By William Sescu There are some articles floating around how to prevent a license violation with Active Data Guard. Some of them related to an underscore parameter “_query_on_physical” and some of them related to a startup trigger. Both of them have advantages and disadvantages. E.g. regarding the “_query_on_physical” I can’t find any MOS Note about it, and I don’t know…
By William Sescu From the RMAN point of view, you have generally two possibilities to store your backups, on Disk or on Tape. In case of a single instance, it doesn’t really matter from the accessible or inaccessible point of view. However, in a DataGuard environment it makes a huge difference. Per default, backups to Tape are always accessible and…
By Mouhamadou Diaw With Oracle 12cR2 it is now possible to configure multiple observers within a single Oracle Data Guard broker configuration. Multiple observers provide an immediate benefit for High Availability. If one observer fails, there are additional observers that can continue to monitor the status of the configuration. In this blog we are going to talk about this new…
By William Sescu I would like to make my DataGuard environment more secure, by eliminating the typing of “connect sys/Manager1” for my DGMGRL commands. Especially the ones, that I have in my scripts. For example: oracle@dbidg01:/home/oracle/ [DBIT122] dgmgrl <<-EOF > connect sys/Manager1 > show configuration verbose; > EOF or something like that: oracle@dbidg01:/u01/app/oracle/local/dg/ [DBIT122] cat show_config.dg connect sys/Manager1; show configuration;…
By William Sescu I am not a big fan of having passwords in clear text laying around. This applies not only to application servers, but also for my Data Guard observer. I do have a script for starting the observer that is reading a config file dgobserver.cfg, and this file contains the Username, Passwords and the Connectstring to my Primary…
By William Sescu Security is a quite important topic, especially when running Oracle in the cloud. To make your DataGuard a little bit more secure, you can enable the TCP.VALIDNODE_CHECKING feature. I call it SQL*Net Firewall. Enabling the SQL*Net Firewall is quite straight forward. There are only 3 sqlnet.ora parameters which are involved: TCP.VALIDNODE_CHECKING TCP.INVITED_NODES TCP.EXCLUDED_NODES The parameter TCP.VALIDNODE_CHECKING turns…
By Mouhamadou Diaw In a previous blog, we talked about Fast-Start Failover with the MaxProtection mode. With Oracle 12.2 Oracle Data Guard now supports multiple failover targets in a fast-start failover configuration. Previous functionality allowed for only a single fast-start failover target. If the failover target was unable to meet the requirements for fast-start failover at the time of primary…
By William Sescu Temporary Tablespaces Groups exist for quite a while now (since 10gR2), but they are, for whatever reason not so often used. Personally, I think they are quite cool. Very easy to setup, and especially in big environments with a lot of parallel processing very useful. But this blog will not be about Temporary Tablespace Groups. They are…
By Mouhamadou Diaw With Oracle 12.1 the one requirement to configure Fast-start Failover is to ensure the broker configuration is operating in either Maximum Availability mode or Maximum Performance mode. With 12.2 Fast-Start Failover can be now configured with the Maximum Protection Below our broker configuration DGMGRL> show configuration; Configuration – ORCL_DR Protection Mode: MaxPerformance Members: ORCL_SITE – Primary database…
By Franck Pachot . Here it is. The multitenant book is out for sale… One year ago, at DOAG2015, Vit Spinka came to me with this idea: with Anton Els they planned to write a book on multitenant and proposed me to be a co-author. I was already quite busy at that time and my short-term plan was to prepare…
By William Sescu For security reasons, you may want that your DataGuard operations are done with a different UNIX user and with a different Oracle user which is not so highly privileged like the SYSDBA. This is exactly where the SYSDG Administrative Privilege for Oracle Data Guard Operations comes into play. The SYSDG privilege is quite powerful and allows you…
By William Sescu In a DataGuard environment, by default, the password of the SYS user is used to authenticate redo transport sessions when a password file is used. But for security reasons you might not want to use such a high privileged user only for the redo transmission. To overcome this issue, Oracle has implemented the REDO_TRANSPORT_USER initialization parameter. The…
