Re: RMAN v Control Files

Noons <nsouto_at_optusnet.com.au.nospam> wrote in message news:<Xns9326EA3351EAETokenthis_at_210.49.20.254>...
> Following up on Niall Litchfield, 18 Feb 2003:
>
> >
> > I don't use RMAN so I can't say whether RMAN uses the account or not,
> > but preferred credentials are set in OEM from the configuration menu.
>
> Yeah, but where are they used from? The agent? The mgt server?
> Any batch jobs? Who starts the batch jobs then? Friggin Windoze...

Isn't it just VMS New Technology? :-)

>
>
> > Choose preferences, where you get administrator specific preferences and
> > then preferred credentials. this has a setting for each item, AND a
> > default for each type of managed object.
>
> Bugger. 9ir2 here and I don't see one for each type of object.
> Maybe wrong version, I had 8.1.7 prior to this. Let me re-verify
> all that...
>
>
> > that you should have one adminstrator that owns all of the jobs, events
> > etc and configure preferred credentials for this account, then create
> > other administrators if you need them as super administrators, I for one
> > can't see why preferred credentials shouldn't be an attribute of the
> > node/database/web server rather than of the administrator but there you
> > go.
>
>
> Heh! This is the secure net that carries the mil stuff
> for our pilots in Iraq. Do you seriously think these folks
> would let any1 use admin accounts? Cripes: if I do a "ping",
> 3 minutes later I get a security spook sniffing around,
> checking why I used it!...
>
> >
> > I thought that was your default position on windows v unix <G>?
>
>
> Granted. But it ain't the air force one. They win! :D
>
>
> > message and is set up correctly in OEM make sure that it has full
> > control of the temp directory that it uses and at least read and execute
> > rights to the Oracle Home directory.
>
>
> Well spotted, forgot to check those. Thanks a lot!
>
>
> > You can usually troubleshoot the
> > 'Do I have a permissions problem or have I fat fingered the setup'
> > question by *temporarily* setting the userid in question as an
> > administrator of the server.
> >
>
> That's what I usually do, but in this kind of milnet
> there is simply no way those folks will let any1 be
> admin. Their approach to security breaks is very simple:
> do NOT do it.
> Works...

So the solution to that is to be very friendly with those folks. Give 'em one of the old "beat the casino" programs! :-)

Of course, there _has_ to be someone around with admin priv, that just _cannot resist_ showing off how powerful they are over the dba... :-)

jg

--
@home is bogus.
http://www.signonsandiego.com/news/uniontrib/wed/business/news_1b19hacker.html