANG=AMERICAN_AMERICA.WE8ISO08859P1
    ORA_NLS33=$ORACLE_HOME/ocommon/nls/admin/data
    ORACLE_SID=WORLD
    ORACLE_DOC=/home/oracle/u01/Docs
    TMPDIR=/var/tmp
    PATH=$ORACLE_HOME/bin:/bin:/usr/bin:/usr/css/bin:.
    Notes :
    I think there is some thing Wrong at DISPLAY Parameter
    the Machine that I will Install Oracle at it it's name is Ksolaris
    My Device Configuration Is :
    P4 1.7
    Ram 128
    Swap 650
    Please Help me And tell me How I Can Fix this message arg list too long
    think youuuuuuuuuuuuuuuuuuuu

    If u r going to install oracle for Solaris (inetl based) then obviously u have to download oracle of solaris version..

  • Parameters maintenance for Oracle 10.2.0.4 on Solaris 10 zone

    Hi!
    We use SAP Solution Manager 7.0 on Solaris 10 Zone with Oracle.
    We have updated Oracle from 10.2.0.2 to 10.2.0.4.
    What are the parameter recommendation for Oracle 10.2.4?
    What is the approach to do this?
    Thank you very much!
    regards
    Thom

    > Does the SAP installation usually include the setup of oracle parameters?
    partly.
    > Is there some automatic report that check and set up the valeus to the rigtht values, e.g. according to SAP note 830576?
    No. Many of those parameters (the events mainly) depend on specific patches that need to be installed to activate them. Did you apply all the interim patches for 10.2.0.4 or just that patch?
    > What are the crucial/important parameters?
    all of them are more or less important. Oracle is a complex beast.
    > If not, what are the technical steps to do this manually?
    You can use brtools to change them one by one - or write a script like the following. However, this implies that all single/interim/cumulative patches are installed, not only 10.2.0.4.
    Check note 1137346 - Oracle Database 10g: Patches for Release 10.2.0.4 for the single patches and read all the linked notes to the patches so you can built your own script to set the parameters.
    This is an example script for HP-UX but you could use a likewise one for Solaris:
    alter system set
    event='10027 trace name context forever, level 1',
          '10028 trace name context forever, level 1',
          '10183 trace name context forever, level 1',
          '10191 trace name context forever, level 1',
          '10629 trace name context forever, level 32',
         '10891 trace name context forever, level 1',
          '14532 trace name context forever, level 1',
          '38068 trace name context forever, level 100',
         '38085 trace name context forever, level 1',
         '38087 trace name context forever, level 1',
         '38095 trace name context forever, level 1',
         '10411 trace name context forever, level 1',
         '44951 trace name context forever, level 1014',
    comment='M. Doehr 16.09.2008'
    scope=spfile
    alter system set HP_UX_SCHED_NOAGE = 178
    alter system set open_cursors = 1500 scope=spfile;
    alter system set optimizer_index_caching = 50 scope=spfile;
    alter system set optimizer_index_cost_adj = 20 scope=spfile;
    alter system set parallel_max_servers = 40 scope=spfile;
    alter system set query_rewrite_enabled = 'false' scope=spfile;
    alter system set star_transformation_enabled = 'true' scope=spfile;
    alter system set "_b_tree_bitmap_plans" = false scope=spfile;
    alter system set "_bloom_filter_enabled" = false scope=spfile;
    alter system set "_fix_control" =     '5705630:ON',
                                  '5765456:7',
                                  '6221403:ON',
                                  '6440977:ON',
                                  '6626018:ON',
                                  '6972291:ON'          
                                   scope=spfile;
    alter system set "_index_join_enabled" = false scope=spfile;
    alter system set "_optim_peek_user_binds" = false scope=spfile;
    alter system set "_optimizer_mjc_enabled" = false scope=spfile;
    alter system set "_sort_elemination_cost_ratio" = 10 scope=spfile;
    alter system set "_table_lookup_prefetch_size" = 0 scope=spfile;
    alter system set "_in_memory_undo" = false scope=spfile;

  • Solaris 10 patches for Oracle Database 11gR2

    Hi,
    I downloaded Oracle Solaris 10 s/w from e-Delivery and got it installed. For Oracle Database 11gR2 I also need the followging patches:
    120754-06: SunOS 5.10_x86 libmtsk
    119961-05: SunOS 5.10_x86: Assembler
    119964-14: SunOS 5.10_x86 Shared library patch for C++_x86
    Though we have access to MyOracleSupport we can only download s/w patches using our support contract with Oracle and not OS patches.
    Is there any other way I can get these patches.
    Rgds,
    Thiru.

    Thiru,
    You won't find the patches in the patches/ directory on the DVD or the ISO image. Oracle integrates the patches directly into the packages, so there is no need to provide or install them separately.
    All patches have a patch number (e.g. 120754) and a revision (e.g. 06). A newer revision of a patch always contains all fixes of the previous revisions. So try to run "showrev -p | grep 120754" instead, and you'll see that patch 120754-08 is pre-installed. As revision 08 is newer/higher than 06, the patch requirement is satisfied.
    Hope that helps,
    mp.

  • SUNWsprox package with solaris 10 for Oracle 10g Installation....

    Hi
    I am in problem with a Solaris 10 package "SUNWsprox - Sun workshop Bundled 64-bit make library" for Oracle 10g Installation. I checked the CDs (In the /.../products) but did't found this packege. Can any one tell me please can I go without this package or where I found this package...Please Its very URGENT for me....
    Thanks
    Mohammed Tanvir

    Hi...
    I had the same issue, but found out that the SUNWsprox was replaced by SUNWsprot. The OUI 10.1 Release 2 will 'pass' as the doco in the Oracle quick install guide is wrong (as well as 10g Application Server).
    The only way to lay a 10g Release database on Solaris 10 is to lay the software doen only, then cd in the .../bin directory, step your Rdbms ORACLE_HOME, ORACLE_SID, LD_LIBRARY_PATH and of course the DISPLAY (is X-windowing into the server), and run dbca manually. Oracle 10g is a bit buggy.
    Roger

  • Solaris 10 configuration parameters for Oracle 10g

    Hello all,
    I have installed:
    Oracle Database 10g Enterprise Edition Release 10.2.0.3.0 - 64bit
    on the latest version of Solaris 10 SPARC. My /etc/project file looks as follows:
    user.oracle:101:Oracle:::process.max-sem-nsems=(privileged,256,deny);project.max-shm-ids=(privileged,256,deny);project.max-shm-memory=(privileged,17179869184,deny)
    I followed the installation guide for 10g and used the max-sem-nsems and max-shm-ids that were recommended. However, the guide was for a 4GB SGA and we are using a 8GB SGA on a machine with 32GB of memory.
    Now, my question is, do those nsem and shm-id parameters hold true for larger SGAs? We are having a problem that, when new oracle shadows are created, any processes that check the /proc table becomes painfully slow.

    As allways kernel parameter could be found in documentation: http://download-uk.oracle.com/docs/cd/B19306_01/install.102/b15667/pre_install.htm#sthref258
    Maybe you will be intersted in Werner Pushitz's article "Tuning and Optimizing Red Hat Enterprise Linux for Oracle 9i and 10g Databases" - http://www.puschitz.com/TuningLinuxForOracle.shtml
    SGA, PGA. If you are not sure with proper sizeing then you can read this document - http://download-uk.oracle.com/docs/cd/B19306_01/server.102/b14211/memory.htm#PFGRF014
    Note since 10g there is new feature called "Automatic Shared Memory Management"

  • DTrace probes for oracle database 10g in solaris 10

    Hi guys,since a mounth i`ve learnt about solaris DTrace and its D scripts and tried to look for probes for administrating oracle database but til now,nothing!so my question,does there DTrace probes for oracle application ?i really need it now,that`s my project:tracing oracle with DTrace in solaris 10 SPARC!anyone can help me pleaaase!!!

    Hey!!of course that's a great site but U know,i've already visit it and it doesn't talk about probes for oracle!!howeiver i thought about another option,how do u think about exploiting oracle instance...i mean,do u think it's possible to monitoring oracle processes (LWGR,PMON,DBWR,SMON,...) with DTrace by using providers?like fbt or io,i don't know much!!remember,the aim is monitoring oracle database performance !!
    regards!

