User and Group Ids for Standby Database

The following oracle homes installed under the same unix account on the primary node:
10gR2 CRS home
10gR2 ASM home
10gR2 RDBMS home
Oracle Applications E-Business Suite 11.5.10.2 (concurrent admin)
Based on note 216212.1 - Business Continuity for Oracle Applications Release 11i, Database Releases 9i and 10g
Section 1: Design Considerations and Assumptions
The note, verbatim, says "+The user and group Ids of the Oracle and applications software owner accounts must be the same on the production and standby servers+." Is this statement true? In other words, if the primary server software owner is the "morgan" unix account, then the unix account must also be "morgan" (not "stanley") on the standby server?

Yes you can run a standby with different unix usernames on primary and standby, but it will be easier if the usernames are the same.

Similar Messages

Switching user and group IDs at OS level when starting WLS 5.1

Hello, Is it possible to switch the user ID and group ID at OS level when WLS 5.1
is started?, this is because WLS is currently started with a priviledged account
and I need to run WLS with a restricted user's environment, for securing purpouses.
Please, any comments ares appreciated, thanks in advanced.
Miguel Angel Avila Vqz.

Thank you very much Michael, I am now able to accomplish this task, best regards,
"Michael Young" <[email protected]> wrote:
Hi Miguel.
Check out the properties documented at
http://www.weblogic.com/docs51/admindocs/properties.html#setuid in order
to
accomplish this.
Regards,
Michael
"Miguel Angel Avila Vázquez" <[email protected]> wrote in message
news:3e6bdeac$[email protected]..
Hello, Is it possible to switch the user ID and group ID at OS levelwhen
WLS 5.1
is started?, this is because WLS is currently started with a priviledgedaccount
and I need to run WLS with a restricted user's environment, for securingpurpouses.
Please, any comments ares appreciated, thanks in advanced.
Miguel Angel Avila Vqz.

User and Group Permissions for Directories

I'm trying to grant permissions to a group for a given directory, so that multiple users can FTP in and have read/write permissions in the same directory. I tried doing 'chown -R :groupname /path/to/directory' but it only granted the permissions I wanted to the first person in the group. How should I go about doing this?

Are the actual file permissions set correctly on the files for the group? Instead of <code>755</code> you need to chmod to <code>775</code> for example. If they are owned by the correct group, that should get things settled...

User and Group IDs.. and where are these recorded?

I come from a Unix background, so I'm having a little trouble getting my head around this. /etc/passwd and /etc/group are apparently not used for normal user accounts in OSX. Is there a way to change the UID and GID of a user account?
The reason I'm asking is because the Mac version of Guitar Pro installs as UID and GID 501 and, on my Mac, it crashes about halfway through playing a song with:
Exception: EXCBADACCESS (0x0001)
Codes: KERNINVALIDADDRESS (0x0001) at 0x061f9f18
... and I suspect the problem is file permission related, as my main user account is UID/GID 502, and 501 does not relate to any existing user account on the system (I deleted my original account shortly after getting my Mac and created a new account for myself) .

UIDs and GIDs are managed with /Applications/Utilities/Netinfo Manager. Since you claim to have a unix background, you probably don't need to be told to not mess with any of its settings unless you know what you are doing.

How do we fetch the top-level users and groups for a particular resource

Hi Experts,
I need to fetch the top level users and groups (permissions) for a particular resource, Currently i am able to fetch the effective users list.
Thanks.

To elaborate...
Here we need the users and groups who have direct access to the resource. We dont want to resolve groups.
Please help us with the apis to use in our java code to fetch the users and groups.

What is the SYNTAX for the user and group filters??? Is the HTML Ampersand token Amper A m p semicolon required in the filter

There seems to be quite a bit of confusion over the actual syntax for the user and group filters on the Forms Based Authentication Ldap Role and membership providers.. MSFT isn't really clear and there is a universal confusion in the blogsphere.
I the filters should the prefix be the ACTUAL Ampersand or the HTML token for an AMPERSAND.. I realize the in many cases the blogger might have inadvertently specified the html token when the bare naked ampersand was intended.. The question
therefore is : can a filter be taken directly from and ADSIEdit query and used as a filter or must the filter be made HTML safe by swapping out the AMERSAND with the HTML Token for AMERSAND before putting it into the configuration
for the LDAPRole/membership provider...
All science is either physics or stamp collecting

