Problemm with dba group vs oinstall group

Hi to all ;
This is related to oracle as well as some os related security problems. please clarify it.
I tried but couldn't solve it All information's given here ..
Testing from user 'A'
+# useradd -m -g oinstall a+
+# passwd a+
Changing password for user a.
New UNIX password:
BAD PASSWORD: its WAY too short
Retype new UNIX password:
passwd: all authentication tokens updated successfully.
su - a
+[a@testorcl ~]$ export+
ORACLE_HOME=/u01/app/oracle/product/10.2.0/db_1
+$ export PATH=$PATH:$ORACLE_HOME/bin+
+$ export ORACLE_SID=testdb+
+$ sqlplus /nolog+
SQL*Plus: Release 10.2.0.1.0 - Production on Thu Jan 3 01:33:49 2013
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Testing From user 'b' :
+# useradd -m -g dba b+
+# passwd b+
Changing password for user b.
New UNIX password:
BAD PASSWORD: its WAY too short
Retype new UNIX password:
passwd: all authentication tokens updated successfully.
su - b
Password:
+$ export ORACLE_HOME=/u01/app/oracle/product/10.2.0/db_1+
+$ export PATH=$PATH:$ORACLE_HOME/bin+
+$ export ORACLE_SID=testdb+
+$ sqlplus /nolog+
sqlplus: error while loading shared libraries: libsqlplus.so: cannot open shared object file: No such file or directory
*>> From oracle user finding libsqlplus.so >>*
*[oracle@testorcl ~]$*
*$ find / -name libsqlplus\* -ls 2>/dev/null*
+1378188 1296 -rw-r----- 1 oracle oinstall 1319436 Jun 22 2005 /u01/app/oracle/product/10.2.0/db_1/lib/libsqlplus.a+
+1378193 1028 -rw-r----- 1 oracle oinstall 1047293 Jun 22 2005 /u01/app/oracle/product/10.2.0/db_1/lib/libsqlplus.so+
SQLPLUS LOCATION with associated group
+$ ls -l $ORACLE_HOME+
drwxr-x--- 9 oracle oinstall 4096 Dec 24 03:28 sqlplus
Please Note :
USER 'a' belongs oinstall group.
USER 'b' belongs dba group.
My questions are :
*1.why OS user can access database with oinstall group ?*
*2.why OS user can't access database with dba group ?*
Note: This is concept of oracle
**To connect as sysdba using OS Authe*ntication ; UNIX OS user must be a part of OSDBA (dba) group.*
Once the user is part of OSDBA group.
but in dba group with os user 'b' , can't connect sqlplus , what's the real problem here ?
version : 10gr2
*$ uname -a*
Linux testorcl 2.6.9-42.0.0.0.1.ELsmp #1 SMP Sun Oct 15 14:02:40 PDT 2006 i686 athlon i386 GNU/Linux
Edited by: 952909 on Jan 4, 2013 1:03 PM