  • JDriver for Oracle crashes JVm on solaris

    Hi,
    I'm using the weblogic jDriver/XA for oracle with oracle 8.1.7 on solaris 2.8.
    The weblogic version is 6.1 SP2.
    The JVM randomly crashes with this error:
    Is the jDriver/XA that comes with weblogic stable ?
    Has the jDriver that comes with wlserver 6.1 SP3 fixed this problem ?
    Unexpected Signal : 11 occurred at PC=0xfe557f64
    Function name=JVM_InternString
    Library=/bea/jdk131/jre/lib/sparc/hotspot/libjvm.so
    Current Java thread:
         at weblogic.jdbc.oci.xa.XA.native_start(Native Method)
         at weblogic.jdbc.oci.xa.XA.start(XA.java:70)
         at weblogic.jdbc.oci.xa.XADataSource.start(XADataSource.java:640)
         at weblogic.jdbc.jta.DataSource.detectedUnavailable(DataSource.java:445)
         at weblogic.transaction.internal.ResourceDescriptor$2.execute(ResourceDescriptor.java:991)
         at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:139)
         at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)
    Dynamic libraries:
    0x10000      /bea/jdk131/jre/bin/../bin/sparc/native_threads/java
    0xff350000      /usr/lib/libthread.so.1
    0xff390000      /usr/lib/libdl.so.1
    0xff200000      /usr/lib/libc.so.1
    0xff330000      /usr/platform/SUNW,Ultra-60/lib/libc_psr.so.1
    0xfe400000      /bea/jdk131/jre/lib/sparc/hotspot/libjvm.so
    0xff2e0000      /usr/lib/libCrun.so.1
    0xff1e0000      /usr/lib/libsocket.so.1
    0xff100000      /usr/lib/libnsl.so.1
    0xff0d0000      /usr/lib/libm.so.1
    0xff310000      /usr/lib/libw.so.1
    0xff0b0000      /usr/lib/libmp.so.2
    0xff080000      /bea/jdk131/jre/lib/sparc/native_threads/libhpi.so
    0xff050000      /bea/jdk131/jre/lib/sparc/libverify.so
    0xfe7c0000      /bea/jdk131/jre/lib/sparc/libjava.so
    0xff020000      /bea/jdk131/jre/lib/sparc/libzip.so
    0xfe3b0000      /usr/lib/locale/en_US.ISO8859-1/en_US.ISO8859-1.so.2
    0xfe390000      /bea/jdk131/jre/lib/sparc/libnet.so
    0xfaed0000      /usr/lib/nss_files.so.1
    0xd9200000      /bea/wlserver6.1/lib/solaris/oci817_8/libweblogicoci37.so
    0xd8400000      /u01/app/oracle/product/8.1.7/lib/libclntsh.so.8.0
    0xfad90000      /usr/lib/libC.so.5
    0xfaea0000      /u01/app/oracle/product/8.1.7/lib/libwtc8.so
    0xface0000      /usr/lib/libgen.so.1
    0xfacc0000      /usr/lib/libsched.so.1
    0xfaca0000      /usr/lib/libaio.so.1
    0xfac80000      /bea/wlserver6.1/lib/solaris/oci817_8/libweblogicoxa37.so
    0xfac10000      /bea/jdk131/jre/lib/sparc/libioser12.so
    0xdeae0000      /bea/jdk131/jre/lib/sparc/libawt.so
    0xd7480000      /bea/jdk131/jre/lib/sparc/motif21/libmawt.so
    0xdc8b0000      /bea/jdk131/jre/bin/../lib/sparc/libmlib_image.so
    0xd7200000      /usr/dt/lib/libXm.so.4
    0xd7190000      /usr/openwin/lib/libXt.so.4
    0xdc7d0000      /usr/openwin/lib/libXext.so.0
    0xdce60000      /usr/openwin/lib/libXtst.so.1
    0xd7080000      /usr/openwin/lib/libX11.so.4
    0xdc7b0000      /usr/openwin/lib/libSM.so.6
    0xdc6d0000      /usr/openwin/lib/libICE.so.6
    0xdc6a0000      /usr/openwin/lib/libdga.so.1
    0xd6f80000      /bea/jdk131/jre/lib/sparc/libfontmanager.so
    0xdc5a0000      /usr/openwin/lib/libdps.so.5
    0xdc4c0000      /bea/jdk131/jre/lib/sparc/libdcpr.so
    0xdc3b0000      /bea/jdk131/jre/lib/sparc/libcmm.so
    0xdc2c0000      /bea/jdk131/jre/lib/sparc/libjpeg.so
    0xdc890000      /bea/wlserver6.1/lib/solaris/libmuxer.so
    0xdc4a0000      /usr/ucblib/libucb.so.1
    0xdc790000      /usr/lib/libresolv.so.1
    0xdc1c0000      /usr/lib/libelf.so.1
    Local Time = Sun Aug 25 19:12:47 2002
    Elapsed Time = 21231
    # HotSpot Virtual Machine Error : 11
    # Error ID : 4F530E43505002BD 01
    # Please report this error at
    # http://java.sun.com/cgi-bin/bugreport.cgi
    # Java VM: Java HotSpot(TM) Client VM (1.3.1_04-b02 mixed mode)
    # An error report file has been saved as hs_err_pid342.log.
    # Please refer to the file for further information.

    We have observed some problems for XA in oracle 817 client. You should use 901 client and 901 jDriver
    to talk to 817 database as a solution.
    Mitesh
    prajod wrote:
    Hi,
    I'm using the weblogic jDriver/XA for oracle with oracle 8.1.7 on solaris 2.8.
    The weblogic version is 6.1 SP2.
    The JVM randomly crashes with this error:
    Is the jDriver/XA that comes with weblogic stable ?
    Has the jDriver that comes with wlserver 6.1 SP3 fixed this problem ?
    Unexpected Signal : 11 occurred at PC=0xfe557f64
    Function name=JVM_InternString
    Library=/bea/jdk131/jre/lib/sparc/hotspot/libjvm.so
    Current Java thread:
    at weblogic.jdbc.oci.xa.XA.native_start(Native Method)
    at weblogic.jdbc.oci.xa.XA.start(XA.java:70)
    at weblogic.jdbc.oci.xa.XADataSource.start(XADataSource.java:640)
    at weblogic.jdbc.jta.DataSource.detectedUnavailable(DataSource.java:445)
    at weblogic.transaction.internal.ResourceDescriptor$2.execute(ResourceDescriptor.java:991)
    at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:139)
    at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)
    Dynamic libraries:
    0x10000 /bea/jdk131/jre/bin/../bin/sparc/native_threads/java
    0xff350000 /usr/lib/libthread.so.1
    0xff390000 /usr/lib/libdl.so.1
    0xff200000 /usr/lib/libc.so.1
    0xff330000 /usr/platform/SUNW,Ultra-60/lib/libc_psr.so.1
    0xfe400000 /bea/jdk131/jre/lib/sparc/hotspot/libjvm.so
    0xff2e0000 /usr/lib/libCrun.so.1
    0xff1e0000 /usr/lib/libsocket.so.1
    0xff100000 /usr/lib/libnsl.so.1
    0xff0d0000 /usr/lib/libm.so.1
    0xff310000 /usr/lib/libw.so.1
    0xff0b0000 /usr/lib/libmp.so.2
    0xff080000 /bea/jdk131/jre/lib/sparc/native_threads/libhpi.so
    0xff050000 /bea/jdk131/jre/lib/sparc/libverify.so
    0xfe7c0000 /bea/jdk131/jre/lib/sparc/libjava.so
    0xff020000 /bea/jdk131/jre/lib/sparc/libzip.so
    0xfe3b0000 /usr/lib/locale/en_US.ISO8859-1/en_US.ISO8859-1.so.2
    0xfe390000 /bea/jdk131/jre/lib/sparc/libnet.so
    0xfaed0000 /usr/lib/nss_files.so.1
    0xd9200000 /bea/wlserver6.1/lib/solaris/oci817_8/libweblogicoci37.so
    0xd8400000 /u01/app/oracle/product/8.1.7/lib/libclntsh.so.8.0
    0xfad90000 /usr/lib/libC.so.5
    0xfaea0000 /u01/app/oracle/product/8.1.7/lib/libwtc8.so
    0xface0000 /usr/lib/libgen.so.1
    0xfacc0000 /usr/lib/libsched.so.1
    0xfaca0000 /usr/lib/libaio.so.1
    0xfac80000 /bea/wlserver6.1/lib/solaris/oci817_8/libweblogicoxa37.so
    0xfac10000 /bea/jdk131/jre/lib/sparc/libioser12.so
    0xdeae0000 /bea/jdk131/jre/lib/sparc/libawt.so
    0xd7480000 /bea/jdk131/jre/lib/sparc/motif21/libmawt.so
    0xdc8b0000 /bea/jdk131/jre/bin/../lib/sparc/libmlib_image.so
    0xd7200000 /usr/dt/lib/libXm.so.4
    0xd7190000 /usr/openwin/lib/libXt.so.4
    0xdc7d0000 /usr/openwin/lib/libXext.so.0
    0xdce60000 /usr/openwin/lib/libXtst.so.1
    0xd7080000 /usr/openwin/lib/libX11.so.4
    0xdc7b0000 /usr/openwin/lib/libSM.so.6
    0xdc6d0000 /usr/openwin/lib/libICE.so.6
    0xdc6a0000 /usr/openwin/lib/libdga.so.1
    0xd6f80000 /bea/jdk131/jre/lib/sparc/libfontmanager.so
    0xdc5a0000 /usr/openwin/lib/libdps.so.5
    0xdc4c0000 /bea/jdk131/jre/lib/sparc/libdcpr.so
    0xdc3b0000 /bea/jdk131/jre/lib/sparc/libcmm.so
    0xdc2c0000 /bea/jdk131/jre/lib/sparc/libjpeg.so
    0xdc890000 /bea/wlserver6.1/lib/solaris/libmuxer.so
    0xdc4a0000 /usr/ucblib/libucb.so.1
    0xdc790000 /usr/lib/libresolv.so.1
    0xdc1c0000 /usr/lib/libelf.so.1
    Local Time = Sun Aug 25 19:12:47 2002
    Elapsed Time = 21231
    # HotSpot Virtual Machine Error : 11
    # Error ID : 4F530E43505002BD 01
    # Please report this error at
    # http://java.sun.com/cgi-bin/bugreport.cgi
    # Java VM: Java HotSpot(TM) Client VM (1.3.1_04-b02 mixed mode)
    # An error report file has been saved as hs_err_pid342.log.
    # Please refer to the file for further information.

