Security Risks in running App server as oracle (installer user)

I am being asked to modify the OraAS installation file permissions so that user "nobody" can start the HTTP_Server and the Web_Cache Server. The fear is that the server could be compromised and then access could be had through the user oracle privileges to files and directories.
Is anyone doing this kind of post-installation modification?

In the environment I have ...
Firewall => OraAS (WebCache+ HTTP_Server+ BI + Forms + OC4J)
=> Firewall => Database
I install everything as oracle on both the servers (OraAS + Database). WebCache is set to port 80 as the default (which to me is an invitation to monkey around - but I could be wrong on that)
So what kind of threat is there and is there a script to test it out?

Similar Messages

How to run report server in oracle 9i DS

hi..
can any 1 tell me how to run report server in oracle 9i DS
i've installed oracle 9i DS, but don't know how to run
report server.
actually i want to run a report from my form
on button press trigger.. some of the experts r tellin
that 1st u check whether report server is running or not..
so pls tell me how to install report server.
while installing oracle 9i DS, i've given Mail server
as mysmtp.com
Thanks
amit

hi ..
i've to go in this directory n run
rwserver -install repservername
where repserver name is my mailserver..
this will install reports server
Amit

How to run App server applications in Client systems

Hi all,
I m new to Oracle Devsuite 10g and App server. I configured the app server and i m able to run in my local machine (server) but i m not able to run in some others machines. even though i have given same path.
its displaying page cannot be dispalyed
My path is http://vagee/forms/frmservlet?config=TEST_APPS
please tell me how to run in client systems?
Regards,
Kalyan

hi
thanks for your reply. i found the problem. In server machine Firewall was in On Mode. So that it was not allow to access. then i have switched off the firewall. now its running well in client systems also.
thank you.

