install – bushmelev-aa.ru

enable Oracle Label Security

05.11.2015 Bushmelev Anton Комментариев нет

Oracle Database 12c: Security 13 – 3

Enabling and Managing OLS

•Register and enable OLS:
– Using DBCA or
– Executing the LBACSYS.CONFIGURE_OLS and LBACSYS.OLS_ENFORCEMENT.ENABLE_OLS procedures
•The The LBACSYS schema owns all OLS objects.
•Use Enterprise Manager Cloud Control (EMCC) SQL*Plus to manage the Label Security policies.
•In PDBs, which canhttp://bushmelev-aa.ru/wp-admin/edit-tags.php?taxonomy=post_tag be plugged in and out of CDBs:
– Manage OLS components on a subset of PDBs in a CDB:
— Policies (no policies in the root)
— Data labels
— User authorizations
– The LBACSYS schema is a common user schema.
– LBACSYS objects are automatically available to any PDB.

OLS: Features

OLS provides:
• Row-level security based on Virtual Private Database (VPD) technology
– All required packages for access mediation
– Complete data dictionary for managing OLS components
•A complete infrastructure for managing label security policies, sensitivity labels, and user security clearances
• Enterprise Manager pages containing a graphical user interface for managing OLS
• Integration with Oracle Identity Management starting Oracle Database 10g Release 1

OLS is built on the fine-grained access control technology of VPD. The major advantage of using OLS is that OLS is a complete system. It is a ready-to-use VPD. OLS provides sophisticated functions and procedures for evaluating and comparing sensitivity labels. It provides a sophisticated infrastructure for storing and managing sensitivity labels and user security clearances.

SELECT status FROM DBA_OLS_STATUS WHERE name = 'OLS_CONFIGURE_STATUS';

22:34:47 (1)[PDB1]c##bushmelev_aa@p00db1> SELECT status FROM DBA_OLS_STATUS WHERE name = 'OLS_CONFIGURE_STATUS';

STATUS
------
FALSE

22:39:02 (1)[PDB1]sys@p00db1> EXEC LBACSYS.CONFIGURE_OLS

PL/SQL procedure successfully completed.

22:39:06 (1)[PDB1]sys@p00db1> SELECT status FROM DBA_OLS_STATUS WHERE name = 'OLS_CONFIGURE_STATUS';

STATU
-----
TRUE

Check whether OLS is enabled.

22:40:33 (1)[PDB1]sys@p00db1> SELECT value FROM V$OPTION WHERE parameter = 'Oracle Label Security';

VALUE
----------------------------------------------------------------
FALSE

Enable OLS

22:48:46 (1)[PDB1]sys@p00db1>  EXEC LBACSYS.OLS_ENFORCEMENT.ENABLE_OLS;

PL/SQL procedure successfully completed.

Elapsed: 00:00:00.53
22:49:45 (1)[PDB1]sys@p00db1> SELECT value FROM V$OPTION WHERE parameter = 'Oracle Label Security';

VALUE
----------------------------------------------------------------
TRUE

ps: Registration and enabling execute at the container level.

pps:
Connected to:
Oracle Database 12c Enterprise Edition Release 12.1.0.2.0 – 64bit Production
With the Partitioning, Automatic Storage Management, Oracle Label Security, OLAP,
Advanced Analytics, Real Application Testing and Unified Auditing options

Implementing an OLS Solution

check OLS:
http://www.oracle.com/technetwork/articles/idm/ls-093349.html

create user myco_emp identified by 1;
create user myco_mgr identified by 1;
create user myco_planning identified by 1;

 GRANT CREATE SESSION to MYCO_EMP ;
 GRANT CREATE SESSION to MYCO_MGR;
 GRANT CREATE SESSION to MYCO_PLANNING ;


grant select on hr.job_history to MYCO_PLANNING;
grant select on hr.job_history to MYCO_emp;
grant select on hr.job_history to MYCO_mgr;
 GRANT SELECT ON hr.LOCATIONS TO MYCO_EMP;
 GRANT SELECT ON hr.LOCATIONS TO MYCO_mgr;
 GRANT SELECT ON hr.LOCATIONS TO MYCO_PLANNING;
 GRANT SELECT, INSERT, UPDATE, DELETE ON HR.LOCATIONS TO  MYCO_PLANNING;

connect as sysdba or unlock LBACSYS and connect by it

 -- ****************************************************
 -- Creating FACILITY Policy
 -- ****************************************************
 BEGIN
 SA_SYSDBA.CREATE_POLICY('FACILITY','FACLAB',
 'READ_CONTROL,CHECK_CONTROL,LABEL_DEFAULT,HIDE');
 END;
 /

 -- ****************************************************
 -- Adding sensitivity levels to FACILITY policy:
 -- ****************************************************
BEGIN
SA_COMPONENTS.CREATE_LEVEL('FACILITY', 1000,'P','PUBLIC');
SA_COMPONENTS.CREATE_LEVEL('FACILITY',2000,'S','SENSITIVE');
SA_COMPONENTS.CREATE_LEVEL('FACILITY',3000,'HS','HIGHLY_SENSITIVE');
END;
/



 -- ****************************************************
 -- Adding groups to FACILITY policy:
 -- ****************************************************
 BEGIN
 SA_COMPONENTS.CREATE_GROUP('FACILITY', 1000,'Global','Global');
 SA_COMPONENTS.CREATE_GROUP('FACILITY',101,'US','United States','GLOBAL');
 SA_COMPONENTS.CREATE_GROUP('FACILITY',102,'EU','Europe','GLOBAL');
 SA_COMPONENTS.CREATE_GROUP('FACILITY',103,'Asia','Asia','GLOBAL');
 END;
 /


 -- ****************************************************
 -- Creating Labels for FACILITY policy
 -- ****************************************************
 EXECUTE SA_LABEL_ADMIN.CREATE_LABEL('FACILITY', 1000,'P');
 EXECUTE SA_LABEL_ADMIN.CREATE_LABEL('FACILITY',2101,'S::US');
 EXECUTE SA_LABEL_ADMIN.CREATE_LABEL('FACILITY',3101,'HS::US');
 EXECUTE SA_LABEL_ADMIN.CREATE_LABEL('FACILITY', 2103,'S::ASIA');
EXECUTE SA_LABEL_ADMIN.CREATE_LABEL('FACILITY',3103,'HS::ASIA');


 -- **************************************************
 -- Setting MYCO_EMP user label authorizations
 -- Setting MYCO_MGR user label authorizations
 -- Setting MYCO_PLANNING user label authorizations
 -- **************************************************
 exec SA_USER_ADMIN.SET_USER_LABELS ('PRIVACY', 'MYCO_MGR','C');
 exec SA_USER_ADMIN.SET_USER_LABELS ('FACILITY','MYCO_EMP','P');
 exec SA_USER_ADMIN.SET_USER_LABELS ('FACILITY','MYCO_MGR','S::US,EU,ASIA');
 exec SA_USER_ADMIN.SET_USER_LABELS ('FACILITY','MYCO_PLANNING','HS::GLOBAL');

-- Applying FACILITY policy to hr.locations table.
-- *************************************************
 Begin
 sa_policy_admin.apply_table_policy (
 POLICY_NAME => 'FACILITY',
 SCHEMA_NAME => 'HR',
 TABLE_NAME => 'LOCATIONS',
 TABLE_OPTIONS => NULL,
 LABEL_FUNCTION => NULL);
 END;
 /


 -- ****************************************************
 -- Update Labels for Sites In ASIA
 -- ****************************************************

 update hr.locations set faclab = char_to_label('FACILITY','S::ASIA') where upper(city) in ('BEIJING','TOKYO','SINGAPORE');

 -- ****************************************************
 -- Update Labels for Sites In US
 -- ****************************************************

 update hr.locations set faclab = char_to_label('FACILITY','HS::US') where upper(city) in ('SOUTH SAN FRANCISCO');


 -- ****************************************************
 -- Update Labels for all remaining locations
 -- ****************************************************

 update hr.locations set faclab = char_to_label('FACILITY','P') where faclab is NULL;


commit;


                                


where upper(city) in ('BEIJING','TOKYO','SINGAPORE');
-- ****************************************************
-- SETTING LABELS FOR PRIVACY POLICY
-- ****************************************************


connect hr/oracle_4U@localhost:1521/pdb1

last piece of code failed with error :

 update hr.job_history set privlab = char_to_label('PRIVACY','S') where ((to_char(sysdate,'YYYY') - to_char(end_date,'YYYY')) > 10);
 update hr.job_history set privlab = char_to_label('PRIVACY','C') where ((to_char(sysdate,'YYYY')- to_char(end_date,'YYYY')) <= 10);

now lets check emp:

01:13:40 not connected> select l.*,label_to_char(faclab) label from hr.locations l;

LOCATION_ID | STREET_ADDRESS                           | POSTAL_CODE  | CITY                           | STATE_PROVINCE            | CO | LABEL
----------- | ---------------------------------------- | ------------ | ------------------------------ | ------------------------- | -- | ----------
       1000 | 1297 Via Cola di Rie                     | 00989        | Roma                           | <NULL>                    | IT | P
       1100 | 93091 Calle della Testa                  | 10934        | Venice                         | <NULL>                    | IT | P
       1300 | 9450 Kamiya-cho                          | 6823         | Hiroshima                      | <NULL>                    | JP | P
       1400 | 2014 Jabberwocky Rd                      | 26192        | Southlake                      | Texas                     | US | P
       1600 | 2007 Zagora St                           | 50090        | South Brunswick                | New Jersey                | US | P
       1700 | 2004 Charade Rd                          | 98199        | Seattle                        | Washington                | US | P
       1800 | 147 Spadina Ave                          | M5V 2L7      | Toronto                        | Ontario                   | CA | P
       1900 | 6092 Boxwood St                          | YSW 9T2      | Whitehorse                     | Yukon                     | CA | P
       2100 | 1298 Vileparle (E)                       | 490231       | Bombay                         | Maharashtra               | IN | P
       2200 | 12-98 Victoria Street                    | 2901         | Sydney                         | New South Wales           | AU | P
       2400 | 8204 Arthur St                           | <NULL>       | London                         | <NULL>                    | UK | P
       2500 | Magdalen Centre, The Oxford Science Park | OX9 9ZB      | Oxford                         | Oxford                    | UK | P
       2600 | 9702 Chester Road                        | 09629850293  | Stretford                      | Manchester                | UK | P
       2700 | Schwanthalerstr. 7031                    | 80925        | Munich                         | Bavaria                   | DE | P
       2800 | Rua Frei Caneca 1360                     | 01307-002    | Sao Paulo                      | Sao Paulo                 | BR | P
       2900 | 20 Rue des Corps-Saints                  | 1730         | Geneva                         | Geneve                    | CH | P
       3000 | Murtenstrasse 921                        | 3095         | Bern                           | BE                        | CH | P
       3100 | Pieter Breughelstraat 837                | 3029SK       | Utrecht                        | Utrecht                   | NL | P
       3200 | Mariano Escobedo 9991                    | 11932        | Mexico City                    | Distrito Federal,         | MX | P

19 rows selected.

01:13:42 not connected> sho user
USER is "MYCO_EMP"

check mgr

01:16:10 not connected> sho user
USER is "MYCO_MGR"
01:16:12 not connected> select l.*,label_to_char(faclab) label from hr.locations l;

LOCATION_ID | STREET_ADDRESS                           | POSTAL_CODE  | CITY                           | STATE_PROVINCE            | CO | LABEL
----------- | ---------------------------------------- | ------------ | ------------------------------ | ------------------------- | -- | ----------
       1000 | 1297 Via Cola di Rie                     | 00989        | Roma                           | <NULL>                    | IT | P
       1100 | 93091 Calle della Testa                  | 10934        | Venice                         | <NULL>                    | IT | P
       1200 | 2017 Shinjuku-ku                         | 1689         | Tokyo                          | Tokyo Prefecture          | JP | S::ASIA
       1300 | 9450 Kamiya-cho                          | 6823         | Hiroshima                      | <NULL>                    | JP | P
       1400 | 2014 Jabberwocky Rd                      | 26192        | Southlake                      | Texas                     | US | P
       1600 | 2007 Zagora St                           | 50090        | South Brunswick                | New Jersey                | US | P
       1700 | 2004 Charade Rd                          | 98199        | Seattle                        | Washington                | US | P
       1800 | 147 Spadina Ave                          | M5V 2L7      | Toronto                        | Ontario                   | CA | P
       1900 | 6092 Boxwood St                          | YSW 9T2      | Whitehorse                     | Yukon                     | CA | P
       2000 | 40-5-12 Laogianggen                      | 190518       | Beijing                        | <NULL>                    | CN | S::ASIA
       2100 | 1298 Vileparle (E)                       | 490231       | Bombay                         | Maharashtra               | IN | P
       2200 | 12-98 Victoria Street                    | 2901         | Sydney                         | New South Wales           | AU | P
       2300 | 198 Clementi North                       | 540198       | Singapore                      | <NULL>                    | SG | S::ASIA
       2400 | 8204 Arthur St                           | <NULL>       | London                         | <NULL>                    | UK | P
       2500 | Magdalen Centre, The Oxford Science Park | OX9 9ZB      | Oxford                         | Oxford                    | UK | P
       2600 | 9702 Chester Road                        | 09629850293  | Stretford                      | Manchester                | UK | P
       2700 | Schwanthalerstr. 7031                    | 80925        | Munich                         | Bavaria                   | DE | P
       2800 | Rua Frei Caneca 1360                     | 01307-002    | Sao Paulo                      | Sao Paulo                 | BR | P
       2900 | 20 Rue des Corps-Saints                  | 1730         | Geneva                         | Geneve                    | CH | P
       3000 | Murtenstrasse 921                        | 3095         | Bern                           | BE                        | CH | P
       3100 | Pieter Breughelstraat 837                | 3029SK       | Utrecht                        | Utrecht                   | NL | P
       3200 | Mariano Escobedo 9991                    | 11932        | Mexico City                    | Distrito Federal,         | MX | P

