orcl linux install

Upload: srinath0253

Post on 01-Jun-2018

238 views

Category:

Documents


0 download

TRANSCRIPT

  • 8/9/2019 Orcl Linux Install

    1/21

    Introduction

    This paper will walk you through the steps of installing Oracle Database 11g release 2 (Oracle version 11.2.0) in aLinu environ!ent. "bout #0$ of the !aterial presente% here applies to other platfor!s as well. &verything you rea%in this paper is han%s on' rollupyoursleevesan%getbusy !aterial for Oracle users who want to get anOracle

    %atabase up an% running uickly without rea%ing hun%re%s of pages of %ocu!entation an% *rea%!e+ files.

    These steps are !eant to get you up an% running as fast as possible' while leveraging best practices in or%er to set upa scalable' robust %atabase environ!ent that offers high perfor!ance. ,n or%er to keep the steps reasonably si!plethis paper %oes not cover -eal "pplication lusters (-")' nor %oes it cover Oracle ,nternet Directory (O,D)'"uto!atic /torage anage!ent ("/)' or ri% ontrol.

    ,n this paper we will install the 11.2.0.1 release of Oracle Database 11g. This is the base %istribution of OracleDatabase 11g release 2. e sure to check Oracle /upport3s etalink at http455!etalink.oracle.co! to see if a newerpatch set has been release% since this paper was publishe%. 6ou will nee% a vali% usto!er /ervice ,%entifier (/,)nu!ber in or%er to access the etalink website.

    7e ran our Oracle installations on servers euippe% with ,ntel 8eon processors running -e% 9at &nterprise Linu &/release : (Tikanga)' up%ate ; (=;). Oracle Database 11g is supporte% on other processor architectures an% Linu%istributions as well. ?ote that with -e% 9at &nterprise Linu' the &/ an% "/ varieties are supporte% while 7/ is not.

    There are four phases to getting Oracle up an% running on your server4

    1. @repare the server

    2. ,nstall the Oracle software an% latest patch set

    A. reate a %atabase

    ;. o!plete the server configuration

    7e will walk through these phases one at a ti!e' %etailing all the steps involve%. The en% result will be a very usable%atabase that can be scale% up uite large' an% an Oracle installation that follows in%ustryrecogniBe% bestpractices. Of course' every i!ple!entation is uniue' an% you will nee% to evaluate each step carefully against yourparticular reuire!ents. 9owever' this paper will get you off to a very soli% start.

    The author wishes to acknowle%ge that this paper %raws heavily fro! the previous Database /pecialists' ,nc. paperC,nstalling an% onfiguring Oracle Database 10g on the Linu @latfor!C by -oger /chrag thanks -oger

    Prepare the Server 

    These steps configure your %atabase server so that it will be rea%y to accept the Oracle software an% %atabase. ,nthis section' we will !ake sure your server !eets Oracle3s !ini!u! reuire!ents' create a Linu user an% group to*own+ the software' an% create so!e %irectories that will be use% by the Oracle software an% %atabase. "ll of the

    steps in this section are run as the root user.

    1. ake sure that your har%ware platfor! (processor architecture) is certifie% by Oracle orporation for usewith Oracle Database 11g release 2' an% that you have acuire% the correct %istribution of Oracle softwarefor your har%ware platfor!. "s of ay 2010' the supporte% har%ware platfor!s for Oracle on Linu are asfollows4

    Supported Hardware Platforms for Oracle Database 11g release 2

  • 8/9/2019 Orcl Linux Install

    2/21

    4. $ grep "model name" /proc/cpuinfo

    :.

    =. ake sure that your Linu %istribution is certifie% by Oracle orporation for use with Oracle Database 11grelease 2. ?ote that certifications vary by har%ware platfor!. "s of ay 2010' the supporte% Linu

    %istributions are as follows4

    Supported Linux Distributions for Oracle Database 11g release 2

    Oracle &nterprise Linu : up%ate 2' kernel 2.=.1

  • 8/9/2019 Orcl Linux Install

    3/21

    uniOD%evel2.2.11

    !akeA.

