Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> Re: Auditing

Re: Auditing

From: Hemant K Chitale <hkchital_at_singnet.com.sg>
Date: Sat, 28 Feb 2004 23:00:14 +0800
Message-Id: <5.1.1.6.0.20040228225750.00aaf130@pop.singnet.com.sg>

If I remember correctly, at my site [and this was another DBA] we lost the disk
holding the non-SYSTEM Tablespace with the renamed SYS.AUD$ [as SYS.AUD$$] table. We did an ALTER DATABASE DATAFILE OFFLINE DROP and recovered the database and switched off auditing. That should work.

Hemant

At 07:20 PM 27-02-04 +0000, you wrote:
>Hi,
>
>Oracle used to sanction moving aud$ and then they didn't sanction it
>anymore. Not sure what they current view on moving it is - probably best
>to simply ask. This was discussed on comp.databases.oracle.server last
>year 8/9/03 and this is what i answered then if it helps:
>
><quote>
>
>You mention moving sys.aud$ to another tablespace, whilst this is common
>sense Oracle no longer support doing this as some poor customer could
>not recover when this had been done. I don't believe Oracle have changed
>advice on this as yet. There is a note on Metalink about it. The
>solution if it is moved is probably to switch audit off whilst
>recovering. Jonathan discussed the following with me some time back:
>
><snip>
>I haven't done any tests on the theory - it was just
>a surmise that when the complainant was trying recovery,
>they needed to recover the tablespace with the aud$ table
>in it, but were running with audit on, so the recovery
>processes couldn't log themselves until after the recovery
>had completed.
></snip>
>
>kind regards
>
>Pete
><quote>
>
>The snip section was Jonathan Lewis's thoughts on this to me.
>
>hth
>
>kind regards
>
>Pete
>--
>Pete Finnigan
>email:pete_at_petefinnigan.com
>Web site: http://www.petefinnigan.com - Oracle security audit specialists
>Book:Oracle security step-by-step Guide - see http://store.sans.org for
>details.
>
>----------------------------------------------------------------
>Please see the official ORACLE-L FAQ: http://www.orafaq.com
>----------------------------------------------------------------
>To unsubscribe send email to: oracle-l-request_at_freelists.org
>put 'unsubscribe' in the subject line.
>--
>Archives are at http://www.freelists.org/archives/oracle-l/
>FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
>-----------------------------------------------------------------

Hemant K Chitale
Oracle 9i Database Administrator Certified Professional http://hkchital.tripod.com {last updated 24-Jan-04} "Failure is not an option.
It comes bundled with the software
[or hardware, as the case may be]"



Please see the official ORACLE-L FAQ: http://www.orafaq.com

To unsubscribe send email to: oracle-l-request_at_freelists.org put 'unsubscribe' in the subject line.
--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
Received on Sat Feb 28 2004 - 09:05:44 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US