Security Exception deploying to App Server with Creator

I'm trying to deploy a Spring/Hibernate application to the default app server with creator. I'm getting an exception which seems to be related to security settings on the server and the cglib library that Hibernate requires. Below is the full stack trace. Does anyone know what I can do to solve this problem? I had a brief look at the server.policy file but don't know what to modify or if I need to modify it at all.
When I deploy the .war to Tomcat, I do not receive this exception.
Thanks!
Mike
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'sessionFactory' defined in ServletContext resource [WEB-INF/applicationContext.xml]: Initialization of bean failed; nested exception is java.lang.ExceptionInInitializerError: null
java.lang.ExceptionInInitializerError
at net.sf.cglib.core.KeyFactory$Generator.generateClass(KeyFactory.java:167)
at net.sf.cglib.core.DefaultGeneratorStrategy.generate(DefaultGeneratorStrategy.java:25)
at net.sf.cglib.core.AbstractClassGenerator.create(AbstractClassGenerator.java:215)
at net.sf.cglib.core.KeyFactory$Generator.create(KeyFactory.java:145)
at net.sf.cglib.core.KeyFactory.create(KeyFactory.java:117)
at net.sf.cglib.core.KeyFactory.create(KeyFactory.java:108)
at net.sf.cglib.core.KeyFactory.create(KeyFactory.java:104)
at net.sf.hibernate.impl.SessionFactoryImpl.<clinit>(SessionFactoryImpl.java:237)
at net.sf.hibernate.cfg.Configuration.buildSessionFactory(Configuration.java:805)
at org.springframework.orm.hibernate.LocalSessionFactoryBean.newSessionFactory(LocalSessionFactoryBean.java:535)
at org.springframework.orm.hibernate.LocalSessionFactoryBean.afterPropertiesSet(LocalSessionFactoryBean.java:470)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.invokeInitMethods(AbstractAutowireCapableBeanFactory.java:1065)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:343)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:260)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:221)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:145)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:276)
at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:317)
at org.springframework.web.context.support.AbstractRefreshableWebApplicationContext.refresh(AbstractRefreshableWebApplicationContext.java:131)
at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:224)
at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:150)
at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:48)
at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:4010)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:4522)
at com.sun.enterprise.web.WebModule.start(WebModule.java:241)
at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:827)
at org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:125)
at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:147)
at java.security.AccessController.doPrivileged(Native Method)
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:809)
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:632)
at com.sun.enterprise.web.WebContainer.loadWebModule(WebContainer.java:1279)
at com.sun.enterprise.web.WebContainer.loadWebModule(WebContainer.java:1006)
at com.sun.enterprise.server.WebModuleDeployEventListener.moduleDeployed(WebModuleDeployEventListener.java:160)
at com.sun.enterprise.server.WebModuleDeployEventListener.moduleDeployed(WebModuleDeployEventListener.java:238)
at com.sun.enterprise.admin.event.AdminEventMulticaster.invokeModuleDeployEventListener(AdminEventMulticaster.java:918)
at com.sun.enterprise.admin.event.AdminEventMulticaster.handleModuleDeployEvent(AdminEventMulticaster.java:905)
at com.sun.enterprise.admin.event.AdminEventMulticaster.processEvent(AdminEventMulticaster.java:427)
at com.sun.enterprise.admin.event.AdminEventMulticaster.multicastEvent(AdminEventMulticaster.java:139)
at com.sun.enterprise.admin.server.core.DeploymentNotificationHelper.multicastEvent(DeploymentNotificationHelper.java:288)
at com.sun.enterprise.deployment.phasing.DeploymentServiceUtils.multicastEvent(DeploymentServiceUtils.java:155)
at com.sun.enterprise.deployment.phasing.ServerDeploymentTarget.sendStartEvent(ServerDeploymentTarget.java:258)
at com.sun.enterprise.deployment.phasing.StartPhase.runPhase(StartPhase.java:87)
at com.sun.enterprise.deployment.phasing.DeploymentPhase.executePhase(DeploymentPhase.java:71)
at com.sun.enterprise.deployment.phasing.PEDeploymentService.executePhases(PEDeploymentService.java:633)
at com.sun.enterprise.deployment.phasing.PEDeploymentService.start(PEDeploymentService.java:361)
at com.sun.enterprise.deployment.phasing.PEDeploymentService.start(PEDeploymentService.java:396)
at com.sun.enterprise.admin.mbeans.ApplicationsConfigMBean.start(ApplicationsConfigMBean.java:702)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at com.sun.enterprise.admin.MBeanHelper.invokeOperationInBean(MBeanHelper.java:302)
at com.sun.enterprise.admin.config.BaseConfigMBean.invoke(BaseConfigMBean.java:357)
at com.sun.jmx.mbeanserver.DynamicMetaDataImpl.invoke(DynamicMetaDataImpl.java:213)
at com.sun.jmx.mbeanserver.MetaDataImpl.invoke(MetaDataImpl.java:220)
at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:815)
at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(JmxMBeanServer.java:784)
at sun.reflect.GeneratedMethodAccessor24.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at com.sun.enterprise.admin.util.proxy.ProxyClass.invoke(ProxyClass.java:54)
at $Proxy1.invoke(Unknown Source)
at com.sun.enterprise.admin.server.core.jmx.SunoneInterceptor.invoke(SunoneInterceptor.java:272)
at com.sun.enterprise.admin.jmx.remote.server.callers.InvokeCaller.call(InvokeCaller.java:38)
at com.sun.enterprise.admin.jmx.remote.server.MBeanServerRequestHandler.handle(MBeanServerRequestHandler.java:92)
at com.sun.enterprise.admin.jmx.remote.server.servlet.RemoteJmxConnectorServlet.processRequest(RemoteJmxConnectorServlet.java:69)
at com.sun.enterprise.admin.jmx.remote.server.servlet.RemoteJmxConnectorServlet.doPost(RemoteJmxConnectorServlet.java:94)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:767)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:860)
at sun.reflect.GeneratedMethodAccessor71.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:249)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:282)
at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:165)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:257)
at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:55)
at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:161)
at java.security.AccessController.doPrivileged(Native Method)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:263)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:551)
at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:225)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:173)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:551)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:161)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:551)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:132)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:551)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:933)
at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:185)
at com.sun.enterprise.web.connector.grizzly.ProcessorTask.process(ProcessorTask.java:653)
at com.sun.enterprise.web.connector.grizzly.ProcessorTask.process(ProcessorTask.java:534)
at com.sun.enterprise.web.connector.grizzly.ProcessorTask.doTask(ProcessorTask.java:403)
at com.sun.enterprise.web.connector.grizzly.WorkerThread.run(WorkerThread.java:55)
Caused by: java.security.AccessControlException: access denied (java.lang.RuntimePermission getProtectionDomain)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
at java.security.AccessController.checkPermission(AccessController.java:427)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
at java.lang.Class.getProtectionDomain(Class.java:2074)
at net.sf.cglib.core.ReflectUtils$1.run(ReflectUtils.java:42)
at java.security.AccessController.doPrivileged(Native Method)
at net.sf.cglib.core.ReflectUtils.<clinit>(ReflectUtils.java:40)
... 98 more

