Home

9i & 10g Listener password

Prior to 10g, it was always recommended to set the password for the listener. When the listener password is not set, any login with name 'oracle' from any machine in your network can potentially stop and modify the listener process. Hence, it has always been the best practice to set the listener password.

To set the password :

</div> <div style="text-align: justify;"><span style="font-family: tahoma,geneva,sans-serif;"><span style="font-size: 10px;">LSNRCTL> change_password </div> <div style="text-align: justify;"><span style="font-family: tahoma,geneva,sans-serif;">Old password: 
New password: 
Reenter new password: 
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=kiran-solaris)(PORT=1521))) 
Password changed for listener_9i
The command completed successfully 
LSNRCTL>  save_config
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=kiran-solaris)(PORT=1521))) 
Saved listener_9i configuration parameters. 
Listener Parameter File   /oracle/app/oracle/product/9.2.0/network/admin/listener.ora
Old Parameter File   /oracle/app/oracle/product/9.2.0/network/admin/listener.bak
The command completed successfully 
LSNRCTL>

Check if you are able to stop the listener now..

</div> <div style="text-align: justify;"><span style="font-family: tahoma,geneva,sans-serif;"><span style="font-size: 10px;">kiran-solaris:/export/home/oracle>lsnrctl stop listener_9i</div> <div style="text-align: justify;"><span class="Apple-style-span" style="font-family: tahoma, geneva, sans-serif; line-height: 13px; font-size: 10px;">LSNRCTL for Solaris: Version 9.2.0.8.0 - Production on 27-OCT-2010 16:12:58
Copyright (c) 1991, 2006, Oracle Corporation.  All rights reserved.
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=kiran-solaris)(PORT=1521))) 
TNS-01169: The listener has not recognized the password

and check status...

</div> <div style="text-align: justify;"><span style="font-family: tahoma,geneva,sans-serif;"><span style="font-size: 10px;">LSNRCTL> status listener_9i</div> <div style="text-align: justify;"><span style="font-family: tahoma,geneva,sans-serif;">Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=kiran-solaris)(PORT=1521))) 
TNS-01169: The listener has not recognized the password

Obviously doesn't work without giving the password..

</div> <div style="text-align: justify;"><span style="font-family: tahoma,geneva,sans-serif;"><span style="font-size: 10px;">LSNRCTL> set password </div> <div style="text-align: justify;"><span style="font-family: tahoma,geneva,sans-serif;">Password: 
The command completed successfully 
LSNRCTL>  status 
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=kiran-solaris)(PORT=1521))) 
STATUS of the LISTENER 
------------------------ 
Alias                     LISTENER 
Version                   TNSLSNR for Solaris: Version 9.2.0.8.0 - Production 
Start Date                27-OCT-2010 14:03:51 
Uptime                    0 days 0 hr. 17 min. 38 sec 
Trace Level               off 
Security                  ON 
SNMP                      OFF 
Listener Parameter File   /oracle/app/oracle/product/9.2.0/network/admin/listener.ora
Listener Log File         /oracle/app/oracle/product/9.2.0/network/log/listener.log
Listening Endpoints Summary... 
  (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=kiran-solaris)(PORT=1521))) 
Services Summary... 
Service "galaxy.world" has 1 instance(s). 
  Instance "galaxy", status READY, has 1 handler(s) for this service... 
The command completed successfully

or setup a script to stop the listener or check the status..

</div> <div style="text-align: justify;"><span style="font-family: tahoma,geneva,sans-serif;"><span style="font-size: 10px;">kiran-solaris:/export/home/oracle>more  listener_status.sh</div> <div style="text-align: justify;"><span style="font-family: tahoma,geneva,sans-serif;">lsnrctl<<EOF
set current_listener listener_9i
set password 064C4DKJK9794D515
status 
EOF

However, from 10g and onwards, Oracle recommends not setting password for the listener. A listener with no password is more secure than the listener with the password. The reason being, the default authentication mode for TNS listener is local OS authentication. With this, only the members of the local dba group will be able to perform the listener operations. If you choose to administer the listener process from a different server, it is highly recommended to use a strong password.

Monitoring Temp Space Usage

The following is a very useful script to monitor temp space usage inside the database.

