Root for managing RAC

Dear All,
I need to know how important to have the root password for managing RAC environment,becausae our sys admin he is refusing to give the DBA the root password.
is oracle user is enough to manage RAC?
Regards,
Sohayb

Wessam Nusaiurat wrote:
Dear All,
I need to know how important to have the root password for managing RAC environment,becausae our sys admin he is refusing to give the DBA the root password.
is oracle user is enough to manage RAC?
Regards,
SohaybAnd he should refuse to give it to you. I've not worked with RAC, so don't know what might require root access, but I can say that if I were an SA I wouldn't give it out either. If you need to do something that requires root access, you need to be working with your SA. And this is why it is important for DBA and SA to have a good working relationship.

Similar Messages

Solutions for access as ROOT for RAC DBA duties

Our Networking Team and Applications Team are going through some growing pains. We are trying to resolve what permissions should be given to a RAC DBA. Our RAC DBA is responsible for Oracle Clusterware, Oracle Automatic Storage
Management and Oracle RDBMS software. The OS, Server and Storage Subsystem are the responsibility of the System Administrator. We have the following Environment:
Production and Test (RAC)
Oracle Enterprise Linux 5 update 2
Oracle Clusterware 11.2.0.2 -- Grid Infrastructure
Oracle ASM 11.2.0.2
Oracle Database 11.2.0.2 EE
Development (Single Instance)
Oracle Enterprise Linux 5 update 2
Oracle ASM 11.2.0.2 -- Grid Infrastructure
Oracle Database 11.2.0.2 EE
As the RAC DBA, I have identified the following areas that require ROOT for RAC and Single Instance DB's; however, I understand there may be more:
diagcollection.pl
- diagnostic tool for Oracle Clusterware and may be requested by Oracle Support
ocrconfig
- to repair ocr configuration issue (add, replace and remove requires root)
srvctl modify
- required root to change ip address
tar
- TAR Grid Infrastructure Directory structure preserving files with ROOT ownership
cluvfy
- cluvfy fix it scripts need to run as ROOT
- some cluvfy commands under 11gr1 would only run properly for -post cfs check as ROOT in our last installation
ASM Libraries
- ROOT required to install and configure ASM libraries
fdisk - l
- this is used to see disks attached which is relevant when ASM disks are not mounted
/etc/sysconfig/oracleasm
- oracleasm loading configuration file
/usr/sbin/oracleasm
- to make disks available to ASMLIB (scandisks etc.)
/usr/sbin/asmtool
- asm config tool due to bug
asm cluster file system
- some commands require ROOT (mounting etc.)
- acfsutil
/var/log/messages
- loading errors ohas and oracleasm would be logged here
cvuqdisk
- needs to be loaded for new install
root.sh
- script needed to run at install, upgrades and patching
oraInstRoot.sh
- script needed to run at install
rootupgrade.sh
- upgrade script
roothas.pl
- upgrade script
ocrcheck
- check for ocr corruption
- corrupt check portion requires ROOT
- oracle local registry
Grid Infrstructure
- .runInstaller from Grid Infrastructure
- includes upgrades
asm configuration assistant (asmca)
- configuration of asm diskgroups
- vol mgr for asm disks
ocrconfig
- ocr configuration tool
- ocr import
- ocr export
- oracle local registry
ocrdump
- used to check ocr backup file
- oracle local registry
opatch
- patching grid control requires ROOT
crsctl
- Startup and Shutdown Oracle Clusterware, Oracle ASM and Database/Instance
- restore voting disk
- restore ocr
- set log for dynamic debugging
- check install periodically
srvctl
- modify nodeapps (ex. ip address change)
- add filesystem (acfs)
What solutions have people found so that RAC DBA can perform responsibilites yet not have ROOT password?

In all the environments I've worked in, I either had direct su access with knowledge of the root password or used sudo. I really can't imagine an environment that would require something other than either of those two options.
In places with stricter auditing requirements we used sudo in conjunction with the sudosh shell wrapper to log all activities to syslog, but this was used by everyone and not just the DBA
Is SUDO the only solutuion? Every command need to be entered into SUDO config files that necessitates ROOT access.
As I demonstrated in the other thread, giving the oracle user sudo access to files that are writable by the oracle user (eg. root.sh) gives them the ability to access to a root shell. It is good to implement a "minimum privileges necessary" policy in your organization but it has to be within reason. The minimum privilege necessary for running and maintaining CRS is root.
Edited by: AllYourDataBase on Apr 18, 2011 1:44 PM

Tasks that require ROOT for RAC DBA

Our Networking Team and Applications Team are going through some growing pains. We are trying to resolve what permissions should be given to a RAC DBA. Our RAC DBA is responsible for Oracle Clusterware, Oracle Automatic Storage
Management and Oracle RDBMS software. The OS, Server and Storage Subsystem are the responsibility of the System Administrator. We have the following Environment:
Production and Test (RAC)
Oracle Enterprise Linux 5 update 2
Oracle Clusterware 11.2.0.2 -- Grid Infrastructure
Oracle ASM 11.2.0.2
Oracle Database 11.2.0.2 EE
Development (Single Instance)
Oracle Enterprise Linux 5 update 2
Oracle ASM 11.2.0.2 -- Grid Infrastructure
Oracle Database 11.2.0.2 EE
As the RAC DBA, I have identified the following areas that require ROOT for RAC and Single Instance DB's; however, I understand there may be more:
diagcollection.pl
- diagnostic tool for Oracle Clusterware and may be requested by Oracle Support
ocrconfig
- to repair ocr configuration issue (add, replace and remove requires root)
srvctl modify
- required root to change ip address
tar
- TAR Grid Infrastructure Directory structure preserving files with ROOT ownership
cluvfy
- cluvfy fix it scripts need to run as ROOT
- some cluvfy commands under 11gr1 would only run properly for -post cfs check as ROOT in our last installation
ASM Libraries
- ROOT required to install and configure ASM libraries
fdisk - l
- this is used to see disks attached which is relevant when ASM disks are not mounted
/etc/sysconfig/oracleasm
- oracleasm loading configuration file
/usr/sbin/oracleasm
- to make disks available to ASMLIB (scandisks etc.)
/usr/sbin/asmtool
- asm config tool due to bug
asm cluster file system
- some commands require ROOT (mounting etc.)
- acfsutil
/var/log/messages
- loading errors ohas and oracleasm would be logged here
cvuqdisk
- needs to be loaded for new install
root.sh
- script needed to run at install, upgrades and patching
oraInstRoot.sh
- script needed to run at install
rootupgrade.sh
- upgrade script
roothas.pl
- upgrade script
ocrcheck
- check for ocr corruption
- corrupt check portion requires ROOT
- oracle local registry
Grid Infrstructure
- .runInstaller from Grid Infrastructure
- includes upgrades
asm configuration assistant (asmca)
- configuration of asm diskgroups
- vol mgr for asm disks
ocrconfig
- ocr configuration tool
- ocr import
- ocr export
- oracle local registry
ocrdump
- used to check ocr backup file
- oracle local registry
opatch
- patching grid control requires ROOT
crsctl
- Startup and Shutdown Oracle Clusterware, Oracle ASM and Database/Instance
- restore voting disk
- restore ocr
- set log for dynamic debugging
- check install periodically
srvctl
- modify nodeapps (ex. ip address change)
- add filesystem (acfs)
What other items would a RAC DBA need to have ROOT access for?

