Oracle RMAN 11g Backup and Recovery (57 page)

Chapter 5: Oracle Secure Backup
121

If you were to create an OSB user named backup_usr and associate it with Unix account ubackup_usr and Microsoft Windows account wbackup_usr, when backup_usr uses the
backup --

unprivileged
command to back up a client, the jobs will run under the operating system account associated with backup_usr. Therefore, backup_usr is only able to back up files on a Unix client accessible to ubackup_usr, and able to back up files on a Microsoft Windows client accessible to wbackup_usr.

With the “modify administrative domain’s configuration” right, you may configure the preauthorization attribute for an OSB user. This right allows you to preauthorize operating system users to create RMAN backups or to access the OSB command-line utilities.

NDMP Hosts

When setting up an OSB user account, you may configure user access to NDMP. You may set up the host to use a user-defined text password, a null password, or the default NDMP password. A password for an NDMP host is associated with the host, not the user. You may configure a password authentication method such as MD5-encrypted or text.

Oracle Secure Backup Rights and Classes

A defined set of rights granted to an OSB user is considered an OSB class. Though similar to a Unix group, an OSB class has a finer granularity of access rights specific for the needs of OSB. As shown in Figure 5-5, multiple users may be assigned to a class, while each user is a member of a single class.

FIGURE 5-5
Rights and classes

122
Part II: Setup Principles and Practices

These classes are important to understanding the rights of an OSB user:

■
admin
Utilized for overall administration of a domain, it consists of all rights necessary to change domain configurations and to complete backup and restore operations.

■
monitor
Does not allow users to receive e-mail notifications, change domain configurations, or to complete backup and restore operations. The users can only access backups, see information about storage devices and domain configuration, and list scheduled jobs.

■
operator
For standard day-to-day operations, it has no configuration rights, but consists of all the rights needed for backup and restore operations. This class allows the user to control and query the state of primary and secondary storage devices.

■
oracle
Much like the operator class, but with rights enabling the user to change Oracle database configuration settings and to perform Oracle database backups. Members of this class usually are OSB users mapped to operating system accounts of an Oracle database installation.

■
reader
Allows members to browse the OSB catalog. Readers may modify only the name and password for their OSB user accounts.

■
user
Assigned to users to allow them rights to interact in limited ways with their domains.

This class allows users to browse their own data within the OSB catalog and to perform user-based restores.

Installing and Configuring Oracle Secure Backup

OSB is available for delivery on CD-ROM or may be downloaded from the Oracle Technology Network (OTN) web site at the following address:

http://www.oracle.com/technology/products/secure-backup/index.html

The following are requirements for installing and configuring OSB:

■ Each host in the OSB administrative domain must run TCP/IP. Static IP addresses should be assigned to all hosts, or it should be ensured that the DHCP server always assigns the same IP address.

■ There should be no duplicate host names in the OSB administrative domain, because index catalog data is based on the client host name.

■ For Linux media servers, the SCSI Generic (SG) driver needs to be installed.

■ Each node of a RAC cluster using OSB requires an installation of OSB.

Chapter 5: Oracle Secure Backup
123

RMAN Workshop:
Install and Configure Oracle

Secure Backup

Workshop Notes

The following example uses the Linux operating system. OSB is downloaded from OTN. The recommended directory for the installation of OSB on Linux is /usr/local/oracle/backup. To simplify the example, the administrative server, media server, and client are all installed on the same machine.

Step 1.
As the root user, check if the uncompress utility is installed on the system. If it is not, create a symbolic link pointing to the gunzip utility:

[root@lin32 ~]# uncompress

-bash: uncompress: command not found

[root@lin32 ~]# ln -s /bin/gunzip /bin/uncompress

Step 2.
Create a directory for the download, and then issue the
change directory
command to that directory:

[root@lin32 ~]# mkdir download

[root@lin32 ~]# cd download/

Step 3.
Download OSB into the download directory and then unzip the product:

[root@lin32 download]# ls –l

total 43864

-rw-r--r-- 1 root root 44866571 Jan 19 20:31 osb-10.3.0.1.0 linux32 release.zip

[root@lin32 download]# unzip osb-10.3.0.1.0 linux32 release.zip

Archive: osb-10.3.0.1.0 linux32 release.zip

creating: osb-10.3.0.1.0 linux32 cdrom090504/

extracting: osb-10.3.0.1.0 linux32 cdrom090504/OSB.10.3.0.1.0 LINUX32.rel creating: osb-10.3.0.1.0 linux32 cdrom090504/doc/

creating: osb-10.3.0.1.0 linux32 cdrom090504/doc/dcommon/

creating: osb-10.3.0.1.0 linux32 cdrom090504/doc/dcommon/css/

inflating: osb-10.3.0.1.0 linux32 cdrom090504/doc/dcommon/css/blafdoc.css inflating: osb-10.3.0.1.0 linux32 cdrom090504/doc/dcommon/css/bp layout.css

...

inflating: osb-10.3.0.1.0 linux32 cdrom090504/welcome.html

inflating: osb-10.3.0.1.0 linux32 cdrom090504/doc.tar

Step 4.
Create the directory where the install will place OSB files:

[root@lin32 download]# mkdir -p /usr/local/oracle/backup

124
Part II: Setup Principles and Practices

Step 5.
Issue the change
directory
command to the OSB destination and run setup:

[root@lin32 download]# cd /usr/local/oracle/backup/

[root@lin32 backup]# /root/download/osb-10.3.0.1.0 linux32 cdrom090504/setup The following output is returned:

Welcome to Oracle’s setup program for Oracle Secure Backup. This program loads Oracle Secure Backup software from the CD ROM to a filesystem directory of your choosing.

This CD ROM contains Oracle Secure Backup version 10.3.0.1.0 LINUX32.

Please wait a moment while I learn about this host... done.

1. linux32

administrative server, media server, client

Loading Oracle Secure Backup installation tools... done.

Loading linux32 administrative server, media server, client... done.

Oracle Secure Backup has installed a new obparameters file.

Your previous version has been saved as install/obparameters.savedbysetup.

Any changes you have made to the previous version must be made to the new obparameters file.

Would you like the opportunity to edit the obparameters file

Please answer 'yes' or 'no' [no]: