Query tunning in RAC system

Hi,
I have a RACsystem with 2 nodes (oracle 10.2.0.1.0, Linux RedHat 4)
I have a simple query that take a long time but in the same server with a single database it's fast!!??
here is the query:
select count(*) as y0_, this_.NOTIFICATION_TYPE as y1_
from NOTIFICATION this_
where this_.OPCO_ID=1
and this_.SENTDATE is null
and this_.UPDATED_TIME is null
and this_.CREATED_TIME>=sysdate
and this_.CREATED_TIME<=sysdate
group by this_.NOTIFICATION_TYPE
order by this_.NOTIFICATION_TYPE asc
With AWR I can see that I lost a long time in gc_buffer_busy_wait!!
NB:I have a blob in my table
How I can solve my problem?
Message was edited by:
vittel

You have hit one of the many features of RAC. On a single instance database a piece of data is either in its SGA in local memory, or out on disk. On a multi-instance RAC database a piece of data can now either be in the local SGA memory, or the remote SGA memory of the other node, or out on disk.
Given that Oracle assumes that it is quicker to go across the network interconnect between the 2 RAC nodes to retrieve the copy of the data from the other SGA than it is to go all the way out to disk to read that data page, Oracle RAC is biased to using copies of data blocks in the SGAs of the other RAC nodes.
You cannot stop this. Oracle RAC is doing as it is intended to. Either tune and improve the performance of the interconnect between your 2 nodes. Are you using 100 baseT or 1000 baseT or something even faster? It is the latency that is the issue, not the bandwidth.
Or stop using RAC, and go back to just one database instance.
John

