COMMON_USER_CONNECT lockdown profiles feature in Oracle Database 19c
After upgrading some CDBs to 19c, we hit the problem of not being able to connect as common users to the PDBs. In all affected CDBs, lockdown profiles were in place with following definition regarding common user connection part: It worked well in 12c, but…
Smart Sizing of Fast Recovery Area in Cloud Environments
This is just to let you know about my recent article, published in Oraworld magazine. If you want to learn how to size FRA in a smart way, don’t hesitate to have a look – Oraworld Edition #23, December 2020.
PDB_OS_CREDENTIAL and PL/SQL external libraries
In the previous blog post I have described PDB_OS_CREDENTIAL initialization parameter and when it can help you in isolating PDBs from each other. Today I’ll show you an example of how it works with PL/SQL external libraries. Of course we need to setup the whole…
PDB_OS_CREDENTIAL and external jobs
After introduction of Multitenant option, Oracle provided additional ways to ensure proper isolation between pluggable databases. PDB_OS_CREDENTIAL initialization parameter is part of them. It allows to use specified operating system user while interacting with operating system from a PDB. According to documentation, it is taken…
How to generate DDLs of existing lockdown profiles
In my last blog post I mentioned that I’ll write a new one on how to generate DDLs to recreate existing lockdown profiles – the time has come :). When I had to do it for the first time, I thought it would be as…
Lockdown profiles definition – NUL character
Playing more with lockdown profiles, I have discovered another interesting bit. For some entries and some columns of CDB/DBA_LOCKDOWN_PROFILES views (which are based on LOCKDOWN_PROF$ table), there is unnecessary NUL (ASCII code 0) character added at the end. In our environment it was the case…
Lockdown profiles definition inconsistencies
While working recently on lockdown profiles in 12.2 database with January 2020 Release Update installed, together with my colleague Loïc Fave, we have discovered some inconsistencies in how the information about already defined lockdown profiles is stored and used to enforce the rules. Loïc has…
‘ORA-19909: datafile 1 belongs to an orphan incarnation’ during duplicate for standby
Some time ago my colleague Pavel Tolstorukov asked me for help with failing DUPLICATE TARGET DATABASE FOR STANDBY FROM ACTIVE DATABASE. The problem appeared during the recovery phase. The exact error looked like below: We worked on this together and were able to identify the…
Oracle 19c solves ORA-00026 when killing PDB sessions
Oracle Multitenant was a big architectural change for Oracle Database. I guess it was not so easy to introduce it to such a complex system. Unsurprisingly, there were some side effects introduced, but Oracle works hard to correct them. One example is ORA-00026: missing or…
Useful Oracle tools – DBCOMP
Getting lost writes (e.g. ORA-00752: recovery detected a lost write of a data block) is one of the worst DBA’s nightmares. There are a lot of very important questions popping up. Apart from the obvious ones on how to solve the problems reported (hopefully without…
Social Media @trivadis