Try this:
//Required permissions for Hibernate
grant codeBase "file:/path-to-web-project/Creator-project-name/build/web/-"{
permission java.util.PropertyPermission "*", "read,write";
permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
permission java.lang.RuntimePermission "accessDeclaredMembers";
permission java.lang.RuntimePermission "getProtectionDomain";
};Replace path-to-web-project with the path to your project's folder. For example,
file:/C:/Documents and Settings/localuser/My Documents/Creator/MyCreatorProject/build/web/-

Win: Reduce Security Risks of running as Administrator

I didn't post this as "OT" since PE requires administrative rights. (At least PE3 on my machine.)
If, for convenience, you run most of the time with administrator's rights as I do you might want a relatively easy and free way to eliminate the very real risks of accessing the web and email giving potential new malware access to those same rights.
http://www.pcworld.com/downloads/file/fid,64213-page,1-c,downloads/description.html#
I strongly recommend that you review and download from the link in the article highlighted in red ("Microsoft Security Developer Center page") rather than from the PC World direct link. If you follow the developer's instructions there it goes very smoothly.
I've been running IE and Outlook Express this way for about a week with no problems. To be reasonably sure that IE and OE can't easily get launched directly by other users I've removed them from the start menu.
Bob

In the environment I have ...
Firewall => OraAS (WebCache+ HTTP_Server+ BI + Forms + OC4J)
=> Firewall => Database
I install everything as oracle on both the servers (OraAS + Database). WebCache is set to port 80 as the default (which to me is an invitation to monkey around - but I could be wrong on that)
So what kind of threat is there and is there a script to test it out?

Error while starting App server for Oracle B2B

Hi..
While starting application server, we are getting the below error hi http server log
Start process
/b2b/web_cache/Apache/Apache/bin/apachectl start: execing httpd
/b2b/web_cache/Apache/Apache/bin/httpd: error while loading shared libraries: libdb.so.2: cannot open shared object file: No such file
or directory
Because of this even HTTP_Server is not comming up.
Does anyone have any idea on this?
Please help.

Hi Cema,
Make sure that httpd.conf file (located at /ORACLE_HOME/Apache/Apache/conf ) has not changed.
Is your AS running on Linux? ".so" is used in case of linux only and for windows extension should be ".dll"
Please use the same if your http server is running on windows. HTTP Server documetation may have more details related to this.
Regards,
Anuj

ECC 5 - WIN app server and ORACLE db on UNIX

Hello,
The Israeli Phoenix Assurance company is about to implement SAP (FI/MM/CO-PA/BW/SRM). We have decided to run the application on windows machines and consider to deploy the DB on our main DB machine which runs ORACLE on AIX.
We have heard from SAP that this combination is supported but it was a "weak answer".
Does anyone have specific experience or any knowledge about this one?
Many thanks,
David Elovits
SAP implementation Project MGR

