No question at this time
DBA Top 10
1 A. Kavsek 12200
2 M. Cadot 7000
3 P. Wisse 5600
4 B. Vroman 5400
5 J. Péran 1900
6 . Lauri 1500
7 T. P 500
7 R. Pattyn 500
9 T. Boles 400
10 A. Chavan 300
10 J. Schnackenberg 300
10 D. Johnson 300
About
DBA-Village
The DBA-Village forum
Forum as RSS
as RSS feed
Site Statistics
Ever registered users48454
Total active users1499
Act. users last 24h5
Act. users last hour0
Registered user hits last week216
Registered user hits last month950
Go up

oracle services
Next thread: Hybrid model (OLAP+OLTP)for transnational database - how to do efficient design / SQLs
Prev thread: Ora-1092 disconnection forced

Message Score Author Date
Hi Guys I have Oracle services that run on Orac...... Tso P Jul 31, 2019, 13:05
grant the dba role, then they can login as c...... David Johnson Jul 31, 2019, 13:43
Thanks David My apologies, I forgot to mention ...... Tso P Jul 31, 2019, 13:56
Hi Tso, how do you start the services wen conne...... Score: 200 PtsScore: 200 PtsScore: 200 PtsScore: 200 PtsScore: 200 Pts Bruno Vroman Jul 31, 2019, 14:24
grant the group that owns the script to the user ...... Score: 100 PtsScore: 100 PtsScore: 100 PtsScore: 100 PtsScore: 100 Pts David Johnson Jul 31, 2019, 14:27
Thanks guys for the replies... @Bruno, I opted ...... Score: 100 PtsScore: 100 PtsScore: 100 PtsScore: 100 PtsScore: 100 Pts Tso P Aug 01, 2019, 09:47

Follow up by mail Click here


Subject: oracle services
Author: Tso P, South Africa
Date: Jul 31, 2019, 13:05, 111 days ago
Os info: solaris 11
Oracle info: Oracle Database 12c Enterprise Edition Release 12.2.0.1.0 - 64bit Production
Message: Hi Guys

I have Oracle services that run on Oracle app server and they are owned by Oracle user.

Now, I have developers who will need to restart this services at some point.

How do I grant them access to do so without giving the oracle user password?

Thanks in advance.

Please Help !!!
Goto: Reply - Top of page 
If you think this item violates copyrights, please click here

Subject: Re: oracle services
Author: David Johnson, United States
Date: Jul 31, 2019, 13:43, 111 days ago
Message: grant the dba role, then they can login
as

conn usr/pwd@tns as sysdba
or
conn usr/pwd@tns as sysoper

not sure if there is a special role for sysoper.


Your rating?: This reply is Good Excellent
Goto: Reply - Top of page 
If you think this item violates copyrights, please click here

Subject: Re: oracle services
Author: Tso P, South Africa
Date: Jul 31, 2019, 13:56, 111 days ago
Message: Thanks David

My apologies, I forgot to mention that I want to grant the users the shell scripts access.

Not the database access.

Thanks
Your rating?: This reply is Good Excellent
Goto: Reply - Top of page 
If you think this item violates copyrights, please click here

Subject: Re: oracle services
Author: Bruno Vroman, Belgium
Date: Jul 31, 2019, 14:24, 111 days ago
Score:   Score: 200 PtsScore: 200 PtsScore: 200 PtsScore: 200 PtsScore: 200 Pts
Message: Hi Tso,

how do you start the services wen connected as "oracle" on the app server?

idea1:
You just have to create a file performing these commands and owned by "oracle", and to provide execute privilege to the users; presumably something like
$ chmod 751 manage_ora_services.ksh
assuming that the script receives one argument "stop|start|status" to stop or start the service(s)
then you will have
-rwxr-x--x manage_ora_services.ksh
and assuming the location is in the PATH, the users just have to run things like
$ manage_ora_services.ksh stop

(and as "others" don't have the "r" access they will not see a password, would it be written in the file)

idea2:
I have not tested, it might be that this doesn't work and that you have to use for example permissions -rwxr-xr-x
In this case you don't want to write a password in the file...
Then you can investigate a bit how to use a wallet, or other ways to hide a password (for example by writing it in another file that is more protected)…

(once again: not tested, and difficult to guess what you need exactly when you mention "services" -something to manage inside a database with dbms_service? something to manage with srvctl? something else?)

Best regards,

Bruno Vroman.
Your rating?: This reply is Good Excellent
Goto: Reply - Top of page 
If you think this item violates copyrights, please click here

Subject: Re: oracle services
Author: David Johnson, United States
Date: Jul 31, 2019, 14:27, 111 days ago
Score:   Score: 100 PtsScore: 100 PtsScore: 100 PtsScore: 100 PtsScore: 100 Pts
Message: grant the group that owns the script to the user
with chmod in unix, I think there is a group name predefined for dbas / operators in windows, though I can't remember what it is.
Your rating?: This reply is Good Excellent
Goto: Reply - Top of page 
If you think this item violates copyrights, please click here

Subject: Re: oracle services
Author: Tso P, South Africa
Date: Aug 01, 2019, 09:47, 110 days ago
Score:   Score: 100 PtsScore: 100 PtsScore: 100 PtsScore: 100 PtsScore: 100 Pts
Message: Thanks guys for the replies...

@Bruno, I opted to use your idea1 as an option and it works perfect.

Thanks
Your rating?: This reply is Good Excellent
Goto: Reply - Top of page 
If you think this item violates copyrights, please click here