Similar Messages

  • Help me query tunning

    Hi Guru's
    Can you please help me query tunning.
    Database Version : Oracle 11g - 11.2.0.3
    select  distinct  corporation_name custer_name,
            glog_util.remove_domain(SHIP_BUY.SERVPROV_GID ) SCAC,
            glog_util.remove_domain(ship_buy.shipment_gid) buy_shipment_gid,
            F_Get_SELL_ID_STRING(SHIP_BUY.SHIPMENT_GID) sell_shipment_gid,
            ship_buy.domain_name,    
            F_GET_ORDER_RELEASE_GID('B',SHIP_BUY.SHIPMENT_GID,0) ORDER_RELEASE_GID,
            f_get_refnum_string('SHIPMENT', ship_buy.shipment_gid, 'MBOL_NUMBER_CLEANSED')MBOL_NUMBER,
            F_GET_POD_RECEIVED_DATE (ship_BUY.SHIPMENT_GID) POD_RECEIVED_DATE,
            f_get_exp_accrue_amt(ship_buy.shipment_gid,'SHIPMENT') Total_accrual_amount    
    from shipment ship_buy,
            invoice inv,
            invoice_shipment si,
            --voucher v,
            corporation corp
    where corp.domain_name=ship_buy.domain_name
            and corp.is_domain_master='Y'
          and 1=1
          AND ship_buy.domain_name like 'UPS/CP/DFP/%'
          and F_GET_POD_RECEIVED_DATE (ship_BUY.SHIPMENT_GID)  <= to_char(to_date('31-JUL-2013', 'DD-MON-YYYY'), 'dd-mon-yyyy')
            --and V.INVOICE_GID(+) = inv.invoice_gid
            --and ship_buy.domain_name = 'UPS/CP/VZNB'
            and si.shipment_gid(+) = SHIP_BUY.SHIPMENT_GID
            AND SI.INVOICE_GID = INV.INVOICE_GID(+)
            and SHIP_BUY.INSERT_DATE > '1-JAN-2007'
            and SHIP_BUY.USER_DEFINED1_ICON_GID = 'ACCEPTED'
    UNION        
    select  distinct  corporation_name custer_name,
            glog_util.remove_domain(SHIP_BUY.SERVPROV_GID ) SCAC,
            glog_util.remove_domain(ship_buy.shipment_gid) buy_shipment_gid,
            F_GET_SELL_ID_STRING( SHIP_BUY.SHIPMENT_GID) sell_shipment_gid,
            ship_buy.domain_name,    
            F_GET_ORDER_RELEASE_GID('B',SHIP_BUY.SHIPMENT_GID,0) ORDER_RELEASE_GID,
            f_get_refnum_string('SHIPMENT', ship_buy.shipment_gid, 'MBOL_NUMBER_CLEANSED')MBOL_NUMBER,
            F_GET_POD_RECEIVED_DATE (ship_BUY.SHIPMENT_GID) POD_RECEIVED_DATE,
            f_get_exp_accrue_amt(inv.invoice_gid,'INVOICE') Total_accrual_amount  
    from shipment ship_buy,
            invoice inv,
            invoice_shipment si,
          -- voucher v,
            corporation corp
    where corp.domain_name=ship_buy.domain_name
            and corp.is_domain_master='Y'
            and 1=1
            AND ship_buy.domain_name like 'UPS/CP/DFP/%'
            and F_GET_POD_RECEIVED_DATE (ship_BUY.SHIPMENT_GID)  <= to_char(to_date('31-JUL-2013', 'DD-MON-YYYY'), 'dd-mon-yyyy')
          --AND INV.DOMAIN_NAME = 'UPS/CP/VZNB'
          --and V.INVOICE_GID(+) = inv.invoice_gid
            and si.shipment_gid(+) = SHIP_BUY.SHIPMENT_GID
            AND SI.INVOICE_GID = INV.INVOICE_GID(+)
            and SHIP_BUY.INSERT_DATE > '1-JAN-2007'
            and INV.USER_DEFINED1_ICON_GID = 'ACCEPTED'
    GROUP BY corporation_name,SHIP_BUY.SHIPMENT_GID,SHIP_BUY.SERVPROV_GID,ship_buy.domain_name,inv.invoice_gid
    ORDER BY CUSTER_NAME, BUY_SHIPMENT_GID;
    And I generated the execution plan :
    | Id  | Operation                          | Name                    | Rows  | Bytes | Cost (%CPU)| Time    |
    |  0 | SELECT STATEMENT                  |                        |    3 |  448 |  415  (2)| 00:00:05 |
    |  1 |  SORT UNIQUE                      |                        |    3 |  448 |  414  (87)| 00:00:05 |
    |  2 |  UNION-ALL                        |                        |      |      |            |          |
    |  3 |    NESTED LOOPS OUTER              |                        |    3 |  384 |    57  (0)| 00:00:01 |
    |*  4 |    HASH JOIN                      |                        |    3 |  294 |    54  (0)| 00:00:01 |
    |*  5 |      TABLE ACCESS BY INDEX ROWID  | SHIPMENT                |    3 |  195 |    40  (0)| 00:00:01 |
    |*  6 |      INDEX SKIP SCAN              | IND_SHIP_DOM_ICON      |    54 |      |    25  (0)| 00:00:01 |
    |*  7 |      TABLE ACCESS FULL            | CORPORATION            |    4 |  132 |    14  (0)| 00:00:01 |
    |*  8 |    INDEX RANGE SCAN              | IND_INVOICESHIP_SHP_GID |    1 |    30 |    1  (0)| 00:00:01 |
    |  9 |    HASH GROUP BY                  |                        |    1 |  192 |  356  (1)| 00:00:05 |
    |* 10 |    HASH JOIN                      |                        |    1 |  192 |  354  (1)| 00:00:05 |
    |  11 |      NESTED LOOPS                  |                        |      |      |            |          |
    |  12 |      NESTED LOOPS                |                        |    1 |  159 |  339  (0)| 00:00:05 |
    |  13 |        NESTED LOOPS                |                        |  145 | 13920 |  194  (0)| 00:00:03 |
    |  14 |        TABLE ACCESS BY INDEX ROWID| INVOICE                |  145 |  5220 |    49  (0)| 00:00:01 |
    |* 15 |          INDEX SKIP SCAN          | IDX_INV_TYP_ICON_NAM    |  145 |      |    17  (0)| 00:00:01 |
    |* 16 |        INDEX RANGE SCAN          | UK_INVOICE_SHIPMENT    |    1 |    60 |    1  (0)| 00:00:01 |
    |* 17 |        INDEX UNIQUE SCAN          | PK_SHIPMENT            |    1 |      |    1  (0)| 00:00:01 |
    |* 18 |      TABLE ACCESS BY INDEX ROWID  | SHIPMENT                |    1 |    63 |    1  (0)| 00:00:01 |
    |* 19 |      TABLE ACCESS FULL            | CORPORATION            |    4 |  132 |    14  (0)| 00:00:01 |
    Predicate Information (identified by operation id):
      4 - access("CORP"."DOMAIN_NAME"="SHIP_BUY"."DOMAIN_NAME")
      5 - filter("F_GET_POD_RECEIVED_DATE"("SHIP_BUY"."SHIPMENT_GID")<=TO_DATE(' 2013-07-31 00:00:00',
                  'syyyy-mm-dd hh24:mi:ss') AND "SHIP_BUY"."INSERT_DATE">TO_DATE(' 2007-01-01 00:00:00', 'syyyy-mm-dd
                  hh24:mi:ss'))
      6 - access("SHIP_BUY"."USER_DEFINED1_ICON_GID"='ACCEPTED' AND "SHIP_BUY"."DOMAIN_NAME" LIKE
                  'UPS/CP/DFP/%')
          filter("SHIP_BUY"."DOMAIN_NAME" LIKE 'UPS/CP/DFP/%' AND
                  "SHIP_BUY"."USER_DEFINED1_ICON_GID"='ACCEPTED')
      7 - filter("CORP"."IS_DOMAIN_MASTER"='Y' AND "CORP"."DOMAIN_NAME" LIKE 'UPS/CP/DFP/%')
      8 - access("SI"."SHIPMENT_GID"(+)="SHIP_BUY"."SHIPMENT_GID")
      10 - access("CORP"."DOMAIN_NAME"="SHIP_BUY"."DOMAIN_NAME")
      15 - access("INV"."USER_DEFINED1_ICON_GID"='ACCEPTED')
          filter("INV"."USER_DEFINED1_ICON_GID"='ACCEPTED')
      16 - access("SI"."INVOICE_GID"="INV"."INVOICE_GID")
      17 - access("SI"."SHIPMENT_GID"="SHIP_BUY"."SHIPMENT_GID")
          filter("F_GET_POD_RECEIVED_DATE"("SHIP_BUY"."SHIPMENT_GID")<=TO_DATE(' 2013-07-31 00:00:00',
                  'syyyy-mm-dd hh24:mi:ss'))
      18 - filter("SHIP_BUY"."DOMAIN_NAME" LIKE 'UPS/CP/DFP/%' AND "SHIP_BUY"."INSERT_DATE">TO_DATE('
                  2007-01-01 00:00:00', 'syyyy-mm-dd hh24:mi:ss'))
      19 - filter("CORP"."IS_DOMAIN_MASTER"='Y' AND "CORP"."DOMAIN_NAME" LIKE 'UPS/CP/DFP/%')
    Statistics
        246247  recursive calls
              2  db block gets
        1660067  consistent gets
          13839  physical reads
              0  redo size
        592054  bytes sent via SQL*Net to client
          6024  bytes received via SQL*Net from client
            502  SQL*Net roundtrips to/from client
          15296  sorts (memory)
              0  sorts (disk)
          7513  rows processed