Hi dude ;
Thanks for your reply.
So , You suggest me to change install directory permission from 750 to 775.
$ cd install
[oracle@testorcl install]$ ls -l
total 240
-rw-r----- 1 oracle oinstall      0 Jun 7 2005 createseed1.sh
-rw-r----- 1 oracle oinstall      0 Jun 7 2005 createseed.sh
-rw-r----- 1 oracle oinstall    977 Dec 24 03:29 envVars.properties
drwxr-x--- 2 oracle oinstall   4096 Dec 24 03:26 jlib
-rw-r----- 1 oracle oinstall 194849 Dec 24 03:29 make.log
-rwxr-xr-x 1 oracle oinstall      0 Dec 24 03:29 oratab
-rw-r----- 1 oracle oinstall    132 Dec 24 04:01 portlist.ini
-rw-r----- 1 oracle oinstall    221 Dec 24 04:02 readme.txt
-rwxr-xr-x 1 oracle oinstall    824 Dec 24 03:28 rootdeletenode.sh
-rw-r----- 1 oracle oinstall   9646 Dec 24 03:28 rootlocaladd
-rw-r----- 1 oracle oinstall      0 Jun 7 2005 seed.log
-rw-r----- 1 oracle oinstall   2800 Jun 7 2005 templocal
drwxr-x--- 2 oracle oinstall   4096 Dec 24 03:29 unix
drwxr-x--- 2 oracle oinstall   4096 Dec 24 03:28 utl
*>> Permission changed as per your suggestion >>*
*[oracle@testorcl db_1]$ chmod 775 install*
*[oracle@testorcl db_1]$ ls -l*
drwxrwxr-x   5 oracle oinstall   4096 Dec 24 04:02 install
*>> Trying to find changePerm.sh >>*
[oracle@testorcl db_1]$ cd install
[oracle@testorcl install]$ ./changePerm.sh
-bash: ./changePerm.sh: No such file or directory
[oracle@testorcl install]$ cd
[oracle@testorcl ~]$ whereis changePerm.sh
changePerm:
[oracle@testorcl ~]$
In my testdb file not found ... Any suggestion to find DUDE
Please note :
http://www.oracle-base.com/articles/10g/oracle-db-10gr2-installation-on-rhel-4.php
Installation Doc did n't say anything to change permission related to install group +( from 750 to 775 )+
Can you please clarify this ?
Thanks Dude ..

Similar Messages

Why we are creartinng uid=500(oracle) gid=500(oinstall) groups=501(dba),

why we are creartinng uid=500(oracle) gid=500(oinstall) groups=501(dba), UID is 500
any reason for this . please answer oracle gurus.
i important that the UID and the GID of user oracle are identical to that of the other RAC nodes. This information can be obtained using the following command:
[oracle@oradb1 oracle]$ id oracle
uid=500(oracle) gid=500(oinstall) groups=501(dba), 502(oper)

user8680248 wrote:
why we are creartinng uid=500(oracle) gid=500(oinstall) groups=501(dba), UID is 500
any reason for this . please answer oracle gurus.Because. Literally ... just because.
By convention, it should be above 100. By Red Hat community decision, the starting UID/GID has been moved from 100 to 500, to avoid accidental overlaps with 'system admin' accounts.
BUT, the Oracle owner is a system-like account. It could legitimately be under 500.
There is no magic to the number, other than the auto-increment tool that is provided in many of the commercial Linux variants start there. There is no Oracle dependency. There is only convention.
You should discuss this with your system administrator and come up with a number that is comfortable. If that means talking to yourself, all the easier.

Oinstall group permissions under Oracle Linux

Hello,
From what I understand according to the Oracle 11gR2 installation documentation, the purpose of the "oinstall" group is to have an additional OS group that can maintain the Oracle software installation beside the "oracle" user.
The instructions outline to set the mount point of the Oracle installation to owner "oracle" and group "oinstall" with full privileges for owner and group, except world (775). Any other user who belongs to the OSDBA (dba) group will only need read and execute permissions on the Oracle home directory.
The "orainstRoot.sh" post installation script then sets permissions 770 on the oraInventory directory to remove world access and set read, write and execute for owner and group.
But what why are the privileges for the Oracle home set to 755? How can I maintain the software using the "oinstall" group if it does not have write privileges? If I need to patch the software using the Oracle user account, what can I do with the "oinstall" group?
Thanks and kind regards.

i think I can answer the question myself. There could be different oracle home installations, each with a different oracle user/owner like "oracle_prod1" and "oracle_prod2", but both users must be able to read/write the shared oraInventory, in which case both users must have read and write access to the oraInventory directory, hence the oinstall group.

