Return-Path: <oracle-l-bounce@freelists.org>
Delivered-To: 2-oracle-l@orafaq.com
Received: (qmail 4382 invoked from network); 12 Dec 2007 20:08:21 -0600
Received: from freelists-180.iquest.net (HELO turing.freelists.org) (206.53.239.180)
  by static-ip-69-64-49-119.inaddr.intergenia.de with SMTP; 12 Dec 2007 20:08:21 -0600
Received: from localhost (localhost [127.0.0.1])
 by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 1E59E7D84FB;
 Wed, 12 Dec 2007 21:08:22 -0500 (EST)
Received: from turing.freelists.org ([127.0.0.1])
 by localhost (turing.freelists.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 27256-06; Wed, 12 Dec 2007 21:08:22 -0500 (EST)
Received: from turing (localhost [127.0.0.1])
 by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 8AE077D882E;
 Wed, 12 Dec 2007 21:08:21 -0500 (EST)
Received: with ECARTIS (v1.0.0; list oracle-l); Wed, 12 Dec 2007 20:20:55 -0500 (EST)
Received: from localhost (localhost [127.0.0.1])
 by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 6CFF37D76C5
 for <oracle-l@freelists.org>; Wed, 12 Dec 2007 20:20:55 -0500 (EST)
Received: from turing.freelists.org ([127.0.0.1])
 by localhost (turing.freelists.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 17336-10 for <oracle-l@freelists.org>;
 Wed, 12 Dec 2007 20:20:55 -0500 (EST)
Received: from web35415.mail.mud.yahoo.com (web35415.mail.mud.yahoo.com [66.163.179.124])
 by turing.freelists.org (Avenir Technologies Mail Multiplex) with SMTP id E7B407D7795
 for <oracle-l@freelists.org>; Wed, 12 Dec 2007 20:20:54 -0500 (EST)
Received: (qmail 45209 invoked by uid 60001); 13 Dec 2007 01:20:54 -0000
X-YMail-OSG: GNDDhUUVM1mXzAlo4bbRSL0Ls7f.GRVky13PqRvrbZOuz4Y2gc7kFyDSFzefAzAXNXmyQflSgtwGdPXWKwB3iLACBZnJal8I_uuswM_O1OT7gM8Uczzhq4XCniWiEA--
Received: from [64.53.237.191] by web35415.mail.mud.yahoo.com via HTTP; Wed, 12 Dec 2007 17:20:53 PST
Date: Wed, 12 Dec 2007 17:20:53 -0800 (PST)
From: Dan Norris <dannorris@dannorris.com>
Subject: Re: separate owner/ORACLE_HOME for crs, ASM, and database in RAC environment
To: litanli@gmail.com, William Wagman <wjwagman@ucdavis.edu>
Cc: finn.oracledba@gmail.com, oracle-l <oracle-l@freelists.org>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-177286748-1197508853=:43674"
Message-ID: <774166.43674.qm@web35415.mail.mud.yahoo.com>
X-archive-position: 3904
X-ecartis-version: Ecartis v1.0.0
Sender: oracle-l-bounce@freelists.org
Errors-to: oracle-l-bounce@freelists.org
X-original-sender: dannorris@dannorris.com
Precedence: normal
Reply-to: dannorris@dannorris.com
List-help: <mailto:ecartis@freelists.org?Subject=help>
List-unsubscribe: <oracle-l-request@freelists.org?Subject=unsubscribe>
List-software: Ecartis version 1.0.0
List-Id: oracle-l <oracle-l.freelists.org>
X-List-ID: oracle-l <oracle-l.freelists.org>
List-subscribe: <oracle-l-request@freelists.org?Subject=subscribe>
List-owner: <mailto:steve.adams@ixora.com.au>
List-post: <mailto:oracle-l@freelists.org>
List-archive: <http://www.freelists.org/archives/oracle-l>
X-list: oracle-l
X-Virus-Scanned: Debian amavisd-new at localhost.localdomain
--0-177286748-1197508853=:43674
Content-Type: text/plain; charset=us-ascii

