LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices



Reply
 
Search this Thread
Old 01-03-2013, 04:32 PM   #1
thiyagusham
Member
 
Registered: Apr 2012
Posts: 213

Rep: Reputation: Disabled
Problemm with dba group vs oinstall group


Hi to all ;

This is related to oracle as well as some os related security problems. please clarify it. I tried but couldn't solve it!
All information's given here ..

Testing from user 'A'

PHP Code:

# useradd -m -g oinstall a 

# passwd a

Changing password for user a.

New 
UNIX password:

BAD PASSWORDits WAY too short

Retype 
new UNIX password:

passwdall authentication tokens updated successfully.

su a

[a@testorcl ~]$ export 

ORACLE_HOME
=/u01/app/oracle/product/10.2.0/db_1

export PATH=$PATH:$ORACLE_HOME/bin

export ORACLE_SID=testdb

sqlplus /nolog

SQL
*PlusRelease 10.2.0.1.0 Production on Thu Jan 3 01:33:49 2013
Copyright 
(c19822005Oracle.  All rights reserved

Testing From user 'b' :


PHP Code:
# useradd -m -g dba b

# passwd b

Changing password for user b.

New 
UNIX password:

BAD PASSWORDits WAY too short

Retype 
new UNIX password:

passwdall authentication tokens updated successfully.

su b

Password
:

export ORACLE_HOME=/u01/app/oracle/product/10.2.0/db_1

export PATH=$PATH:$ORACLE_HOME/bin

export ORACLE_SID=testdb

sqlplus /nolog

sqlplus
error while loading shared librarieslibsqlplus.socannot open shared object fileNo such file or directory

[b@testorcl ~]$ 
$ find / -name libsqlplus\* -ls 2>/dev/null
PHP Code:
1378188 1296 -rw-r-----  1 oracle   oinstall  1319436 Jun 22  2005 /u01/app/oracle/product/10.2.0/db_1/lib/libsqlplus.a
1378193 1028  
-rw-r----- 1 oracle   oinstall  1047293 Jun 22  2005  /u01/app/oracle/product/10.2.0/db_1/lib/libsqlplus.so 
SQLPLUS LOCATION with associated group
PHP Code:
ls -l $ORACLE_HOME 
drwxr
-x--- 9 oracle oinstall 4096 Dec 24 03:28 sqlplus 
Please Note :

USER 'a' belongs oinstall group.
USER 'b' belongs dba group.

My questions are :

1.why OS user can access database with oinstall group ?
2.why OS user can't access database with dba group ?

Note: This is concept of oracle

To connect as sysdba using OS Authentication ; UNIX OS user must be a part of OSDBA (dba) group.
Once the user is part of OSDBA group.

Quote:
but in dba group with os user , can't connect sqlplus
Regards
Thiyagusham .G
 
Old 01-03-2013, 05:59 PM   #2
Habitual
Senior Member
 
Registered: Jan 2011
Distribution: Undecided
Posts: 3,622
Blog Entries: 1

Rep: Reputation: Disabled
oinstall is for, well the INSTALLATION.
the dba designation is for the administration of the Oracle db, (after the install).

what are the $PATH differences between A and B ?
Code:
sqlplus: error while loading shared libraries: libsqlplus.so: cannot open shared object file: No such file or directory
probably is a path issue.

Check the documentation.

Last edited by Habitual; 01-03-2013 at 06:03 PM.
 
Old 01-03-2013, 06:36 PM   #3
chrism01
Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.6, Centos 5.10
Posts: 16,324

Rep: Reputation: 2041Reputation: 2041Reputation: 2041Reputation: 2041Reputation: 2041Reputation: 2041Reputation: 2041Reputation: 2041Reputation: 2041Reputation: 2041Reputation: 2041
Actually, that would be the LD_LIBRARY_PATH https://kamranagayev.files.wordpress..._install22.jpg.
You're still going to have perm problems, as according to you (OP), only the oracle user or members of the oinstall group can run that code anyway....
Check the Oracle docs; you may need to add user b to multiple groups; oinstall and dba.
 
Old 01-03-2013, 06:48 PM   #4
thiyagusham
Member
 
Registered: Apr 2012
Posts: 213

Original Poster
Rep: Reputation: Disabled
Hi Chrosm01 , Habitual;

You are right. As Oracle user i don't have any problem. test DB works well.
I tried to set OS authentication for limited OS users ( sam=a , sona=b)
I was testing with user a and user b ..

Quote:
As per doc : If User belongs dba group , they can connect with sqlplus ..
I have knowledge about permission settings. What's the problem here
So that i am asking .Kindly help me resolve this.

