GDB Admin

Wenjing Lin

QSDF0320.012 © Mincom 2001 Page 1

 Objectives
After completing this lesson, you should be
able to do the following by using GDB Admin:
• Create a database
• Start and shut down a database instance
• Manage privileges
• Manage roles
• Create and delete a user

QSDF0320.012 © Mincom 2001 Page 2

 GDB Admin Prerequisites
• DBA/Ora_DBA group
• Write permission on the following:
– ${ORACLE_HOME}/dbs on UNIX
– ${ORACLE_HOME}/database on window/NT
– ${ORACLE_HOME}/network/admin
– Or $TNS_ADMIN if this is set
– $MIN_ORADATA if this is set

QSDF0320.012 © Mincom 2001 Page 3

 GDB Admin Prerequisites
• Environment variables:
– ORACLE_HOME
– PATH includes $ORACLE_HOME/bin
– MIN_TMP
– HOST
– MIN_ORADATA?
– TNS_ADMIN?
– ORACLE_REPORT_HOME (NT only)
– ORACLE_PATH (NT only)
• Perl
• Memory to start the instance
• Sufficient disk space for the planned database

QSDF0320.012 © Mincom 2001 Page 4

 Create a Database

QSDF0320.012 © Mincom 2001 Page 5

 Create a Database (Schema)

QSDF0320.012 © Mincom 2001 Page 6

 Create a Database (Sizing)

QSDF0320.012 © Mincom 2001 Page 7

 Creating a Database
• Planning Database File Location
– Keep at least two active copies of a database control
file on at least two different devices
– Multiplex the redo log files and put group members on
the different disks

QSDF0320.012 © Mincom 2001 Page 8

 Creating a Database
• Planning Database File Location (Cont)
– Separate data files whose data:
– Will participate in disk resource contention across
different physical disk resources
– Have different life spans
– Have different administrative characteristics

QSDF0320.012 © Mincom 2001 Page 9

 Creating a Database
• Steps for creating a database in GDB
1. Check database name existence
2. Prepare the parameter file
3. Create a password file
4. Start the instance
5. Create the database

QSDF0320.012 © Mincom 2001 Page 10

 Creating a Database
• Steps for creating a database in GDB (Cont)
6. Run scripts to generate the data dictionary and
accomplish post-creation steps
7. Post-configuration
8. Create GDB user and schema

QSDF0320.012 © Mincom 2001 Page 11

 Creating a Database
• Troubleshooting
(See Appendix C)

QSDF0320.012 © Mincom 2001 Page 12

 Creating and Accessing Remote Database

Oracl
e

Machine “A” Machine “B”

• Database Data Files on “A” and GDB run on “B”
• “A” no Oracle server, no Oracle Software?
• Mount disk between “A” and “B”?

QSDF0320.012 © Mincom 2001 Page 13

 Creating and Accessing Remote Database

Oracl
e

Machine “A” Machine “B”

• How to create?
• How to access?

QSDF0320.012 © Mincom 2001 Page 14

 Startup and Shutdown in Stages

OPEN
All files opened as
described by the control file
STARTUP MOUNT for this instance
Control file
opened for this
NOMOUNT Instance
Instance
SHUTDOWN started SHUTDOWN

QSDF0320.012 © Mincom 2001 Page 15

 Shutting Down a Database
• Administration>Database>Shutdown database

QSDF0320.012 © Mincom 2001 Page 16

 Shutting Down a Database
• Administration>Database>Shutdown database (Cont)
– Shutdown Force a checkpoint and close files
– Shutdown Abort (will require instance recovery)

QSDF0320.012 © Mincom 2001 Page 17

 Startup a Database
• Automating Database Startup
• Manually start up a database
– Server manager (svrmgrl or sqlplus)
– Administration>Database>Startup database

QSDF0320.012 © Mincom 2001 Page 18

 GDB Admin other Functions
• Truncate a database
• Delete a database
• Enable local access
• Disable local access