In my experiences with this, the oraclex user (the RDBMS owner) will have to be in the OSASM group. This defeats some of the separation, but as I understand it, the Oracle developers know that the separation isn't quite complete yet and someone told me that we should expect "true" separation in a future release (probably 11g R2). If your OSASM group is also dba, then I'm not sure I know why you're having issues. I tried the same thing and had three users: 1) a clusterware owner, 2) an ASM owner, and 3) an RDBMS owner. I found that the clusterware can be separated pretty cleanly from the other two, but the ASM and RDBMS owners essentially have power over each others' domains since the RDBMS user must be in the OSASM group and I think the ASM owner may have had to be in the OSDBA. I don't have access to my test systems for this any longer, so my memory may be a little off. It's also possible that things have changed slightly since my testing which was done
 with 11gR1-beta5.

Dan

----- Original Message ----
From: Li Li <litanli@gmail.com>
To: William Wagman <wjwagman@ucdavis.edu>
Cc: finn.oracledba@gmail.com; oracle-l <oracle-l@freelists.org>
Sent: Wednesday, December 12, 2007 5:51:26 PM
Subject: Re: separate owner/ORACLE_HOME for crs, ASM, and database in RAC environment


Hi, Bill,

 

I don't use asmlib because its dependency on linux kernel. I just create ASM diskgroups using RAW devices. when I login as oracle and start dbca, ASM disks are all look/work fine.


 

On Dec 12, 2007 5:14 PM, William Wagman <wjwagman@ucdavis.edu> wrote:



Greetings,

 

The thinking is to separate CRS, ASM and RDBMS for ease of maintenance. This is also the Oracle suggestion that each be in a separate home. It makes patching and upgrading easier.


 

As to the disk issues. First are you using ASMLIB? Make sure if you are it is configured correctly and the disks have been created. 


 

Also look at the status of this disks as described in v$asm_disk. They status must be either provisioned or candidate. I have encountered this situation before where the status was unknown and that caused me problems.


 

Also, are you using multipathing? If so make sure you have scanorder and scanexclude set correctly in the oracleasm file as that can affect things. There was a thread about this a while ago.


 

I apologize for not being more specific but I still don't have a good enough understanding of how things work. A lot of what I have done is through trial and error and can give you things to look at but that's about it at this point.


 

Bill Wagman
Univ. of California at Davis
IET Campus Data Center
wjwagman@ucdavis.edu
(530) 754-6208 

 




From: oracle-l-bounce@freelists.org [mailto:oracle-l-bounce@freelists.org
] On Behalf Of Finn Jorgensen
Sent: Wednesday, December 12, 2007 2:09 PM
To: litanli@gmail.com
Cc: oracle-l
Subject:
 Re: separate owner/ORACLE_HOME for crs, ASM, and database in RAC environment









Before trying to figure this one out, I'm trying to wrap my brain around why you would do that. What's the thinking behind this setup?

 

Finn

 

On 12/12/07, Li Li <litanli@gmail.com> wrote: 

Hi, List,

 

I am testing to setup a 2-node RAC environment with separate owner/ORACLE_HOME for crs, ASM, and database, it's 10gR2 on Redhat AS 4.

 

2 users are created: oracle and oraclex, oracle owns clusterware home and ASM home, oraclex owns database home.

 

first, I login as oracle and installed clusterware and database software (in 2 different oracle home of course), configured and started ASM instance, everything worked fine.

 

second, I login as oraclex and installed database software, then I tried to create a database using dbca, but I ran into error when I chose ASM as my database storage, the error is:

"DBCA could not startup the ASM instance configured on this node. To proceed with database creation using ASM you need the ASM instance to be up and running. Do you want to recreate the ASM instance on this node?" 


 

But the ASM instance IS already running. I am guessing this must be because of some permission issue but I am not sure what I am missing. I have oracle and oraclex both have "oinstall" as primary group and "dba" as second group. 


 

I googled but cannot find any useful information. Can anybody give me some suggestion? Any comment would be greatly appreciated!

 

Thanks,

-Li

 

 












--0-177286748-1197508853=:43674
Content-Type: text/html; charset=us-ascii

<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:arial,helvetica,sans-serif;font-size:10pt"><div style="font-family: arial,helvetica,sans-serif; font-size: 10pt;">In my experiences with this, the oraclex user (the RDBMS owner) will have to be in the OSASM group. This defeats some of the separation, but as I understand it, the Oracle developers know that the separation isn't quite complete yet and someone told me that we should expect "true" separation in a future release (probably 11g R2). If your OSASM group is also dba, then I'm not sure I know why you're having issues. I tried the same thing and had three users: 1) a clusterware owner, 2) an ASM owner, and 3) an RDBMS owner. I found that the clusterware can be separated pretty cleanly from the other two, but the ASM and RDBMS owners essentially have power over each others' domains since the RDBMS user must be in the OSASM group and I think the
 ASM owner may have had to be in the OSDBA. I don't have access to my test systems for this any longer, so my memory may be a little off. It's also possible that things have changed slightly since my testing which was done with 11gR1-beta5.<br><br>Dan<br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Original Message ----<br>From: Li Li &lt;litanli@gmail.com&gt;<br>To: William Wagman &lt;wjwagman@ucdavis.edu&gt;<br>Cc: finn.oracledba@gmail.com; oracle-l &lt;oracle-l@freelists.org&gt;<br>Sent: Wednesday, December 12, 2007 5:51:26 PM<br>Subject: Re: separate owner/ORACLE_HOME for crs, ASM, and database in RAC environment<br><br>
<div>Hi, Bill,</div>
<div>&nbsp;</div>
<div>I don't use asmlib because its dependency on linux kernel. I just create ASM diskgroups using RAW devices. when I login as oracle and start dbca, ASM disks are all look/work fine.</div>
<div><br>&nbsp;</div>
<div class="gmail_quote">On Dec 12, 2007 5:14 PM, William Wagman &lt;<a rel="nofollow" ymailto="mailto:wjwagman@ucdavis.edu" target="_blank" href="mailto:wjwagman@ucdavis.edu">wjwagman@ucdavis.edu</a>&gt; wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0px 0px 0px 0.8ex; padding-left: 1ex;">
<div>
<div dir="ltr" align="left"><span><font color="#0000ff" face="Arial" size="2">Greetings,</font></span></div>
<div dir="ltr" align="left"><span><font color="#0000ff" face="Arial" size="2"></font></span>&nbsp;</div>
<div dir="ltr" align="left"><span><font color="#0000ff" face="Arial" size="2">The thinking is to separate CRS, ASM and RDBMS for ease of maintenance. This is also the Oracle suggestion that each be in a separate home. It makes patching and upgrading easier.
</font></span></div>
<div dir="ltr" align="left"><span><font color="#0000ff" face="Arial" size="2"></font></span>&nbsp;</div>
<div dir="ltr" align="left"><span><font color="#0000ff" face="Arial" size="2">As to the disk issues. First are you using ASMLIB? Make sure if you are it is configured correctly and the disks have been created. </font></span>
</div>
<div dir="ltr" align="left"><span><font color="#0000ff" face="Arial" size="2"></font></span>&nbsp;</div>
<div dir="ltr" align="left"><span><font color="#0000ff" face="Arial" size="2">Also look at the status of this disks as described in v$asm_disk. They status must be either provisioned or candidate. I have encountered this situation before where the status was unknown and that caused me problems.
</font></span></div>
<div dir="ltr" align="left"><span><font color="#0000ff" face="Arial" size="2"></font></span>&nbsp;</div>
<div dir="ltr" align="left"><span><font color="#0000ff" face="Arial" size="2">Also, are you using multipathing? If so make sure you have scanorder and scanexclude set correctly in the oracleasm file as that can affect things. There was a thread about this a while ago.
</font></span></div>