  • Sun Solaris 10,Upgrade 8 or higher,having issues with VxFS,for Oracle 11gr2

    A while ago, we tried doing a prototype upgrade of our main Oracle 10g db to Oracle 11gr2.
    The OS on which our Oracle 10g is running is Sun Solaris 10, upgrade 4.
    According to Oracle 11gr2 documentation, we need Sun Solaris 10, upgrade 6 or higher for Oracle 11g2.
    The filesystem we are using is VxFS, Veritas File System.
    According to our system administrator, we had issues , making Sun Solar 10, upgrade 8 , work with the VxFS filesystem.
    I was wondering if anybody is running Oracle 11g2 on Sun Solaris 10 upgrade 6 or higher with VxFS file system.
    At present, our Oracle db upgrade project is on a hold, because of the above issue. So your help on this , can really help us in figuring out if there is an issue between VxFS filesystem and Sun Solaris 10 OS.
    Thanks
    Ashish

    Hi Ashish,
    We are not running Veritas Cluster file system.
    We tried moving our Oracle 10g r2 db on ZFS ,before doing the upgrade and performance on ZFS was worst.
    ZFS has certain memory parameter setting. If you did not configure that then ZFS will eat your complete system memory.
    My system administrator, has gotten a copy of Solaris 10 upgrade 9 and will try that with VxFS.
    I was curious to find out if folks are running Oracle 11g on Sun Solaris 10 with VxFS file system and if they had experienced any issue.If you can Install Vxfs on Oracle Soalris 10 U9, then according to me there sholudn't be any limitations for an oracle database.
    Recently i installed Oracle database 11.2.0.2 on one of my test server. I have created two databases - one on ZFS and another on ASM.
    Refer:
    http://appsdbaworkshop.blogspot.com/2010/10/installation-of-11202-on-oracle-solaris.html
    We dont have any performance issues. We are testing it for the performance benchmarks on both of the filesystem.
    If you can Install Vxfs on Oracle Soalris 10 U9, then according to me there sholudn't be any limitations for an oracle database.
    Regards,
    X A H E E R

  • SUNWi1cs, SUNWi15cs are missing in oracle solaris for VM

    Hello,
    i'm installing oracle 10r2 on Solaris10_8-11 for testing purposes. i have download Solaris from VM section of oracle
    http://www.oracle.com/technetwork/server-storage/solaris10/solaris-vm-405695.html.
    Two package are missing both are required for oracle installation. i got following error
    ERROR: information for "SUNWi1cs" was not found
    ERROR: information for "SUNWi15cs" was not found
    when i google this issue i got a OTN thread which deal almost same problem and purposed solution was to download cd1 which contain both pkgs. Now my questions are
    would i need to download compete dvd for just two pkgs? (SIZE 3GB)
    is there any link to download CD1 only
    or any other work around?

    thanks for reply,
    i'm confuse why oracle did not add theses pkg in vm solution. The purpose of this VM machine to make life easy for those guys who don't have sound experience on solaris box (like me) or they have no concern with OS installations. it mean, if i wanted to install oracle on solaris using VM machine then i have to download both file separately which is equal to 7GB (too large) plz let me know if there is any way to downlaod cd1 instead of full dvd?
    here is my complete snapshot of the output
    bash-3.2# pkginfo -i SUNWlibms SUNWtoo SUNWi1cs SUNWi15cs SUNWxwfnt SUNWxwplt SUNWmfrun SUNWxwplr SUNWxwdv SUNWgcc SUNWbtool SUNWi1of SUNWhea SUNWlibm SUNWsprot SUNWuiu8
    system      SUNWbtool CCS tools bundled with SunOS
    system      SUNWgcc   gcc - The GNU C compiler
    system      SUNWhea   SunOS Header Files
    system      SUNWi1of  ISO-8859-1 (Latin-1) Optional Fonts
    system      SUNWlibm  Math & Microtasking Library Headers & Lint Files (Usr)
    system      SUNWlibms Math & Microtasking Libraries (Usr)
    system      SUNWmfrun Motif RunTime Kit
    system      SUNWsprot Solaris Bundled tools
    system      SUNWtoo   Programming Tools
    system      SUNWuiu8  Iconv modules for UTF-8 Locale
    system      SUNWxwdv  X Windows System Window Drivers
    system      SUNWxwfnt X Window System platform required fonts
    system      SUNWxwplr X Window System platform software configuration
    system      SUNWxwplt X Window System platform software
    ERROR: information for "SUNWi1cs" was not found
    ERROR: information for "SUNWi15cs" was not found

  • Oracle into Solaris for Intel

    Does the Oracle database for Solaris for SunSPARC, works into a
    Solaris for Intel?
    Do you know, where I can download an Oracle for Solaris for
    Intel?
    That Oracle database version is the only one, wich is not in the
    OTN download page.

    I bought Sun Solaris 8 (Intel platform) from SUN - you just have to pay the media & shipping fees. Oracle 8i (for Intel Sun Solaris8) was included in the package .
    Check on www.sun.com for more details.
    Ciao

Maybe you are looking for

  • Extra dates in contacts- how to get them to show in calendars

    I have added custom dates to contacts in IPhone - but only the primary birthday and anniversary show in calendar on phone. Is there any way of showing additional dates in calendar?????

  • Web Gallery - default icon when viewing

    I would like to know why I have default image "clown fish" used for my posted web gallery albums. Shouldn't there be a image selected from the ablum(s).

  • Auto Population of a field

    Hi, I need a text field to be auto populated as the sum of 2 fields when the user enters them.How can this be done? Regards, Vignesh

  • Is it possible to have the camera lens replaced?

    Some how my camera lens has gotten scratched up, so now every time I take a picture it comes out blurry. Is it possible to have the lens replaced? Has anyone ever had that done?

  • Table expanding horizontally causes new blank page

    I have a report like that in the following picture: The tablix expands horizontally at runtime  due to a couple of columns groupings. What I marked as "Extra blank space" must be there, because otherwise the TextBox in the title where "Expr" appears