I'd like to say at the outset that this is a scenario and I am NOT in anyway choosing who does what. A simple -- not so simple -- discussion of roles and responsibilities and associated privileges. If you say that the System Administrator is managing the Grid Infrastructure then this would include all Clusterware and Storage Management (ASM) activities. The System Administrator would manage the OCR and Voting Disks, backups, integrity checks etc. The DBA would then only be responsible for adding the storage within the database itself like assigning tablespaces that reference ASM Disk Groups. This doesn't mean that the DBA can't see the ASM information in the database. The major challenge seems to give your DBA access to the OS, networking and storage tools to preliminarily investigate what they believe to be a OS, networking or storage issue. Without this crossover, your System Administrator may be doing work that is unnecessary. A DBA should have clear understandings of what performance the storage system, cpu, memory and networking should be providing and access to the tools that allow them to understand what side of the fence an issue resides.
There seem to be choices for an organization.
1) Is there a position called RAC DBA or is the RAC portion managed by the System Administrator.
2) If a RAC DBA exists then what should the System Administrator be responsible for
3) What access is need for an existing RAC DBA?
4) How will access privileges be given to the RAC DBA?
5) other considerations regarding security?
I agree that there needs to be crossover regarding handling workload and issues. The agreements on roles and responsibilities shouldn't stop the crossover but they should help in understanding who is ultimately responsible for certain areas of the system and application.
If this isn't happening at organizations then how is it handled? or not handled?

Disable SSH root login in RAC system

Hi Alll,
We have a oracle 11.2.7 RAC in Linux. As statement, SA will disable ssh root log and Nagios will monitor each nodes in RAC system.
As I know, Nagios only apply DH key for SSH. But Oracle RAC apply two type of SSH key for ssh_equivelancy in Oracle CRS.
Dees any experts have experience for oracle RAC and database when disable root SSH log in Linux system?
Thanks very much!
JIn

Security is not based on the number of keys one needs - but on the quality of the locks.Partially agree. But just like in real world one lock is not enough even superb. Why cars have imobilisers, defendlocks etc.? Why there is fence in front of some shop's door? It's very common to have two locks on front door. It's much harder (at least it takes much time) to break two locks than break just one. And the time matters. Back to IT security. Disabled root account is one of best practices and is reasonable because you can't 100% assure that your administrator is using strong password everytime. He might just forgot to change password after installation. He might set weak password just for "temporary" reason. You can of course force the password complexity but of course one you have the system installed.
So can passwords. Deep packet inspection can occur unknowingly. Perhaps we still talking about SSH, don't we?
The user may be targeted using social engineering, instead of targeting the actual computer system.It's much harder to get two passwords than just one even by using social engineering.
The question is whether such a server is exposed to an unsecured or public network. And one would manage the risks differently on such a server than one for example in a private network, protected by a reverse proxy in the DMZ, that in turn provides access from a public network.OK, so we've got another locks here ;-)
So if that user is compromised, so can root as that user can gain root access. I do not see this as better security. It is merely obfuscating security.Which user acccount? Do you know name of that account? Because I know the name of your's. ;-) So you need to find correct account name, get password for that account and also get the password for root account whilst I need to get password for root account only.
Yes, partially agree with "obfuscation security" term. But in fact this is not for first time when obfuscation is used in security and neither for last time.
But you can't consider "PermitRootLogin no" and "wheel" group as an obfuscation.
Using encryption keys (public & private) is one answer to having to share and keep secrets. No, this is also not 100% safe, but I prefer it over having to know, remember and on occasion, share secrets (passwords).How well is your local machine secured? Are you using strong password? Do have all accounts strong password on your local machine? Is your local machine up to date for known sec. bugs (I don't mean zero days)? Is your local machine in separated VLAN or anybody from LAN can access your machine? Because if there are at least two "No" answers then how much time it will take for some skilled part-time worker (in your company) to break into your computer, steal the keys or even worse use your local machine to access the server?
Don't get me wrong. I am not against encryption keys. Of course I am using it but in combination with other security restrictions which come from "best practices". And to disable direct root access is one of those practices. Even NSA (and other security institutions) suggest to do that (see page #37): www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf Also security auditors check for disabled direct access to privileged accounts.
I understand this as good enough proof that disabling of direct access to privileged accounts rises security.
Another good reason is right here:
Install
In other words, if any user has possibility to login as root, he uses "root" as default account which is another well known bad practice.

