Oracle Installation

[Grayh]

Now I have an come up with this Issue...

The user needs to install Oracle on this... and I do not want to give them the root password to install Oracle...

So without giving them the root password is there a way they can Install oracle on the server...

[SKR_1]

You need to create an oracle user.They can install the oracle with oracle user. While installing oracle they need some changes such as to run root.sh script or need to create some links etc , that things you can do yourself under your presence with root access.


Thanks

SKR

[Patrick Wallek]

Yes.

You create a user id called: oracle
You create a group called: dba

You change the the owner and group of the Oracle mount points you create to oracle and dba respectively and change the permissions to 750 or 770 for those directories.

You then mount the CD for them and then they install.

After the install is complete you will have to run a script called 'root.sh' for them. This script MUST be run as the root user. That is the only thing that requires root though.

By the way, all of this is covered in the Oracle Installation manual. There should have been a very small, CD/DVD sized paper manual that covered the bare basics and there should have been a Oracle documentation CD/DVD that has the full size manual in the Oracle CD/DVD set.

[Grayh]

I was thinking if HP's RABC is a better tool or sudo...which one do u guys think is a better option

RABC:-
-------
http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=AccessControl

Sudo:-
------

http://www.sudo.ws/sudo/man/sudoers.html

[James R. Ferguson]

Hi:

As Patrick noted, the requirement for 'root' is limited to mounting the CD and to running one script generated by the Oracle installer.

You could mount the CD for your DBA; let him/her "do-their-thing"; come back and login as 'root'; let them run the script; and log out.

Don't make this harder or more complicated than it needs to be.

Regards!

...JRF...

[Duncan Edmonstone]

Well RBAC is part of the OS and as such you get full support from HP for it. But RBAC is a HP-UX specific product. RBAC is fully integrated into the kernel of the OS.

Whereas sudo is a free software tool that lives entirely in user space, and the only support you get is from forums like this one. Of course sudo is available on pretty much all *nix systems.

Setting either up just for an Oracle installation seems like overkill to me though. Once root.sh is run, Oracle has no need to access the root account.

HTH

Duncan

[Grayh]

# /usr/sbin/groupadd -g 201 dba
Group 'dba' not unique
# /usr/sbin/groupadd -g 201 dba
Group 'dba' not unique

I am unable to understand anything... as I have never done this...

Could you guys plz help me out with the set of commands to execute

Thanks in Advance

[Steven E. Protter]

Shalom,

You should not give the root privileges to install oracle anyway.

You should create a user named oracle for this purpose.

One script in the entire install process requires root access. For this a sysadmin will have to run it, or you can give sudo rights to that script to the oracle user.

SEP

[Grayh]

I have actually installed HP RABC

Now I need to assign roles using roleadm

but when I login as a user and say mount or swinstall... they do not run...


How can I do that possible as a user

[Patrick Wallek]

# /usr/sbin/groupadd -g 201 dba
Group 'dba' not unique
# /usr/sbin/groupadd -g 201 dba
Group 'dba' not unique


The above means that the dba group already exists.

I'm not entirely sure why you are looking into SUDO and RBAC at this point. The only time root permission is needed during the Oracle install is to initially mount the CD/DVD and to run the root.sh script after the install is finished.

YOU just need to do those for the DBAs.

It appears you are still in over your head on this project.

[Grayh]

I need the users to install Oracle without giving them the root password...

Can you please give me a step by step instruction as to how to do that...

I do not want to install Oracle... but the other team should be able to install Oracle as Users...

[Grayh]

$ /usr/sbin/useradd asdf
Permission Denied
$ privrun /usr/sbin/useradd asdf
privrun: no matching cmd found in cmd_priv database

[Patrick Wallek]

I'm not sure how else we can say it.

YOU as root:

Create the required users and groups according to the Oracle DOCS.
Verify filesystems are created and that the oracle user has permissions to write to them.
Mount the Oracle CD

THEM as the user oracle:

Install Oracle

YOU As root:

run the root.sh script.

[Grayh]

I have the following document

http://publib.boulder.ibm.com/tividd/td/ITIM/SC32-1334-01/en_US/HTML/im451inst_ux_wl30.htm

Can you give me a better document on how to install Oracle on HP-UX

[Grayh]

>Create the required users and groups according to the Oracle DOCS.

Which users & Groups are required

>Verify filesystems are created and that the oracle user has permissions to write to them.

Which filesystems are to be varified

How can I assigne permissions to the user "oracle"


>Mount the Oracle CD

How to mount the Oracle CD

[SKR_1]

For your reference.

For itanium server 11.23 version

http://download.oracle.com/docs/cd/B19306_01/install.102/b25293/toc.htm

Thanks

SKR

[Grayh]

OS running is 11.31

[Grayh]

# id oracle
uid=9996(oracle) gid=4999(oracle)


Does that look good

[Grayh]

# /usr/sbin/usermod -g oinstall -G dba[,oper] oracle
Group oinstall specified with -g does not exist

[Patrick Wallek]

For Oracle install document link given above, a lot of the steps don't care about the OS version.

>>Which users & Groups are required

See "2.5 Creating Required Operating System Groups and Users" of the manual link above.

>>Which filesystems are to be varified

What file systems do you need? You normally have a filesystem to install Oracle into, then separate file systems for data files, redo logs, etc. Your DBAs should be able to tell you this.

>>How can I assigne permissions to the user "oracle"

Have a look at the chmod and chgrp man pages. You will need to change the owner of the directories your file systems are mounted on so the oracle user can read and write to them.

>>How to mount the Oracle CD

Look here:
http://download.oracle.com/docs/cd/B19306_01/install.102/b25293/inst_task.htm#CHDBEBGE

>># id oracle
>>uid=9996(oracle) gid=4999(oracle)
>>Does that look good

I usually use DBA for the group, but that should work.

>>Group oinstall specified with -g does not exist

That means it doesn't exist. You must create it.

[Grayh]

Thank you everyone for ur time...

I am still confused... I thought I was bugging u guys too much