| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> RE: Disable certain users from login to database while applying H
Hi Hemant,
Thanks for your earlier reply.
I will not lock APPS, APPLSYS and APPLSYSPUB accounts as these accounts are needed for the HR patches.
In my company, we do have in-house applications which use client-server forms/reports to access (read-only privilege) the HR tables. We created user accounts for these applications. The last time when I applied HR patches, I encountered deadlock despite shutting down the concurrent manager, forms server, report server , apache server, web db 2.5 server etc. I suspected some of my users were accessing the HR tables via sqlplus/client-server forms/reports, thereby causing deadlocks.
This time round, I will lock the user accounts which use client-server forms/reports to access (read-only privilege) the HR tables.
Hope it helps.
Regds,
Catherine
-----Original Message----- From: hemantchitale_at_charteredsemi.com [mailto:hemantchitale_at_charteredsemi.com] Sent: Wednesday, February 20, 2002 4:44 PM To: CHAN Chor Ling Catherine (CSC) Cc: oracle-l_at_fatcity.com Subject: RE: Disable certain users from login todatabase while applying H
Catherine
Which database accounts will you lock ? You can't lock APPS, APPLSYS and
APPLSYSPUB as APPLSYSPUB and APPS will be used by all users and APPS and APPLSYS will be used by the patch. Hemant K Chitale Principal DBA Chartered Semiconductor Manufacturing Ltd "CHAN Chor Ling Catherine (CSC)" <clchan_at_nie.edu.sg> 19/02/2002 05:23 PM Sent by: root_at_fatcity.com Hi Gurus, Thanks for replying to my qn. "Startup Database in Restricted mode" will not work (for more details, pls refer to the email below). The following solutions : 1. Database ON LOGON Trigger => don't know whether it will work 2. Lock Database Account => I am going to use this solution. 3. Change Database Account Password => I believe it willwork
In our Oracle HR, we also support oracle client-server forms/reports, so
I've to disable their accounts so that they do not access the HR database
using sqlplus/forms/reports while I am applying patches.
Regds, Catherine -----Original Message----- From: hemantchitale_at_charteredsemi.com [mailto:hemantchitale_at_charteredsemi.com] Sent: Tuesday, February 19, 2002 2:13 PM To: Multiple recipients of list ORACLE-L Subject: Re: Disable certain users from login to database while applying Human As you are talking of Oracle Apps, NONE of the suggested solutions : 1. Database ON LOGON Trigger 2. Lock Database Account 3. Change Database Account Password 4. Startup Database in Restricted mode would work. The users connect to the Database in the APPS schema -- this is the "universal" schema that Oracle Apps uses. The Patch requires APPS so Restricted doesn't help (unless you grant Restricted to APPS in which case all the users can logon). Ditto about locking, changing password or writing a trigger on the APPS schema. What you can do are : 1. Shutdown the Apache server for the Self-Service Modules 2. Shutdown the Forms server for the Forms Module 3. Shutdown the Concurrent Managers. All of the above would affect ALLusers.
Alternatively, login to the Application as the System Administrator user and change the Application User Passwords for the users whom you want disabled. Change the passwords back to a defaultLtd
(WELCOME)
later. However, what you SHOULD do, per Oracle Support, is 1. Shutdown 2. Shutdown 3. Shutdown as I have listed above. If you are familiar with Oracle Applications Patching and are comfortable with reading the Patch drivers, you can figure out what database objects are being modified/updated/created and what Forms/Reports/HTML etc files are being modified/created by the patch. Then you can take an intelligent decision .... should you allow users to logon when applying the patch ? Hemant K Chitale Principal DBA Chartered Semiconductor Manufacturing
"CHAN Chor Ling Catherine (CSC)" <clchan_at_nie.edu.sg> 18/02/2002 03:28 PM Sent by: root_at_fatcity.com Please respond to ORACLE-L To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com> cc: (bcc: CHITALE Hemant Krishnarao/IT/CHRT/ST Group) Subject: Disable certain users from login to database while applying Human Hi Gurus, I need to disable certain users from login to database while I apply the Human Resources Patches for our Oracle HR 11i Applications. Which is the best way to do it ? Should I write on-logon trigger to disable or should I take away their privileges to logon to report/forms/sqlplus ? What about the rest of the DBA Applications administrator ? What do U guys do to solve the dead-lock problem (If my users access the HR tables while I apply the patches, I will encounter dead-lock problem) ? Please advise. Thanks. Regds, New Bee -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: CHAN Chor Ling Catherine (CSC) INET: clchan_at_nie.edu.sg Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: hemantchitale_at_charteredsemi.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: CHAN Chor Ling Catherine (CSC) INET: clchan_at_nie.edu.sg Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access /Mailing Lists
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (likesubscribing).
-- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: CHAN Chor Ling Catherine (CSC) INET: clchan_at_nie.edu.sg Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-LReceived on Wed Feb 20 2002 - 02:53:19 CST
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
 |
 |