  • 8/9/2019 Orcl Linux Install

    4/21

    Required Packages for )E Linux Enterprise er*er+0.0(x!'!4 Hard"are Platfor#$

    binutils2.1=.#1.0.:co!patlibst%cGG:.0.E

    gcc;.1.0

    gcccGG;.1.2

    glibc2.:2;

    glibc%evel2.;

    glibc%evelA2bit2.;

    ksh#Ar12.#

    libaio0.A.10;

    libaioA2bit0.A.10;

    libaio%evel0.A.10;

    libaio%evelA2bit0.A.10;

    libelf0.

  • 8/9/2019 Orcl Linux Install

    5/21

    . $ rpm -'a --'uer*format "25-78+5-7:285 ;27

  • 8/9/2019 Orcl Linux Install

    6/21

    ou Started

    aio!anr 10;port>range #000 =::00 -ange of ports to use for client connections

    r!e!>%efault 2=21;; Default T@5,@ receive win%ow

    r!e!>!a ;1#;A0; ai!u! T@5,@ receive win%ow

    w!e!>%efault 2=21;; ai!u! T@5,@ sen% win%ow

    w!e!>!a 10;

  • 8/9/2019 Orcl Linux Install

    7/21

    ;=. reate a Linu group that will be use% by the Oracle software owner. 6ou can call it anything you like' butthe stan%ar% is *oinstall+. This group is often calle% the *Oracle ,nventory+ group. ,f you will be installingOracle on !ultiple servers on your network' you !ight want to keep the groupi% the sa!e on all servers.6ou can create your oinstall group with a co!!an% like4

      $ /usr/sbin/groupadd -g !01 oinstall

    ,f you are using /F/& Linu' then you !ust also enter the ,D of the oinstall group as the value for thepara!eter 5proc5sys5v!5hugetlb>sh!>group an% a%% v!.hugetlb>sh!>group to the 5etc5sysctl.conf file.Doing this grants !e!bers of the oinstall group per!ission to create share% !e!ory seg!ents. orea!ple' where the oinstall group ,D is :01 (as above) enter

      $ echo !01 C /proc/s*s/vm/hugetblshmgroup

    "%% a%% the line

      vm.hugetlbshmgroupB!01

    to the 5etc5sysctl.conf file.

     

    ;E. reate a Linu group that will be use% by Oracle %atabase a%!inistrators. 6ou can call it anything you like'but the stan%ar% is *%ba+. "nybo%y who logs onto the %atabase server with a Linu login that belongs to thisgroup will be able to log onto all %atabases that run fro! this Oracle software installation with D"privileges. ,f you will be installing Oracle on !ultiple servers on your network' you !ight want to keep thegroupi% the sa!e on all servers. 6ou can create your %ba group with a co!!an% like4

      $ /usr/sbin/groupadd -g !0& dba

    ;

  • 8/9/2019 Orcl Linux Install

    8/21

    e. "%% the following lines to the 5etc5pa!.%5login file' if they are not alrea%y present4

    f. session re'uired /lib/securit*/pamlimits.so  session re'uired pamlimits.so

    g. "%% the following lines in the 5etc5profile file (or the 5etc5profile.local file on /F/& syste!s) if

    the oracle user uses the ash' Korn or ourne shell4

    h. if H $I87 B "oracle" JK theni. if H $8

  • 8/9/2019 Orcl Linux Install

    9/21

    Install the Oracle Software and Latest Patch Set

    These steps install the Oracle software an% latest patch set on your server. "s of this writing' Oracle release11.2.0.1.0 is the only version of Oracle Database 11g release 2 available for %ownloa% fro! Oracle Technology?etwork or available on D or DID !e%ia. "t so!e point in the future' Oracle will release latest patchsets (e.g.11.2.0.2' 11.2.0.A' etc.) however the first such patchset has not yet been release. Therefore' we will install Oracle

    release 11.2.0.1.0. Once Oracle have release% a patch set you shoul% apply the patchset on top of the base11.2.0.1.0 release. efore procee%ing with the steps in this section' you shoul% check Oracle Technology ?etwork(http455www.oracle.co!5technology ) an% Oracle /upport3s etalink (http455!etalink.oracle.co!) to see if any 11grelease 2 patch sets are available.

    The Oracle Fniversal ,nstaller will suggest creating a %atabase at the sa!e ti!e that it installs the Oracle software."lthough we %o not have any latest patchsets to install' we will hol% off on the %atabase creation until a later stepsince that is the preferre% seuence of events once a 11g release 2 patch set is eventually release%.