Hi GUYO,
I am not quite sure how we implement this on sharepoint side, as I did research and sharepoint may not have this feature to do this.
most of the LDAP for sharepoint may need to follow these steps in this article:
http://technet.microsoft.com/en-us/library/ee806890(v=office.15).aspx
http://blogs.msdn.com/b/sridhara/archive/2010/01/07/setting-up-fba-claims-in-sharepoint-2010-with-active-directory-membership-provider.aspxhttp://blogs.msdn.com/b/kaevans/archive/2013/01/31/configuring-ldap-for-fba-in-sharepoint-2010-or-sharepoint-2013-with-powershell.aspx
here is an example :
http://blogs.msdn.com/b/sharepoint__cloud/archive/2011/12/20/achieving-fba-with-adlds-amp-sharepoint-2010.aspx
if should this questions was at the ADSIEdit part, perhaps you can help us by opening a new thread at the AD foum
https://social.technet.microsoft.com/Forums/en-US/home?category=windowsserver
Regards,
Aries
Microsoft Online Community Support
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Could we have same name's for User and Groups in Active directory

When iam trying to create a user name " Logistics " under a OU, I am getting a error
"The pre-windows 2000 logon name you have chosen is already in use in this domain. Choose aother pre-windows logon name, and then try again"
We already have a group by the name " Logistics "
Could we have same name's for User and Groups in Active directory?
Thanks in Advance

sAMaccountName attribute is unique. So, the short answer is you cannot.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Importing user and group database from 2.6 to 4.0

Hi,
I need to import the user and groups from version 2.6 ACS to version 4.0. The 2.6 online documentation talks of using the CSUtils to create a .txt back up of the users and group. But I cannot see how to import that into 4.0. Has anyone done this. Any info would be appreciated,
cheers,

Hi Darran,
I looked at what I had imported using the instructions you had supplied me and it looked fine, all users and group, tacacs privelege levels had been imported. I modified a router on our network to point at the ACS 4.0. on testing it looks like the passwords hadn't been copied across successfully. Logins are failing with 'invalid CS password' in the failed authentication log. If I changed the password manually it was fine.
Have you seen that before?
Thanks for your help on this.
Rgds,
Russell.

User and Group Database Migration

I am installing SecureACS 4.1 from scratch on a new Server. Is there a way for me to migrate the user and groups from a previous 2.4 and 3.0 vs install? there has to be an easier way to create all those groups and users?

Someone at Cisco decided that from 4.0 onwards they wouldnt upgrade from every previous version any more.
I think this means you'd have to upgrade the existing server to 3.1 then create a backup.
NExt install 3.1 on the new server and restore the backup.
Lastly upgrade the new server to 4.1 and cross your fingers it upgrades smoothly!
An easier (but less complete) method is simply to run csutil -d on the first server, copy the dump file to the new one and then use csutil -l. HOWEVER... this can cause problems if you're group/user config uses NDGs (eg NDG->DCS command authorisation) because only NDG indexes are in the dump file.
When you re-create the NDGs on the new server the indexes are likely all be different.
So in summary only use the csutil route if your just moving very simple groups or users.
BTW there is an option for csutil to load just the users from a dump file leaving groups untouched (run csutil -x to find out more)
Darran
ps we're seeing more people installing ACS (and aaa-reports!) under VMWare - which then makes hardware upgrades a non-issue.

Sysresv returns multiple shared memory IDs for one database

Shared Memory:
ID KEY
8 0x00000000
9 0x00000000
10 0x00000000
13 0x00000000
14 0xae2ae9d0
Please see this 'sysresv' output. It returns multiple shared memory IDs for one database (althouth all are 0s except one). Why is this? Does it matter? It seems not eating up memory. Stop and start database didn't help.