<div dir="ltr" align="left"><span><font color="#0000ff" face="Arial" size="2"></font></span>&nbsp;</div>
<div dir="ltr" align="left"><span><font color="#0000ff" face="Arial" size="2">I apologize for not being more specific but I still don't have a good enough understanding of how things work. A lot of what I have done is through trial and error and can give you things to look at but that's about it at this point.
</font></span></div>
<div>&nbsp;</div>
<p><font size="2">Bill Wagman<br>Univ. of California at Davis<br>IET Campus Data Center<br><a rel="nofollow" ymailto="mailto:wjwagman@ucdavis.edu" target="_blank" href="mailto:wjwagman@ucdavis.edu">wjwagman@ucdavis.edu</a><br>(530) 754-6208</font> </p>
<div>&nbsp;</div><br>
<div dir="ltr" align="left" lang="en-us">
<SPAN style="width:100%;height:2px;border-bottom:1px solid rgb(212,208,200); border-top:1px solid rgb(128,128,128);background-color:black;overflow:hidden; margin:8px 0px;"></SPAN>
<font face="Tahoma" size="2"><b>From:</b> <a rel="nofollow" ymailto="mailto:oracle-l-bounce@freelists.org" target="_blank" href="mailto:oracle-l-bounce@freelists.org">oracle-l-bounce@freelists.org</a> [mailto:<a rel="nofollow" ymailto="mailto:oracle-l-bounce@freelists.org" target="_blank" href="mailto:oracle-l-bounce@freelists.org">oracle-l-bounce@freelists.org
</a>] <b>On Behalf Of </b>Finn Jorgensen<br><b>Sent:</b> Wednesday, December 12, 2007 2:09 PM<br><b>To:</b> <a rel="nofollow" ymailto="mailto:litanli@gmail.com" target="_blank" href="mailto:litanli@gmail.com">litanli@gmail.com</a><br><b>Cc:</b> oracle-l<br><b>Subject:</b>
 Re: separate owner/ORACLE_HOME for crs, ASM, and database in RAC environment<br></font><br></div>
<div>
<div></div>
<div class="Wj3C7c">
<div></div>
<div>Before trying to figure this one out, I'm trying to wrap my brain around why you would do that. What's the thinking behind this setup?</div>
<div>&nbsp;</div>
<div>Finn<br><br>&nbsp;</div>
<div><span class="gmail_quote">On 12/12/07, <b class="gmail_sendername">Li Li</b> &lt;<a rel="nofollow" ymailto="mailto:litanli@gmail.com" target="_blank" href="mailto:litanli@gmail.com">litanli@gmail.com</a>&gt; wrote:</span> 
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0px 0px 0px 0.8ex; padding-left: 1ex;">
<div>Hi, List,</div>
<div>&nbsp;</div>
<div>I am testing to setup a 2-node RAC environment with separate owner/ORACLE_HOME for crs, ASM, and database, it's 10gR2 on Redhat AS 4.</div>
<div>&nbsp;</div>
<div>2 users are created: oracle and oraclex, oracle owns clusterware home and ASM home, oraclex owns database home.</div>
<div>&nbsp;</div>
<div>first, I login as oracle and installed clusterware and database software (in 2 different oracle home of course), configured and started ASM instance, everything worked fine.</div>
<div>&nbsp;</div>
<div>second, I login as oraclex and installed database software, then I tried to create a database using dbca, but I ran into error when I chose ASM as my database storage, the error is:</div>
<div>"DBCA could not startup the ASM instance configured on this node. To proceed with database creation using ASM you need the ASM instance to be up and running. Do you want to recreate the ASM instance on this node?" 
</div>
<div>&nbsp;</div>
<div>But the ASM instance IS already running. I am guessing this must be because of some permission issue but I am not sure what I am missing. I have oracle and oraclex both have "oinstall" as primary group and "dba" as second group. 
</div>
<div>&nbsp;</div>
<div>I googled but cannot find any useful information. Can anybody give me some suggestion? Any comment would be greatly appreciated!</div>
<div>&nbsp;</div>
<div>Thanks,</div><span>
<div>-Li</div>
<div>&nbsp;</div>
<div>&nbsp;</div></span></blockquote></div><br></div></div></div></blockquote></div><br>
</div><br></div></div></body></html>
--0-177286748-1197508853=:43674--
--
http://www.freelists.org/webpage/oracle-l