    ,n this section' we will prepare the oracle user3s environ!ent' run the Oracle Fniversal ,nstaller an% ti%y up a few!inor loose en%s. "ll of the steps in this section' ecept where note%' are run as the oracle user.

    1. &%it the oracle user3s login file on the %atabase server so that the environ!ent will be configure%auto!atically on login. ,f you are using ash shell' then e%it .bash>profile. ,f you are using ourne or Korn

    shell' then e%it .profile. 6ou can also use shell an% e%it .cshrc' but the synta will be %ifferent fro! theea!ples you see here. or now' we will har%co%e certain things. ut after we create a %atabase' we willco!e back an% eli!inate all har% co%ings. 9ere is what we a%%e% to our .bash>profile for the install4

    &. F3. F 8ubstitute *our +racle soft@are mount point in the line

    [email protected]. eport +72:28B/u01/app/oracle!. F6. F nsure that +72:

  • 8/9/2019 Orcl Linux Install

    10/21

    your D,/@L"6 variable has not been set alrea%y' then you will nee% to set it !anually to the ,@ a%%ress ofyour 8 server plus the 8 server an% screen nu!bers. 6ou can set your D,/@L"6 variable with a co!!an% like4

      $ eport ,8O:2QBm*@or)stationM0.0

    20. ,f you ha% to set your D,/@L"6 variable !anually in the previous step' then ensure that the 8 server on your

    workstation will allow your %atabase server to open win%ows on your %isplay. The easiest way to %o this isto issue an host co!!an% fro! a session on your workstation. (Don3t get confuse% an% issue the co!!an%in a win%ow that is logge% onto your %atabase server.) 6ou can issue a co!!an% like4

      $ host (m*databaseserver

    21. &nsure that the !ount point you plan to use for the Oracle software has sufficient free space. or a basic&nterprise &%ition an% patch set installation' allow 1.= b for the software !ount point as a bare !ini!u!.

     

    22. Double check that you are logge% in as oracle an% not root' an% that the environ!ent variables have beenset by the login script you prepare% earlier. Then change to your ho!e %irectory an% start the Oracle

    Fniversal ,nstaller with a co!!an% like one of the following4

      $ /database/runnstaller

    or

      $ /runnstaller

    7e3ll walk through the installer pro!pts one at a ti!e4

     

    a. The onfigure /ecurity Fp%ates win%ow appears. ,f you wish to receive security up%ates via e!ailthen enter your e!ail a%%ress an% your Oracle support passwor%. ,f not' %eselect the checkbo.lick ?et. ,f you %eselecte% the checkbo hit J6esJ when the popup warning that you have notprovi%e% an e!ail a%%ress appears.

    b. The /elect ,nstallation Option win%ows appears. hoose option J,nstall %atabase software onlyJ.lick ?et.

    c. The ?o%e /election win%ow appears. hoose /ingle instance %atabase installation an% then click?et.

    %. 7hen the /elect @ro%uct Languages win%ow appears !ove the %esire% languages into the righthan% panel. lick ?et.

    e. The /elect Database &%ition win%ow appears. 7e will perfor! a *typical+ install to get a basic setof Oracle software installe%. 6ou can rerun the installer again later an% choose usto! to installa%%itional pro%ucts in%ivi%ually. or now' choose /tan%ar% &%ition or &nterprise &%ition. The&nterprise &%ition of Oracle Database 11g has so!e very sophisticate% features !issing fro!/tan%ar% &%ition' an% the opportunity to purchase a%%itional options that !ight be valuable to alarge enterprise. 9owever' the &nterprise &%ition is !uch !ore epensive than /tan%ar% &%ition. ,tis very i!portant that you choose the e%ition that !atches your license' as this will be %ifficult tofi later. The /elect Options button %isplay = etra cost options that can only be license% againstthe &nterprise &%ition. "gain your specific license agree!ent nee%s to be consulte% here' it isreco!!en%e% that you %eselect the etra cost options that your have not purchase%. lick ?et.

    f. The /pecify ,nstallation Location win%ow appears. Oracle provi%es a suggeste% Oracle ase @athfor the Oracle ho!e (software installation) that is about to be create%. 6ou can na!e this Oracleho!e anything you like. eginning in Oracle Database 11g the stan%ar% for Oracle ho!e locationhas change% to 5!ountpointP5app5oracle5pro%uct511.2.05%bho!e>?P. ,n 10g the %bho!estring was shortene% to %b. The na!ing convention' such as %bho!e>1' %bho!e>2 allows you toinstall !ultiple copies of the sa!e Oracle version on one server in a stan%ar%iBe% way. ?ote that