Last edited by thiyagusham; 01-03-2013 at 06:49 PM.
 
Old 01-03-2013, 07:12 PM   #5
thiyagusham
Member
 
Registered: Apr 2012
Posts: 213

Original Poster
Rep: Reputation: Disabled
Hi to all ;

"No need to add user b to multiple groups; oinstall and dba."

This is the problem

Quote:
user 'a' can connect with sqlplus belongs 'oinstall group"
user 'b' can't with sqlplus belongs 'dba group"
 
Old 01-03-2013, 07:31 PM   #6
Habitual
Senior Member
 
Registered: Jan 2011
Distribution: Undecided
Posts: 3,622
Blog Entries: 1

Rep: Reputation: Disabled
Everything I learned about installing and configuring Oracle came from http://www.puschitz.com/OracleOnLinux.shtml

It's all "there" and at OTN
 
Old 01-05-2013, 04:24 PM   #7
thiyagusham
Member
 
Registered: Apr 2012
Posts: 213

Original Poster
Rep: Reputation: Disabled
Hello to all;

I suspect permissions set incorrectly.

I tried to find file location but getting error.

PHP Code:
locate changePerm.sh
warning
locatecould not open database: /var/lib/slocate/slocate.dbNo such file or directory
warning
You need to run the 'updatedb' command (as rootto create the database.
Please have a look at /etc/updatedb.conf to enable the daily cron job
 
Old 01-05-2013, 06:15 PM   #8
Habitual
Senior Member
 
Registered: Jan 2011
Distribution: Undecided
Posts: 3,622
Blog Entries: 1

Rep: Reputation: Disabled
Code:
sudo updatedb
changePerm.sh ?
What does that have to do with oracle groups and sqlplus paths ?

Last edited by Habitual; 01-05-2013 at 06:18 PM.
 
Old 01-05-2013, 06:29 PM   #9
thiyagusham
Member
 
Registered: Apr 2012
Posts: 213

Original Poster
Rep: Reputation: Disabled
Hi Habitual;

Did u expect this ?

Quote:
$ cd sqlplus
[oracle@testorcl sqlplus]$ pwd
/u01/app/oracle/product/10.2.0/db_1/sqlplus
>> I tried to change permission regarding above mentioned error >>

Quote:
[oracle@testorcl install]$ ./changePerm.sh
-bash: ./changePerm.sh: No such file or directory
[oracle@testorcl install]$ cd
[oracle@testorcl ~]$ whereis changePerm.sh
changePerm:
[oracle@testorcl ~]$
but continuously getting error.
 
Old 01-06-2013, 10:40 AM   #10
Habitual
Senior Member
 
Registered: Jan 2011
Distribution: Undecided
Posts: 3,622
Blog Entries: 1

Rep: Reputation: Disabled
Not really.

We have suggested group permissions and you are off trying to manipulate file permissions....

Since you can't stay on topic, or pursue the LD_LIBRARY_PATH path variable as Chris has suggested, I now exit the conversation.

Database Administrator Authentication

oinstall vs. dba UNIX Group
What is LD_LIBRARY_PATH env variable for?

Maybe Oracle is not suited for you?

Last edited by Habitual; 01-06-2013 at 10:41 AM.
 
Old 01-06-2013, 10:45 AM   #11
thiyagusham
Member
 
Registered: Apr 2012
Posts: 213

Original Poster
Rep: Reputation: Disabled
Hi habitual;

i did n't understand

Maybe Oracle is not suited for you?

Quote:
Did you mean i am not capable to work in oracle?
 
Old 01-06-2013, 11:06 AM   #12
NevemTeve
Senior Member
 
Registered: Oct 2011
Location: Budapest
Distribution: Debian/GNU/Linux, AIX
Posts: 1,949

Rep: Reputation: 524Reputation: 524Reputation: 524Reputation: 524Reputation: 524Reputation: 524
To OP: Well, if you are unfamiliar with linux, you should call oraenv, as Oracle suggests.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Block bitmap for group 416 not in group (block 0) + group descriptors corrupted? quanta Linux - Server 1 12-08-2010 11:40 AM
Secondary group users need to change the file permissions of primary group files? sunnybmv Linux - Newbie 3 12-10-2009 05:57 PM
what does oinstall and dba in /etc/group means? gilda_ph Linux - Newbie 1 12-19-2008 09:43 PM
group: add complete group into other group max_mad Suse/Novell 1 04-12-2006 02:43 AM
Group Admin, Group Root, or God over Group crickett Linux - General 5 07-12-2004 05:01 PM


All times are GMT -5. The time now is 06:12 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration