Skip to main content

Use RDA or Enterprise Manager for Governance

Within my current project I ended up in an interesting discussion. As part of the governance or more specifically some government regulations for the systems security we needed a description of the system components.

Obviously there are several layers for this topic, but in order to have a complete view of the system a list of installed system components and also of the systems configuration was desired.

Well, as you can guess, there was no tangible description of the current configuration, and there was also only a sketchy overview of the Oracle components which were used to build the system.

So, the first idea was to ask the various departments which were involved in the setup and configuration of the system to use a variety of tools and approaches to deliver the information.
I offered the idea to use "the one ring to rule them all" approach. Oracle offers two tools that provide an overview of the used components, their configuration and even of platform settings.

One tool would be either the local Enterprise Manager or the central Grid Control (Cloud Control if you are up to date). The problem is that from the Enterprise Manager perspective, each of the layers (host, OS, storage, Oracle components, configuration) would need its own report. So a number of reports would need to be executed.

So my thought turned to the Remote Diagnostic Assistant. The RDA is a tool that is used by Oracle Support to gather information of the system setup, OS settings, and the like.

So I downloaded RDA for one of the machines, unpacked it, configured it and executed it.
Within minutes you'll have the output of a large number of Perl scripts.

The good thing is that the presentation is provided in a human readable format (HTML) so that a support analyst or the DBA can have a glance at the data.
But even more interesting is the fact that each HTML page is also available as a text file, with a nice structure.

So with the intention of building a prototype, I used some AWK scripts to get the data out of the text files, and used it as input for the data pump.
Create some tables in a new tablespace, get the data into it and you have a description of your technical components for your governance.

Next step would be to add the date of the execution, and you could easily figure out if changes had happened in the last period and add them to your governance.

So again a nice use of things you already have in your environment which can be put to good use for slightly different purposes as they were intended in the first place.

Comments

Popular posts from this blog

Different silent install files WLS 10.3.2 and 10.3.3

Today I tried to cut some corners and use a silent.xml file for WLS 10.3.3 for a silent installation of 10.3.2. To my amazement on a clean machine I received the following error: oracle@xxx001:/opt/oracle$ java -Djava.io.tmpdir=/opt/oracle/tmp -jar /nfsstage/wls1032_generic.jar -mode=silent -silent_xml=./silent/wls_silent.xml -log=/tmp/wls.log Extracting 0%....................................................................................................100% The local BEA product registry is corrupted. Please select another Middleware Home or contact Oracle Support I checked the wls_silent.xml file and found that it includes Coherence, which was not bundled with the 10.3.2 version. So I modified the 10.3.3 silent_xml file from value="WebLogic Server/Core Application Server|WebLogic Server/Administration Console|WebLogic Server/Configuration Wizard and Upgrade Framework|WebLogic Server/Web 2.0 HTTP Pub-Sub Server|WebLogic Server/WebLogic JDBC Drivers|WebLogic Server/Third ...

Unpacking Oracle cpio for AIX

When extracting a cpio file with Oracle software from OTN on AIX you might encounter the following problem: oracle@mymachine-app:/install/oracle/MRCA>cpio -idmv cpio: 0511-903 Out of phase! cpio attempting to continue... cpio: 0511-904 skipping 642010 bytes to get back in phase! One or more files lost and the previous file is possibly corrupt! Segmentation fault The solution is to use the option -idcmv oracle@mymachine-app:/install/oracle/MRCA>cpio -idcmv c Reads and writes header information in ASCII character form. If a cpio archive was created using the c flag, it must be extracted with c flag.

Add a user to the JavaSSO

In AS 10.1.3.x Oracle came up with the JavaSSO. Seems to be (from a high level perspective) a poor man's version of the SSO from the AS 10.1.2.x. Having said this it strikes me how little documentation is available for this feature. But we're explorers, aren't we? JavaSSO is based on a file based security provider. The two main files are: - jazn.xml - system-jazn-data.xml Both exist in the $OH/j2ee/ directory. This means that if you have more than one OC4J instance you need to edit both. The most basic task is to add a user. You can - of course try to do this by editing the xml files, but luckily Oracle provides the jazn.jar tool. Make sure that you use the correct java executable and start it: java -jar jazn.jar -adduser jazn.com andreas welcome1 You will be asked for the AbstractLoginModule username (oc4jadmin) and its password. Now we have a user but usually this has to be added to a role before it can do something useful: java -jar jazn.jar -grantrole users jazn.com an...