#!/usr/bin/ksh

#set up the Oracle environment.

ORACLE_BASE=/oracle/app/oracle; export ORACLE_BASE

ORACLE_HOME=/oracle/app/oracle/product/9.2.0; export ORACLE_HOME

LD_LIBRARY_PATH=$ORACLE_HOME/lib:$LD_LIBRARY_PATH; export

LD_LIBRARY_PATH

tmp_output=/tmp/temp_usage.log

script_name=${0##*/}

echo ""

echo "Script: $script_name"

echo " started on: `date`"

echo " by user: `id`"

echo " on machine: `uname -n`"

echo ""

echo "This script is designed to capture temp space usage information "

echo ""

${ORACLE_HOME}/bin/sqlplus -s <$ORACLE_PASSWD

whenever sqlerror exit 3 rollback

whenever oserror exit 4 rollback

SET SERVEROUTPUT ON

SET FEEDBACK OFF

insert into temp_usage

select (select instance_name from v\$instance) instance_name ,

s.sid ,

s.username,

u.tablespace,

substr(a.sql_text, 1, 1000) sql_text,

round(((u.blocks*p.value)/1024/1024),2) size_mb ,sysdate

from v\$sort_usage u,

v\$session s,

v\$sqlarea a,

v\$parameter p

where s.saddr = u.session_addr

and a.address (+) = s.sql_address

and a.hash_value (+) = s.sql_hash_value

and p.name = 'db_block_size'</div> <div>echo "*** ERROR: The ${script_name} did not complete successfully."</span></span></span></div> <div><span style="font-family: verdana, geneva; font-size: medium; color: #ffff00;"><span class="Apple-style-span" style="font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 12px; line-height: normal;"><span>exit 1</span></span></span></div> <div><span style="font-family: verdana, geneva; font-size: medium; color: #ffff00;"><span class="Apple-style-span" style="font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 12px; line-height: normal;"><span>else</span></span></span></div> <div><span style="font-family: verdana, geneva; font-size: medium; color: #ffff00;"><span class="Apple-style-span" style="font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 12px; line-height: normal;"><span>echo "The ${script_name} script appears to have completed successfully on `date`."</span></span></span></div> <div><span style="font-family: verdana, geneva; font-size: medium; color: #ffff00;"><span class="Apple-style-span" style="font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 12px; line-height: normal;"><span>exit 0</span></span></span></div> <div><span style="font-family: verdana, geneva; font-size: medium; color: #ffff00;"><span class="Apple-style-span" style="font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 12px; line-height: normal;"><span>fi</span></span></span></div>'</div>'

Oracle Applications Notes - AD Admin

{gavatar mode=header}

Categories :

File Generation
File system maintenance
Database maintenance
DB compilation and reloading

Before running AD admin, the Preliminary tasks need to be performed

- log in as applmgr and setup env
- make sure ORACLE_HOME, TWO_TASK are set, ORACLE_HOME/bin AD_TOP/bin in the path
- ensure enough temp space available

The following information is prompted when AD Admin runs..

- APPL_TOP, log file, preference to email if error occurs during parallel execution
- batch size commit for sqls
- apps database, passwords for system and applsys schemas

Logfiles(adadmin.log, adrelink.log, workerlogs adworkxxx.log etc) written to the APPL_TOP/admin/<SID>/log

Main Menu :

1) Generate Applications File Menu

contains following sub menu items..
Generate Message files (gnerates .msb message files, <LANG>.msb in <PROD_TOP>/mesg directory)
Generate form files (generates .fmb form binary files. several prompts and questions displayed..prompts no of parallel processes, charset and asks if you need to generate in this charset, forms pl/sql librar files and forms menu files and also asks for which products you want to generate forms and if any specific forms only to be generated)
Generate report files (generates .rdf report binaries. prompts and displays questions similar to the forms generation option)
Generate graphics files (generates .ogd graphics files.prompts and displays questions similar to the forms generation option)
Generate product jar files ( prompts whether to generate all jar files or only specific ones.,
Generates product jar files in JAVA_TOP and copies to APPL_TOP, copies registry.dat forms registry file from
ORACLE_HOME/forms60/java to JAVA_TOP/oracle/forms/registry, signs jar files on webserver, recreates appsborg.zip and appsborg2.zip under APPL_TOP and jAVA_TOP)