AP Tax Calculation issue with SINGLE TAX vs TAX GROUP

Hi Gurus,
i need your help on below, please advise!!
i have to calculate ap VAT tax on AP invoice,
(Rounding = nearest, precession=2, tax calcualtion= Include tax)
if i calculate 5% is the tax rate, then the tax amount is 0.47cents,this is in case of single tax calculation.
here my requirement was i need calculate 2 Taxes(TAX A AND TAX B (Rates are 5 AND 5%)
EG:
Invoce Base amount = 10 dollars
in case of single tax = 5/105 * 10 = 0.4761 cents(this is 48cents in apps with rouning nearest and precession 2)
tax mode = Include tax
In case of tax group = Tax A and Tax B = 5 + 5 = 10%, when i calculate this in apps its showing 45cents and 45 cents as tax A and B
why this tax caluclation is different with single tax and tax group.
tax code actual amount tax amount remaining amount
single tax 10 0.4761 10 - 0.48cents = 9.52 cents
tax group 10 45+45=90 cents 9.10 cents
Please Help !!!
Thanks,
Satish

Hi Vineeth,
This is Kathy from BSI Support. I wanted to make sure that you understood that the TF80 Like Reciprocal flag was made available in TF90 for testing purposes only. This was meant as a tool for customers to be able to compare their TF90 results to their TF80 output, to insure a successful upgrade. This funcitonality, however, was never intended to be utilized going forward. There have been significant changes implemented in BSI TaxFactory 9.0 regarding multi-state withholding (also known as reciprocity). There is information available on our website that explains these changes. If you log onto our website, please look under the "Whats New" section for an explanation of reciprocal functionality in BSI TaxFactoryu2122 9.0
If you have specific scenarios that you need help with, please contact us and we will be happy to assist you.
Regards,
BSI Support - Kathy

How does schedule with RESTful API a Webi report for a group of users ("Schedule For" to "Schedule for specified users and user groups" with one or more users/groups)?

SAB BO 4.1 SP1
Does it have an RESTful API to schedule a Webi report with the parameter to specify a group of users ("Schedule For" to "Schedule for specified users and user groups" with one or more users/groups)?

Hello Ricardo,
have you try a call like this one ?
    <schedule>
      <name>"test"</name>"
      <format type=\"webi\"/>
      <destination>
        <inbox>
         <to>userId1,userId2,userId3,groupId1,groupId12</to>
        </inbox>
      </destination>
    </schedule>
Regards
Stephane

With the new IOS6 the 'group' of contact disapear

Sorry for my poor English.
With my I-phone 3GS and IOS 5 I see all my contact >1'200 ! classified en 21 groups
It's very easy to find soemone because with IOS5 i select the group and I see quickly the name inside
Now with IOS 6 i lose the 'hierarchy' of group and i must to throw 20 groups to see onyl one group. It's very very complicated and afet i must seleclt again the 20 group etc.. etc...for me It' impossible to use this IOS
With the IOS 5 it' very naturel and easy
Question It' possible to change IOS 6 to 5 to for restaure this important possibility ?
On my PC with the outlook software stay in normal position with group. :-)
Thank you for your help
Claude
Switzerland (French)

http://www.imore.com/ios-6-preview-siri-ipad

Delivery related billing with VF04 based on sales group.

Hi Expert
I want to do delivery related billing in vf04 but sales group filed is grayed in vf04 so sorting is not possible if i not sort then it will bill to all customer that we dont want , i want to bill manually for different Customer on the basis Sales Group, how to handle this situation. we donu2019t have other choice such as Shipping point is only one. Even sold to party is same for all site. how to handle this situation.
thanks
Mona.

