Unix and Oracle access audit for SAP

We are running R/3 4.6C on HPUX11/Oracle 9.2.0.6. Our auditors asked us to log and audit access to the Oracle database at the OS level, bypassing the SAP layer. For example, someone logging in, sudo to ora<sid>, execute sqlplus and view or modify a financial document. They did not give us possible ways of doing this. Our SAs and DBAs are a little stumped about getting their hands around the scope of this. Does anyone have any ideas?
Thanks,
Atul Patankar
2406622448

Number one is to lockdown the access to SQLPlus in Oracle. If this is your SAP DB there should not be any changes made at the DBA level as it invalidates the product.
Number 2 remind your auditors of the change log. If all of a sudden the values change and there is no change Log in SAP it had to be done at the OS/DB level. -- Who did access during that interval.
-- There is the possibility of establishing a DB trigger for any change that would as well propagate the logged in user and write the changes to a log table. Remember to purge to tape and archive VERY often...
Enjoy

Similar Messages

Volumes and Qtrees set up for SAP and Oracle

Hi Gurus
I Need your help Please
I need to get Volumes and Qtrees set up for SAP and Oracle.
I found a document from NetApp that helped a lot about the structure.
But what I donu2019t know and canu2019t find anywhere is sizing for the volumes and Qtrees.
I really need some guidelines on sizing these below:
FlexVol saplog
/usr/sap/SID
/usr/sap/trans
/sapmnt/SID
/home/SIDadm
/oracle/SID
/oracle/SID/origlogA
/oracle/SID/origlogB
/oracle/SID/oraarch
/oracle/SID/sapreorg
/oracle/SID/sapbackup
/oracle/SID/saparch
FlexVol sapdata
/oracle/SID/sapdata1
/oracle/SID/sapdata2
/oracle/SID/sapdataN
FlexVol mirrlogs
/oracle/SID/mirrlogA
/oracle/SID/mirrlogB
Thanks and appreciate your help

> I have gone through the Inst Guide and I was surprised to see only 50 MB for Oracle software directory ?
Where did you read that?
> The sizing given in Installation guide is for typical setup or do we need to size as per our requirement ?
The sizing give there is for the initial system setup. It does not contain customer specific requirements.
The usual process is:
- you contact your hardware vendor
- you use http://service.sap.com/quicksizer together with him and fill in the data
- the hardware vendor will offer you the storage and the machines for the setup
- the vendor configures with you the storage and the necessary filesystem layout based on that sizing
Each customers setup is different and requires the experience and knowledge from the respective hardware vendor how to set up the system so it performs well.
You can follow the suggestions given here, this will be enough for the initial setup but the system will grow. This is not taken into account in the installation guide because it's customer specific.
Markus

What oracle edition required for sap ecc and ep in one box

hi friends
what oracle edition required for sap ecc installation which supports the HA and disaster recovery plan
10g
1. Oracle Database Standard Edition One 10 g
2. Oracle Database Standard Edition 10g
3.Oracle Database Enterprise Edition 10g
3. Oracle Database Express Edition 10g
4. Oracle Database Personal Edition 10g
thanks in advance friends
regards
raja

hi,
I believe that SAP only support enterprises edition one because you'll get all database features.
ardhian
http://sapbasis.wordpress.com

Oracle AS Adapter for SAP R/3

Hello everyone.
I have some questions abuot the Oracle AS Adabter for SAP.
I have to get values out of miniSAP and integrate them in a BPEL Process. In SAP there is a function to generate a Webservice out of a BAPI for example! This Web Service I want to include in a bpel process. This is the way I try it till now!!!!
Now I read an article about the Adapter.
Is the task i explained abouve possible to do it with the adapter?
If yes, Can I include every BAPI in a bpel process with the adapter?
What are the prerequisites I need for the adapter? I have installed an Infrastructure, a Middle Tier (Portal) and the BPEL process manager.
Thanks a lot

Thank you veyr much Manoj for your reply. I just tried it now buit no fruits.
I wonder if it can really be due to privileges given to my account, which allows to connect thru SAP Front-end but does not allow to connect by any other means. I can not think of any other possible reason.

