Will be database Oracle 10 g / 11g run without redo logs?

Similar Questions

• Questions about the parameters of database using a fast recovery area and the writing of two copies of archived redo logs.

  My databases are 11.2.0.3.7 Enterprise Edition. My OS is AIX 7.1.

  I am to convert databases to use individual zones of rapid recovery and have two questions about what values to assign to database settings related to archived redo logs. This example refers to a database.

  I read that if I specify

  Log_archive_dest_1 =' LOCATION = USE_DB_RECOVERY_FILE_DEST'

  the names of newspapers archived redo written in the default quick recovery area is '% t_%S_%r.dbf '.

  In the past my archived redo logs have been appointed based on the parameter

  log_archive_format='GPAIDT_archive_log_%t_%s_%r.arc'

  I think log_archive_format will be ignored for logs archived redo written in the fast recovery area.

  I am planning to write a second copy of the archived redo logs based on the parameter

  ALTER system set log_archive_dest_2 = ' LOCATION = / t07/admin/GPAIDT/arch.

  If I do this, the copy of logs placed in /t07 will be called '% t_%S_%r.dbf' or 'GPAIDT_archive_log_%t_%s_%r.arc '?

  Before my use of a fast recovery area, I used the OEM 12 c Console to specify settings of backup of database that has been deleted and archived redo logs after 1 backup. Oracle manuals say rather specify a deletion of "none" policy and allow Oracle delete newspapers in the area of fast recovery if necessary. Since I got to keep a second copy of these log files in /t07 should I keep the policy that says to delete logs after 1 backup? If I don't do that, how will they removed from /t07?

  Thank you

  Bill

  If I do this, the copy of logs placed in /t07 will be called '% t_%S_%r.dbf' or 'GPAIDT_archive_log_%t_%s_%r.arc '?

  They will be "GPAIDT_archive_log_%t_%s_%r.arc". LOG_ARCHIVE_FORMAT is only ignored for directories under OMF.

  Since I got to keep a second copy of these log files in /t07 should I keep the policy that says to delete logs after 1 backup? If I don't do that, how will they removed from /t07?

  You can hold the deletion policy as it is. Oracle documentation, defining the STRATEGY of the ARCHIVELOG DELETION: "the deletion of archived newspaper policy applies to logs archive destinations, including the area of fast recovery."

• Invalid state online redo log on backup database

  Hi all
  
  I'm new here with a little problem with Oracle Dataguard.
  After the double, redo log files and log files online pending
  are equal in major databases and relief.
  But now, in the database of relief, some redologs online are missing.
  So, I created files of online journals on the standby database.
  But the State is not valid:
  

      GROUP# STATUS  TYPE    MEMBER                                                                           IS_
  ---------- ------- ------- -------------------------------------------------------------------------------- ---
           1 INVALID ONLINE  +DATA/PROJ_STD/onlinelog/group_1.392.123263579                                  NO
           1         ONLINE  +FRA/PROJ_STD/onlinelog/group_1.948.123234493                                   YES
           2         ONLINE  +FRA/PROJ_STD/onlinelog/group_2.852.123234495                                   YES
           2 INVALID ONLINE  +DATA/PROJ_STD/onlinelog/group_2.393.123263607                                  NO
           3         ONLINE  +FRA/PROJ_STD/onlinelog/group_3.946.123234495                                   YES
           3 INVALID ONLINE  +DATA/PROJ_STD/onlinelog/group_3.394.123263613                                  NO
           4 INVALID ONLINE  +DATA/PROJ_STD/onlinelog/group_4.395.123263615                                  NO
           4         ONLINE  +FRA/PROJ_STD/onlinelog/group_4.933.123234497                                   YES
           5         STANDBY +FRA/PROJ_STD/onlinelog/group_5.989.123262059                                   NO
           5         STANDBY +DATA/PROJ_STD/onlinelog/group_5.387.123262055                                  NO
           6         STANDBY +FRA/PROJ_STD/onlinelog/group_6.990.123262075                                   NO
           6         STANDBY +DATA/PROJ_STD/onlinelog/group_6.388.123262073                                  NO
           7         STANDBY +DATA/PROJ_STD/onlinelog/group_7.389.123262081                                  NO
           7         STANDBY +FRA/PROJ_STD/onlinelog/group_7.991.123262085                                   NO
           8         STANDBY +DATA/PROJ_STD/onlinelog/group_8.390.123262091                                  NO
           8         STANDBY +FRA/PROJ_STD/onlinelog/group_8.992.123262093                                   NO
           9         STANDBY +DATA/PROJ_STD/onlinelog/group_9.391.123262103                                  NO
           9         STANDBY +FRA/PROJ_STD/onlinelog/group_9.993.123262105                                   NO