    Hmmm...why does this look familiar?
    F_GET_POD_RECEIVED_DATE (ship_BUY.SHIPMENT_GID)  <= to_char(to_date('31-JUL-2013', 'DD-MON-YYYY'), 'dd-mon-yyyy')
    SHIP_BUY.INSERT_DATE > '1-JAN-2007'
    Like I said in your other thread about this, these two lines need to be fixed and your function needs to be fixed so the return statement doesn't do an implicit date conversion.
    Can't you see what that first line is doing?  You're taking a character string, turning it into a date, then back to a character string.
    If nothing else, these lines should be...
    F_GET_POD_RECEIVED_DATE (ship_BUY.SHIPMENT_GID)  <= to_date('31-JUL-2013', 'DD-MON-YYYY')
    SHIP_BUY.INSERT_DATE > to_date('01-JAN-2007','DD-MON-YYYY')
    (assuming insert_date is a proper date format, fingers crossed)

  • Problem of Copying the Original VM to 2nd VM in Oracle 11gR2 RAC system

    Folks,
    Hello. I have been installing Oracle Database 11gR2 RAC system using 2 nodes that are 2 Virtual Machines (rac1 and rac2) on the top of VMPLayer 3.
    I follow the tutorial http://appsdbaworkshop.blogspot.com/2011/10/11gr2-rac-on-linux-56-using-vmware.html to do.
    The original Virtual Machine rac1 has run correctly. I configure rac1 network (eth0 and eth1) by opening VM rac1 and using command "[root@rac1\] #neat" as root user to invoke the network configuration.
    For the second Virtual Machine rac2, I simply copy all files in "C:\VM\rac1" into "C:\VM\rac2". Then I have done the following:
    1) In the directory "C:\VM\rac2", rename "rac1.vmx" to "rac2.vmx".
    2) Change display name from "rac1" to "rac2" in the file "rac2.vmx".
    The next thing to do for rac2 is to open the Virtual Machine rac2 and configure its network (eth0 and eth1) by using the command "[root@rac2\]#neat" as root user.
    But by this step, I don't understand how to open the Virtual Machine rac2 so that can configure its network (eth0 and eth1).
    Can any folk tell me how to open the VM rac2 to configure its network by this step ?
    Thanks.