Oracle Integration Adapter for SAP R/3

I am working with a customer implementing Oracle EBS Release 12.2.
The customer has implemented SAP for financial modules and the oracle solution considers an EBS - SAP Integration for Receivables. Does anyone have any experience integrating Oracle EBS Receivables with SAP? Can you give us some guidance regarding EBS - SAP Integration best practices?
We have found a paper regarding Oracle Integration Adapter for SAP R3. We would like to have some information about what are the Oracle products we can integrate with SAP using Oracle Integration Adapter for SAP R3.
In case Oracle EBS can integrate with SAP using Oracle Integration Adapter, we would like to know if anyone has experience integrating Oracle EBS Receivables with SAP using Oracle Integration Adapter for SAP R3 for AR transactions and Receipts?
Any help would be very much appreciated.

Thank you veyr much Manoj for your reply. I just tried it now buit no fruits.
I wonder if it can really be due to privileges given to my account, which allows to connect thru SAP Front-end but does not allow to connect by any other means. I can not think of any other possible reason.

Difference: Oracle Access Manager and Oracle Access Management

Dear,
What is the difference between Oracle Access Manager and Oracle Access Management, both 11g
thanks

Oracle Access Manager is the foundation(main product), of the new Oracle Access Management platform. Access Manager provides the core functionality of Web Single Sign On(SSO), authentication, authorization, centralized policy administration and agent management, real-time session management and auditing. Built as a 100% Java solution, Access Manager is extremely scalable to handle Internet scale deployments and works with existing heterogeneous environments in the enterprise with agents certified on hundreds of web servers and application servers. Access Manager provides rich functionality, extreme scalability and high availability thereby increasing security, improving user experience and productivity and enhancing compliance while reducing total cost of ownership.
Oracle Access management solution provides: Comprehensive Web Access Management, Web Single Sign-On, Identity Propagation, and Federation;Mobile and Social Sign-On;Real-time External Authorization;daptive Access and Fraud Detection
So basically one is a product and the other one is an entire solution.
I hope this helps,
Thiago Leoncio.

Does anyone know about theAdvantco and Kate REST adapters for SAP PI?

I'm looking for any info I can find on a comparison between theAdvantco and Kate REST adapters for SAP PI?
Has anyone used one or both before?
Thanks,

Hi Gabriel - I haven't worked on Ka Te's adapter but have a look at the below blog for the advantages of using Advantco's rest adapter...
Integrating REST Services on PI
I don't see any major differences but below something i noticed in the release notes of Advantco's adapter.
Endorses Open Data Protocol (OData), a Web protocol for querying and updating data using Web technologies such as HTTP, Atom Publishing Protocol (AtomPub) and JSON to provide access to information from a variety of applications
Reference : Advantco Unveils SAP® Certified REST Adapter for SAP NetWeaver® | Advantco SAP NetWeaver Solutions

RFC calls with SAP JCO and IBM resource adapter for SAP - basic tuning

Hi experts,
we are working on a java portal connected to a backend system SAP by calling RFCs.
On our first integration tests, it appears to be quite slow fetching data from SAP by calling the remote functions from the custom portal. We are using SAP JCo 3.0.6 and IBM resource adapter for SAP 7.0.0.3 to integrate SAP with our portal.
Is there any basic tuning to achieve to improve performances or any hint of where to tune in SAP ?
Any help would be greatly appreciated.
Thanks a lot,
Jamal

Hi Jamal,
I understand you have already checked performance issues in the SAP Server. We had some problems with certain RFC calls and it turned out to be a badly developed ABAP sentence.
I'd recommend you to use httpwatch or another tool to check the response times from the browser, so you can point accurately where the is.
Regards
Francisco

How to find data dictionary and oracle schema tables for UTF8 char conversi

I am doing UTF8 char conversition, i got lot of convertable objects,as per document we don't need to worry about data dictionary objects and how to find data dictionary and oracle schema objects for UTF8 char conversition.
USER.TABLE Convertible Truncation Lossy
MDSYS.OPENLS_NODES 17 0 0
MDSYS.SDO_COORD_OP_PARAM_VALS 200 0 0
MDSYS.SDO_GEOR_XMLSCHEMA_TABLE 1 0 0
MDSYS.SDO_STYLES_TABLE 78 0 0
MDSYS.SDO_XML_SCHEMAS 3 0 0
ORDDATA.ORDDCM_CT_PRED_OPRD 51 0 0
ORDDATA.ORDDCM_DOCS 9 0 0
ORDDATA.ORDDCM_MAPPING_DOCS 1 0 0
SYS.METASTYLESHEET 178 0 0
SYS.REGISTRY$ERROR 2 0 0
SYS.RULE$ 21 0 0
SYS.SCHEDULER$_EVENT_LOG 182 0 0
SYS.WRH$_SQLTEXT 2,099 0 0
SYS.WRH$_SQL_PLAN 1,736 0 0
SYS.WRI$_ADV_ACTIONS 5,452 0 0
SYS.WRI$_ADV_DIRECTIVE_META 5 0 0
SYS.WRI$_ADV_OBJECTS 2,278 0 0
SYS.WRI$_ADV_RATIONALE 9,594 0 0
SYS.WRI$_ADV_SQLT_PLANS 455 0 0
SYS.WRI$_ADV_SQLT_PLAN_STATS 288 0 0
SYS.WRI$_DBU_FEATURE_METADATA 188 0 0
SYS.WRI$_DBU_FEATURE_USAGE 16 0 0
SYS.WRI$_DBU_HWM_METADATA 20 0 0
SYS.WRI$_REPT_FILES 27 0 0
XDB.XDB$DXPTAB 2 0 0
XML CSX Dictionary Tables:
USER.TABLE Convertible Truncation Lossy
Application Data:
USER.TABLE Convertible Truncation Lossy
APPLSYS.BISM_OBJECTS 4 0 0
APPLSYS.DR$FND_LOBS_CTX$I 0 103 1,260,883
APPLSYS.FND_CONC_PROG_ANNOTATIONS 272 0 0
APPLSYS.FND_OAM_CONTEXT_FILES 15 0 0
APPLSYS.FND_OAM_DOC_LINK 1 0 0
APPS.FND_OAM_CONTEXT_FILES_1 6 0 0
AZ.AZ_APIS 11 0 0
AZ.AZ_SELECTION_SET_ENTITIES_B 48 0 0
ECX.ECX_DTDS 205 0 0
ECX.ECX_FILES 91 0 0
IBC.IBC_ATTRIBUTE_BUNDLES 41 0 0
JTF.JTF_HEADER_DTD 1 0 0
JTF.JTF_MESSAGE_OBJECTS 82 0 0
JTF.JTY_TRANS_USG_PGM_SQL 29 0 0
ODM.ODM_PMML_DTD 1 0 0
OKC.OKC_REPORT_SQL_B 3 0 0
OKC.OKC_REPORT_SQL_TL 2 0 0
OKC.OKC_REPORT_XSL_TL 5 0 0
XDP.XDP_PROC_BODY 10 0 0
[Distribution of Convertible, Truncated and Lossy Data by Column]
Data Dictionary Tables:
USER.TABLE|COLUMN Convertible Truncation Lossy
MDSYS.OPENLS_NODES|SYS_NC00004$ 17 0 0
MDSYS.SDO_COORD_OP_PARAM_VALS|PARAM_VALUE_FILE 200 0 0
MDSYS.SDO_GEOR_XMLSCHEMA_TABLE|XMLSCHEMA 1 0 0
MDSYS.SDO_STYLES_TABLE|DEFINITION 78 0 0
MDSYS.SDO_XML_SCHEMAS|XMLSCHEMA 3 0 0
ORDDATA.ORDDCM_CT_PRED_OPRD|SYS_NC00004$ 51 0 0