  the newspaper of the alerts:
  

  ORA-00313: open failed for members of log group 1 of thread 1
  ORA-00313: open failed for members of log group 2 of thread 1
  ORA-00313: open failed for members of log group 3 of thread 1
  ORA-00313: open failed for members of log group 4 of thread 1

  Is this correct? What's wrong? What I can do to solve this problem and all newspapers in restoration online in the two databases are equal?
  
  Thank you very much!!!

  Hello;

  Check out this note first:

  ORA-00313, ORA-00312, ORA-27037 Standby Database [601835.1 ID]

  OR

  On implementing standby

  ALTER DATABASE RECOVER MANAGED STANDBY DATABASE CANCEL;

  And then, for each group of newspaper

  change the database group claire logfile 1;

  After this verification, the v$ log view to confirm the size and status.

  Also check v$ standby_log and make sure that you have the day before newspapers too.

  Finally, check the alerts log and make sure that no more errors have occurred after that you have disabled the logfile group.

  Best regards

  mseberg

  Published by: mseberg on November 3, 2011 18:41

• Upgrade database Oracle 10 g to 11g use Datapump

  Hi all
  
  I'm planning our oracle 10g to 11g database use datapump in windows environment. I used developer sql to perform the upgrade in a TEST environment, I took any export DB 10 g and I then imported into DB 11 g. but I faced a lot of error during the import. So, I have attached the log file and I wait your help.
  
  [Log file | https://dl.dropboxusercontent.com/u/14131772/IMPORT.LOG]

  user13289313 wrote:
  Regarding this error ORA-31684: type of the object TYPE: "SYSMAN." "' MGMT_JOB_STEP_LIST ' is already no problem with him.

  But what of the errors below.

  ORA-39083: Type as procact_system cannot be created with the object error:
  ORA-20000: Incompatible Version of the Workspace Manager installed
  Because sql is:
  BEGIN
  declare the worm varchar2 (100); entire dummy; vdummy varchar2 (30); compile_exception EXCEPTION; PRAGMA EXCEPTION_INIT(compile_exception,-06550); invalid_table EXCEPTION; PRAGMA EXCEPTION_INIT(invalid_table,-00942); createErrorProc procedure is immediately start run "create or replace function system.wm$ _check_install return boolean is begin to return the value true;"
  Treatment of type of object DATABASE_EXPORT/SYSTEM_PROCOBJACT/PROCOBJ
  ORA-39083: Type THAT PROCOBJ cannot be created with the object error:

  PL see this Doc MOS

  DtaPump Import (IMPDP) error ORA-39083 ORA-20000 when Incompatible Version of the Workspace Manager is installed [ID 730373.1]

  ORA-39325: TABLE_EXISTS_ACTION cannot apply to "SYSMAN." "" MGMT_METRIC_COLLECTIONS ".

  ORA-31693: Table object "SYSMAN data." "' MGMT_JOB_CRED_PARAMS ' failed to load/unload and being ignored because of the error:
  ORA-29913: error in executing ODCIEXTTABLEOPEN legend
  ORA-29400: data cartridge error
  ORA-39779: Type "SYSMAN." "' MGMT_JOB_VECTOR_PARAMS ' not found or conversion to the latest version is not possible

  ORA-31693: Table object «OLAPSYS» data "" CLASSIFICATION of CWM to $"could not load/unload and being ignored because of the error:
  ORA-29913: error in executing ODCIEXTTABLEFETCH legend

  You use the OLAP features? If this is not the case, this can be ignored.

