Database security: personalized accounts at O.S.-level

By | July 12th, 2009|Categories: Database|Tags: , , |

Attended a workshop about “Oracle database security” (by Frits Hoogland), though the subject  could also be named  like “O.S.-security of an Oracle Database”.  Most of the times the database will be installed by an ‘oracle’ account, and all the DBA’s are using this account for administrative purpose.
Nothing wrong with that, but logging/auditing of this oracle account is modifyable (=useless) and who did what on this machine?
So it’s quite understandable that an organization will choose for personalized, controlled accounts for DBA’s. Quite scary for a DBA by the way, his kingdom and freedom is vanishing…

What follows is a template to setup such personalized account.
Root – create users and groups
# groupadd -g 54321 oracle
# groupadd -g 54322 oinstall
# groupadd -g 54323 dba
# groupadd -g 54324 oper
# groupadd -g 54325 asm
# useradd -d /home/oracle -m -g oracle -G dba,asm,users,oinstall -s /bin/bash \
-u 54321 -c “Oracle software owner” oracle

For X-windows:
grep the X-cookie, from server console:
# env |grep XAUT
Make this cookie accessable for other users:
# chmod 644 $XAUTHORITY

Become ‘oracle’
# su – oracle
$ export XAUTHORITY=/tmp/.gdmXXXXXX


Creating / deleting a reports server in OAS 10.1.2, integrated with EM/AS-console

By | July 10th, 2009|Categories: App. Server|Tags: , |

Creating a reports server and integrate it with Enterprise Manager / iasconsole

– Under control of opmn (wil be automatically restarted)
– Visible and manageable under Enterprise Manager.

1. Create/start a new reports server : “$ORACLE_HOME/bin/ repproject
2. A small window will pop-up, showing that the reports server is starting up.
3. After it’s status is ready, stop this server.
4. Register this new reports server (you can do this also by hand, in the section of deleting this, you can also see what files you will have to update to insert or delete a reports server).

$ORACLE_HOME/bin/ repproject

The command registers the reports server to OPMN and Enterprise Manager.

The following entry is added to $ORACLE_HOME/opmn/conf/opmn.xml (sorry for the layout) :

<ias-component id=”repproject” status=”enabled” id-matching=”false”>
<process-type id=”ReportsServer” module-id=”ReportsServices”>
<process-set id=”repproject” restart-on-death=”true” numprocs=”1″>
<variable id=”PATH” value=”/home/ias10g/OraHome1/bin:/usr/bin:/usr/ccs/bin:/bin:/usr/kerberos/bin:/opt/IBMJava2-131/bin:/opt/IBMJava2-131/jre/bin:/bin:/usr/bin:/usr/local/bin:/usr/bin/X11:/usr/X11R6/bin”/>
< module-data>
<category id=”general-parameters”>
<data id=”batch” value=”yes”/>
<category id=”restart-parameters”>
<data id=”reverseping-timeout” value=”120″/>
<OID infrastructure=”true”/>
<database infrastructure-key=”portal”/>
<managed-process ias-component=”OC4J” process-type=”OC4J_BI_Forms” process-set=”default_island” autostart=”true”/>
<managed-process ias-component=”HTTP_Server” process-type=”HTTP_Server” process-set=”HTTP_Server” autostart=”true”/>
<start timeout=”120″ retry=”3″/>
<stop timeout=”120″/>
<restart timeout=”120″/>
<ping timeout=”30″ interval=”30″/>


The curious case of the left-handed mouse in webforms

By | July 6th, 2009|Categories: App. Server|Tags: , , , |

In OAS (, webforms, when using a left-handed mouse to expand a menu, the tree node is not expanding. No error is given.
For example, in ‘Material Workbench’ select the ‘+’ to expand ‘Organizations’ in the menu.
Left and right button does not do anything.
Also, the left handed users are having difficulties […]