    Folks,
    Hello. Thanks a lot for replying.
    The public IP for eth0 and private IP for eth1 in the file "/etc/hosts" are as follows:
    rac1 eth0 192.168.138.35 eth1 192.168.137.35
    rac2 eth0 192.168.138.36 eth1 192.168.137.36
    In rac1, I have added 2 entries in /etc/hosts as following:
    #VIP for eth0
    192.168.138.130 rac1-vip.localdomain rac1-genetic-vip
    192.168.138.131 rac2-vip.localdomain rac2-cellar-vip
    Then I execute the command: [root@rac1 /]# ping rac2
    Output:
    PING rac2.localdomain (192.168.138.36) 56(84) bytes of data
    From rac1.localdomain (192.168.138.35) icmp_seq=1
    Destination Host Unreachable
    In rac2, I try to add the above 2 entries in /etc/hosts. But cannot save it. The following error message comes up:
    "E45: readonly option is set (add ! to override)".
    My questions are:
    First, do I need to add VIP in the file "/etc/hosts" for both rac1 and rac2 ?
    Second, why rac1 still cannot reach rac2 after add VIP in /etc/hosts for rac1 ?
    Third, why the file "/etc/hosts" in rac2 is read-only ? How to change it to be editable ?
    Thanks.

  • How to create second database at ASM in 4 node RAC system

    Hi Experts,
    we use 4 nodes RAC (11.0.1) with 10.2.0. 4 database in red hat5.0
    we want to add second database at ASM in RAC system based on manager decision.
    how do I add second database in ASM with exist database?
    Do I need to created new ASM insatnce?
    how to create two new diskgroup? is it under existing ASM instance or new ASM instance?
    how to reset ASM properity to support ( or new) ASM instance and two database?
    Do I need to configure AMS again after added more space into ASM?
    I could not find ducument that add seconf database into ASM in RAC system.
    I want add second database by dbca. any experience for add second database in ASM RAC ?
    Thanks for help!
    JIm

    Hi... I'm in the same situation.
    I need to add a new second database on a RAC installation based on already available ASM instance.
    I'm using 11gR2.
    I read your suggested documentation. Then I typed asmca and analyzed my asm configuration:
    As you can see I have a DISK GROUP NAME with several FREE space.
    !http://img522.yfrog.com/img522/8405/dbca20100203173248.jpg!
    If I select Volumes tab the following is my current configuration:
    !http://img682.yfrog.com/img682/562/dbca20100203173343.jpg!
    Selecting Create button, I can insert some values as you can see:
    !http://img403.yfrog.com/img403/9889/dbca20100203173403.jpg!
    First question:
    Is this the right way to create space for a new database ? Consider that running dbca.. no DISK GROUP NAME is available.
    Second question:
    When I created my first database on this DISK GROUP NAME no volumes were created. Why now I have to do it ? Is this necessary to really separate datafiles coming from different databases ?

  • How to open the second VM in Oracle 11gR2 2-nodes RAC system ?

    Folks,
    Hello. I have been installing Oracle Database 11gR2 RAC system using 2 nodes that are 2 Virtual Machines (rac1 and rac2) on the top of VMPLayer 3.
    I follow the tutorial http://appsdbaworkshop.blogspot.com/2011/10/11gr2-rac-on-linux-56-using-vmware.html to do.
    The original Virtual Machine rac1 has run correctly. I configure rac1 network (eth0 and eth1) by opening VM rac1 and using command "[root@rac1\] #neat" as root user to invoke the network configuration.
    For the second Virtual Machine rac2, I simply copy all files in "C:\VM\rac1" into "C:\VM\rac2". Then I have done the following:
    1) In the directory "C:\VM\rac2", rename "rac1.vmx" to "rac2.vmx".
    2) Change display name from "rac1" to "rac2" in the file "rac2.vmx".
    The next thing to do for rac2 is to open the Virtual Machine rac2 and configure its network (eth0 and eth1) by using the command "[root@rac2\]#neat" as root user.
    But by this step, I don't understand how to open the Virtual Machine rac2 so that can configure its network (eth0 and eth1).
    Can any folk tell me how to open the VM rac2 to configure its network by this step ?