  Information about the installed database components and patterns [ID 472937.1]

  >

  ORA-39112: type of dependent object TRIGGER: "SYSMAN." «MGMT_SEVERITY_UPDATES ' ignored, base object type TABLE: "SYSMAN".» "" Creation of MGMT_SEVERITY ' failed

  ORA-39148: cannot import data in pre-existing table "SYSMAN" of the queue. "" AQ$ _MGMT_NOTIFY_QTABLE_G. Table_exists_action of ADD is ignored for this table.

  Ignore all the SYSMAN errors

  HTH
  Srini

• Parameters of database ORACLE 11g (Datawarehouse) - recommended/best practices

  Hi all
  
  What are the generally recommended database of parameters for one implementation of datawarehouse VLDB regarding:
  
  -The online Redo file size
  -Number of redo log file

  Do not explicitly set the log_buffer. Let Oracle autosize, it inspires the SGA_MAX_SIZE / SGA_TARGET.

  Hemant K Collette

• Upgrade Oracle 9i to 11g

  Hello

  We have an Oracle 9i database, now the client wants to move to 11g.

  Client insists on using import export to upgrade the database, rather than DBUA.

  Can someone provide me with the steps for the upgrade of Oracle 9i to 11g using import export.

  Also can you provide id note oracle to follow.

  Thank you and best regards,

  Patricia

  Here are the high level steps.

  (1) Create tablespace target Database 11 g.

  (2) take full backup of Database 9i export.

  (3) dump file to target server backup and import

  (4) make the validation test as number of the object, objects, Invalid etc.,.

  Steps are described here, you will.

  http://docs.Oracle.com/CD/E11882_01/server.112/e23633/expimp.htm#UPGRD008

• Upgrade to oracle 9i to 11g

  Hello

  I did it by certification OCP 9i in 2006 by prometric. Now, I want to give the review for upgrade to 11g (Oracle Database 11g: new features for 9i EFC 1Z0-055).

  I joined pearson VIEW. Please let me know if I need to add my previous certification in order to apply for 11 g OCP?

  Also, I read somewhere that I have to take a hands on training before the review... I'm confused about it.

  Can you get it someone please let me know the procedure to register for the 11g upgrade exam.

  Thank you

  You must get your CertView account if you have not already.  This will show all of your existing certifications.  When you register at Pearson, you must use the same Oracle test that is used with Prometric ID (and will appear in your CertView account.  Guidance on the transition from Prometric of Pearson view are detailed in the FAQ (link below).  Search for Prometric and you will get hits for answer about any question imaginable.

  Global FAQs

  If you already have a 9i OCP, you do not need to take another course of training practice to upgrade to 11 g.  You should have already taken a course to achieve this designation.  If you're a 9i OChas, it's a different story.  If you're an OCA, then 1Z0-055 will not upgrade you to an 11g OCP.  You will need to take the 1Z0-034 and a training course to become a 11 g OCP.

• Versions Linux support Oracle 9i, 10g, 11g

  Hi all
  
  I want to just a list of Versions and flavors of Linux that supports Oracle 9i, 10g, 11g.
  
  Thank you
  Josiane

  Use the certification tab in support.oracle.com. Select the product and release (IE. Database Oracle, 11.2.0.3.0) you want to check, let 'all' selected under the platform, and then click search. The results will be grouped for you. If you expand the Group of operating systems, you will get a list of distributions/versions for each supported operating system. I hope it's clear enough for you.

• Oracle 10g to 11g r2 r2 Migeration

  Hi all
  
  I have a test database (Oracle 10 g R2) in the windows XP platform. now I have to migerate it to oracle 11g R2. Can someone tell me how can I do it? It will be very aprciable if someone gives me the step by step procedure to do the same.
  
  Thank you and best wishes in advance
  Vikash Jain (trainee DBA)

  Hello

  so for the upgrade, should I install oracle 11g?

  Yes, he must first install Oracle 11.2. You may need to change the configuration of the server according to the prerequisites.

  You will find all the details on the Setup Guides for your platform:

  http://www.Oracle.com/pls/db112/portal.portal_db?selected=11&frame=

  how it is possible without the use of import/export/datapump utilities?

  If you don't want to use the Import/Export, you can use DBUA (the database upgrade Assistant) or manual method. You will have more information on the links below:

  http://download.Oracle.com/docs/CD/E11882_01/server.112/e17222/preup.htm#i694345

  http://download.Oracle.com/docs/CD/E11882_01/server.112/e17222/upgrade.htm#i1011372

  Hope this helps.
  Best regards
  Jean Valentine

• Unable to connect to the database of the OBIEE 11g improved SPR

  Hello
  
  I am faced with questions about the RPD - 11 G upgrade. I used the batch ua (Upgrade Wizard) program to upgrade the RPD and catalogue. The upgrade was successful, and the new set of upgrade RPD and obtained catalog loaded in servers.
  
  When I try to view the physical layer data I get the error message "connection failed."
  
  I also noticed that the Type of data in the physical layer (right-click on the Database object) changed to Oracle 10 g 2. The RPD, before the upgrade was Oracle 10 g 2 / 11g. My main is on 11G.
  
  I advanced and changed the type of Oracle11g database in the RPD upgraded. Now when I click on "Show data", I get a different error
  
  "TNA 46028 failed to get the path of the DLL for the CLI 10 g / 11g comes from the NQSConfig.ini file."
  
  In the Config file I have sub sections:
  -----
  [DB_DYNAMIC_LIBRARY]
  
  ODBC200 = nqsdbgatewayodbc;
  ODBC350 = nqsdbgatewayodbc35;
  Oci8 = nqsdbgatewayoci8;
  OCI8i = nqsdbgatewayoci8i;
  OCI10g = nqsdbgatewayoci10g;
  DB2CLI = nqsdbgatewaydb2cli;
  DB2CLI35 = nqsdbgatewaydb2cli35;
  NQSXML = nqsdbgatewayxml;
  XMLA = nqsdbgatewayxmla;
  ESSBASE = nqsdbgatewayessbasecapi;
  OracleADF = nqsdbgatewayoracleadf;
  OracleADF_HTTP = nqsdbgatewayoracleadf;
  HyperionADM = nqsdbgatewayadm;
  -----
  All DLLs referenced above can be found under C:\Middleware\Oracle_BI1\bifoundation\server\bin
  
  I noticed that there is no OCI11g entry in the NQSConfig or in the C:\Middleware\Oracle_BI1\bifoundation\server\bin folder.
  
  Is this the question?. If so how can I get the DLL to 11G.
  
  Anyone of you faced a similar problem?
  
  Any help would be highly appreciated
  
  Thank you
  Joe

  This is a change in behavior when we have 10g and 11g. In BI EE 10 g, there was no Oracle Client delivered with BI EE. Thus, BI EE will use your Oracle DB client host to connect to the database. Usually not a problem in this case. But in BI EE 11 g, the software itself contains a client of 11.2 DB. Thus, when you try to connect to the database using the repository or the BI server, it will try to find the tnsnames entry in the customer Oracle of BI EE 11 g instead of your database. There are 2 options to work around this problem

  1. copy your tnsnames.ora {Oracle_BI1} \network\admin directory & {oracle_common} \network\admin directory (only the first is necessary because it is the ORACLE_HOME)

  2. or instead of the source tnsnames.ora entry, use the full expanded tnsnames as shown below

  (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP) (HOST = 172.16.66.173)(PORT = 1521)) (CONNECT_DATA = (SERVER = DEDICATED)(SERVICE_NAME = orcl)))

  Both of the above will work.

  Thank you
  Vincent

• stop the database when the HOT backup running

  Hello
  
  Can someone pls tell... WHT can impact on the database if the database will get stop accidentally during the hot running backup...
  
  Thank you

  There will be no impact on db; because its ORACLE database; very smart and easy to use.

  What happens if the instance goes down for the tablespaces into backup mode?

  When you start the database after that, Oracle will say that it requires recovery. It's because the RCS has been frozen and this is the expected behavior, because if you restore the file copied, it needs to be recovered. (and the only way that oracle has to set its value in the copy is put in the current file while it is copied)

  In this case, you can issue:

  ALTER DATABASE END BACKUP; ALTER DATABASE OPEN; to open the database.

  But your backup is not usable, it must do it again.

  Source: http://knol.google.com/k/oracle-begin-backup-end-backup#

  HTH
  Girish Sharma

• Decommissioning of enterprise database Oracle 11 g in Standard Oracle 11 g with respect to licensing?

  Hello

  I was wondering if we can get off our 11g EE licenses licenses SE g 11, considering has focused on making licenses and provided RAC (Real Application Cluster) free option for clusters with up to 4 outlets.

  This question is purely in terms of licensing of database Oracle.

  
  Any help would be appreciated.

  Thank you

  T

  Yes that's the problem in EE rac is an additional option instead of CARS data use guardto DR solution.SE and EE are two different products and I know licenses are not exchangeable

• Database Oracle from Windows to Linux migration

  Hey guys,.

  I'm database oracle 11g R2 in Windows 7 migration to Red hat 5 (64-bit) Linux using RMAN by transport.sql file. I installed Oracle 11 g R2 on the two system.

  But the problem is that my data files are scattered in different locations (I mean that all are not in the same directory) and I did not have enough space to all copy in the same directory. Can someone tell me how I'm supposed to write several locations as value the NAME of FILE DB CONVERT parameter when creating transport using RMAN script, I know the command for a directory only.

  RMAN > Convert the new database database linuxdb

  script of transport for "C:\test\transport.sql."

  db_file_name_convert 'C:\oracle\oradata\orcl\' "C:\test".

  the platform "Linux IA < 32 bit >";

  This command allows to convert all the files in the database that resides in the orcl directory and place them in the test directory. But in my case, all the files are not in the directory orcl

  and I can't copy other files in there because I don't have enough space on the entire system.

  I can't create transport script several times because it is incorrect.

  I appreciate your thoughts and suggestions.

  You can specify as many pairs of directories as needed

  db_file_name_convert = ('/ u01/ora/files ' ' / u02/ora/files ' ' / u01/ora/file9 ' ' / u02/ora/file9 ')

• How to ETL extract data from database Oracle 11.1 using Cognos Data Manager 10.1

  Hello

  I need to run the IBM Cognos Data Manager 10.1 version ETL tool for extracting data from the Oracle11.1 database.

  My understanding is that, from the point of view of database, the best way would to have a stored procedure that will provide a reference cursor in the ETL client tool.

  However, a database procedure the ETL tool running seems not to be possible in this version of the data manager.

  If someone has done this before? What is the best way for this snippet to do?

  Thank you

  Emilija

  Annabelle says:

  My reading of original question: "What is the best way for this snippet to do?"

  Sorry - is NOT helping.

  The BEST way to extract data from a table is to use a SELECT statement.

  You said you want to do.

  So just repeat your original question instead of those that ask you to answer will not move forward us.

• Database Oracle 12 c and Kerberos

  Hi guys, I have the Kerberos authentication on lunix works well but I can not configure the database to authenticate users with Kerberos 5.

  I followed the official instructions on setting up Kerberos authentication. However, I am struck with as error.

  The work of okinit and oklist. But when I try to connect with 'sqlplus /@orcl' it gives me this error:

  ERROR:

  ORA-12638: credential retrieval failed

  Can someone help me?

  Thanks in advance

  Environmental information:

  Database Oracle 12 c: with the support of multitenent.

  Red Hat Enterprise Linux Server 6.4 release (Santiago) - Kernel: 2.6.32 - 358.18.1.el6.x86_64

  the newspaper made with Kerberos.

  The content of the relevant files are here:

  SQL.ora

  # Network Configuration file SQLNET.ora:... /Network/admin/SQLNET.ora

  # Generated by Oracle configuration tools.

  SQLNET. AUTHENTICATION_SERVICES = (DOB KERBEROS5)

  SQLNET. KERBEROS5_KEYTAB = /etc/oracle.keytab.03.27.14

  SQLNET. KERBEROS5_REALMS = /etc/krb5.realms

  SQLNET. KERBEROS5_CC_NAME = / tmp/krb5cc

  SQLNET. KERBEROS5_CONF = /etc/krb5.conf

  SQLNET. KERBEROS5_CONF_MIT = TRUE

  SQLNET. AUTHENTICATION_KERBEROS5_SERVICE = orcl.my - machine.my - domain

  SQLNET. KERBEROS5_CLOCKSKEW = 6000

  NAMES. DIRECTORY_PATH = (TNSNAMES, EZCONNECT)

  TRACE_LEVEL_SERVER = ADMIN

  TRACE_LEVEL_CLIENT = ADMIN

  TRACE_LEVEL_LISTENER = ADMIN

  krb5.conf

  #File modified by ipa-client-install

  INCLUDEDIR /var/lib/sss/pubconf/krb5.include.d/

  [libdefaults]

  default_realm = MY-DOMAIN

  dns_lookup_realm = false

  dns_lookup_kdc = false

  RDN = false

  ticket_lifetime = 24 hours

  address = yes

  [realms]

  MY. AREA = {}

  KDC = kdc - server.my - area: 88

  kdc = master_kdc - server.my - domain: 88

  admin_server = kdc - server.my - domain: 749

  domaine_par_defaut = my-domain

  pkinit_anchors = FILE:/etc/ipa/ca.crt

  }

  [domain_realm]

  .my-domain = MY-DOMAIN

  My-domain = MY-DOMAIN

  krb5. Realms

  My-MY-DOMAIN

  tnsnames.ora

  # Network Configuration file tnsnames.ora:... /Network/admin/tnsnames.ora

  # Generated by Oracle configuration tools.

  ORCL =

  (DESCRIPTION =

  (ADDRESS = (PROTOCOL = TCP) (HOST = my - machine.my -)(PORT = 1521) area)

  (CONNECT_DATA =

  (SERVER = DEDICATED)

  (SERVICE_NAME = orcl.my - domain)

  )

  )

  Besides, I saw the newspaper of KDC kerberos 'sqlplus /@orcl' demand was very strange:

  Mar 27 15:15:43 kdc - server.my - domain krb5kdc [2715] (info): TGS_REQ (4 {18 17 16 23} ETYPE) 128.122.72.166: PROCESS_TGS: authtime 0, < unknown client > < unknown Server >, wrong net address

  Mar 27 15:15:43 kdc - server.my - domain krb5kdc [2714] (info): TGS_REQ (4 {18 17 16 23} ETYPE) 128.122.72.166: PROCESS_TGS: authtime 0, < unknown client > < unknown Server >, wrong net address

  Hi again, my steps below. I apologize for my English

  And I don't know how to remove links e-mail. I.e. [email protected] should be just krbuser to somedomain.ru.

  Test configuration:

  Kerberos (KDC, Microsoft) server:

  • Host: dc1.somedomain.ru (10.0.2.11)
  • Server Windows 2008/2012 tested
  • Active Directory (KDC)
  • Domain: SOMEDOMAIN.RU

  Kerberos (Oracle DB server) client:

  • Host: dboraclen1.somedomain.ru (10.0.2.76)
  • RedHat Linux
  • Oracle 11.2.0.4 Server Standard Edition (* patched)

  Oracle client:

  • Host: dbclient.somedomain.ru (10.0.2.7)
  • RedHat Linux
  • Oracle 11.2.0.4 client

  P1: Setting up the Kerberos client to interoperate with KDC in Windows Server 2008/2012

  On dboraclen1.somedomain.ru.

  1.1 Kerberos software control

  [root @ /] $ cd/etc
  [root @ / etc] $ rpm - qa | grep-i krb5
  krb5-workstation - 1.2.7 - 44
  pam_krb5-1, 73-1
  krb5-libs - 1.2.7 - 44

  1.2 configure Kerberos

  Check/change:

  /etc/krb5.conf

  / etc/krb5. Realms

  / etc/KRB. Realms

  / etc/hosts

  / etc/services

  # /etc/krb5.conf:
  [record]
  default=file:/var/log/krb5libs.log
  KDC=file:/var/log/krb5kdc.log
  admin_server=file:/var/log/kadmind.log

  [libdefaults]
  default_realm = SOMEDOMAIN.RU
  dns_lookup_realm = false

  dns_lookup_kdc = false

  ticket_lifetime = 24 hours

  renew_lifetime = 7 d

  address = true

  [realms]
  SOMEDOMAIN.RU = {}
  KDC = dc1.somedomain.ru:88
  }

  [domain_realm]
  . somedomain.ru = SOMEDOMAIN.RU
  somedomain.ru = SOMEDOMAIN.RU

  [CDC]
  Profile = /var/kerberos/krb5kdc/kdc.conf

  # /etc/krb5.realms:

  . somedomain.ru = SOMEDOMAIN.RU

  # /etc/krb.realms:
  . somedomain.ru = SOMEDOMAIN.RU

  # / etc/hosts:
  127.0.0.1 localhost.localdomain localhost

  10.0.2.76 dboraclen1.somedomain.ru dboraclen1
  10.0.2.11 dc1.somedomain.ru dc1

  # / etc/services:
  88/tcp kerberos5 Kerberos krb5 # Kerberos v5
  88/udp kerberos5 Kerberos krb5 # Kerberos v5

  !!! Using only capital letters with domain, only lowercase with names of user/hostames. It is important.

  1. 1.3 Kerberos software control on the database server

  (oracle owner = oracle, ORACLE_HOME= /Oracle/u01/oracle/database/11r2)
  

  [oracle@ /home/oracle]$ cd $ORACLE_HOME/bin [oracle@ /Oracle/u01/oracle/database/11r2/bin]$ ./adapters
  
   Installed Oracle Advanced Security options are: ... Kerberos v5 authentication RADIUS authentication or
  
   [oracle@ /Oracle/u01/oracle/database/11r2/bin]$ ./adapters ./oracle ... Kerberos v5 authentication RADIUS authentication
  

  P2: Configuration of KDC in Windows 2008/2012

  On dc1.somedomain.ru.

  2.1 create a user in Microsoft Active Directory

  
  

  In the menu "Administration / Active Directory users and computers:

  [General]
  Name: krbuser
  Family name: eu1
  View name: kerberos user 1

  [Account]
  User logon name: [email protected]

  Main 2.2.create for Oracle database in Microsoft AD

  Create the user with the name exactly as database host name, i.e. the dboraclen1.somedomain.ru and password, i.e. oracle:

  [General]
  Name: dboraclen1.somedomain.ru
  Full name: dboraclen1.somedomain.ru

  [Account]
  User logon name: [email protected]

  [Account options]
  Password never expires.

  !!! Select the option: do not use Kerberos preauthentication

  !!! Deselect the option "user must change password on the next logon".

  To complete the creation use ktpass.exe.

  Run:

  C:\Program Files\Support Tools > ktpass princ - oracle/[email protected] mapuser - dboraclen1-pass oracle-crypto RC4-HMAC-NT - out c:\temp\keytab.dboraclen1
  Targeting the domain controller: dc1.somedomain.ru
  The setting method using legacy password
  Correctly mapped dboraclen1.somedomain.ru oracle/dboraclen1.somedomain.ru.
  WARNING: type pType and account do not match. This could cause problems.
  Created key.
  Output keytab to c:\temp\keytab.dboraclen1 file:
  Keytab version: 0 x 502
  KeySize 81 oracle/[email protected] ptype 0

  Copy c:\temp\keytab.dboraclen1 into the directory etc./etc/etc on Oracle DB machine (dboraclen1.somedomain.ru).

  P3: Configuring Oracle DB to interoperate with KDC

  On dboraclen1.somedomain.ru.

  sqlnet.ora 3.1

  #/Oracle/u01/oracle/database/11r2/network/admin/sqlnet.ora

  NAMES. DIRECTORY_PATH = (TNSNAMES)
  SQLNET. KERBEROS5_REALMS = /etc/krb5.realms
  SQLNET. KERBEROS5_CONF=/etc/krb5.conf
  SQLNET. KERBEROS5_KEYTAB=/etc/keytab.dboraclen1
  SQLNET. AUTHENTICATION_KERBEROS5_SERVICE = oracle
  SQLNET. KERBEROS5_CONF_MIT = true
  SQLNET. AUTHENTICATION_SERVICES = (DOB, Kerberos5)

  SQLNET. KERBEROS5_CLOCKSKEW = 6000

  3.2 check/change settings on the server of DB Oracle

  OS_AUTHENT_PREFIX =""
  REMOTE_OS_AUTHENT = FALSE

  3.3.create user database in Oracle DB

  The user sys (System):

  SQL > create user '[email protected]' identified externally.
  Created by the user.

  SQL > grant create session, resources to '[email protected]';
  Grant succeeded.

  or

  SQL > create user KERBUSER identified externally as ' [email protected]';
  Created by the user.

  SQL > grant create session, resource at KERBUSER.
  Grant succeeded.

  P4 - configuration of Oracle customers

  On each client computer.

  4.1 configuration of oracle (for Linux)

  The configuration files (krb5.conf, krb5.realms, krb.realms) Kerberos and armed, services may be same as above.

  Create a linux user, i.e. krbuser.

  # /home/krbuser/sqlnet.ora
  NAMES. DIRECTORY_PATH = (TNSNAMES)

  SQLNET. KERBEROS5_CC_NAME = / tmp/krb5cc_502

  SQLNET. KERBEROS5_CONF = /etc/krb5.conf

  SQLNET. KERBEROS5_CONF_MIT = true

  SQLNET. AUTHENTICATION_SERVICES = (kerberos5)

  SQLNET. KERBEROS5_CLOCKSKEW = 6000

  # /home/krbuser/tnsnames.ora
  DB_test_auth =

  (DESCRIPTION =

  (ADDRESS = (PROTOCOL = TCP)(HOST = dboraclen1.somedomain.ru) (PORT = 1521))

  (CONNECT_DATA =

  (SERVER = DEDICATED)

  (SERVICE_NAME = GlobalDB)

  )

  )

  4.2 get ticket (TGT) initial kerberos:

  Run $ORACLE_HOME/bin/okinit:

  [krbuser @ / home/krbuser] $ okinit EI 23
  Utilities for Linux Kerberos: Version 11.2.0.4.0 - Production on August 16, 2011 15:44:11
  Copyright (c) 1996, Oracle 2011.  All rights reserved.
  Password for [email protected]:<-- ad="" user="">
  [krbuser @ / home/krbuser] $

  Check the TGT with $ORACLE_HOME/bin/oklist:

  [krbuser @ / home/krbuser] $ oklist
  Utilities for Linux Kerberos: Version 11.2.0.4.0 - Production on August 16, 2011 15:45:46
  Copyright (c) 1996, Oracle 2011.  All rights reserved.
  Ticket cache: / tmp/krb5cc_502
  Default principal: [email protected]
  Valid from expires Principal
  November 16, 2013 15:41:52 16 November 2013 23:44:11 krbtgt/SOMEDOMAIN. [email protected]
  [krbuser @ / home/krbuser] $

  and

  [krbuser @ / home/krbuser] $ ls tmp/-l/krb5cc_502
  -rw - 1 krbuser s/n 527 Nov 15:41 16 / tmp/krb5cc_502

  4.3.test

  Check the time synchronization between the clients and the server of DB.

  [krbuser @ / home/krbuser] $ sqlplus /@DB_test_auth
  SQL * more: version 11.2.0.4.0 - Production on Tue Nov 16 15:56:53 2013
  Copyright (c) 1982, 2013, Oracle.  All rights reserved.
  Connected to:
  Oracle Database 11 g Release 11.2.0.4.0 - 64 bit Production

  SQL >