Sybex OCA Oracle 10g Administration I Study Guide phần ppt

226 Chapter 4  Oracle Net Services the next listener in the list is attempted. This feature increases the availability of the Oracle service should a listener location be unavailable. Here is an example of what a tnsnames.ora file looks like with connect-time failover enabled: ORCL = (DESCRIPTION= (ADDRESS_LIST= (ADDRESS=(PROTOCOL=TCP)(HOST=DBPROD)(PORT=1521)) (ADDRESS=(PROTOCOL=TCP)(HOST=DBFAIL)(PORT=1521)) ) (CONNECT_DATA=(SERVICE_NAME=PROD)(SERVER=DEDICATED) ) ) We will discuss the tnsnames.ora file in detail later in this chapter in the section “Configuring Oracle Net for the Client.” Notice the additional entry under the ADDRESS_LIST section. Two listeners are specified. If a connection is unsuccessful when attempting to connect to the DBPROD host on port 1521, a connection attempt is made to the DBFAIL host on port 1521. The time that the connection waits before attempting to failover is operating system dependent. Transparent Application Failover The Transparent Application Failover (TAF) feature is a runtime failover for high-availability environments, such as Oracle Real Application Clusters. TAF fails over and reestablishes application-to-service connections. It enables client applications to automatically reconnect to the database if the connection fails and, optionally, resume a SELECT statement that was in progress. The reconnection happens automatically from the OCI library. The following code shows an example of the tnsnames.ora file setup for using Transparent Application Failover: ORCL = (DESCRIPTION= (FAILOVER=ON) (ADDRESS_LIST= (ADDRESS=(PROTOCOL=TCP)(HOST=DBPROD)(PORT=1521)) (ADDRESS=(PROTOCOL=TCP)(HOST=DBFAIL)(PORT=1521)) ) (CONNECT_DATA=(SERVICE_NAME=PROD)(SERVER=DEDICATED) (FAILOVER_MODE=(TYPE=select)(METHOD=basic)) ) ) 4367.book Page 226 Monday, October 4, 2004 2:19 PM Configuring Oracle Net on the Server 227 In this example, notice additional entries in the tnsnames.ora file that enable the Transpar- ent Application Failover. There are two hosts, DBPROD and DBFAIL. If DBPROD becomes unavail- able, the connections will failover to the DBFAIL host and connect to the associated service. The database service of PROD must be the same on both the DBPROD and DBFAIL servers for this example to work properly. Client Load Balancing Client Load Balancing is a feature that allows clients to randomly select from a list of listeners. Oracle Net moves through the list of listeners and balances the load of connection requests across the available listeners. Here is an example of the tnsnames.ora entry that allows for load balancing: ORCL = (DESCRIPTION= (LOAD_BALANCE=ON) (ADDRESS_LIST= (ADDRESS=(PROTOCOL=TCP)(HOST=MWEISHAN-DELL)(PORT=1522)) (ADDRESS=(PROTOCOL=TCP)(HOST=MWEISHAN-DELL)(PORT=1521)) ) (CONNECT_DATA= (SERVICE_NAME=ORCL) ) ) Notice the additional parameter of LOAD_BALANCE. This enables load balancing between the two listener locations specified. Connection Load Balancing Connection Load Balancing is a feature that enables better distribution of connection among a group of dispatchers in an Oracle Shared Server environment. The next chapter explains this concept in more detail. Troubleshooting Server-Side Connection Problems Even if it seems that you have configured Oracle server-side components correctly, network errors can still occur that will require troubleshooting. You can experience a connection prob- lem for a variety of reasons:  The client, middle-tier, or Oracle server is not configured properly.  The client cannot resolve the net service name.  The underlying network protocol is not active on the server; for example, the TCP/IP process on the server is not running.  The user enters an incorrect net service name, user ID, or password. 4367.book Page 227 Monday, October 4, 2004 2:19 PM 228 Chapter 4  Oracle Net Services You can diagnose and correct these types of errors. In the next section, “Server-Side Com- puter and Database Checks,” you will see how to diagnose and correct connection problems originating from the Oracle server. In the next chapter, we discuss troubleshooting problems with client-side network configuration. When a client has a connection problem that is up to you to fix, it is helpful to first gather information about the situation. Make sure you record the following information:  The Oracle error that the client received.  The location of the client. Is the client connecting from a remote location, or is the client connected directly to the server?  The name of the Oracle server to which the client is attempting to connect.  Check to see if other clients are having connection problems. If so, are these clients in the same general location?  Ask the user what is failing. Is it the application being used or the connection? We will now look at the particular network areas to check and the methods used to further diagnose connection problems from the Oracle server. We will also look at the Oracle error codes that will help identify and correct the problems. Server-Side Computer and Database Checks You can perform several server-side checks if a connection problem occurs. Before running such checks, be sure that the machine is running, that the Oracle server is available, and that the lis- tener is active. In the following sections, we’ll summarize the checks to perform on the server. Check the Server Machine Make sure that the server machine is active and available for connections. On some systems, it is possible to start a system in a restricted mode that allows only supervisors or administrators to log in to the computer. Make sure that the computer is open and available to all users. On a TCP/IP network, you can use the ping utility to test for connectivity to the server. Here is an example of using ping to test a network connection to a machine called matt: C:\users\default>ping matt Pinging cupira03.cmg.com [10.69.30.113] with 32 bytes of data: Reply from 10.69.30.113: bytes=32 time=10ms TTL=248 Reply from 10.69.30.113: bytes=32 time=10ms TTL=248 Reply from 10.69.30.113: bytes=32 time<10ms TTL=248 Reply from 10.69.30.113: bytes=32 time=10ms TTL=248 The reply indicates that the machine can be seen on the network. Check the Database Make sure that the database is running. Connect to the Oracle server and log in to the database using a tool such as SQL*Plus. First attempt a local connection, which does not use the Oracle listener. 4367.book Page 228 Monday, October 4, 2004 2:19 PM Configuring Oracle Net on the Server 229 To connect to the Oracle server using a local connection, set your ORACLE_SID environmental variable to the name of the Oracle instance that you want to connect to. Then, attempt to connect to SQL*Plus. The following example is a connection sequence on Windows that fails because the database is not running. For example, if the database that you are attempting to connect to is named MJW, you can use the following code example in a Windows environment for your test: D:\oracle\ora10g\BIN>sqlplus system/manager SQL*Plus: Release 10.1.0.2.0 - Production on Thu Jun 10 10:08:16 2004 Copyright (c) 1982, 2004, Oracle. All rights reserved. ERROR: ORA-01034: ORACLE not available ORA-27101: shared memory realm does not exist An ORA-01034 error indicates that the Oracle instance is not running. You need to start the Oracle instance. The ORA-27101 error indicates that no instance is currently available to con- nect to for the specified ORACLE_SID. Verify That the Database Is Open to All Users You can open a database in restricted mode. This means that only users with restricted mode access can use the system. This is not a networking problem, but it will lead to clients being unable to connect to the Oracle server. Here is an example of a connection that fails because the user does not have the restricted session privilege. D:\>sqlplus scott/tiger@ORCL SQL*Plus: Release 10.1.0.2.0 - Production on Thu Jun 10 10:09:19 2004 Copyright (c) 1982, 2004, Oracle. All rights reserved. ERROR: ORA-01035: ORACLE only available to users with RESTRICTED SESSION privilege As we can see, the user Scott is attempting to connect to the ORCL service. The error message tells us that user Scott does not have the restricted session privilege and cannot log in until the DBA either grants this privilege to Scott or takes the database out of restricted session mode. Check User Privileges Make sure that the user attempting to establish the connection has been granted the CREATE SESSION privilege to the database. This privilege is needed for a user to connect to the Oracle 4367.book Page 229 Monday, October 4, 2004 2:19 PM 230 Chapter 4  Oracle Net Services server. If the client does not have this privilege, you must grant it to the user. To do so, follow this example: D:\oracle\ora10g\BIN>sqlplus matt/matt SQL*Plus: Release 10.1.0.2.0 - Production on Thu Jun 10 10:09:19 2004 Copyright (c) 1982, 2004, Oracle. All rights reserved. ERROR: ORA-01045: user MATT lacks CREATE SESSION privilege; logon denied Here is an example of how you can grant the CREATE SESSION privilege to a user: SQL> grant create session to matt; Grant succeeded SQL> In this example, the DBA has granted the CREATE SESSION privilege to user Matt. Matt now has the ability to make a connection to the database. Server-Side Network Checks After you validate that the server where the database is located is up and available and you ver- ify that the user has proper privileges, begin checking for any underlying network problems on the server. In the following sections, we will detail some of the common areas of the server to check when you are experiencing connection problems. Check Listener Make sure that the listener is running on the Oracle server. Make sure that you check the ser- vices for all the listeners on the Oracle server; you can use the lsnrctl status command to do this. The following command shows the status of the default listener named LISTENER: D:\oracle\ora10g\BIN>lsnrctl status LSNRCTL for 32-bit Windows: Version 10.1.0.2.0 - Production on 10-JUN- 2004 10:00:36 Copyright (c) 1991, 2004, Oracle. All rights reserved. Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=mweishan- dell.corp.goxroads.net)(PORT=1522))) STATUS of the LISTENER Alias LISTENER Version TNSLSNR for 32-bit Windows: Version 10.1.0.2.0 - Production 4367.book Page 230 Monday, October 4, 2004 2:19 PM Configuring Oracle Net on the Server 231 Start Date 10-JUN-2004 09:58:47 Uptime 0 days 0 hr. 1 min. 50 sec Trace Level off Security ON: Local OS Authentication SNMP OFF Listener Parameter File D:\oracle\ora10g\network\admin\listener.ora Listener Log File D:\oracle\ora10g\network\log\listener.log Listening Endpoints Summary (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=mweishan- dell.corp.goxroads.net)(PORT=1522))) Services Summary Service "PLSExtProc" has 1 instance(s). Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service Service "orcl.com" has 1 instance(s). Instance "ORCL", status UNKNOWN, has 1 handler(s) for this service The command completed successful Also check the services for which the listener is listening. You must see the service to which the client is attempting to connect. If the service is not listed, the client may be entering the wrong service, or the listener may not be configured to listen for this service. Check GLOBAL_DBNAME If the client is using the hostnaming method, make sure that the GLOBAL_DBNAME parameter is set to the name of the host machine. You can find this parameter in the service definition of the listener.ora file. Verify the setting by reviewing the listener.ora configuration. In the follow- ing sample code, we can see that the GLOBAL_DBNAME parameter has been set to mweishan-dell. SID_LIST_LISTENER = (SID_LIST = (SID_DESC = (GLOBAL_DBNAME = mweishan-dell) – machine listener is on (ORACLE_HOME = d:\oracle\ora10g) (SID_NAME = orcl) Check Listener Protocols Check the protocols for which the listener is configured. This is displayed by the lsnrctl ser- vices command. You can see an example of this command in the section, “Listing the Services for the Listener,” earlier in this chapter. Make sure that the protocol of the service matches the protocol the client is using when requesting a connection. If the client is requesting to connect with a protocol that the listener is not listening for, the user will receive an ORA-12541 “No Listener” error message. 4367.book Page 231 Monday, October 4, 2004 2:19 PM 232 Chapter 4  Oracle Net Services Check Server Protocols Make sure that the underlying network protocol on the server is active. For systems that run TCP/IP, you can attempt to use the ping command to ping the server. This will verify that the TCP/IP daemon process is active on the server. You can also check this by verifying the services on Windows or using the ps command on Unix. An example of the ping command can be found earlier in this chapter in the section “Check Server Machine.” Check Server Protocol Adapters Make sure that the appropriate protocol adapters are installed on the server. On most plat- forms, you can invoke the Oracle Universal Installer program and check the list of installed pro- tocols. On Unix platforms, you can use the adapter utility to ensure that the appropriate adapters are linked to Oracle. The following example shows how to run this utility, which is located in the $ORACLE_HOME/bin directory. The following adapters summarize all of the protocol adapters that have been installed as part of this Oracle installation. You can see that we have installed four types of adapters. [root@localhost] ./adapters oracle Net protocol adapters linked with oracle are: BEQ IPC TCP/IP RAW Net Naming Adapters linked with oracle are: Oracle TNS Naming Adapter Oracle Naming Adapter Advanced Networking Option/Network Security products linked with oracle are: Oracle Security server Authentication Adapter If the required protocol adapter is not listed, you have to install the adapter. You can do so by using the Oracle Installer, installing the Oracle Net Server software, and choosing the appro- priate adapters during the installation process. Check for Connection Timeouts If the client is receiving an ORA-12535 or an ORA-12547 error message, the client is timing out before a valid connection is established. This can occur if you have a slow network connection. You can attempt to solve this problem by increasing the time that the listener will wait for a 4367.book Page 232 Monday, October 4, 2004 2:19 PM Configuring Oracle Net on the Server 233 valid response from the client; simply set the INBOUND_CONNECT_TIMEOUT parameter to a higher number. This is the number of seconds that the listener waits for a valid response from the client when establishing a connection. Oracle Net Logging and Tracing on the Server If a network problem persists, you can use logging and tracing to help resolve it. Oracle gener- ates information into log files and trace files that can assist you in tracking down network con- nection problems. You can use logging to find out general information about the success or failure of certain components of the Oracle network. You can use tracing to get in-depth infor- mation about specific network connections. By default, Oracle produces logs for clients and the Oracle listener. You cannot disable client logging. Logging records significant events, such as starting and stopping the listener, along with certain kinds of network errors. Errors are generated in the log in the form of an error stack. The listener log records information such as the version number, connection attempts, and the protocols for which it is listening. You can enable logging at the client, middle-tier, and server locations. Use Tracing Sparingly Use tracing only as a last resort if you are having connectivity problems between the client and server. Complete all the server-side checks described earlier before you resort to tracing. The tracing process generates a significant amount of overhead, and, depending on the trace level set, it can create some rather large files. This activity will impede system I/O performance because of all the information that is written to the logs, and if left unchecked, it could fill your disk or file system. I was once involved with a large project that was using JDBC to connect to the Oracle server. We were having difficulty with connections being periodically dropped between the JDBC client and the Oracle server. We enabled tracing to try to find the problem. We did eventually correct the problem (it was with how our DNS names server was configured), but the tracing was left on inadvertently. When the system eventually went into production, the trace files grew so large that they filled the disk where tracing was being collected. To prevent this from happening, periodically ensure that the trace parameters are not turned on, and if they are, turn them off. 4367.book Page 233 Monday, October 4, 2004 2:19 PM 234 Chapter 4  Oracle Net Services Tracing, which you can also enable at the client, middle-tier, or server location, records all events that occur on a network, even when an error does not occur. The trace file provides a great deal of information that logs do not, such as the number of network round-trips made dur- ing network connection or the number of packets sent and received during a network connec- tion. Tracing enables you to collect a thorough listing of the actual sequence of the statements as a network connection is being processed. This gives you a much more detailed picture of what is occurring with connections that the listener is processing. Use the Oracle Net Manager to enable most logging and tracing parameters. Many of the logging and tracing parameters are found in the sqlnet.ora file. Let’s take a look at how to enable logging and tracing for the various components in an Oracle network. Server Logging By default, the listener is configured to enable the generation of a log file. The log file records information about listener startup and shutdown, successful and unsuccessful connection attempts, and certain types of network errors. By default, the listener log location is $ORACLE_ HOME/network/log on Unix and %ORACLE_HOME%\network\log on Windows. The default name of the file is listener.log. Information in the listener.log file is a fixed-length, delimited format with each field sep- arated by an asterisk. If you want to further analyze the information in the log, you can load the data into an Oracle table using a tool such as SQL*Loader. Notice in the following sample list- ing that the file contains information about connection attempts, the name of the program exe- cuting the request, and the name of the client attempting to connect. The last field contains a zero if a request was successfully completed. TNSLSNR for 32-bit Windows: Version 10.1.0.2.0 - Production on 27-APR- 2004 16:05:13 Copyright (c) 1991, 2004, Oracle. All rights reserved. Log messages written to D:\oracle\ora10g\network\log\listener.log Trace information written to D:\oracle\ora10g\network\trace\listener.trc Trace level is currently 0 Started with pid=2260 Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=mweishan- dell.corp.goxroads.net)(PORT=1521))) TIMESTAMP * CONNECT DATA [* PROTOCOL INFO] * EVENT [* SID] * RETURN CODE 27-APR-2004 16:05:17 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=)(USER=mweishan))(COMMAND=status) (ARGUMENTS=64)(SERVICE=LISTENER)(VERSION=168821248)) * status * 0 4367.book Page 234 Monday, October 4, 2004 2:19 PM Configuring Oracle Net on the Server 235 27-APR-2004 16:05:18 * (CONNECT_DATA=(CID=(PROGRAM=)(HOST=__jdbc__)(USER=))(SERVICE_NAME=or cl)) * (ADDRESS=(PROTOCOL=tcp)(HOST=206.122.131.90)(PORT=2021)) * establish * orcl * 12514 TNS-12514: TNS:listener does not currently know of service requested in connect descriptor Server Tracing As mentioned earlier, tracing gathers information about the flow of traffic across a network connection. Data is transmitted back and forth in the form of packets. A packet contains sender information, receiver information, and data. Even a single network request can generate a large number of packets. In the trace file, each line file starts with the name of the procedure executed in one of the Oracle Net layers and is followed by a set of hexadecimal numbers. The hexadecimal numbers are the actual data transmitted. If you are not encrypting the data, sometimes you will see the actual data after the hexadecimal numbers. Each of the Oracle Net procedures is responsible for a different action. The code type of each packet depends on the action being taken. All the packet types start with NSP. Here is a sum- mary of the common packet types: If you are doing server-to-server communications and have a sqlnet.ora file on the server, you can enter information in the Server Information section located on the Tracing tab from the Profile screen in Oracle Net Manager trac- ing. This provides tracing information for server-to-server communications. Several numeric codes are also used to help diagnose and troubleshoot problems with Oracle Net connections. These codes can be found in the trace files. Here is an example of a line from the trace file that contains a code value: nspsend: plen=12, type=4 Packet Keyword Packet Type NSPTAC Accept NSPTRF Refuse NSPTRS Resend NSPDA Data NSPCNL Control NSPTMK Marker 4367.book Page 235 Monday, October 4, 2004 2:19 PM [...]... environment Oracle Net provides services that can be divided into five main categories: connectivity, directory services, scalability, security, and accessibility Connectivity solutions include support for multiple protocols, multiple operating systems, and Java and Internet Directory services provide an infrastructure to resolve Oracle service names through a centralized naming repository Scalability solutions... administration Be able to list the responsibilities of the database administrator with respect to network administration Can you define the basic network configuration choices and summarize the strengths and weaknesses of these options? Understand what Oracle Net is and the functionality it provides Be able to list the five categories of functionality that Oracle Net provides and explain the functionality... listener.ora file If multiple listeners are configured, each one has a separate entry in the listener.ora file Oracle1 0g provides a feature called dynamic service registration This feature allows an Oracle instance to automatically register itself with a listener The listener must be configured with TCP/IP and listen on port 1521, or you must specify the parameter LOCAL_LISTENER in the init.ora file... descriptor address information ADDRESS Specifies the connect descriptor for the net service name PROTOCOL Specifies the protocol used, such as TCP/IP HOST Specifies the name of the machine on which the listener is running An IP address can also be specified in TCP/IP PORT Specifies the listening location of the listener specific to TCP/IP CONNECT_DATA Starts the services section for this net service... the types of packet information that you may find in a trace file Define the Oracle client-side names resolution options Be able to define the Oracle clientside names resolution options Know in which situations to use localnaming, Oracle Easy Connect Naming, hostnaming, and OID Define the prerequisites for using the hostnaming method Know how to configure this method using the Oracle Net Manager, and... clients were using the same network routes to connect to the server After further investigation, I discovered that the machines were using different implementations of TCP/IP, which was the cause of the intermittent timeout problems With the help of the tnsping utility, I was able to narrow down the problem to a difference in the client machine configurations Verifying Localnaming Configuration Files... from the Net Services Administration screen as described in the “Adding a Listener Using Enterprise Manager Database Control” section earlier in this chapter You will see the screen shown in Figure 4.17 Choose Local Naming from the Administer drop-down list and click Go to open the Local Naming screen, as shown in Figure 4.34 FIGURE 4.34 Using Enterprise Manager to configure localnaming Click the Create... listener is the main server-side component in the Oracle Net environment Listener configuration information is stored in the listener.ora file, and you manage the listener using the lsnrctl command-line utility You configure the listener by using the Oracle Net Manager The Oracle Net Manager provides a graphical interface for creating most of the Oracle Net files that you will use for Oracle, including... the organization, the type of connectivity that is required, and client/server connections versus n-tier connectivity, for example, in order to make the appropriate choices about client-side configuration This section should help clarify the client-side connectivity options available to you and show you how to troubleshoot client connection problems Client-Side Names Resolution Options When a client needs... using this utility, also know the options available to you, and be able to define the various set commands Understand the concepts of static and dynamic service registration Be able to define the difference between static service registration and dynamic service registration and know the advantages of using dynamic service registration over static service registration Also, be aware of the situations . runtime failover for high-availability environments, such as Oracle Real Application Clusters. TAF fails over and reestablishes application-to-service connections. It enables client applications. parameter is set to the name of the host machine. You can find this parameter in the service definition of the listener.ora file. Verify the setting by reviewing the listener.ora configuration. In. 226 Chapter 4  Oracle Net Services the next listener in the list is attempted. This feature increases the availability of the Oracle service should a listener location be unavailable. Here is an example