Encountered ora-29701 during Sun Cluster for Oracle RAC 9.2.0.7 startup (UR

Hi all,
Need some help from all out there
In our Sun Cluster 3.1 Data Service for Oracle RAC 9.2.0.7 (Solaris 9) configuration, my team had encountered
ora-29701 *Unable to connect to Cluster Manager*
during the startup of the Oracle RAC database instances on the Oracle RAC Server resources.
We tried the attached workaround by Oracle. This workaround works well for the 1^st time but it doesnt work anymore when the server is rebooted.
Kindly help me to check whether anyone encounter the same problem as the above and able to resolve. Thanks.
Bug No. 4262155
Filed 25-MAR-2005 Updated 11-APR-2005
Product Oracle Server - Enterprise Edition Product Version 9.2.0.6.0
Platform Linux x86
Platform Version 2.4.21-9.0.1
Database Version 9.2.0.6.0
Affects Platforms Port-Specific
Severity Severe Loss of Service
Status Not a Bug. To Filer
Base Bug N/A
Fixed in Product Version No Data
Problem statement:
ORA-29701 DURING DATABASE CREATION AFTER APPLYING 9.2.0.6 PATCHSET
*** 03/25/05 07:32 am ***
TAR:
PROBLEM:
Customer applied 9.2.0.6 patchset over 9.2.0.4 patchset.
While creating the database, customer receives following error:
ORA-29701: unable to connect to Cluster Manager
However, if customer goes from 9.2.0.4 -> 9.2.0.5 -> 9.2.0.6, the problem does not occur.
DIAGNOSTIC ANALYSIS:
It seems that the problem is with libskgxn9.so shared library.
For 9.2.0.4 -> 9.2.0.5 -> 9.2.0.6, the install log shows the following:
installActions2005-03-22_03-44-42PM.log:,
[libskgxn9.so->%ORACLE_HOME%/lib/libskgxn9.so 7933 plats=1=>[46]langs=1=> en,fr,ar,bn,pt_BR,bg,fr_CA,ca,hr,cs,da,nl,ar_EG,en_GB,et,fi,de,el,iw,hu,is,in, it,ja,ko,es,lv,lt,ms,es_MX,no,pl,pt,ro,ru,zh_CN,sk,sl,es_ES,sv,th,zh_TW, tr,uk,vi]]
installActions2005-03-22_04-13-03PM.log:, [libcmdll.so ->%ORACLE_HOME%/lib/libskgxn9.so 64274 plats=1=>[46] langs=-554696704=>[en]]
For 9.2.0.4 -> 9.2.0.6, install log shows:
installActions2005-03-22_04-13-03PM.log:, [libcmdll.so ->%ORACLE_HOME%/lib/libskgxn9.so 64274 plats=1=>[46] langs=-554696704=>[en]] does not exist.
This means that while patching from 9.2.0.4 -> 9.2.0.5, Installer copies the libcmdll.so library into libskgxn9.so, while patching from 9.2.0.4 -> 9.2.0.6 does not.
ORACM is located in /app/oracle/ORACM which is different than ORACLE_HOME in customer's environment.
WORKAROUND:
Customer is using the following workaround:
cd $ORACLE_HOME/rdbms/lib make -f ins_rdbms.mk rac_on ioracle ipc_udp
RELATED BUGS:
Bug 4169291

Check if following MOS note helps.
Series of ORA-7445 Errors After Applying 9.2.0.7.0 Patchset to 9.2.0.6.0 Database (Doc ID 373375.1)

ASM vs RAID for 11gR2 RAC Environment

Hi There!
We are planning to install 11GR2 RAC with two nodes Cluster on LINUX in Our Environment.
Operating System: OEL 5.4
In our hardware we got two dell Servers with 16GB RAM on each plus On SAN side we have only 8 disk (173GB) left for RAC Cluster Setup. I am going to create to database (LIVE/UAT) on This Cluster Setup. Currently Our Production DB size is 6GB and I assume for coming 5 year it will not go beyond 100GB And I keep UAT size 15GB fix with No changes.So how you get the best ASM performance by using my all Resources.
My question:
1)     Which is best solution for ASM and RAID in our storage Environment?
2)     How many Disk group I Create for Both Databases (UAT/LIVE)?
3)     How many disks should I allocate in Each Disk Group with which RAID Option or if any suggesting for LUN, How do I create LUNS across the Disk which I got?
4)     I know oracle recommended Two DISK Group DATA&FRA is there any other suggestion for CRS, REDO, and TEMP FILE?
Thanks for your Assintance.
Hemesh.

My first question was : Which RAID Option(0,1,5,0+1) I choose with ASM ?Well, it doesnt matter for ASM. At least in your configuration with 8 disks.
RAID0is not an option - forget about it. RAID1 (or combined with more than two disks and an overlayed RAID0 which makes an RAID 1+0) might be an option for write-intensive databases. RAID5 is more for read-intensive due to the RAID5-write-hole but offers "more" capacity at the cost of slower write speed.
I recommended to stick with RAID1 (thus mirroring two disks) and exporting them to ASM rather than creating one big RAID1+0 over all of your disks and exporting the storage as one big chuck to ASM for manageability. If you want to add storage lateron your perfect in line with Oracles recommendations to have equal size LUNs in ASM with two mirrored disks. If you create on big RAID 1+0 and lateron add two disks you have a LUN of 600 GB size and one of 170 GB size...thats a big mismatch.
But If i create TWO disk group then, is there good practice to offer them to both (UAT/LIVE) databases.?Normally there is a separation between UAT and P on storage and on server level. In your case it might be "ok" to place everything in the same disk group. This mainly depends on which database puts the most load on the disk subsystem.
Ronny Egner
My Blog: http://blog.ronnyegner-consulting.de

Veritas required for Oracle RAC on Sun Cluster v3?

Hi,
We are planning a 2 node Oracle 9i RAC cluster on Sun Cluster 3.
Can you please explain these 2 questions?
1)
If we have a hardware disk array RAID controller with LUNs etc, then why do we need to have Veritas Volume Manager (VxVM) if all the LUNS are configured at a hardware level?
2)
Do we need to have VxFS? All our Oracle database files will be on raw partitions.
Thanks,
Steve

> We are planning a 2 node Oracle 9i RAC cluster on Sun
Cluster 3.Good. This is a popular configuration.
Can you please explain these 2 questions?
1)
If we have a hardware disk array RAID controller with
LUNs etc, then why do we need to have Veritas Volume
Manager (VxVM) if all the LUNS are configured at a
hardware level?VxVM is not required to run RAC. VxVM has an option (separately
licensable) which is specifically designed for OPS/RAC. But if
you have a highly reliable, multi-pathed, hardware RAID platform,
you are not required to have VxVM.
2)
Do we need to have VxFS? All our Oracle database
files will be on raw partitions.No.
IMHO, simplify is a good philosophy. Adding more software
and layers into a highly available design will tend to reduce
the availability. So, if you are going for maximum availabiliity,
you will want to avoid over-complicating the design. KISS.
In the case of RAC, or Oracle in general, many people do use
raw and Oracle has the ability to manage data in raw devices
pretty well. Oracle 10g further improves along these lines.
A tenet in the design of highly available systems is to keep
the data management as close to the application as possible.
Oracle, and especially 10g, are following this tenet. The only
danger here is that they could try to get too clever, and end up
following policies which are suboptimal as the underlying
technologies change. But even in this case, the policy is
coming from the application rather than the supporting platform.
-- richard

Enterprise Manager - RAC

Hello All,
I am working on Oracle RAC 11.2.0.1.0, My Oracle Enterprise Manager is working on : https://rac1.localdomain:1158
My question what if rac1 server is down how can i use my oem?
Now i have only server RAC2 working i started oem: emctl start dbconsole, it provides me a link : https://rac1.localdomain:1158 but I am not able to access oem since RAC1 is down.
How can I run oem from RAC2?
Regards,