QSDF0320.012 © Mincom 2001 Page 19

 Managing Privileges
Two types of Privileges:
• System - Enables users to perform particular actions
in the database
• Objects - Enables users to access and manipulate a
specific object

QSDF0320.012 © Mincom 2001 Page 20

 Managing Privileges
• System Privileges
– There are about 126 system privileges
– The ANY keyword in the privileges signifies that users
have the privilege in every schema
– The GRANT command adds a privilege to a user or a
group of users
– The REVOKE command deletes the privileges

QSDF0320.012 © Mincom 2001 Page 21

 Managing Privileges

QSDF0320.012 © Mincom 2001 Page 22

 Managing Privileges
Object Privileges
Object priv. Table View Sequence Procedure
ALTER  
DELETE  
EXECUTE 
INDEX 
INSERT  
REFERENCES 
SELECT   
UPDATE  

QSDF0320.012 © Mincom 2001 Page 23

 Managing Privileges

QSDF0320.012 © Mincom 2001 Page 24

 Managing Roles

Geologist Sys Admin Engineer

Administrator Geologist

DICT_REC HOLE_REC

QSDF0320.012 © Mincom 2001 Page 25

 Managing Roles

Sys Admin Geologist Engineer

Administrator Geologist

DICT_REC HOLE_REC

QSDF0320.012 © Mincom 2001 Page 26

 Managing Roles
Benefits of Roles
• Reduced granting of privileges
• Dynamic privilege management
• Selective availability of privileges
• Granted through the OS
• No cascading revokes
• Improved performance

QSDF0320.012 © Mincom 2001 Page 27

 Users and Security

Account Default
locking tablespace

Authentication Temporary
mechanism tablespace
Security
Security
domain
domain
Role Tablespace
privileges quotas

Direct
privileges Resource limits

QSDF0320.012 © Mincom 2001 Page 28

 Users and Security

Account Default
locking tablespace

Authentication Temporary
mechanism tablespace
Security
Security
domain
domain
Role Tablespace
privileges quotas

Direct
privileges Resource limits

QSDF0320.012 © Mincom 2001 Page 29

 Checklist for Creating Users
1. Choose a username and authentication mechanism
2. Identify tablespaces in which the user needs to store
objects
3. Decide on quotas for each tablespace
4. Assign a default tablespace and temporary
tablespace
5. Create a user
6. Grant privileges and role to the user

QSDF0320.012 © Mincom 2001 Page 30

 Creating a New Users: Database Authentication

CREATE USER gdb

DEFAULT TABLESPACE gdb_dat
TEMPORARY TABLESPACE temp
QUOTA UNLIMITED ON gdb_dat
QUOTA UNLIMITED ON gdb_audit
QUOTA UNLIMITED ON gdb_idx
QUOTA UNLIMITED ON gdb_device
QUOTA UNLIMITED ON gdb_if
QUOTA UNLIMITED ON users
QUOTA UNLIMITED ON temp
IDENTIFIED BY gdb;

QSDF0320.012 © Mincom 2001 Page 31

 Creating a New Users: Operating System
Authentication

Use OS_AUTHENT_PREFIX
Example: os User =user15
OS_AUTHENT Database User Remote Login
_PREFIX Possible
OS_ OS_USER15 No

Empty string “ ” USER15 No

OPS$ (default) OPS$user15 Yes

(default)

QSDF0320.012 © Mincom 2001 Page 32

 Creating a New Users: Operating System
Authentication

CREATE USER LYNDON

DEFAULT TABLESPACE gdb_dat
TEMPORARY TABLESPACE temp
QUOTA UNLIMITED ON gdb_dat
QUOTA UNLIMITED ON gdb_audit
QUOTA UNLIMITED ON users
IDENTIFIED EXTERNALLY;

QSDF0320.012 © Mincom 2001 Page 33

 Questions?

QSDF0320.012 © Mincom 2001 Page 34