2) Maintain Applications Files Menu

contains following sub menu items
relink applications programs (relinks all applications binary executables. normally used when
new version of db or tech stack component is installed or patch applied to tech stack or os or any custom code is added or updated)
create applications environment file(if the env file is missing or corrupt, you can use this option to recreate)
copy files to destinations (copies files from each product aera to central locations for easy reference.
used for java, html, mediafiles from JAVA_TOP, OAH_TOP and OAM_TOP dirs)
convert characterset(converts charset for all the translatable files under APPL_TOP. Before converting charset, you can select option to scan the APPL_TOP or any CUSTOM directory for exceptions. prompts for the manifest file, default name admanifest.lst. When the scan is performed, 3 files admanifest_excp.lst, admanifest.lst, admanifest_lossy.lst files are
generated under APPL_TOP/admin/<sid>/out dir. before the conversion, backup will be automatically taken for the product source files with format <prod>_s_<charest>.zip and APPL_TOP/admin dir in the format admin_s_<charset>.zip)
maintain snaspshot information (snapshot records details including filename,version etc..about apps files under APPL_TOP
recommended to run maintain snapshot before applying any patch that contains "compatible feature prereq" for the APPL_TOP.
snapshot info is stored under AD_SNAPSHOTS, AD_SNAPSHOT_FILES, AD_SNAPSHOT_BUGFIXES tables)
check for missing files (checks for any missing files in the current configuration of apps.)

3) COmpile/reload applications database entities menu
   contains the followin gsub menu items
   compile APPS schema ( parallel workers are spawned to compile invalid db objects in the APPS schema )
   compile menu information (can be used to compile all or only a few menu entries)
   compile flexfield data in AOL tables (compiles flexfields of Apps Object LIbrary tables. this is optional step as the
flexfiles get compiled automatically when they are accessed firsttime, logfile format <sessionno>.req)
reload JAR files to database (used to reload jar files when the database becomes corrupt)

4) maintain applications datbase entities menu
contains the following sub menu items
validate apps schema (advrfapp.sql under $AD_TOP/admin/sql is run against APPS schema to verify the integriy of the schema objects.
verification report is written to APPL_TOP/admin/<SID>/out with name <APPSschemaname>.lst.
preferred to be run before and after any patch installs, converting mrcs or multiple org, or whenever AD_DDL package
errors are seen)
Recreate grants and synonyms for APPS schema (recreates grants on system package to apps, grants synonyms for the APPLSYSPUB,
spawns parallel workers recreate grants/synonyms for the product schmeas to APPS schema)
Maintain multi-lingual tables (used during NLS install and maintenane and maintains multi-lingual tables
runs <PROD>NLINS.sql script)
Check DUAL table (DUAL table should exist and return only one row for the apps to function properly)
Maintain multiple reporting currencies(MRC triggers are recreated in the APPS schema)
convert to multi-org(uses _ALL tables to store the data for the multiple operating units. use ORG_ID as the partitioning column)

5) change maintainance mode
   To run the AD admin tool in non=interactive mode, defaults file (under $APPL_TOP/admin/<SID>) must be created by running the AD admin in the
interactive mode. Tasks not supported in the non-interactive mode are
- converting to MRCs and multiorg, creating apps env file, convert charset
Menu options (menu_option=<>) that can be specified to ad admin running in non-interactive mode are
GEN_MESSAGES, GEN_FORMS, GEN_GRAPHICS, GEN_REPORTS, GEN_JARS, RELINK, CREATE_ENV, COPY_FILES,
convert_charset,create_snapshot, export_snapshot, import_snapshot, cmp_menu..etc.

Maintenance mode to restric user access and speed up the patching process. enabled using adadmin.
has the sub menu tasks options
- enable maintenance mode
- disable mainteance mode
- return main menu

6) exit AD administration

References:

Oracle Documentation : Rapid Install

Oracle Documentation : Maintenance Procedures

Oracle Documentation : Utilities

Oracle Documentation : Patching Procedures

{jcomments on}

9i & 10g Listener password

Monitoring Temp Space Usage

Oracle Applications Notes - AD Admin

More Articles...