Hi,
NB wrote:
I am working on Oracle RAC 11.2.0.1.0, My Oracle Enterprise Manager is working on : https://rac1.localdomain:1158
My question what if rac1 server is down how can i use my oem?
Now i have only server RAC2 working i started oem: emctl start dbconsole, it provides me a link : https://rac1.localdomain:1158 but I am not able to access oem since RAC1 is down.
How can I run oem from RAC2?When EMCA (started on local node) configure Database Control for Oracle RAC, you configure the Database Control for each instance in the cluster. However, by default the Database Control Console will only start on the local node. On every other node of the cluster, only the Enterprise Manager agent will start. This is because the Database Control Console opens several connections to the database. If an instance of the console is running on every host in the cluster, then you may easily exceed the maximum number of permitted open connections.
To remedy this situation, the Database Control is started only on the local node. On every other node, the commands emctl start dbconsole and emctl stop dbconsole only start and stop the agent. Each of the remote agents will upload their respective data to the console running on the local node, from which you can monitor and manage all the targets in the cluster.
To modify the existing configuration in a release 11g and later database, use the following command where nodename is the public name of the node and node_list is a comma-delimited list of nodes where the database is configured:
$ emca -reconfig dbcontrol –cluster –EM_NODE nodename -EM_NODE_LIST node_listAlso you can configure more than one Database Control Console in a RAC Database
In this scenario, there are two Database Control consoles running, one on node1 and the other on node5. From either of these consoles, you can manage and monitor all targets in the cluster.
You can use this command to start the console on multiple nodes. For instance, on an 8-node cluster with nodes node1, node2, node3, node4, node5, node6, node7, and node8, you
can run the following commands in succession:
$ emca -reconfig dbcontrol –cluster –EM_NODE node1 -EM_NODE_LIST node2,node3,node4
$ emca -reconfig dbcontrol –cluster –EM_NODE node5 -EM_NODE_LIST node6,node7,node8For information about the current cluster configuration, run the following command:
$ emca -displayConfig dbcontrol –clusterHope this helps,
Levi Pereira

Stored Procedure killed the root blocker in rac 10g

Hi every one,
I need the procedure that killed root blocker in RAC environmental 10g,
I found the stored procedure for 11g which simple but 10g required some expertise
because I want to just exec [procedure] it will kill root blocker either locally and remote node
thanks a lot
Edited by: user11688837 on Jan 30, 2013 10:08 AM

I Checked your link as for regarding 11g RAC its find. But for the regarding 10g it will never work on
remote node you have to used only and only dbms_job.sumbit to kill remote node.
your kind information please rectify the commend that it will work on local node not on remote node in 10g
'ALTER SYSTEM KILL SESSION '||a.sid||','||a.serial#||''' IMMEDIATE;' as "10g Command to kill session",
thankyou
Edited by: user11688837 on Jan 30, 2013 10:06 AM
Edited by: user11688837 on Jan 30, 2013 10:26 PM

Tutorial for managing bookmarks in iPhone environment?

I hate asking newbie questions but here goes. Searched for this but found threads regarding desktop environment.
When I open Safari on my iPhone 3CS, I see bookmarks imported from my pc when I synched. Don't need all those so deleted most. Here's the problem: if I type in a new address in Safari addres field at top, and go to that page, then do Add Bookmark, it doesn't show up the next time I open Safari and look at the bookmarks. If I start to re-type it in the address field, the full link and title appear below, so I know it's storing it somewhere.
Can someone just point me toward an online tutorial for manageing bookmarks within the iPhone environment not the desktop?
Thanks!

it's one of the dangers to BYOD.....The best way to manage this is education(unless you are ready for MDM).
Granted that can be a bigger pain in the buttocks than working around it.
What I tell people(having had this happen to me a couple of times) is when it's time to change your password
1.) Make sure you have all your devices with you
2.) disable the wireless on everything
3.) change password via your laptop
4.) enable one device, and go change the password there < rinse repeat for subsequent devices.
Now, when the company I was working for moved to a MDM, the issue went away on my phone and tablet, as the mail settings were controlled by the MDM, so when i changed my password, it pushed to my other devices.
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered

Open module for managing property file and environment variables

Looking for an open module for managing property files and environment variables (like CLASSPATH) set in a shell script. For handeling properties (preserving comments, supporting includes, appending new entries, and more) I have looked at SuperProperties from openadaptor but find certain functionality lacking. As for interfacing with common shell scripts/files containing setting for CLASSPATH, JAVA_HOME, other system/application variables another type of object editor is needed. Maybe JFIG?
Any ideas are greatly welcomed.

