RE: Oracle instance startup user on Unix

I vote for one listener per box - been running this way on several different hardware/OS/Oracle combinations for several years and can't remember ever having a problem. More listeners just equals more maintenance in my opinion.

Never had to shutdown SQL*Net access (can just put the specific database in restricted mode if that's what you really want), but if you had to couldn't you just remove the desired service from your listener.ora and then do a reload?

-----Original Message-----

From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org]On Behalf Of Aragon, Gabriel (GE Commercial Finance)
Sent: Wednesday, July 13, 2005 1:03 PM
To: Les.Hollis_at_ps.net; Thomas.Mercadante_at_labor.state.ny.us; rob.langmuir_at_joking.plus.com; oracle-l_at_freelists.org Subject: RE: Oracle instance startup user on Unix

I've been through many headaches to say that is much better to have separated listeners.. when you have problems on one of them, you will love not to have all your db's under it..

GAP
-----Original Message-----

From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org]
Sent: Miércoles, 13 de Julio de 2005 08:29 a.m. To: Thomas.Mercadante_at_labor.state.ny.us; rob.langmuir_at_joking.plus.com; oracle-l_at_freelists.org
Subject: RE: Oracle instance startup user on Unix

Disagree with the "There should be one listener process per server. Period. " We have multiple oracle/servers running on the same UNIX server. If all of them are running on one listener, then I have to drop the listener for all if I need to shutdown SQL*NET access to one.

Each database has it's own listener running on a different port...PLUS we have one listener running for all databases that is on a NATTED IP for administrative access through a VPN.

And none of them are on default 1521

-----Original Message-----

From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Mercadante, Thomas F (LABOR)
Sent: Wednesday, July 13, 2005 7:46 AM
To: rob.langmuir_at_joking.plus.com; oracle-l_at_freelists.org Subject: RE: Oracle instance startup user on Unix

Bob,

My concerns are management and security.

Let's tackle the easy one first:

Security.
Who will have access to the unix account where the database resides? I'm assuming you have a DBA group. Will you have exclusive access to this unix account? If everybody and his brother has the password for this account, then the security of the database is non-existant. You will have no control over who can update anything.

Management.

Who is managing the server? And who is managing Oracle on that server? Zhu Chao makes a reasonable point about multiple Oracle homes and accounts for different database instances. But I would argue that having them all in an Oracle unix account is much easier to manage.

And finally the listener issue. There should be one listener process per server. Period. They should not be managing their own listener. Just plain dumb.

My little 2 cents.

Tom

-----Original Message-----

From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org] On Behalf Of RSL Sent: Wednesday, July 13, 2005 1:27 AM
To: oracle-l_at_freelists.org
Subject: Oracle instance startup user on Unix

We have a third-party application, which as part of installation process,
uses it's own Unix account to create/startup Oracle database/instance. They
also want to start a listener with this account.

In the future we plan to add our own instances/databases, and these will all
be started/created using Oracle account.

I don't much like the idea of having two separate unix accounts involved in
creating database(s) and starting instances.

Although there is no practical reason why this can't be done, can you please
offer any reasons why you wouldn't /shouldn't do this.

Thanks..../Bob

--

http://www.freelists.org/webpage/oracle-l
--

http://www.freelists.org/webpage/oracle-l

--

http://www.freelists.org/webpage/oracle-l
--

http://www.freelists.org/webpage/oracle-l

Privileged/Confidential Information may be contained in this message or attachments hereto. Please advise immediately if you or your employer do not consent to Internet email for messages of this kind. Opinions, conclusions and other information in this message that do not relate to the official business of this company shall be understood as neither given nor endorsed by it.

--

http://www.freelists.org/webpage/oracle-l Received on Wed Jul 13 2005 - 18:21:25 CDT