Oracle-L: Re: Peoplesoft & Oracle

From: david davis <ddoralist_at_hotmail.com>
Date: Tue, 28 Jan 2003 20:13:57 -0800
Message-ID: <F001.0053CD47.20030128201357@fatcity.com>

There is a resolution 19368 on customer connection which discusses which rights the SYSADM account requires and which ones can be revoked. Though it was somewhat better formatted when I retrieved it in 1999. It was last modified in 2002.

I am curious how you turn off the create user? I didn't think you could do that, only control the grants that take place.

A little gotcha I ran into a couple of years ago when I revoked access was that had errors in app designer. The DLL referenced DBA_TABLES (oops) I think that was in V7.0.

David Davis

>From: dgoulet_at_vicr.com
>Reply-To: ORACLE-L_at_fatcity.com
>To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
>Subject: Re: Peoplesoft & Oracle
>Date: Tue, 28 Jan 2003 14:39:21 -0800
>
>Lisa,
> Sounds like a default install of PeopleSoft. Step 1 that you can do is
>re-assign everyone to use a real temp tablespace. Step 2 is break up that
>db
>onto seperate spindles. Step 3 is to turn off autoextend exept for those
>tablespaces that are nearing say 90% full, then set autoextend to something
>sensible. As far as the user accounts are concerned that's normal. I for
>one
>would revoke DBA from sysadmin & grant "alter any user" instead.
>Afterwards, I'd
>get into PeopleTools & turn off the "creat user" function. I could write
>more,
>but this should keep you VERY busy.
>
>Dick Goulet
>
>"Koivu; Lisa" <Lisa.Koivu_at_efairfield.com> wrote on 1/28/03 1:08 pm:
>
>Hello everyone,
>
>My apologies for bombarding the list with more questions than answers as of
>late. This one is pretty desparate.
>
>For those of you who support Peoplesoft databases - Are there any websites
>that
>you frequent to check for quirks, weird anomalies, etc. related to your
>specific
>Peoplesoft/Oracle combination?
>
>I've just inherited this environment. It's Oracle 8.1.7 on AIX. I don't
>know
>the version of AIX and I don't know the version(s) of the Peoplesoft
>modules
>being used. However I am seeing some very weird things - not the least of
>which
>is every tablespace is dictionary managed, all are on autoextend, there are
>600
>open database accounts but it looks like the app only connects as SYSADM,
>all
>users have SYSTEM for default/temp ts, the entire freaking database is on
>one
>disk, all redologs (one in each group) are on one disk, etc., etc., etc.
>The
>list goes on. I'm afraid to turn this environment upside down and fix it
>because management is only interested in keeping the system alive, not
>improving
>it. The previous DBA is elusive at best, probably because I yelled at him
>last
>year after catching him creating objects on the fly in my databases :)
>
>I'll do the obvious things like add redologs and check backup and recovery,
>etc.
> User error is extraordinarily high in this environment. Everything else
>I am
>afraid to touch without doing my homework first. Any websites,
>suggestions,
>comments, etc. would be greatly appreciated.
>
>The only good thing to come of all this is I'M BAAAAAAAAAAAAAACK in Unix
>again
>!!! Woo Hoo!!!!!!!
>
>Lisa Koivu
>Oracle Database Administrator
>Fairfield Resorts, Inc.
>5259 Coconut Creek Parkway
>Ft. Lauderdale, FL, USA 33063
>
>
>
><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML>
><HEAD>
><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
>
>
>
>
><META NAME="Generator" CONTENT="MS Exchange Server version 6.0.6249.1">
><TITLE>Peoplesoft & Oracle</TITLE>
></HEAD>
><BODY>
>
>
>Hello everyone, 
>
>
>My apologies for bombarding the list with more
>questions than answers as of late.  This one is pretty desparate.
>
>
>
>For those of you who support Peoplesoft
>databases -
>Are there any websites that you frequent to check for quirks, weird
>anomalies,
>etc. related to your specific Peoplesoft/Oracle combination? 
>
>
>I've just inherited this environment. 
>It's
>Oracle 8.1.7 on AIX.  I don't know the version of AIX and I don't know
>the
>version(s) of the Peoplesoft modules being used.  However I am seeing
>some
>very weird things - not the least of which is every tablespace is
>dictionary
>managed, all are on autoextend, there are 600 open database accounts but it
>looks like the app only connects as SYSADM, all users have SYSTEM for
>default/temp ts, the entire freaking database is on one disk, all redologs
>(one
>in each group) are on one disk, etc., etc., etc.  The list goes
>on. 
>I'm afraid to turn this environment upside down and fix it because
>management is
>only interested in keeping the system alive, not improving it.  The
>previous DBA is elusive at best, probably because I yelled at him last year
>after catching him creating objects on the fly in my databases
>:)
>
>I'll do the obvious things like add redologs
>and
>check backup and recovery, etc.  User error is extraordinarily high in
>this
>environment.  Everything else I am afraid to touch without doing my
>homework first.  Any websites, suggestions, comments, etc. would be
>greatly
>appreciated.  
>
>The only good thing to come of all this is I'M
>BAAAAAAAAAAAAAACK in Unix again !!! Woo Hoo!!!!!!!
>
>
>Lisa Koivu
>
> 
>*************************
>This message has been truncated. The entire message is available on your
>desktop
>e-mail client.
>
>--
>Please see the official ORACLE-L FAQ: http://www.orafaq.net
>--
>Author:
> INET: dgoulet_at_vicr.com
>
>Fat City Network Services -- 858-538-5051 http://www.fatcity.com
>San Diego, California -- Mailing list and web hosting services
>---------------------------------------------------------------------
>To REMOVE yourself from this mailing list, send an E-Mail message
>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>the message BODY, include a line containing: UNSUB ORACLE-L
>(or the name of mailing list you want to be removed from). You may
>also send the HELP command for other information (like subscribing).

MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: david davis
  INET: ddoralist_at_hotmail.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Received on Tue Jan 28 2003 - 22:13:57 CST