  • 8/9/2019 Orcl Linux Install

    11/21

    we will refer back to this path freuently' calling it the Oracle ho!e or si!ply QO-"L&>9O&. ,fyou are planning to go with the path suggestion provi%e% by Oracle' !ake sure there isn3t an etraoccurrence of the *oracle+ co!ponent in the path.7hen you are satisfie% with the path of Oraclease an% the na!e an% path for your Oracle ho!e' click ?et.

    g. ,f you %o not have at least ;'A#E of free %isk space available in your QO-"L&>9O& you willget an error. ake sure you have enough free space available' otherwise you will not be able to

    procee% with the install.

    h. ,f the reate ,nventory win%ow appears' set the inventory %irectory to the parent of theQO-"L&>"/& %irectory' re!e!ber you set the value of the QO-"L&>"/& environ!ent variablein the login script. ,n the ora,nventory roup ?a!e fiel%' select the oinstall group. lick ?et. 6ouwonJt see this win%ow if you have previously installe% Oracle software on this %atabase server.9istorically it was co!!on to have the inventory %irectory locate% as QO-"L&>"/&5ora,nventorybut in 11g Oracle are reco!!en%ing against this configuration.

    i. The @rivilege% Operating /yste! roups screen appears. /et the O/D" roup to J%baJ an% theO/O@&- roup to JoinstallJ. lick ?et.

    N. The @rereuisite hecks will run' if they all pass then the installer will continue onto the /u!!arywin%ow. Obviously if you have faile% any prereuisite checks you shoul% resolve the! beforeprocee%ing. "ssu!ing you !a%e it to the /u!!ary win%ow lick inish.

    k. During the installation an &ecute onfiguration /cripts win%ow will appear. The installation willbe pause% at this point' waiting for you to run scripts as root. (The first ti!e you install Oraclesoftware on the %atabase server there will be two scripts to run as root' while a%%itionalinstallations only reuire one script to be run as root.) 6ou shoul% open another win%ow' log in tothe %atabase server as root' review the scripts to be run thoroughly' run the scripts' an% click OKin the &ecute onfiguration /cripts win%ow.

    l. Once the root scripts have ran the installer will %isplay the inish win%ow' click lose to en% theinstallation.

     

    2A. "t this point we are rea%y to patch the Oracle software installation with the latest !aintenance releaseavailable. Log onto Oracle Oracle /upport3s etalink (http455!etalink.oracle.co!) an% %ownloa% the latestpatch set for Linu =; or whichever processor architecture your %atabase server uses. "s of this writing'there are no patch sets available so we will skip this step' once a patch set beco!es available we willup%ate this %ocu!ent with the instructions for the patch set.

     

    2;. ,n a%%ition to the latest !aintenance release you shoul% consi%er applying the latest Jritical @atch Fp%ate(@F)J which contains the latest security patches or the current J@atch /et Fp%ate (@/F)J which containsOracleJs reco!!en%e% bug fies in a%%ition to the latest security patches. These patches are release%uarterly. /ince the instructions !ay %iffer slightly fro! one patch to the net so we %o not cover thespecifics here. 6ou can fin% the latest patch an% its install instructions on Oracle /upport site.

     

    2:. ,n QO-"L&>9O&5bin (the bin %irectory un%er your Oracle ho!e) you will fin% a shell script calle% oraenv.This script can be calle% fro! .bash>profile or .profile to set up a user3s environ!ent auto!aticallywhenever they log onto the %atabase server. 7e will custo!iBe the oraenv script because there are a fewvariables that the script shoul% set but %oesn3t. ake a backup copy of the oraenv script an% then e%it it'a%%ing the following lines to the very en%4