    Hi,
    But by this step, I don't understand how to open the Virtual Machine rac2 so that can configure its network (eth0 and eth1)."rac2" is a new virtual machine after you copied and changed the display name and you need to add this in the vmware enventory (I am talking about vmware server and vmware player should have the same way as it is supposed to run multiple vritual machines on your PC). Then it will be visible it to you. Now start this new machine and edit the network configuration.
    Salman

  • Oracle 11gR2 RAC system Network Connection Problem among VMs

    Folks,
    Hello.
    I am installing Oracle Database 11gR2 RAC system using 2 Virtual Machines (rac1 and rac2) on the top of VMPlayer 3.
    I configure Network for rac1 and rac2 as following:
    rac1 eth0 192.168.138.35 eth1 192.168.137.35
    rac2 eth0 192.168.138.36 eth1 192.168.137.36
    [root@rac2 \]# ping rac1
    output: 64 bytes from rac1.localdomain (127.0.0.1) ... ...
    [root@rac1 \]# ping rac2
    Error: Ping rac2.localdomain... ... Destination Host Unreachable.
    My questions are:
    First, Why rac1 cannot reach rac2 while rac2 can reach rac1 ?
    Second, How to have rac1 reach rac2 ?

    Folks,
    Hello. Thanks a lot for replying.
    The public IP for eth0 and private IP for eth1 in the file "/etc/hosts" are as follows:
    rac1 eth0 192.168.138.35 eth1 192.168.137.35
    rac2 eth0 192.168.138.36 eth1 192.168.137.36
    In rac1, I have added 2 entries in /etc/hosts as following:
    #VIP for eth0
    192.168.138.130 rac1-vip.localdomain rac1-genetic-vip
    192.168.138.131 rac2-vip.localdomain rac2-cellar-vip
    Then I execute the command: [root@rac1 /]# ping rac2
    Output:
    PING rac2.localdomain (192.168.138.36) 56(84) bytes of data
    From rac1.localdomain (192.168.138.35) icmp_seq=1
    Destination Host Unreachable
    In rac2, I try to add the above 2 entries in /etc/hosts. But cannot save it. The following error message comes up:
    "E45: readonly option is set (add ! to override)".
    My questions are:
    First, do I need to add VIP in the file "/etc/hosts" for both rac1 and rac2 ?
    Second, why rac1 still cannot reach rac2 after add VIP in /etc/hosts for rac1 ?
    Third, why the file "/etc/hosts" in rac2 is read-only ? How to change it to be editable ?
    Thanks.

  • OEM Issue: oemagent stops after some time on specific node on a 3 node RAC system.

    We have a 3 node RAC system running 11.2.0.3 .
    The oemagent keeps failing on 1 particular node and needs to be brought up every now and then. What could be the probable cause of this. Also, I have not seen anything suspicious in the agent logs.
    Oracle Enterprise Manager Cloud Control 12c Release 2
    Copyright (c) 1996, 2012 Oracle Corporation.  All rights reserved.
    Agent Version     : 12.1.0.2.0
    OMS Version       : 12.1.0.2.0
    Protocol Version  : 12.1.0.1.0
    Last successful upload                       : 2015-03-10 07:28:10
    Last attempted upload                        : 2015-03-10 07:28:10
    Total Megabytes of XML files uploaded so far : 0.08
    Number of XML files pending upload           : 0
    Size of XML files pending upload(MB)         : 0
    Available disk space on upload filesystem    : 78.16%
    Collection Status                            : Collections enabled
    Heartbeat Status                             : Ok
    Last attempted heartbeat to OMS              : 2015-03-10 07:28:25
    Last successful heartbeat to OMS             : 2015-03-10 07:28:25
    Next scheduled heartbeat to OMS              : 2015-03-10 07:29:25
    Agent is Running and Ready
    Sometimes while checking status we often get the followinG:
    Oracle Enterprise Manager Cloud Control 12c Release 2
    Copyright (c) 1996, 2012 Oracle Corporation.  All rights reserved.
    Status agent Failure:unable to connect to http server at https://<servername>:<port>/emd/lifecycle/main/ [peer not authenticated]
    Agent is Not Running
    Any help?