ORDDATA.ORDDCM_DOCS|SYS_NC00005$ 9 0 0
ORDDATA.ORDDCM_MAPPING_DOCS|SYS_NC00007$ 1 0 0
SYS.METASTYLESHEET|STYLESHEET 178 0 0
SYS.REGISTRY$ERROR|MESSAGE 1 0 0
SYS.REGISTRY$ERROR|STATEMENT 1 0 0
SYS.RULE$|CONDITION 21 0 0
SYS.SCHEDULER$_EVENT_LOG|ADDITIONAL_INFO 182 0 0
SYS.WRH$_SQLTEXT|SQL_TEXT 2,099 0 0
SYS.WRH$_SQL_PLAN|OTHER_XML 1,736 0 0
SYS.WRI$_ADV_ACTIONS|ATTR5 2,726 0 0
SYS.WRI$_ADV_ACTIONS|ATTR6 2,726 0 0
SYS.WRI$_ADV_DIRECTIVE_META|DATA 5 0 0
SYS.WRI$_ADV_OBJECTS|ATTR4 2,278 0 0
SYS.WRI$_ADV_RATIONALE|ATTR5 9,594 0 0
SYS.WRI$_ADV_SQLT_PLANS|OTHER_XML 455 0 0
SYS.WRI$_ADV_SQLT_PLAN_STATS|OTHER 288 0 0
SYS.WRI$_DBU_FEATURE_METADATA|INST_CHK_LOGIC 21 0 0
SYS.WRI$_DBU_FEATURE_METADATA|USG_DET_LOGIC 167 0 0
SYS.WRI$_DBU_FEATURE_USAGE|FEATURE_INFO 16 0 0
SYS.WRI$_DBU_HWM_METADATA|LOGIC 20 0 0
SYS.WRI$_REPT_FILES|SYS_NC00005$ 27 0 0
XDB.XDB$DXPTAB|SYS_NC00006$ 2 0 0
XML CSX Dictionary Tables:
USER.TABLE|COLUMN Convertible Truncation Lossy
Application Data:
USER.TABLE|COLUMN Convertible Truncation Lossy
APPLSYS.BISM_OBJECTS|SYS_NC00023$ 4 0 0
APPLSYS.DR$FND_LOBS_CTX$I|TOKEN_TEXT 0 103 1,260,883
APPLSYS.FND_CONC_PROG_ANNOTATIONS|PROGRAM_ANNOTAT 272 0 0
APPLSYS.FND_OAM_CONTEXT_FILES|TEXT 15 0 0
APPLSYS.FND_OAM_DOC_LINK|DOC_LINK_INFO 1 0 0
APPS.FND_OAM_CONTEXT_FILES_1|TEXT 6 0 0
AZ.AZ_APIS|FILTERING_PARAMETERS 11 0 0
AZ.AZ_SELECTION_SET_ENTITIES_B|FILTERING_PARAMETE 48 0 0
ECX.ECX_DTDS|PAYLOAD 205 0 0
ECX.ECX_FILES|PAYLOAD 91 0 0
IBC.IBC_ATTRIBUTE_BUNDLES|ATTRIBUTE_BUNDLE_DATA 41 0 0
JTF.JTF_HEADER_DTD|HEADER_DTD 1 0 0
JTF.JTF_MESSAGE_OBJECTS|BUS_OBJ_DTD 41 0 0
JTF.JTF_MESSAGE_OBJECTS|BUS_OBJ_SQL 41 0 0
JTF.JTY_TRANS_USG_PGM_SQL|BATCH_DEA_SQL 1 0 0
JTF.JTY_TRANS_USG_PGM_SQL|BATCH_INCR_SQL 5 0 0
JTF.JTY_TRANS_USG_PGM_SQL|BATCH_TOTAL_SQL 6 0 0
JTF.JTY_TRANS_USG_PGM_SQL|INCR_REASSIGN_SQL 5 0 0
JTF.JTY_TRANS_USG_PGM_SQL|REAL_TIME_INSERT 6 0 0
JTF.JTY_TRANS_USG_PGM_SQL|REAL_TIME_SQL 6 0 0
ODM.ODM_PMML_DTD|DTD 1 0 0
OKC.OKC_REPORT_SQL_B|SQL_TEXT 3 0 0
OKC.OKC_REPORT_SQL_TL|HELP_TEXT 2 0 0
OKC.OKC_REPORT_XSL_TL|HELP_TEXT 2 0 0
OKC.OKC_REPORT_XSL_TL|XSL_TEXT 3 0 0
XDP.XDP_PROC_BODY|PROC_BODY 10 0 0
-------------------------------------------------- ---------------- ---------------- ----------------