* System Configuration
swap files
swapfile dev swaplo blocks free
/dev/md/dsk/d101 85,101 16 201342320 201342320
* Tunable Parameters
2055864320 maximum memory allowed in buffer cache (bufhwm)
30000 maximum number of processes (v.v_proc)
99 maximum global priority in sys class (MAXCLSYSPRI)
29995 maximum processes per user id (v.v_maxup)
30 auto update time limit in seconds (NAUTOUP)
25 page stealing low water mark (GPGSLO)
1 fsflush run rate (FSFLUSHR)
25 minimum resident memory for avoiding deadlock (MINARMEM)
25 minimum swapable memory for avoiding deadlock (MINASMEM)
CO4P:/opt/oracle:>ipcs -ma
IPC status from <running system> as of Monday, April 21, 2008 2:50:10 PM PDT
T ID KEY MODE OWNER GROUP CREATOR CGROUP NATTCH SEGSZ CPID LPID ATIME DTIME CTIME
Shared Memory:
m 14 0xae2ae9d0 rw-r--- oracle dba oracle dba 481 24576 20322 25104 14:50:10 14:50:10 11:24:46
m 13 0 rw-r--- oracle dba oracle dba 481 2030043136 20322 25104 14:50:10 14:50:08 11:24:43
m 10 0 rw-r--- oracle dba oracle dba 481 2030043136 20322 25104 14:50:10 14:50:08 11:24:40
m 9 0 rw-r--- oracle dba oracle dba 481 2013265920 20322 25104 14:50:10 14:50:08 11:24:37
m 8 0 rw-r--- oracle dba oracle dba 481 2063597568 20322 25104 14:50:10 14:50:08 11:24:34
m 0 0xcace --rw-rw-rw- root root root root 0 2 2344 2344 14:49:57 14:49:57 9:35:43

Populating users and groups - design considerations/best practice

We are currently running a 4.5 Portal in production. We are doing requirements/design for the 5.0 upgrade.
We currently have a stored procedure that assigns users to the appropriate groups based on the domain info and role info from an ERP database after they are imported and synched up by the authentication source.
We need to migrate this functionality to the 5.0 portal. We are debating whether to provide this functionality by doing this process via a custom Profile Web service. It was recommended during ADC and other presentation that we should stay away from using the database security/membership tables in the database directy and use the EDK/PRC instead.
Please advise on the best way to approach(With details) this issue. We need to finalize the best approach to take asap.
Thanks.
Vanita

So the best way to do this is to write a custom Authentication Web Service. Database customizations can do much more damage and the EDK/PRC/API are designed to prevent inconsistencies and problems.
Along those lines they also make it really easy to rationalize data from multiple backend systems into an orgainzation you'd like for your portal. For example you could write a Custom Authentication Source that would connect to your NT Domain and get all the users and groups, then connect to your ERP system and do the same work your stored procedure would do. It can then present this information to the portal in the way that the portal expects and let the portal maintain its own database and information store.
Another solution is to write an External Operation that encapsulates the logic in your stored procedure but uses the PRC/Server API to manipulate users and group memberships. I suggest you use the PRC interface since the Server API may change in subtle ways from release to release and is not as well documented.
Either of these solutions would be easier in the long term to maintain than a database stored procedure.
Hope this helps,
-Akash

Can't open Users and Groups

Yeah guys, after I played around the guest account and added some parental controls to it, I can't open Users and Groups again in Syste Prefences
Thanks

When doing Get Info -> Permsissions on files/folders located on my File Server share, Owner and Group show as (unknown).
This means that the Finder can't find a match in the accounts/groups database for the numeric UID assigned to those files. Either the records associated to those accounts have been deleted, or the database is corrupt. In either case, you should restore a copy of it from backup.
(15686)

MAJOR Open Directory issue: Can't assign Users and Groups that DO exist!

Just noticed the following today:
When doing Get Info -> Permsissions on files/folders located on my File Server share, Owner and Group show as (unknown).
When I go into WGM -> Sharing, and look at files/folders on File Server share this way, the Owner and Group fields are blank.
When I attempt to (re)assign an Owner or Group by dragging them from Users and Groups section of WGM, error tells me User or Group no longer exists. These Users and Groups clearly do exist in WGM -> Accounts.
When I look at files on File Server share via CLI, instead of actual names for Users and Groups, I see their uid and gid's. Chowning via CLI fails as well.
I've noticed all Users and Groups with this issue are OD.
Server is xServe G4 DP 1.0 GNz/1 GB RAM/Mac OS X Server 10.4.7 Unlimited. This servers been running fine as an OD Master for months now. ACL's are enabled on this File Server share point. I've always had weird permissions issues, but NEVER the inability to assign OD Users and Groups to files/folders.
I'm at a loss here, not to mention my wits end.
Did my OD become corrupted?
Any and all help would greatly appreciated.
PowerMac G4 733 MHz Mac OS X (10.4.6) 512 MB RAM

