Year: 2011

Howto change SYSMAN password in 12C Cloud Control

I was on leave for the past few weeks. After digging through tons of e-mails I finally found time to look into EM 12 Cloud Control. Unfortunately, I’ve forgotten my SYSMAN password and the EM 12c test installation is no longer running. As you say: “Holidays where one forgets everything, must be good holidays.”

Howto install Oracle Enterprise Manager Cloud Control 12c Release 1

After downloading the latest release of Enterprise Manager Cloud Control I’ve started a initial test installation. In the past I had already installed Oracle Enterprise Manager 10.2.0.5.0 and 11.1.0.1 as well as some earlier releases. Some of the installations have been rather cumbersome and frustrating. Such as the installation of OEM GC 10.2.0.5.0, where even the software and patch download was quite challenging. Followed by some silent installations with “configure later”. Big question for EM 12c, is it still the same hassle? What’s different, better or worse? Keep reading the blog post to find the answers to these and other questions.

Enterprise Manager Cloud Control 12c Release 1

Just a few hours ago Oracle introduced the latest version of Enterprise Manager at the Oracle Open World. The new Release is now named Oracle Enterprise Manager Cloud Control 12c. And the best part is, the version for Linux can already be downloaded from OTN.

Tablespace quotas are forever

It looks that not only diamonds are forever but also tablespace quotas. Due to the fact that Oracle has a history of tablespaces, it’s kind of obvious that it also keeps information quotas. Is this an expected behavior? What could be the impact ?

Tablespace point in time recovery and Oracle 11.2.0.2

Tablespace point in time recovery (TSPITR) in particular, the fully automatic TSPITR is not a 11g new feature. It is likely that this can be used without any problem. But it looks like that a bug has been introduced with the latest patchset (11.2.0.2). What is the problem and how can it be workaround?

Oracle Audit Performance Guide

What happens to my database when switching on Oracle standard audit? Should set AUDIT_TRAIL to the DB or to OS or XML? To answer the last question we have to consider the safe storage and analysis of audit data. Is that all? What about Performance?

Database Audit and Audit trail purging

Setting up database audit is fairly easy. Since the availability of DBMS_AUDIT_MGMT the housekeeping of the audit trail is just a trifle. After the introduction of DBMS_AUDIT_MGMT in an post early this February, I would like to take a closer look at the housekeeping of the Audit Trail and provide a simple example how this could be implemented.

Find User with unlimited Tablespace Quota

When performing a database security audit various informations about users, roles and privileges have to be collected, including “who has unlimited tablespace on SYSTEM”. It is quite easy to find user with UNLIMITED TABLESPACE or a UNLIMITED quota on SYSTEM. But what when the system privilege is assigned to a role or over several roles? It is still easy if you use hierarchical queries to drill down the cascaded roles, but there is plenty to write…

Mac OS X Terminal Compatibility Settings

When switching from Mac OS Terminal.app to iTerm I realized that the

ps

does not work as expected. A

ps -ef

throws an error even if

man ps

shows an option for -f. It seems that the compatibility can be set with a environment variable COMMAND_MODE.

Script to download Oracle Patch

For the CPU Patch test I’ll have to download a patch’s and patchset on a regular basis. Download the patch’s via a Web browser can be very time consuming. A download manager or a script based download is simplifying the patch download. As a side effect when downloading with a script, the files can be stored directly on the database or a staging server.

Oracle Database Firewall Test Environment

Installing the Oracle Database Firewall is quite easy according the documentation. Nevertheless there could be a few pitfalls when installing it in a VM environment. Plugin a physical network cable is not as plugin a virtual cabel…

Oracle CPU Pre-Release Announcement – April 2011

Late last week Oracle published the Oracle Critical Patch Update Pre-Release Announcement – April 2011. The official Oracle Critical Patch Update for April 2011 will be released somewhen on the 19th of april. This CPU includes up to 73 security fixes for all kind of Oracle products. 6 out of them are just forfor the […]

Oracle Database Firewall Test Environment

Installing the Oracle Database Firewall is quite easy according the documentation. Nevertheless there could be a few pitfalls when installing it in a VM environment. Plugin a physical network cable is not as plugin a virtual cabel…

Slides SOUG Presentation on DBMS_AUDIT_MGMT

Just finished my presentation about audit management with DBMS_AUDIT_MGMT at the SOUG Special Interest Group Event in Baden. I’m glad having a MIFI so I can immediately upload the slides 🙂 and still have some time for the aperitif…. I’m happy for any comment on the presentation or the slides. Feel free to add a […]

SOUG Presentation on DBMS_AUDIT_MGMT

On the 24 of March I’ll have a presentation on Database Audit and DBMS_AUDIT_MGMT at the SOUG SIG Event. The presentation is about 30 minutes and will cover a rough overview of DBMS_AUDIT_MGMT, latest Issues and Bugs as well some Ideas on how audit could be simplified. Have a look at the SOUG Webpage for […]

Case Sensitive Passwords and Strong User Authentication

With 11g R1 Oracle introduced case sensitive passwords for database accounts based on the SHA1 hash algorithm. This feature can easily be enabled with the init.ora parameter SEC_CASE_SENSITIVE_LOGON. As soon as this parameter is set to true, all new passwords will be case sensitive. Existing passwords will remain case insensitive until they are changed.
The downside of this new feature is, that the passwords are also stored with the pre-11g database password hash. This is a potential security leak. The pre-11g password hash string from USER$ can be used to crack the case insensitive version of the password. All kind of tools, utilities, password lists etc are available to do this. As soon as the case insensitive version of the password is known, the case sensitive password can be guessed.

To get rid of this security leak, the pre-11g database password hashes have to be cleared. This blog post shows how this can be done.

Manage Audit Trails with DBMS_AUDIT_MGMT

I’ve recently wrote an DOAG article about Managing Audit Trails with dbms_audit_mgmt, which has been officially introduced in Oracle 11g R2. This blog post is just to link the article and provides a few more information.