Hi Saud,
Environment variable means that dynamic named values. These values are affecting operating system tasks. Find the information in the document, below;
http://en.m.wikipedia.org/wiki/Environment_variable
You can use "export" command by most of the linux variants, in order to set environment variables. You can make a search over the Internet to find more information.
You can set these parameters on the operating system console or set them in the user profile files by using vi editor. Home directory for each user has a file named ".profile" which contains environment variables belong to the user and can be edited by vi editor, for example on ksh shell. Please note that the profile filename changes by type of the shell.
Best regards,
Orkun Gedik

Error while running setup.exe for oracle installation on windows 2003

Hi,
I am trying to install oracle 9.2.0.1 on my windows 2003 machine and when i click on setup.exe nothing happens. when i tried to run it thru command prompt again nothing happens when i check in computer management => event views it throws following error.
The application, C:\DOCUME~1\barb\Local Settings\Temp\1\OraInstall2006-08-11_05-19-46AM\jre\bin\javaw.exe, generated an application error The error occurred on 08/11/2006 @ 05:19:56.356 The exception generated was c0000005 at address 6D4CF9A0 (jvm!JVM_TraceMethodCalls)
can anybody suggest me what could be the problem or i will have to install jvm first and then try installing oracle?
thanks
Chandan

did you check the installation guide and Preinstallation Requirements?
http://download-west.oracle.com/docs/cd/B19306_01/install.102/b14316/reqs.htm#i1011417

Oracle 8i to 9i database with 9i App Server

Hai, I tried to install Oracle 9i Database and 9i App server but the installation ended with errors/exceptions. App Server seems to be running but unable to connect to Database. So, i deinstalled everything and successfully installed 8i database and 9i App server.
Can anyone help me out in the process of upgrading existing 8i Database & 9i App server to 9i Database & 9i App server.
Thanks much,
Raj

DBUA, manually, exp/imp, all these upgrade methods are describe into the Migration Guide...
Nicolas.

Configure security realm for external Access Manager in App server 8.1

Hi All,
I would like to protect my j2ee application using access manager running on an external host.
I would like to configure the security realm in Sun app Server 8.1 for the external Access Manager
external host & port of AM is:
http://svrd234d.dnn.com.au:58765
Please verify if these are the correct settings for the agentRealm configuration on Sun App server 8.1.
classname="com.sun.amagent.as.realm.AgentRealm"
property name="jaas-context" value="agentRealm"
property name="base-dn" value="ou=People,dc=dnn,dc=com,dc=au"
property name="hostURL " value="http://svrd234d.dnn.com.au:58765"

Did you download AS8.1 agent under http://www.sun.com/download/products.xml?id=4266924d?
If you can unjar am_as81_agent_2_1.jar after installing the J2EE agent, you will find AgentRealm.class under com.sun.amagent.as.realm.
Please also note that page 161 of J2EE agent guide shows how to disable AgentRealm to better fit your agent policy mode. Check it out http://docs-pdf.sun.com/816-6884-10/816-6884-10.pdf
Jerry

How to access SQL server in oracle running in aix unix?

Hi all,
I have oracle database running in IBM AIX OS, and I need to query data in
SQL SERVER 2000.
How to do that?
Is there free Sqlserver ODBC drivers for unix?
Thanks

Hi,
I prefer heterogenous services over ODBC for this!
I have my notes here, which may help.
http://www.dba-oracle.com/t_heterogeneous_database_connections_sql_server.htm
1. Install Oracle ODBC drivers on the server (your local Oracle database) that will access the remote SQL Server database using the database link.
2. Setup the ODBC connection on the local Oracle database using the Windows ODBC Data Source Administrator
3. Test the ODBC drivers to ensure that connectivity is made to the SQL Server database.
4. Ensure that your global_names parameter is set to False.
5. Configure the Oracle Heterogeneous services by creating an initodbc.ora file within the Oracle database.
7. Modify the Listener.ora file.
SID_NAME is the DSN for the remote database.
ORACLE_HOME is the actual Oracle home file path.
PROGRAM tells Oracle to use heterogeneous services.
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME=Cas30C) -- Enter the DSN on this line
(ORACLE_HOME = c:\oracle10gdb) -- Enter your Oracle home on this line
(PROGRAM = hsodbc) ) )
8. Modify the Tnsnames.ora file. This is the Oracle database installation accessed by the users to connect to the ODBC drivers
(DESCRIPTION=
(ADDRESS_LIST=
(Address=(PROTOCOL=TCP)
(HOST=
-- (Server x)
(PORT=1521))) -- Enter the port on which the server x Oracle installation
-- is listening
(CONNECT_DATA=(SID=Cas30c)) - Enter the DSN name
(HS=OK) -- Enter this value. It tells Oracle to use hetergeneous services
9. Reload the listener on local Oracle database
10. Create a database link on the local Oracle installation that accesses the heterogeneous connection, which, in turn, connect to SQL Server.
11. Run a SQL Server Select statement from the Oracle installation using the database link.
Hope this helps. . .
Don Burleson
Oracle Press author
Author of “Oracle Tuning: The Definitive Reference”
http://www.dba-oracle.com/bp/s_oracle_tuning_book.htm

Does moving SP code from DB to App Server help scale an application?

We have an application developed using Oracle 10g Forms / 10g DB? All our processing is done using SPs. So they all run in the DB server. Even our Inserts/updates/deletes to a table are handled by SPs.
The site with the maximum simultaneous users (i.e. concurrent users) is one with 100 concurrent users.
We have prospective customer whose requirement is 300 concurrent users. Our application won't be able to handle it since the DB server is a single processor server with limited memory.
One suggestion was move the SPs to the App Server by moving them to the Form. Since OAS has a PL engine they will run in the App Server and hence remove the workload of the DB.
I don't buy this. My point is, even if SPs are moved to the app. server still the SQLs will run in the DB server, right?
So what is the advantage?

christian, I just modified the original post thinking nobody will reply since it's very long. Thanks a lot for the reply. For others and myself also here is my original question.
I have a problem like this: Take this scenario. We have a TELCO app. It is an E-Business Web Application (i.e. Dynamic Web Site) developed using ASP.Net/C#. App. Server is IAS and DB is Oracle 10g. IAS and the DB reside in 2 servers. Both are single processor servers.
The maximum simultaneous user load is 500. i.e. 500 users can be working in the system at one time.
Now suppose 500 users login at the same time and perform 500 different operations (i.e. querying, inserts, updates, deletes). Now all 500 operations will go to the App Server. From there the C# code will perform everything using Oracle stored procedures (SP). I.e. we first make a connection to the DB, SP is invoked by passing parameters, it will perform the operation in the DB, send the output to the App. Server C# code and we will close the Oracle connection (in App Server. C# code).
Now, the 500 operations will obviously have to wait in a queue and the SQLs will be processed in the DB server.
Now, question is how does CONNECTION POOLING help in this situation?
I have been told that the above method of using DB SP to perform processing will make the whole system very slow since all the load of the processing has to borne by the DB Server and since DB Operations involve disk I/O it will be very slow. They say you cannot SCALE the application with this DB Processing mode and you have to move to App. Server processing mode in order to scale your application. I.e. If the number of users increases to 1000 our application won’t be able to handle it and will get very slow.
What they suggest is to move all the processing to the App. Server (i.e. App. Svr. Memory). They also say that CONNECTION POOLING can help even further to improve the performance.
I have some issues with this. First of all to get all the data to the App server memory for each user process from the DB will not only require disk I/O, it will also involve a network trip. That will obviously take time. Again the DB requests to fetch the data will have to wait in the DB queue. Then we do the processing in the App. Server memory and then we have to again write to the DB server which again will require a network trip and disk I/O. According to my thinking won’t this take MORE TIME than doing it in the DB server??
Also how can CONNECTION POOLING help. In C# we OPEN a connection ONLY just before run the SP or get the data and we close the connection just after the operation is over.
I don’t’ see how CONNECTION POOLING can improve anything?
I also don’t see how moving data into the App. Server from the DB Server can improve the performance. I think that will only decrease performance.
Am I right or have I missed something?
Edited by: user12240205 on Nov 17, 2010 2:04 AM

App Server SSO LDAP on 11g

We are currently running App Server using OID & SSO version 10.1.2.3 in a high availability environment. We have a project to migrate these applications to new hardware and are considering installing Fusion Middleware App Server 11g (on Linux 64bit). Does anyone have any comments or concerns regarding SSO or OID on App Server 11g?