    &6. F egin customiRations&. ,2B$+72:28/admin

    . F 8ubstitute the locale and character set *ou plan to use for*our

    http://metalink.oracle.com/http://metalink.oracle.com/

  • 8/9/2019 Orcl Linux Install

    12/21

    &9. F database in the line belo@. o@ada*s the t@o main commonchoices areM

    30. F :8:2GBamericanamerica.S#8S1&!& ;11g7& Inidefault=

    31. F :8:2GBamericanamerica.2:3&I?T# ;Inicode !=3&. :8:2GBamericanamerica.S#8S1&!&

    33. eport ,2 :8:2G  F nd customiRations

    6ou shoul% set ?L/>L"? to !atch the character set of the %atabase you will create later. The Databaseonfiguration "ssistant (%bca) now offers two pri!ary choices' the %efault character set for your platfor!base% on the upon the language setting of your operating syste! (7&/,D variable accor%ingly with a co!!an% like4

      $ eport +72:8,Bdev11ee

    ;. ,n the net step we will create a %atabase an% configure it using JDatabase ontrolJ. ,n or%er to %o this wefirst nee% a listener configure% prior to creating the %atabase' since we have Nust installe% the software wecurrently have no listener so we nee% to configure one. Oracle ?et is the networking infrastructure thatallows applications running on other servers to access the %atabase. The Oracle ?et listener is a processthat runs on the %atabase server an% !onitors a T@ port for reuests to access the %atabase. The Oracle?et listener is configure% by creating a file calle% listener.ora in the QO-"L&>9O&5network5a%!in

    %irectory. ,n the QO-"L&>9O&5network5a%!in5sa!ples %irectory you will fin% an ea!ple listener.orafile. Fnfortunately' !any Oracle security eploits involve the Oracle ?et listener' an% therefore it is

  • 8/9/2019 Orcl Linux Install

    13/21

    i!portant that you configure it properly an% securely. " functional listener.ora file that uses operatingsyste! authentication for securing the Oracle ?et listener is as follows4

    !. F6. F TilenameM listener.ora. F

    #. :8?7 B9. ;,87O?+:8? B10. ;,87O?+ B11. ;2,,788:8? B1&. ;2,,788 B ;O7+?++: B ?O=;

  • 8/9/2019 Orcl Linux Install

    14/21

    3!. =

    A=. ?ow we procee% with creating the %atabase' launch the Database onfiguration "ssistant with the followingco!!an%s4

    3. $ cd $+72:

  • 8/9/2019 Orcl Linux Install

    15/21

    auto!atic %atabase backups. "rchiving' !eanwhile' is necessary for %atabases that will be backe%up while they are open. "rchiving can be enable% easily at a later ti!e. /ince we are not coveringbackup an% recovery strategies here' we will uncheck both options an% click ?et.

    i. The Database ontent win%ow appears' it appears two tabs. Typically there will be no nee% foryou to specify any custo! scripts' an% preloa%ing the sa!ple sche!as can be helpful in a%evelop!ent %atabase for seeing ea!ples of various techniues. ake your selections an% click

    ?et.

    N. The ,nitialiBation @ara!eters win%ow appears. Tabs in this win%ow let you set various initialiBationpara!eters' an% a button lets you view an% e%it all para!eters in a tabular for!. lick on theharacter /ets tab an% select the character set for the %atabase that !atches the character setna!e you put into the oraenv script in an earlier step. ,t is har% to change the character set of a%atabase' so !ake sure you are happy with your selection before procee%ing. ,nitialiBationpara!eters' on the other han%' are easily change% later. ,n this win%ow' therefore' you shoul%!ake sure the character set is correct but not worry too !uch about the other settings. (/ettingthe character sets is very %ifferent fro! setting initialiBation para!eters' so the fact that theharacter /ets tab appears on a win%ow entitle% ,nitialiBation @ara!eters !ay be confusing.) lick?et.

    k. The Database /torage win%ow appears. 9ere you can review an% e%it the %etails of how the

    control files' online re%o logs' %ata files' an% tablespaces will be create%. ,f you are using one ofthe te!plates that was provi%e%' you will not be able to change very !any settings. ,f you want tochange the locations of so!e of the %atabase files' you can %o that here or after the %atabase hasbeen create%. The %efault re%o log siBe (:0 b) is so!ewhat s!all' so you !ight want to changeit. "gain' you can %o that here or after the %atabase has been create%. 7hen you are satisfie%with the settings' click ?et.

    l. The reation Options win%ow appears. 6ou !ay choose to create the %atabase now' generatescripts to create the %atabase later' an%5or save the settings as a te!plate. /aving as a te!plateallows you to create the %atabase at a later ti!e or create !any si!ilar %atabases !ore easily.ake your selection an% click inish.