Hi Mona,
The selection criteria fields for VF04 are hard-coded.
This cannot be done, the fields in the billing due list index are the
the fields in the billing due list (VKDFS) -> these are the only ones
that can be read and available to be added to the billing due list.
The nature of your request indicates that is is rather a consulting
issue.
Nevertheless :
A solution for this requirement can look like this (example with
sales office and sales group for RV60SBAT):
Add with an append the new field(s) on table VKDFS
(take care about the customer name space ZZ*)
Fill the fields ZZVKBUR and ZZVKGRP with userexit LV05IF0V
for Orders
       FORM USEREXIT_VKDFS_SORTKRI_SALES.
        VKDFS-ZZVKBUR = LVBAK-VKBUR.
        VKDFS-ZZVKGRP = LVBAK-VKGRP.
       ENDFORM.
for Deliveries
       FORM USEREXIT_VKDFS_SORTKRI_DEL.
        VKDFS-ZZVKBUR = LLIKP-VKBUR.
        VKDFS-ZZVKGRP = LLIKP-VKGRP.
      ENDFORM.
You will need to take a copy of RV60SBAT and add these fields to the
selection criteria and the select of VKDFS. See note 25026 which is
for selection via Payer but may provide additional information. Also
see note 63523.
You will also need to re-build the billing due index VKDFS with
program RVV05IVB.
I hope this information helps so far.
Thanks,
Alex

To create Trunk Group with differnt T1 PRI's groups for our outbound calls

Hi All,
I would like to request all of you that I have requiremnt that we have to create "Trunk Group" of diffenent T1 controller PRI's for outbonds call, mean I need to create a trunk group with differnt T1 PRI's groups for our outbond calls, but my problem is that I don't know and no idea that how I will do this , i am also try to find some cisco doc for this still I did not find these info, so I request all of you that I will be thank full to all of you if you can help me out for my this problems.
Thanks
Rizwan

Here is a good write up, there are many others:
http://www.markholloway.com/blog/?p=452
HTH,
Chris

Help with Formula/Placeholder columns for group totals

I have select that is broken into 2 groups (a COMPANY group and a DETAIL group within company). I need to determine the COMPANY group totals based on values in a column in the DETAIL group. I.E. the column is a transaction description and can have up to 15 different values and it did not appear that a summary column would work for what I need. I have currently set up 15 formula columns in the DETAIL group and check the value of the REASON to accumulate totals and return the total to a PLACEHOLDER column (which is numeric and defined in the COMPANY group).
I then report the Placeholder columns at break of COMPANY. This all works fine if I run only one company. If I run with multiple companies the Placeholder columns are used as a running total.
My question is how do I reset the PLACEHOLDER columns at company break if at all, or is there a simpler way to accomplish what I need.
Any and all assistance would be greatly appreciated.
Tom Vereecke

If you are using one placeholder column in different formula columns just ignore the following solution. It will not work in that case. I will post it here if i find out any way to initialize placeholder columns at different groups or anyother way to solve this issue.
I think if you remove placeholder columns and create summary columns at Company Level, that will work. And formula columns will be changed as follows:
Formula Column:
active_total number(10) := 0;
begin
if :status_1 = 'ACTIVE' then
active_total := active_total + 1;
end if;
if :status_2 = 'ACTIVE' then
active_total := active_total + 1;
end if;
if :status_3 = 'ACTIVE' then
active_total := active_total + 1;
end if;
return active_total;
end;
And in summary columns source will be formula columns. And reset the summary columns at Company.
Hope this helps.
Message was edited by:
fs

What is the usable space of normal redundancy disk group with two uneven capacity fail groups

Hi,
I have a normal redundancy disk group (DATA) with two uneven capacity fail groups (FG1 and FG2). FG1 size is 10GB and FG2 size is 100GB.
In this case what will be the usable space of the disk group (DATA)? is it 10G or 55G?
Thanks,
Mahi

Please, don't duplicate post with same matter.
This question was answered in your previous thread.
Re: ASM normal redundancy disk group

IDSM-2 virtualization with the exception of VLAN groups on inline interface

Please comment the feature that the IDSM-2 supports virtualization with the exception of VLAN groups on inline interface pairs.
(http://www.cisco.com/en/US/docs/security/ips/6.0/configuration/guide/cli/cliAnEng.html)
How can one configure VLAN groups on inline pairs? Please give an example by CLI.