Take a look at this thread The Future of Oracle Single Sign-On 10g (10.1.4.3) ????
You can have OID 11g in your FMW installation but you will have to maintain a separate instance for SSO 10g patched up to 10.1.4.3.

Combination: oracle 9i server with Oracle 10g client??

Hello, we are running R/3 4.6C on Windows cluster system (node1-DB instance and node2-Central instance) and on Oracle 9i server. We also have several dialog instances running Oracle client 9i. Hardware and software (sap, oracle, windows) - everything is 32bit.
We are replacing those several old application servers (=dialog instances) with new X86_64 hardware and Windows 64 bit + Oracle client 64 bit. The question is: is it possible (and also supported) to install Oracle client 10g 64bit on new application servers? We are not planning to upgrade DB server to Oracle 10g yet!! So, can we run DB server on oracle 9i 32bit and oracle client 10g 64bit on applicaton servers??
Thank you very much!
Best regards, Igor

Hello,
To Andreas:
A little puntualization:
the oracle client software version depends on the sap version and not on the oracle server version...as far as i remember, oracle client 10 is either supported for sap kernel 7.00 or the brtools 7.00, which means that you cannot use oracle client 10 with sap kernel 46D_EXT
This is correct for <i>UNIX</i> systems, not for windows.
On windows the client to be used is the same version as the RDBMS.
I think this also answers Igor question.
If you RDBMS software is 9i then you have to use the client 9i

App Server suddenly crashes

Hi
I have my app server working perfectly and suddenly crashes, this is the event log:
[01/Oct/2004:11:53:36] INFO (23800): HTTP3072: HTTP listener http-listener-1 [http://tlp21418.mx.americas.intranet:80] ready to accept requests
[01/Oct/2004:11:53:36] INFO (23800): CORE3274: successful server startup
[01/Oct/2004:11:53:36] INFO (23800): CORE5053: Application onReady complete.
[01/Oct/2004:16:08:16] SEVERE (23800): Connection queue full, closing socket
[01/Oct/2004:16:08:21] SEVERE (23800): Connection queue full, closing socket
[01/Oct/2004:16:08:22] SEVERE (23800): Connection queue full, closing socket
[01/Oct/2004:16:08:26] SEVERE (23800): Connection queue full, closing socket
[01/Oct/2004:16:08:27] SEVERE (23800): Connection queue full, closing socket
[01/Oct/2004:16:08:31] SEVERE (23800): Connection queue full, closing socket
[01/Oct/2004:16:08:32] SEVERE (23800): Connection queue full, closing socket
[01/Oct/2004:16:08:36] SEVERE (23800): Connection queue full, closing socket
[01/Oct/2004:16:08:37] SEVERE (23800): Connection queue full, closing socket
[01/Oct/2004:16:08:41] SEVERE (23800): Connection queue full, closing socket
The weirdest thing is that no one is using this server, so how can the connection queue be full ?? (i have identity server & portal installed on it)
any ideas of what could be happening ??