Hi;
Please run below query which could be helpful for your issue:
select * from dictionary where TABLE_NAME LIKE '%NLS%'
select * from dictionary where TABLE_NAME LIKE '%GLOBAL%'
Regard
Helios

Access key for SAP 4.6C IDES

Hi,
Can any body send me the access key for SAP 4.6C IDES?
I am unable to proceed further because of it.
Please mail me that if you have to:
[email protected]
Regards,
lokesh

Hi
You have to ask the person from whom you got this software of SAP IDES
He will provide the Access key.
Reward points for useful Answers
Regards
Anji

Oracle Managment Pack for SAP R/3

Hi,
i want to install an OEM module (Oracle Managment Pack for SAP).
in Oracle documentation, they talk about "NT Proxy machine".. what is it ?
one have any document to install this module, step by step ?
thanks.

Hi,
To register an SAP event test on an SAP R/3 service, the Intelligent Agent must be running on the NT proxy machine that refers to the SAP R/3 system in its sap.conf file.
Ref http://download-west.oracle.com/docs/cd/B10501_01/em.920/a96674/overview.htm#1005618.
This pack is intgted with OEM.
Regards
Vinod

How can i get access code for SAP 4.7 IDES version ?

How can i get the access code for SAP 4.7 IDES version ?
Thanks

Hello Rahul,
If you have registered / licensed IDES Version.
You can generate Access code for Developer / Objects from http://service.sap.com/sscr
Regards ,
Santosh Karadkar

Difference between Oracle VM on Linux x86 and Oracle VM Server for x86 on Linux x86

Hi,
Under the certifications tab for EBS 11.5.10.2, there are two fields for Virtualization software
1. Oracle VM
2. Oracle VM Server for x86
Oracle VM shows version 2.2.0.0.0 and Oracle VM Server for x86 shows version 3.2.6.0.0. Could you please let me know the difference between the two?
Thanks
Sarika

Hi,
Oracle VM shows version 2.2.0.0.0 and Oracle VM Server for x86 shows version 3.2.6.0.0. Could you please let me know the difference between the two?
Oracle VM 2.2 is for Oracle Solaris Sparc platform (Earlier know as Sun Logical Domains) - Only Solaris sparc Installation are supported on VM's
2.2 Installing Oracle VM Server on SPARC Hardware
Oracle Vm 3.2 is for X86 platform - using this VM you can Install and create Windows/Linux/Solaris-X86 and other certified OS.
Oracle VM Release 3.2 Product Documentation Library
Hope its clear
regards,
X A H E E R

How to disable sap easy access menu for SAP GUI HTML

hi,
in our portal i created an iview, which calls an SAP-ERP-Transaction, and displays it with the SAP GUI for HTML (webgui). well, i have a big problem: when i got a timeout, the user has to log on to the its and then i get the sap easy access menu.
the users should NOT be allowed to see the sap easy access menu ! they ONLY need to see the called transaction.
any ideas ?
best regards, Martin

hi,
i have set the 'singletransaction'-parameter in sicf for the webgui-service to value 1.
BUT: as soon as i click on the iview to display the transaction i got the message
Logged Off Successfully
You have been logged off from SAP Web Application Server.
what is wrong there ?
reg, Martin

Dial Up between Oracle on HP-Unix and Oracle on Windows 95

Hello Everybody
I have Oracle Enterprise edition 8.0.4 on HP-Unix and Personal
Oracle 8.0.3 on Windows 95. I want to establish connection
between these two databases through dial-up. I have already
established connectivity through lease line.
I can dial up through Windows machine but I am not able to dial
up through HP-9000 server. Please can anybody guide me. I will be
highly obliged.
Thanks in advance.
Noble.
null

Noble,
This is not the best forum for this question.
Maybe the public news forums would be better,
or Oracle support if it is available to you.
My comments would be:
Oracle has the async v1 and v2 protocol for doing this,
but your best bet is to set up a tcp/ip ppp connection, as used
by 200 million internet users..
This may raise some security concerns, but dialling back to the
server trying to make the connection, as well as the normal
password protection gives some security comfort.
Information on how to do this should be widely available as it is
not Oracle or windows or hp specific.
You can then use a normal tcp/ip connection database link etc..
Turloch
Oracle Migration Workbench Team
Noble (guest) wrote:
: Hello Everybody
: I have Oracle Enterprise edition 8.0.4 on HP-Unix and Personal
: Oracle 8.0.3 on Windows 95. I want to establish connection
: between these two databases through dial-up. I have already
: established connectivity through lease line.
: I can dial up through Windows machine but I am not able to dial
: up through HP-9000 server. Please can anybody guide me. I will
be
: highly obliged.
: Thanks in advance.
: Noble.
Oracle Technology Network
http://technet.oracle.com
null

Unix and Oracle access audit for SAP

Similar Messages

Maybe you are looking for