    !. " onfir!ation win%ow appears. -eview all of your selections an% click OK.

    n. " progress win%ow appears an% %atabase creation procee%s.

    o. 7hen %atabase creation is co!plete' a win%ow will appear which in%icates the na!e of the%atabase' the location of the para!eter file' an% the F-L for accessing &nterprise anager. ?otethis F-L for future reference. Depen%ing on what options you selecte%' a%%itional accounts !ayhave been create% on the %atabase besi%es the basic /6/' /6/T&' D/?@' an% /6/"?. "lla%%itional accounts are now locke%. 6ou !ay click the @asswor% anage!ent button to unlockthese accounts an% set passwor%s if you wish' but you shoul% only unlock an account if you have aspecific reason for %oing so. 7hen you are finishe%' click the &it button to eit the Databasereation "ssistant.

     

    A

  • 8/9/2019 Orcl Linux Install

    16/21

    ,f you receive the error O-"121E04 T?/4onnect ti!eout occurre% you shoul% check your Linu firewallsettings' if the firewall is active you will nee% to open up ports 1:21 an% 11:

  • 8/9/2019 Orcl Linux Install

    17/21

    8U:C 2:?7 ,2?228 ?OT: E/u01/oradata/dev11ee/temp01.dbfE 78W!0mK

    EA. Oracle uses a server para!eter file or *spfile+ to store the initialiBation para!etersHsettings that affectthe instance. The %efault para!eter settings provi%e% by the Database onfiguration "ssistant are not ba%'but you !ay want to !ake so!e changes. Fnfortunately' you cannot e%it the spfile. ,nstea%' you !usteport the contents of the spfile to a plain tet file calle% a *pfile+. 6ou can then e%it the pfile an% convertit back to an spfile for use on your %atabase. (This !ight soun% confusing' but is actually prettystraightforwar%.)

    /hut %own the %atabase an% eport the contents of the spfile into a pfile that you can e%it with co!!an%slike4

    $ s'lplus /nolog

    8U:C +? / 28 8Q8,28U:C 72? OT:BE/home/oracle/dev11ee-params.ttE  & T7+ 8OT:K8U:C 8

  • 8/9/2019 Orcl Linux Install

    18/21

    #A. ?ow convert the pfile that you e%ite% back into an spfile that Oracle can use with the following co!!an%s4

    94. $ s'lplus /nolog9!. 8U:C +? / 28 8Q8,296. 8U:C 72? 8OT:BE$+72:28/admin/

    $+72:8,/pfile/spfile$+72:8,.oraE

      & T7+ OT:BE/home/oracle/dev11ee-params.ttEK

    #E. 6ou are now rea%y to restart your %atabase using your newly create% spfile. Fse the following co!!an%s tostart the %atabase an% view the para!eters that are in effect. These settings shoul% !atch what you put inyour pfile a few steps back4

    9#. $ s'lplus /nolog99. 8U:C +? / 28 8Q8,2100. 8U:C 8?27?IO101. 8U:C 8? O2G8W 10010&. 8U:C 8:? nameN valueN isdefault103. & T7+ v$parameter

      3 +7,7 Q isdefaultN nameK

    10;. 6ou can follow the above few steps at any ti!e to !ake further changes to the para!eters. 9owever' if youonly have a few changes to !ake' there is a !uch easier way than eporting the spfile into a pfile' e%itingthe pfile' an% converting back to an spfile. 6ou can si!ply4

    10!. $ s'lplus /nolog106. 8U:C +? / 28 8Q8,210. 8U:C 2:?7 8Q8? 8? parameter B value

      & 8+O B 8OT:K

    This will up%ate the setting in your spfile' an% the change will take effect the net ti!e you restart theinstance. any para!eters are %yna!ic' !eaning that you can change the! on the fly without restartingthe instance. or %yna!ic para!eters' you can o!it the /O@& R line above an% Oracle will change the

    para!eter setting i!!e%iately an% in the spfile. ,f you wish to unset a para!eter use the following synta

    8U:C 2:?7 8Q8? 78? 8+OB8OT: 8,BEXE

     

    10

  • 8/9/2019 Orcl Linux Install

    19/21

    113. 72? I87 bob ,?T, Q bob1&3114. ,T2I:? ?2:8O2 fledata

    UI+?2 I:?, + fledataK

    11:. rant roles an%5or syste! privileges to the application accounts. ?ote that if you grant the -&/OF-& roleto an account' that account will also receive the F?L,,T&D T"L&/@"& syste! privilege. This will let the

    account create obNects in any tablespace' regar%less of uotas. Think very carefully before granting the D"role or allowing any accounts that have the F?L,,T&D T"L&/@"& privilege. /a!ple state!ents to grantan% revoke privileges are as follows4

    116. G72? connectN resource ?+ bobK7+A unlimited tablespace T7+ bobK

    11E. -eview the overall security of your %atabase. Oracle orporation has publishe% a very %etaile% 2: pagelisting of reco!!en%e% security checks. Downloa% it fro! Oracle Technology ?etworkathttp455www.oracle.co!5technology5%eploy5security5%atabasesecurity5p%f5twp>security>checklist>%atabase.p%f.

    Complete the Server Configuration

    These steps co!plete the configuration of your server for s!ooth Oracle operation. ,n this section we will change theoracle user3s login script to eli!inate har%co%ing' create in%ivi%ual operating syste! accounts for each %atabaseuser' an% configure the server to start the %atabase an% listeners auto!atically whenever the server is reboote%.

    1. &%it the login file (.bash>profile or .profile) for the oracle user to eli!inate har%co%ings an% call the oraenvscript to set the environ!ent instea%. The following will work with ash' ourne' or Korn shell4

    &. F 8ettings for +racle environment3. +72:8,Bdev11ee F Out *our instance name here4. +7228AB+!. eport +72:8, +7228A6. . oraenv

    . +7228ABQ8#.

    ?ote that this script assu!es that the 5usr5local5bin %irectory is on your path. "lso' if you use shell thenyou shoul% e%it .cshrc an% have it source coraenv.

     

    #. reate separate Linu accounts for D"s an% %atabase users who will log onto the %atabase server %irectly.6ou shoul% only log in as oracle when installing or patching software or stopping5starting the %atabase. TheLinu accounts for D"s shoul% be !e!bers of the %ba group' an% other users shoul% not be !e!bers of the%ba group. ive each of these accounts a login file like oracle3s so that their environ!ent initialiBescorrectly when they log in.

     

    10. &%it the 5etc5oratab file to verify that the entry for your %atabase is correct. Lines starting with a poun%sign are consi%ere% co!!ents an% are ignore%. &ach nonco!!ent line contains the na!e of one Oracleinstance' its Oracle ho!e' an% a 6 or ?. " 6 in%icates that the %atabase shoul% be starte% auto!atically onserver reboot' an% an ? in%icates that it shoul% not. The three fiel%s shoul% be separate% by colons. "sa!ple 5etc5oratab file looks like this4

    11. F1&. F /etc/oratab13. F BBBBBBBBBBB14. F

      dev11eeM/u01/app/oracle/product/11.&.0/dbhome1MQ

    http://www.oracle.com/technology/deploy/security/database-security/pdf/twp_security_checklist_database.pdfhttp://www.oracle.com/technology/deploy/security/database-security/pdf/twp_security_checklist_database.pdfhttp://www.oracle.com/technology/deploy/security/database-security/pdf/twp_security_checklist_database.pdfhttp://www.oracle.com/technology/deploy/security/database-security/pdf/twp_security_checklist_database.pdf

  • 8/9/2019 Orcl Linux Install

    20/21

    1:. To !ake the %atabase an% listeners start up auto!atically when the server reboots an% shut %ownauto!atically when the server shuts %own' you3ll nee% to create a %bora file in 5etc5init.% an% either userthe chkconfig co!!an% or !anually link %bora to 5etc5rcA.% an% 5etc5rc0.%. 6ou3ll nee% to %o this as theroot user. irst create a file calle% %bora in 5etc5init.% as follows4

    16. F1. F ch)configM 3! 99 101#. F descriptionM 8tart and stop the +racle databaseN listener and ,

    ontrol19. F&0. +72

  • 8/9/2019 Orcl Linux Install

    21/21

    with -e% 9at &nterprise Linu an% an =; har%ware platfor!' the process will go very s!oothly for you. Thingsshoul% go nearly as s!oothly if you use another Linu %istribution certifie% by Oracle or another har%ware platfor!such as