Hi
I'm running App Server 7 SE over Solaris 9 (i use it as a base for Portal Server)
this is the only strange thing i found on the system (var/adm/messages) , i don't know if it could be related:
Oct 1 18:11:13 tlp21418 inetd[225]: [ID 250139 daemon.error] 100229/rpc/tcp version 1: rpcb_set: not started
Oct 1 18:11:13 tlp21418 inetd[225]: [ID 250139 daemon.error] 100229/rpc/tcp version 2: rpcb_set: not started
Oct 1 18:11:13 tlp21418 inetd[225]: [ID 250139 daemon.error] 100422/rpc/tcp version 1: rpcb_set: not started
Oct 1 18:11:14 tlp21418 genunix: [ID 454863 kern.info] dump on /dev/dsk/c0t0d0s1 size 16386 MB
Oct 1 18:11:16 tlp21418 sendmail[315]: [ID 702911 mail.info] starting daemon (8.12.10+Sun): queueing@00:15:00
Oct 1 18:11:17 tlp21418 bvcontrol: [ID 702911 daemon.notice] ./bvcontrold Version V7.30 build 336
Oct 1 18:11:18 tlp21418 pseudo: [ID 129642 kern.info] pseudo-device: fcode0
Oct 1 18:11:18 tlp21418 genunix: [ID 936769 kern.info] fcode0 is /pseudo/fcode@0
Oct 1 18:11:19 tlp21418 cdagent: [ID 702911 daemon.notice] Reset udp_max_buf to 524288
Oct 1 18:11:20 tlp21418 pseudo: [ID 129642 kern.info] pseudo-device: rxp0
Oct 1 18:11:20 tlp21418 genunix: [ID 936769 kern.info] rxp0 is /pseudo/rxp@0
Oct 1 18:11:20 tlp21418 bootparam_prot[392]: [ID 514559 daemon.error] svc_tp_create: Could not register prog 100026 vers 1 on udp
Oct 1 18:11:20 tlp21418 bootparam_prot[392]: [ID 514559 daemon.error] svc_tp_create: Could not register prog 100026 vers 1 on tcp
Oct 1 18:11:20 tlp21418 bootparam_prot[392]: [ID 514559 daemon.error] svc_tp_create: Could not register prog 100026 vers 1 on ticlts
Oct 1 18:11:20 tlp21418 bootparam_prot[392]: [ID 514559 daemon.error] svc_tp_create: Could not register prog 100026 vers 1 on ticotsord
Oct 1 18:11:20 tlp21418 bootparam_prot[392]: [ID 514559 daemon.error] svc_tp_create: Could not register prog 100026 vers 1 on ticots
Oct 1 18:11:20 tlp21418 bootparam_prot[392]: [ID 702598 daemon.error] unable to create (BOOTPARAMPROG, BOOTPARAMVERS) for netpath.
Oct 1 18:11:40 tlp21418 sendmail[273]: [ID 702911 mail.warning] gethostbyaddr(192.168.107.18) failed: 1
Oct 1 18:11:40 tlp21418 sendmail[273]: [ID 702911 mail.warning] gethostbyaddr(192.168.107.19) failed: 1
Oct 1 18:11:40 tlp21418 sendmail[552]: [ID 702911 mail.info] starting daemon (8.12.10+Sun): SMTP+queueing@00:15:00
Oct 1 18:12:15 tlp21418 sshd[641]: [ID 800047 auth.info] Server listening on :: port 22.
Oct 1 18:13:21 tlp21418 server[721]: [ID 514559 daemon.error] svc_tp_create: Could not register prog 300598 vers 1 on udp
Oct 1 18:13:21 tlp21418 server[721]: [ID 514559 daemon.error] svc_tp_create: Could not register prog 300598 vers 1 on tcp
Oct 1 18:13:21 tlp21418 server[721]: [ID 514559 daemon.error] svc_tp_create: Could not register prog 300598 vers 1 on ticlts
Oct 1 18:13:21 tlp21418 server[721]: [ID 514559 daemon.error] svc_tp_create: Could not register prog 300598 vers 1 on ticotsord
Oct 1 18:13:21 tlp21418 server[721]: [ID 514559 daemon.error] svc_tp_create: Could not register prog 300598 vers 1 on ticots
Oct 1 18:13:21 tlp21418 server[721]: [ID 163226 daemon.error] unable to create (DMI2_SERVER, DMI2_SERVER_VERSION) for netpath.

Security Risks in running App server as oracle (installer user)

Similar Messages

Maybe you are looking for