You seem wright, you hit a brick wall here with Air to find the location
of the command console on windows...
So in fact I never build an exe tool, but this little problem was a nice
case to test it and I tried it.:
I downloaded monodevelop
-GTK# for .NET 2.12.10*
-MonoDevelop 2.4.2*
from http://monodevelop.com/Download
created a console project and had an exe in 5 minutes !
You can download the findconsole tool and the projectfiles here:
http://greencollective.nl/temp/dump/findconsole_monoproject.zip
findconsole.exe will reveal the path/location of cmd.exe on a windows system.
Cheers,
Latcho

Multiple libraries, Pbook/Pmac, advice for management & updating please.

Hi Everyone,
I travel frequently, and am looking for suggestions to keep all my iPhoto libraries up to date. I currently have a g5, Powerbook, and Mini.
I just upgraded to iPhoto 6 and I have several thousand photos on my Dual g5. I just came back with 1000 more from my diving trip. The problem is, they are on my Powerbook, and taking up alot of space on the relatively small hard drive. I managed to work through the rough upgrade from 5 to 6, and now I need some more help...
1) What is your advice for managing multiple libraries of photos.
2) What is the best way to transfer the iphoto pics (and movies) to my desktop, which of course has the larger storage capacity, after travelling...
Thanks,

Jason:
There are several different approaches to what you want to do. Let me just throw out a couple that I'm familiar with.
To get the new photos from your PB to your G5 and maintain any keywords, and other organization effort you put into them, you'll need the paid version of iPhoto Library Manager. It will allow you to merge libraries or copy between libraries and maintain the metadata, etc. That's the only way currently available to move photos from one library to another and keep the roll, keywords, comments, etc. with those photos. You can connect the two Macs with one in the Target Mode, probably your PB, and then run iPLM to move the photos to the G5 library.
Now there is a way to have a library on your PB that reflects the one on your G5 but is only a fraction of the size. That's to have an alias based library on your PB that uses the Originals folder as its source of source files. (My 25,600 files, 27G, are represented by an iPhoto Library folder of only 1.75G). When the PB is not connected with the G5, say with a LAN, it will have limited capabilities which are in part: you'll only be able to view the thumbnail files, be able to add comments, create, delete or move albums around, add keywords (but with some hassle-but it can be done). You can't do anything that requires moving thumbnails around, work with books, slideshows or calendars. Once the two computers are networked together again the library will act as normal.
Now while on the road you can have a "normal" library to import new full sized files, keyword them, add comments, etc. and then transfer to the G5 library. Once in the G5 library they will be represented in a roll(s) and corresponding folder in the Originals folder. You then fire up the "alias" library, and import those new folders in the G5 Originals folder.
It may be a lot of work but it may be one way of doing it.
I've not done any of the "sharing" with iPhoto so don't know if that's another possible candidate for transferring.
P.S. FWIW I've created this workflow for converting from a conventional library to an alias based one.

Best practice for managing Apple ID's in an enterprise enviroment.

We have just started to incorporate iPads into our Corporate enviroment. We have had them in use for the last couple of months and to be fair they have worked well but i guess now is the time to try and workout some of the issues we are experiencing with them, the re-occuring issues that just seem to keep haunting us.
As part of the deployment we gave those with current apple id's the option of using their own, particularly those Execs who already had iPads and iPhones. We are currently using active sync with our exchange server for access to email.
How do other people manage Apple ID's?
How do other people handle the password change scenario.. we have had users on holiday where their passwords have expired and they have been unable to access the email...also the issue of you reset your password on the network but you still need to re-authenticate it on the iPad...does anyone have a decent app that can get us round this?
what issues have others found?