    We have a 3 node RAC system running 11.2.0.3 .
    The oemagent keeps failing on 1 particular node and needs to be brought up every now and then. What could be the probable cause of this. Also, I have not seen anything suspicious in the agent logs.
    Oracle Enterprise Manager Cloud Control 12c Release 2
    Copyright (c) 1996, 2012 Oracle Corporation.  All rights reserved.
    Agent Version     : 12.1.0.2.0
    OMS Version       : 12.1.0.2.0
    Protocol Version  : 12.1.0.1.0
    Last successful upload                       : 2015-03-10 07:28:10
    Last attempted upload                        : 2015-03-10 07:28:10
    Total Megabytes of XML files uploaded so far : 0.08
    Number of XML files pending upload           : 0
    Size of XML files pending upload(MB)         : 0
    Available disk space on upload filesystem    : 78.16%
    Collection Status                            : Collections enabled
    Heartbeat Status                             : Ok
    Last attempted heartbeat to OMS              : 2015-03-10 07:28:25
    Last successful heartbeat to OMS             : 2015-03-10 07:28:25
    Next scheduled heartbeat to OMS              : 2015-03-10 07:29:25
    Agent is Running and Ready
    Sometimes while checking status we often get the followinG:
    Oracle Enterprise Manager Cloud Control 12c Release 2
    Copyright (c) 1996, 2012 Oracle Corporation.  All rights reserved.
    Status agent Failure:unable to connect to http server at https://<servername>:<port>/emd/lifecycle/main/ [peer not authenticated]
    Agent is Not Running
    Any help?

  • Disable SSH root login in RAC system

    Hi Alll,
    We have a oracle 11.2.7 RAC in Linux. As statement, SA will disable ssh root log and Nagios will monitor each nodes in RAC system.
    As I know, Nagios only apply DH key for SSH. But Oracle RAC apply two type of SSH key for ssh_equivelancy in Oracle CRS.
    Dees any experts have experience for oracle RAC and database when disable root SSH log in Linux system?
    Thanks very much!
    JIn

    Security is not based on the number of keys one needs - but on the quality of the locks.Partially agree. But just like in real world one lock is not enough even superb. Why cars have imobilisers, defendlocks etc.? Why there is fence in front of some shop's door? It's very common to have two locks on front door. It's much harder (at least it takes much time) to break two locks than break just one. And the time matters. Back to IT security. Disabled root account is one of best practices and is reasonable because you can't 100% assure that your administrator is using strong password everytime. He might just forgot to change password after installation. He might set weak password just for "temporary" reason. You can of course force the password complexity but of course one you have the system installed.
    So can passwords. Deep packet inspection can occur unknowingly. Perhaps we still talking about SSH, don't we?
    The user may be targeted using social engineering, instead of targeting the actual computer system.It's much harder to get two passwords than just one even by using social engineering.
    The question is whether such a server is exposed to an unsecured or public network. And one would manage the risks differently on such a server than one for example in a private network, protected by a reverse proxy in the DMZ, that in turn provides access from a public network.OK, so we've got another locks here ;-)
    So if that user is compromised, so can root as that user can gain root access. I do not see this as better security. It is merely obfuscating security.Which user acccount? Do you know name of that account? Because I know the name of your's. ;-) So you need to find correct account name, get password for that account and also get the password for root account whilst I need to get password for root account only.
    Yes, partially agree with "obfuscation security" term. But in fact this is not for first time when obfuscation is used in security and neither for last time.
    But you can't consider "PermitRootLogin no" and "wheel" group as an obfuscation.
    Using encryption keys (public & private) is one answer to having to share and keep secrets. No, this is also not 100% safe, but I prefer it over having to know, remember and on occasion, share secrets (passwords).How well is your local machine secured? Are you using strong password? Do have all accounts strong password on your local machine? Is your local machine up to date for known sec. bugs (I don't mean zero days)? Is your local machine in separated VLAN or anybody from LAN can access your machine? Because if there are at least two "No" answers then how much time it will take for some skilled part-time worker (in your company) to break into your computer, steal the keys or even worse use your local machine to access the server?
    Don't get me wrong. I am not against encryption keys. Of course I am using it but in combination with other security restrictions which come from "best practices". And to disable direct root access is one of those practices. Even NSA (and other security institutions) suggest to do that (see page #37): www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf Also security auditors check for disabled direct access to privileged accounts.
    I understand this as good enough proof that disabling of direct access to privileged accounts rises security.
    Another good reason is right here:
    Install
    In other words, if any user has possibility to login as root, he uses "root" as default account which is another well known bad practice.

  • Query should fetch all the query details in the system.

    Hi All
    We  are looking for a query which will fetch all the query details in the system along with the user names either who has created the query or who has run it atleast once.
    If any of the queries are not used for a long time then we  can delete it with the user's/owner's approval.
    Is there anyway we can desing such query .
    Thanks
    Asim

    Hi,
    Thanks for the reply.
    My requirement is that we want to create a new query which should fetch the details information of already existing queries.
    Like who has created that query, how frequently the use it etc...
    Whenever we run the new query it should give information of all other existing queries.
    Thanks and Regards
    Asim

  • Query created in which system

    Hi All,
    How to find out the query created in which system like Dev or ACC or Prod.
    For ex. I want to find the queries directly created in Production.