The IDSM-2 does support Inline Vlan Pairs as the previous responder described. You can have up to 250 inline vlan pairs on an interface.
The IDSM-2 does NOT support Vlan Groups on an Inline Interface Pair.
The Appliances do support Vlan Groups on an Inline Interface Pair because they can have a switch on one side, and another switch (or router, or firewall) on the other side. The 2 devices could then be Trunking multiple vlans through the Appliance.
You cannot, however, do this with an IDSM-2.
Vlan IDs are not modified when going through an Inline Interface Pair. Which means the same vlan must exist on both sides of the pair.
The problem with the IDSM-2 is that for Inline Interface Pair to work each port must be an Access Port for a different vlan. So the Inline Interface Pair joins 2 different vlans. Since it cannot rewrite the vlan headers the packets Must enter the IDSM-2 WITHOUT vlan headers so they can be passed between the 2 different vlans. Since the packets won't have vlan header you can not make vlan groups.
if you need to rewrite the vlan header (usually because you need more than 1 pair of vlans), then you use Inline Vlan Pairs on a single interface instead of Inline Intercface Pairs.

Dear I am using iphone 4s now its connected with pc to create contact group. I have 750 contacts in phone but pc showing only 36. How can i solve this? How can I see all contacts in pc?

Dear I am using iphone 4s now its connected with pc to create contact group. I have 750 contacts in phone but pc showing only 36. How can i solve this? How can I see all contacts in pc?

HI,
It may pay to bookmark this page.
http://www.apple.com/support/systemstatus/
8:40 PM Wednesday; April 10, 2013
 iMac 2.5Ghz 5i 2011 (Mountain Lion 10.8.3)
 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb (Snow Leopard 10.6.8)
 Mac OS X (10.6.8),
 Couple of iPhones and an iPad
"Limit the Logs to the Bits above Binary Images."  No, Seriously

Is it possible to tag an individual with their name in a group photo when I place the cursor over th

Is it possible to tag an individual with their name in a group photo when I place the cursor over the person's face?

A work around...
Create your text, place it underneath the face, then hide that text layer. Make sure you save to a format that supports layers like psd or tiff.

Node connectivity,user existence:oracle and group existence:oinstall fail

hi all
i am trying to install Oracle Grid Infrastructure 11g R2 on Oracle Linux Enterprise edition
but while installing the following 3 errors are displaying.
1. node connectivity,
2. user existence:oracle
3. group existence:oinstall fail.
plz can anyone help me out how to resolve the above error?

1. check connectivity to ALL nodes is OK, test ping, test ssh (should be passwordless) ,etc
2. check if the software owner is consistent across all nodes, check the owner id
3. check if the software group is consistent across all nodes, check the group id too
Cheers
FZheng
Edited by: FZheng on May 16, 2011 9:57 AM

How to display the last value of a field in a group in the group header

I need to display the last quiz score from a group of quiz scores as part of the header of a group of units (the quiz score values are in the detail record). I can not use the group footer, which would be the natural place to find the last value. It must be in the group header because there will be a subsequent group within the unit group. In other words, the grouping is as follows:
Unit Group Header (Display last quiz score in unit)
SubUnit Group Header (Display other detail summaries)
Detail Record (including quiz score)
SubUnit Group Footer
Unit Group Footer
While there is a minimum/maximum summary function, there is not a first/last function.
Fuskie
Who is constantly amazed at the ability of users to request report features that are not easily implented through Crystal Reports...

Hi Fuskie,
One suggestion to display the last quiz score in the Group Header, other than what had already been suggested, will be to use a linked subreport in the Group Header. It is not an efficient way to display the information, but it could do the trick.
Another suggestion will be to insert a subreport in the report header, then store the last quiz score in an array for each group, then share it with the main report and display the values in the appropriate group. In this way it will only connect twice to the data source, one for the main report and once for the subreport, instead of multiple connection for each group.
Finally, the most efficient way will be to have this value calculated on the database side using a command object or a stored procedure.
Patrick

Problemm with dba group vs oinstall group

Similar Messages

Maybe you are looking for