22 rows selected.

now check myco_planning:

USER is "MYCO_PLANNING"
01:17:57 not connected> select l.*,label_to_char(faclab) label from hr.locations l;

LOCATION_ID | STREET_ADDRESS                           | POSTAL_CODE  | CITY                           | STATE_PROVINCE            | CO | LABEL
----------- | ---------------------------------------- | ------------ | ------------------------------ | ------------------------- | -- | ----------
       1000 | 1297 Via Cola di Rie                     | 00989        | Roma                           | <NULL>                    | IT | P
       1100 | 93091 Calle della Testa                  | 10934        | Venice                         | <NULL>                    | IT | P
       1200 | 2017 Shinjuku-ku                         | 1689         | Tokyo                          | Tokyo Prefecture          | JP | S::ASIA
       1300 | 9450 Kamiya-cho                          | 6823         | Hiroshima                      | <NULL>                    | JP | P
       1400 | 2014 Jabberwocky Rd                      | 26192        | Southlake                      | Texas                     | US | P
       1500 | 2011 Interiors Blvd                      | 99236        | South San Francisco            | California                | US | HS::US
       1600 | 2007 Zagora St                           | 50090        | South Brunswick                | New Jersey                | US | P
       1700 | 2004 Charade Rd                          | 98199        | Seattle                        | Washington                | US | P
       1800 | 147 Spadina Ave                          | M5V 2L7      | Toronto                        | Ontario                   | CA | P
       1900 | 6092 Boxwood St                          | YSW 9T2      | Whitehorse                     | Yukon                     | CA | P
       2000 | 40-5-12 Laogianggen                      | 190518       | Beijing                        | <NULL>                    | CN | S::ASIA
       2100 | 1298 Vileparle (E)                       | 490231       | Bombay                         | Maharashtra               | IN | P
       2200 | 12-98 Victoria Street                    | 2901         | Sydney                         | New South Wales           | AU | P
       2300 | 198 Clementi North                       | 540198       | Singapore                      | <NULL>                    | SG | S::ASIA
       2400 | 8204 Arthur St                           | <NULL>       | London                         | <NULL>                    | UK | P
       2500 | Magdalen Centre, The Oxford Science Park | OX9 9ZB      | Oxford                         | Oxford                    | UK | P
       2600 | 9702 Chester Road                        | 09629850293  | Stretford                      | Manchester                | UK | P
       2700 | Schwanthalerstr. 7031                    | 80925        | Munich                         | Bavaria                   | DE | P
       2800 | Rua Frei Caneca 1360                     | 01307-002    | Sao Paulo                      | Sao Paulo                 | BR | P
       2900 | 20 Rue des Corps-Saints                  | 1730         | Geneva                         | Geneve                    | CH | P
       3000 | Murtenstrasse 921                        | 3095         | Bern                           | BE                        | CH | P
       3100 | Pieter Breughelstraat 837                | 3029SK       | Utrecht                        | Utrecht                   | NL | P
       3200 | Mariano Escobedo 9991                    | 11932        | Mexico City                    | Distrito Federal,         | MX | P

23 rows selected.