    Hi,
    unfortunately there is no tool for that. So I think one way is to compare the content of table rszeltdir in both systems. Restrict the output on deftp = 'REP' and check the fields mapname and txtsh and txtlg. If you have the queries identified, check if they are assigned to a development class/packet in the productive system. If this is not the case, you have your candidates for deletion. You can then delete the queries using transaction rszdelete.
    regards
    Siggi
    PS: you may run rszdelete anyways, as you can check a box there for temporary objects only (those will be the ones in question)

  • Accessing BW Query from Third Party System

    Hi,
    We have a requirement by which user can do the following through the third party system.
    1. User will enter the Parameters in the third party system.
    2. User will then call the BW Query with the above parameters from the third party system.
    3. BW query should get execute based on the parameters (variables) and output to be displayed.
    3. After displaying the output, the same should get passed into the db tables or the flat file to the third party system.
    Ideal steps will be :
    1. Enter the parameters in the third party system
    2. Calling the query from third party system with the
    parameters
    3. Executing the BW query
    4  Displaying the output and
    5. Sending the output back to the third party system
    Kindly advise how can we handle this scenario.
    Regards
    Ramesh Ganji

    hi,
    you can use third party etl tools. I used XtractIS for microsoft analysis services.
    http://www.theobald-software.com/cms/en/xtract-is/xtract-is-plugnplay-mit-sap-und-den-ssis.html

  • Problem on Installing RAC System - Oracle Linux 6.2 and 11gR2

    Folks,
    Hello. I just start to install 4-nodes RAC system using VMplayer 3. The host Operating System is Windows 7.
    The Guest OS is Oracle Linux 6.2.
    Because my computer's hard disk does not have enough space, I install the Guest OS Oracle Linux 6.2 into a external hard disk. But its speed is very slow. It has taken more than 24 hours by now, but still don't finish installing Oracle Linux 6.2.
    Do any folk understand what's going on ? Is there any problem on Oracle Linux 6.2 ?

    user8860348 wrote:
    Folks,
    Hello. I just start to install 4-nodes RAC system using VMplayer 3. The host Operating System is Windows 7.
    The Guest OS is Oracle Linux 6.2.
    Because my computer's hard disk does not have enough space, I install the Guest OS Oracle Linux 6.2 into a external hard disk. But its speed is very slow. It has taken more than 24 hours by now, but still don't finish installing Oracle Linux 6.2.
    Do any folk understand what's going on ? Is there any problem on Oracle Linux 6.2 ?of course the problem is with Oracle Linux 6.2 & not with your VM implementation

  • Problem on Installing RAC System - Oracle Linux 6.2 as Guest OS

    Folks,
    Hello. I just start to install 4-nodes RAC system using VMplayer 3. The host Operating System is Windows 7.
    The Guest OS is Oracle Linux 6.2.
    Because my computer's hard disk does not have enough space, I install the Guest OS Oracle Linux 6.2 into a external hard disk. But its speed is very slow. It has taken more than 24 hours by now, but still don't finish installing Oracle Linux 6.2.
    Do any folk understand what's going on ? Is there any problem on Oracle Linux 6.2 ?

    user8860348 wrote:
    Folks,
    Hello. I just start to install 4-nodes RAC system using VMplayer 3. The host Operating System is Windows 7.
    The Guest OS is Oracle Linux 6.2.
    Because my computer's hard disk does not have enough space, I install the Guest OS Oracle Linux 6.2 into a external hard disk. But its speed is very slow. It has taken more than 24 hours by now, but still don't finish installing Oracle Linux 6.2.
    Do any folk understand what's going on ? Is there any problem on Oracle Linux 6.2 ?of course the problem is with Oracle Linux 6.2 & not with your VM implementation

  • Connect from SAP gateway to RFC server failed - Java StandAlone app X SAP RAC System

    Dears,
    I'm developing a Java application (RFC SERVER) with JCo3 and I need to connect to SAP RAC system.
    I have configured the TCP/IP connection via transaction SM59, but when I try to start my server I face the error below (dev_jco_rfc.trc):
    ==========================================================================================
    **** Error file opened at 20140714 112024 Brasilia Time Rel 3.0.10 (2013-08-08) [720.440]
    Error:  >Mon Jul 14 11:20:24,636<    RfcException: [null]
        message: Connect from SAP gateway to RFC server failed
    Connection parameters: TYPE=A DEST=VSPAGUE ASHOST=cpe1601 SYSNR=01 SAPROUTER=/H/155.56.49.28 PCS=1
    LOCATION    SAP-Gateway on host ld7624.dmzwdf.sap.corp / sapgw01
    ERROR       hostname 'cpe1601' unknown
    TIME        Mon Jul 14 16:20:25 2014
    RELEASE     740
    COMPONENT   NI (network interface)
    VERSION     40
    RC          -2
    MODULE      /bas/740_REL/src/base/ni/nixxhl.cpp
    LINE        193
    DETAIL      NiHLGetNodeAddr: hostname cached as unknown
    COUNTER     3
        Return code: RFC_FAILURE(1)
        error group: 102
        key: RFC_ERROR_COMMUNICATION
    ==========================================================================================
    This problem happens when my app executes the line:
    JCoServer myServer = JCoServerFactory.getServer(myServerName);
    My system properties:
    jco.client.lang=EN
    jco.destination.peak_limit=10
    jco.client.client=800
    jco.client.passwd=********
    jco.client.user=********
    jco.client.sysnr=01
    jco.destination.pool_capacity=3
    jco.client.ashost=/H/155.56.49.28/H/cpe1601
    jco.server.connection_count=3
    jco.server.gwhost=/H/155.56.49.28/H/cpe1601
    jco.server.progid=VSPAGUE
    jco.server.gwserv=sapgw01
    jco.server.repository_destination=VSPAGUE
    Using SAP Logon i can connect to server cpe1601 system E16 without problems.
    Please, I really need some help, because my knowledge on SAP platform is minimum.

    Hi Markus,
    Changing ASHOST=ld7624.dmzwdf.sap.corp as you have suggested, I got the error message: Connect to SAP gateway failed ...
    As you could see, the host I'm connecting is from SAP RAC Service.
    Here in our company we have only SAP Logon and my RFC Application, and I can connect to SAP remote system via SAP Logon with this settings:
    System Connection Parameters
    Description: SAP ECC 6.0
    Application Server: cpe1601
    Instance Number: 01
    System ID: E16
    SAProuter String: /H/155.56.49.28/H/
    Below the connection information I received from SAP RAC SUPPORT for testing purposes:
        E16 System:
        SID: E16
        Client: 800
        System Number: 01
        Server: cpe1601
        Component Version: SAP ERP Central Component 6.0 Enhancement Pack 6 Suite on HANA
        User: ********
       Password: ********
       SAProuter String:
       If you don't plan to use SAPRouter at your end,
       /H/155.56.49.28/H/    

  • Is VMPlayer3 supported by Oracle DB 11gR2 RAC system ?

    Folks,
    Hello. I have been running Oracle regular ( a single instance) Database 11gR1 successfully with Oracle Linux 5.6 as Guest OS in VMPlayer3 and with Windows 7 as Host OS for a long time.
    Now, I am installing Oracle Database 11gR2 RAC system (2 nodes) in the same environment that is with Oracle Linux 5.6 as Guest OS in VMPlayer3 and with Windows 7 as Host OS.
    I have installed Clusterware for 2 nodes. But it seems that VMPlayer3 is not supported by Oracle DB 11gR2 RAC system.
    Only VMware Server 2.0.2 is supported. When I install VMware Server2.0.2 in Windows 7, the error message comes up as follows:
    "Setup has detected that VMPlayer is already installed on this machine. Please uninstall this product through the Control Panel and try again."
    This means we cannot installed VMPlayer3 and VMware Server 2.0.2 in one OS Windows 7. I have installed many VMs in VMPlayer3 and cannot uninstalled VMPlayer3.
    My questions are:
    Can any folk make sure whehter VMPlayer3 is supported by Oracle DB 11gR2 RAC system or not ?
    If not, how to solve the issue that VMPlayer3 and VMware Server 2.0.2 cannot be installed in one OS Windows 7 ?
    Thanks.

    Folks,
    Hello. As I know, VMPlayer 3 supports Oracle Linux 5.6 as Guest OS and Windows 7 as Host OS.
    But when I am installing Clusterware and running the script root.sh, the error message comes up as follows:
    "ADVM/ACFS is not supported on Oracle Linux-release-5-6-6.0.1".
    My questions are:
    First, what is ADVM/ACFS about ?
    Second, can any folk make sure whether Oracle DB 11gR2 RAC system is compatible to run in Oracle Linux-release-5-6-6.0.1 in VMPlayer 3 with Windows 7 as Host OS ?
    Thanks.

Maybe you are looking for