When doing Get Info -> Permsissions on files/folders located on my File Server share, Owner and Group show as (unknown).
This means that the Finder can't find a match in the accounts/groups database for the numeric UID assigned to those files. Either the records associated to those accounts have been deleted, or the database is corrupt. In either case, you should restore a copy of it from backup.
(15686)

Restricted Characters: User and Group Names

I'm going through the documentation for Essbase and I'm trying to find an exhaustive list of all the restricted characters/keywords for User and Group Names.
I've found what I think is the list for Apps, DBs, Dims, and Dim Members here: Oracle Essbase Database Administrator's Guide
I've also found a link that says the only restricted character for User names is a backslash: Essbase Administration Services Online Help
Does anyone know if there are any other restricted characters for User names and Group names? I recently created the user @<>/\:';[]{} in Shared Services. I was surprised that it actually let me do it. I was even able to log into EAS using this user name. However, I couldn't add the Essbase server. However, the user did show up in the Users Table in EAS for that server when I logged in as a different user.
So, does anyone out there have any info on restricted characters and/or keywords for Users and Groups. Anything on Enterprise ldap systems?

I'm going through the documentation for Essbase and I'm trying to find an exhaustive list of all the restricted characters/keywords for User and Group Names.
I've found what I think is the list for Apps, DBs, Dims, and Dim Members here: Oracle Essbase Database Administrator's Guide
I've also found a link that says the only restricted character for User names is a backslash: Essbase Administration Services Online Help
Does anyone know if there are any other restricted characters for User names and Group names? I recently created the user @<>/\:';[]{} in Shared Services. I was surprised that it actually let me do it. I was even able to log into EAS using this user name. However, I couldn't add the Essbase server. However, the user did show up in the Users Table in EAS for that server when I logged in as a different user.
So, does anyone out there have any info on restricted characters and/or keywords for Users and Groups. Anything on Enterprise ldap systems?

How to change default /Users and /Groups to different Volume?

Users are created in /Volumes/<boot>/Users and groups in /Volumes/<boot>/Groups.
We need these to be created on a different volume, eg., /Volumes/External/Users, and /Volumes/External/Groups.
Setup Assistant correctly put user Backups into */Volumes/External/Shared Items/Backups* and also correctly put web services on /Volumes/External/ServiceData -- we want to do the same for Groups and Users.
Groups are the most critical, as the group needs bulk storage. Users we could leave as is if it can't be done.
How can this be configured? We've read File Server Admin, Open Directory Admin, and Advanced Server admin from http://www.apple.com/server/macosx/resources/documentation.html without finding an answer.
Thanks in advance.

1. Create new folders on the external volume to hold users and groups, but to prevent confusion name them something other than "Users" and "Groups". /Volumes/External/NetUsers and /Volumes/External/NetGroups would be reasonable choices.
2. Share both of these folders (in Server Admin -> server name in sidebar -> File Sharing -> Volumes & Browse modes -> select each folder -> click Share near the top right).
3. Enable both folders for automounting on clients (Server Admin -> server name in sidebar -> File Sharing -> Share Points-> select each folder -> Share Point tab under that -> Enable Automount option) with the default options (Directory: /LDAPv3/127.0.0.1, Protocol: AFP, Use for: User home folders and group folders). Be sure to click Save (not just OK in the dialog).
4. To migrate users, run Workgroup Manager, and change the home location for the users you want to move (select Accounts in the toolbar -> /LDAPv3/127.0.0.1 from the hidden pop-up menu under that -> User icon tab at the left -> select the user(s) you want to change -> Home tab on the right -> select the NetUsers option from the "Where" list). Then, for each user, run this command on the server: "sudo cp -Rp /Users/username /Volumes/External/NetUsers".
5. Similarly, move Group folders in WGM (Accounts -> /LDAP... -> Groups icon on left -> select groups to move -> Group Folder tab on right -> NetGroups in the list). Then, for each group, run "sudo cp -Rp /Groups/groupname /Volumes/External/NetGroups".
6. Test to make sure all is working before deleting the old user and group folders from /Users and /Groups (do NOT delete /Users and /Groups themselves, just the individual folders from under them).

User and Group Ids for Standby Database

Similar Messages

Maybe you are looking for