Enable unified auditing option

05.11.2015 Bushmelev Anton Комментариев нет

https://blogs.oracle.com/imc/entry/oracle_database_12c_new_unified

Enalbe unified audit

1.Stop all Oracle processes: databases, listener and Enterprise Manager.
2.Relink Oracle with the uniaud_on option.

cd $ORACLE_HOME/rdbms/lib
make -f ins_rdbms.mk uniaud_on ioracle

[root@oel7-2 ~]# . oraenv
ORACLE_SID = [root] ? +ASM
[root@oel7-2 ~]# srvctl stop database -d orcl
[root@oel7-2 ~]# srvctl stop asm -f
[root@oel7-2 ~]# su - oracle
[oracle@oel7-2 ~]$ cd $ORACLE_HOME/rdbms/lib
[oracle@oel7-2 lib]$ make -f ins_rdbms.mk uniaud_on ioracle
..
[oracle@oel7-2 lib]$ logout
[root@oel7-2 ~]# srvctl start database -d orcl

check that option is enabled:

23:07:24 (1)[PDBORCL]c##bushmelev_aa@orcl>  select * from v$option where PARAMETER = 'Unified Auditing'
23:07:29   2  ;

PARAMETER                                          | VALUE      |     CON_ID
-------------------------------------------------- | ---------- | ----------
Unified Auditing                                   | TRUE       |          0

Duplicate ORA-17628: Oracle error 19505 returned by remote Oracle server

02.11.2015 Bushmelev Anton Комментариев нет

RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:25<br /> ORA-17628: Oracle error 19505 returned by remote Oracle server

[code language=”bash” highlight=”398-400″]
RMAN> run { allocate channel ch1 device type disk; allocate auxiliary channel ch2 device type disk; duplicate target database for standby from active database;}

using target database control file instead of recovery catalog
allocated channel: ch1
channel ch1: SID=10534 device type=DISK

allocated channel: ch2
channel ch2: SID=1506 device type=DISK

Starting Duplicate Db at 02-11-2015 10:45:42

contents of Memory Script:
{
backup as copy reuse
targetfile ‘/oracle/app/base/db/11.2.0/dbs/orapws00somedb’ auxiliary format
‘/oracle/app/base/db/11.2.0.4/dbs/orapwu00somedb1’ ;
}
executing Memory Script

Starting backup at 02-11-2015 10:45:42
Finished backup at 02-11-2015 10:45:44

contents of Memory Script:
{
backup as copy current controlfile for standby auxiliary format ‘/home/oracle/control1.ctl’;
}
executing Memory Script

Starting backup at 02-11-2015 10:45:44
channel ch1: starting datafile copy
copying standby control file
output file name=/oracle/app/base/db/11.2.0/dbs/snapcf_s00somedb.f tag=TAG20151102T104544 RECID=27 STAMP=894710744
channel ch1: datafile copy complete, elapsed time: 00:00:03
Finished backup at 02-11-2015 10:45:47

contents of Memory Script:
{
sql clone ‘alter database mount standby database’;
}
executing Memory Script

sql statement: alter database mount standby database
RMAN-05529: WARNING: DB_FILE_NAME_CONVERT resulted in invalid ASM names; names changed to disk group only.

contents of Memory Script:
{
set newname for tempfile 1 to
"+data";
set newname for tempfile 2 to
"+data";
set newname for tempfile 3 to
"+data";
switch clone tempfile all;
set newname for datafile 1 to
"+data";
set newname for datafile 2 to
"+data";
set newname for datafile 3 to
"+data";
set newname for datafile 4 to
"+data";
set newname for datafile 5 to
"+data";
set newname for datafile 6 to
"+data";
set newname for datafile 7 to
"+data";
set newname for datafile 8 to
"+data";
set newname for datafile 9 to
"+data";
set newname for datafile 10 to
"+data";
set newname for datafile 11 to
"+data";
set newname for datafile 12 to
"+data";
set newname for datafile 13 to
"+data";
set newname for datafile 14 to
"+data";
set newname for datafile 15 to
"+data";
set newname for datafile 16 to
"+data";
set newname for datafile 17 to
"+data";
set newname for datafile 18 to
"+data";
set newname for datafile 19 to
"+data";
set newname for datafile 20 to
"+data";
set newname for datafile 21 to
"+data";
set newname for datafile 22 to
"+data";
set newname for datafile 23 to
"+data";
set newname for datafile 24 to
"+data";
set newname for datafile 25 to
"+data";
set newname for datafile 26 to
"+data";
set newname for datafile 27 to
"+data";
set newname for datafile 28 to
"+data";
backup as copy reuse
datafile 1 auxiliary format
"+data" datafile
2 auxiliary format
"+data" datafile
3 auxiliary format
"+data" datafile
4 auxiliary format
"+data" datafile
5 auxiliary format
"+data" datafile
6 auxiliary format
"+data" datafile
7 auxiliary format
"+data" datafile
8 auxiliary format
"+data" datafile
9 auxiliary format
"+data" datafile
10 auxiliary format
"+data" datafile
11 auxiliary format
"+data" datafile
12 auxiliary format
"+data" datafile
13 auxiliary format
"+data" datafile
14 auxiliary format
"+data" datafile
15 auxiliary format
"+data" datafile
16 auxiliary format
"+data" datafile
17 auxiliary format
"+data" datafile
18 auxiliary format
"+data" datafile
19 auxiliary format
"+data" datafile
20 auxiliary format
"+data" datafile
21 auxiliary format
"+data" datafile
22 auxiliary format
"+data" datafile
23 auxiliary format
"+data" datafile
24 auxiliary format
"+data" datafile
25 auxiliary format
"+data" datafile
26 auxiliary format
"+data" datafile
27 auxiliary format
"+data" datafile
28 auxiliary format
"+data" ;
}
executing Memory Script

executing command: SET NEWNAME

renamed tempfile 1 to +data in control file
renamed tempfile 2 to +data in control file
renamed tempfile 3 to +data in control file

executing command: SET NEWNAME

Starting backup at 02-11-2015 10:45:55
channel ch1: starting datafile copy
input datafile file number=00008 name=+DATA/s00somedb/datafile/somedb.272.848695139
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:45:56
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00017 name=+DATA/s00somedb/datafile/aud_evt_04.280.864489643
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:45:58
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00014 name=+DATA/s00somedb/datafile/aud_evt_01.264.864489545
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:45:59
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00015 name=+DATA/s00somedb/datafile/aud_evt_02.258.864489637
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:00
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00016 name=+DATA/s00somedb/datafile/aud_evt_03.257.864489641
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:01
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00018 name=+DATA/s00somedb/datafile/aud_evt_05.279.864489647
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:02
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00019 name=+DATA/s00somedb/datafile/aud_evt_06.278.864489649
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:03
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00006 name=+DATA/s00somedb/datafile/sia_db.273.843746737
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:04
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00011 name=+DATA/s00somedb/datafile/somedb_arch.290.849349975
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:05
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00013 name=+DATA/s00somedb/datafile/somedb_arch.259.859243111
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:06
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00021 name=+DATA/s00somedb/datafile/somedb_arch_emergency.302.868721455
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:07
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00020 name=+DATA/s00somedb/datafile/somedb_arch.275.868719829
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:09
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00003 name=+DATA/s00somedb/datafile/undotbs1.268.843746741
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:10
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00004 name=+DATA/s00somedb/datafile/undotbs2.266.843746741
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:11
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00002 name=+DATA/s00somedb/datafile/sysaux.269.843746741
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:12
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00026 name=+DATA/s00somedb/datafile/somedb_arch_emergency.308.888666289
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:13
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00025 name=+DATA/s00somedb/datafile/somedb_arch_02.307.888665401
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:14
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00022 name=+DATA/s00somedb/datafile/egs_db.303.870185105
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:15
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00005 name=+DATA/s00somedb/datafile/users.271.843746741
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:16
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00023 name=+DATA/s00somedb/datafile/egs_sia_db.304.870185511
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:17
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00001 name=+DATA/s00somedb/datafile/system.267.843746741
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:18
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00007 name=+DATA/s00somedb/datafile/somedb_tech.270.848695135
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:20
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00009 name=+DATA/s00somedb/datafile/somedb_adm.286.846186103
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:21
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00010 name=+DATA/s00somedb/datafile/somedb_pds.287.846186119
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:22
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00012 name=+DATA/s00somedb/datafile/somedb_cpp.291.848604621
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:23
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00024 name=+DATA/s00somedb/datafile/somedb_support.305.876591437
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:24
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00027 name=+DATA/s00somedb/datafile/somedb_arch_03.309.888669979
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:25
ORA-17628: Oracle error 19505 returned by remote Oracle server
continuing other job steps, job failed will not be re-run
channel ch1: starting datafile copy
input datafile file number=00028 name=+DATA/s00somedb/datafile/somedb_arch_04_big.310.892636427
released channel: ch1
released channel: ch2
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-03002: failure of Duplicate Db command at 11/02/2015 10:46:26
RMAN-05501: aborting duplication of target database
RMAN-03015: error occurred in stored script Memory Script
RMAN-03009: failure of backup command on ch1 channel at 11/02/2015 10:46:26
ORA-17628: Oracle error 19505 returned by remote Oracle server

RMAN> exit

Recovery Manager complete.
[oracle@u00somedb12db-01 /home/oracle]$cd $ORACLE_HOME
[oracle@u00somedb12db-01 /oracle/app/base/db/11.2.0.4]$cd bin
[oracle@u00somedb12db-01 /oracle/app/base/db/11.2.0.4/bin]$ls -all ora
orabase oracg oracle oracleO oradism oraenv orajaxb orapipe orapki orapwd orapwdO oraxml oraxsl
[oracle@u00somedb12db-01 /oracle/app/base/db/11.2.0.4/bin]$ls -all orac
oracg oracle oracleO
[oracle@u00somedb12db-01 /oracle/app/base/db/11.2.0.4/bin]$ls -all orac
oracg oracle oracleO
[oracle@u00somedb12db-01 /oracle/app/base/db/11.2.0.4/bin]$ls -all orac*
-rwxr-xr-x 1 oracle oinstall 46 Nov 7 2000 oracg
-rwsr-s–x 1 oracle oinstall 239768932 Oct 23 17:36 oracle
-rwsr-s–x 1 oracle oinstall 239768900 Oct 23 17:36 oracleO
[oracle@u00somedb12db-01 /oracle/app/base/db/11.2.0.4/bin]$
[/code]

[свернуть]

after check oracle binary group solution will be :

[root@u00somedb12db-01 ~]# /oracle/grid/12.1.0.2/bin/setasmgid -o=/oracle/app/base/db/11.2.0.4/bin/oracle
[root@u00somedb12db-01 ~]#

mac os x virtual box issue on oracle install

08.10.2015 Bushmelev Anton Комментариев нет

original at Can’t Compile GI 12.1.0.2 and Segmentation Fault

quick fix

cp $ORACLE_HOME/javavm/jdk/jdk7/lib/libjavavm12.a $ORACLE_HOME/lib

cd ~
rm -rf perl
mkdir perl
cd perl/
curl -O http://www.cpan.org/src/5.0/perl-5.14.1.tar.gz
tar -xvzf perl-5.14.1.tar.gz
cd perl-5.14.1
 
cd $ORACLE_HOME
mv perl/ perl.OLD
mkdir perl
cd $HOME/perl/perl-5.14.1
./Configure -des -Dprefix=$ORACLE_HOME/perl -Doptimize=-O3 -Dusethreads -Duseithreads -Duserelocatableinc && make clean && make && make install
cd $ORACLE_HOME/perl
rm -rf lib/ man/
cp -r ../perl.OLD/lib/ .
cp -r ../perl.OLD/man/ .

oracle restart single change hostname

14.08.2015 Bushmelev Anton Комментариев нет

deconfig

$ORACLE_HOME/perl/bin/perl -I $ORACLE_HOME/perl/lib -I $ORACLE_HOME/crs/install $ORACLE_HOME/crs/install/roothas.pl -deconfig -force

config

$ORACLE_HOME/perl/bin/perl -I $ORACLE_HOME/perl/lib -I $ORACLE_HOME/crs/install $ORACLE_HOME/crs/install/roothas.pl

add resources
change hostname in
$ORACLE_HOME/netowrk/admin/listener.ora

grid user

srvctl add listener
srvctl add asm -d '/dev/oracleasm/disks/*'

srvctl start asm
srvctl start listener

oracle user:

srvctl add database -d $ORACLE_SID -o $ORACLE_HOME

Enabling and Managing OLS

OLS: Features

Implementing an OLS Solution

Primary Sidebar