Hi ToRnUK,
The information below will explain some options for managing multiple iPads in your business.
Apple - Support - iPad - Enterprise
http://www.apple.com/support/ipad/enterprise/
Apple - iPad in Business - IT Center
http://www.apple.com/ipad/business/it-center/
Cheers,
Judy

Error in rendering root for dialog

Hello experts,
After netweaver 2004 s - SPS 15, we have a
issue with our planning application (BI-
integrated planning) / variables. For all our
planningsfunctions with a VARV command in it, the
java.lang.NullPointerException occurs.
SAP Note 1134947 concerns a similar problem, but that
note is already in SPS 15. Before sps 15 we have'n got a any problems with the planningsfunctions.
The error occurs in the planningsfunction with VARV in it. For example.
DATA ZFTE_NEW TYPE F.
DATA ZMAAND TYPE 0CALMONTH.
DATA ZMUT TYPE ZMUTATIE.
DATA ZDATUM TYPE 0CALMONTH.
DATA KEYFIG TYPE KEYFIGURE_NAME.
ZFTE_NEW = VARV (ZVARFTE).
ZDATUM = VARV (ZCALMNTHFR).
etc...
Result is the java error and not the variable sceen
If we change / hard coded the variables
ZFTE_NEW = 1.
ZDATUM = '200801'.
The function results then with no errors, but this is not an option.
After executing the planningsfunction in the wad the error in rendering root for dialog DLG_VARIABLE occurs.
Anyone has this problem as well?
With regards,
Dennis
java.lang.NullPointerException
at
com.sap.ip.bi.webapplications.ui.dialogs.variab
lescreen.control.AcVariableScreenControl.getCur
rentVariantName
(AcVariableScreenControl.java:641)
at
com.sap.ip.bi.webapplications.ui.dialogs.variab
lescreen.control.AcVariableScreenControl.buildU
rTree(AcVariableScreenControl.java:206)
at
com.sap.ip.bi.webapplications.ui.framework.base
.impl.CompositeBuildUrTreeTrigger.process
(CompositeBuildUrTreeTrigger.java:33)
at
com.sap.ip.bi.webapplications.ui.unifiedrenderi
ng.controls.MatrixLayoutCell.iterateOverChildre
n(MatrixLayoutCell.java:82)
at
com.sap.ip.bi.webapplications.ui.framework.base
.impl.CompositeBuildUrTreeTrigger.process
(CompositeBuildUrTreeTrigger.java:36)
Long description of the error:
com.sap.ip.bi.webapplications.runtime.DialogExc
eption: Error in rendering root for
dialog "DLG_VARIABLE"
at
com.sap.ip.bi.webapplications.ui.dialogs.framew
ork.UiDialog.render(UiDialog.java:270)
at
com.sap.ip.bi.webapplications.ui.dialogs.framew
ork.rendering.DialogRenderingRootNode.processRe
ndering(DialogRenderingRootNode.java:50)

Dear D.C.M,
please make shure that the variables are set .e.g by displaying the variables values in a message or by debugging it.
ZFTE_NEW = VARV (ZVARFTE).
ZDATUM = VARV (ZCALMNTHFR).
break-point.
if zfte_new is initial.
message .. with zfte_new.
endif.
*if ZDATUM is initial.
message ... with ZDATUM.
*endif.
Regards
Matthias Nutt
SAP Consulting Switzerland

OIM 9.1.0.2 - Weblogic JDBC Multi Data Sources for Oracle RAC

Does OIM OIM 9.1.0.2 BP07 support Weblogic JDBC Multi Data Sources (Services>JDBC>Multi Data Sources) for Oracle RAC instead of inserting the "Oracle RAC JDBC URL" on JDBC Data Sources for xlDS and xlXADS (Services>JDBC>Data Sources> xlDS|xlXADS > Connection Poll> URL) ?
If yes, is there are any other modifications that need to be made on OIM, or just changing the data sources?

Yes, it's supported. You install against one instance directly of the Rac Server. Then you update the config.xml file and the jdbc resource in your weblogic server with the full rac address. It is documented for installation against RAC. http://docs.oracle.com/cd/E14049_01/doc.9101/e14047/database.htm#insertedID2
-Kevin

Root for managing RAC

Similar Messages

Maybe you are looking for