Security Pack NB_ORA_45_9S2_M.sequent4.2.tar provides security-related fixes for Veritas NetBackup (tm) DataCenter / BusinesServer 4.5MP for Oracle Database Agent on Sequent PTX platforms.

Article:TECH47059  |  Created: 2006-01-22  |  Updated: 2013-10-23  |  Article URL http://www.symantec.com/docs/TECH47059
Article Type
Technical Solution

Product(s)

Environment

Issue



Security Pack NB_ORA_45_9S2_M.sequent4.2.tar provides security-related fixes for Veritas NetBackup (tm) DataCenter / BusinesServer 4.5MP for Oracle Database Agent on Sequent PTX platforms.

Solution



ORA 4.5MP6/4.5MP9S1729 Pack NB_ORA_45_9S2_M README OEBU March 23, 2006
Corequirement: NB_CLT_45_9S2_M
================================================================================
This Security Pack provides updates and fixes for VERITAS NetBackup (tm) for
Oracle Database Agent.

================================================================================



=================
PACK DEPENDENCIES
=================

-- 4.5 MP6 must be installed prior to installing this pack.

-- Installation of this pack requires version 1.59 of the Vrts_pack.install.

-- NB_CLT_45_9S2_M must be installed prior to installing this pack.


I. DOWNLOAD INSTRUCTIONS
II. INSTALLATION INSTRUCTIONS
III. UNINSTALL INSTRUCTIONS
IV. DESCRIPTION OF PROBLEMS FIXED
Current Pack


=========================
I. DOWNLOAD INSTRUCTIONS
=========================
1) Download NB_ORA_45_9S2_M_<6 digit number>.<platform>.tar into the /tmp
directory.

where <6 digit number> is an internal tracking identifier

where <platform> is: alpha, dgux, hp11.00, linux2.2, ncr, rs6000_433,
rs6000_51, sequent4.2, sgi65, solaris2.6

2) Extract NB_ORA_45_9S2_M_<6 digit number>.<platform>.tar
/bin/tar -xvf NB_ORA_45_9S2_M_<6 digit number>.<platform>.tar

This will create the files:
Vrts_pack.install
VrtsNB_ORA_45_9S2_M.README
VrtsNB_ORA_45_9S2_M.<platform>.tar.Z


==============================
II. INSTALLATION INSTRUCTIONS
==============================
There are two ways to install database agent pack software.

1. Remote Installation: Loads the software on a master server with
the intent of pushing database software out to affected clients.

2. Local Installation: Loads and installs the software only to this
local machine.

---

Remote Installation:

1. Log in as the Oracle user on the clients to receive the pack software
and shut down all Oracle instances. (Recommended)

As root on the NetBackup Master server:

2. Install the Maintenance Pack binaries.

cd /tmp
/bin/sh Vrts_pack.install

Pick option 1 (Remote Installation) when prompted for the installation
method.

3. Run update_dbclients to push pack software affected database agent
clients. For more information on how to run update_dbclients,
refer to the NetBackup for Oracle System Administrator's Guide.

4. For every client to which you pushed the pack software in step 3,
the following steps must be performed:

a. Log in as the Oracle user on the client and copy the library to
the LIBOBK_LOCATION.

If LIBOBK_LOCATION is not the same as /usr/openv/netbackup/bin

cp /usr/openv/netbackup/bin/libobk.[so,sl] ${LIBOBK_LOCATION}

cp /usr/openv/netbackup/bin/oracle_link ${LIBOBK_LOCATION}

b. Make the library visible to Oracle.

For RMAN:
Verify that the Oracle library is a link to the LIBOBK_LOCATION
library. If it is not, create a link:

ln -s ${LIBOBK_LOCATION}/libobk.[a,so,sl,so.1,so64,so64.1,sl64,a64] \
${ORACLE_HOME}/lib/libobk.[a,so,sl,so.1]

where LIBOBK_LOCATION is the pathname of the existing
NetBackup for Oracle library. LIBOBK_LOCATION is typically
/usr/openv/netbackup/bin.

c. Restart any Oracle instances.

----

Local Installation:

Warning: Before installation - If production rman scripts are found in
the /usr/openv/netbackup/ext/db_ext/oracle/samples/rman, please save them
in another location to prevent them from being overwritten.

1. Log in as the Oracle user and shut down all Oracle instances.(Recommended)

As root on the NetBackup for Oracle client:

2. Install the NB_ORA_45_9S2_M pack binaries.

cd /tmp
/bin/sh Vrts_pack.install

If the pack is being installed on a master server, pick option 2,
Local Installation, when prompted.

This will install the updated NetBackup files for the Oracle library
in /usr/openv/netbackup/bin.

3. Execute the Oracle install script.

/usr/openv/netbackup/bin/install_oracle

4. Copy the library to the LIBOBK_LOCATION.

If LIBOBK_LOCATION is not the same as /usr/openv/netbackup/bin

cp /usr/openv/netbackup/bin/libobk.[so,sl] ${LIBOBK_LOCATION}

cp /usr/openv/netbackup/bin/oracle_link ${LIBOBK_LOCATION}

5. Make the library visible to Oracle.

For RMAN:
Verify that the Oracle library is a link to the LIBOBK_LOCATION library.
If it is not, create a link:

ln -s ${LIBOBK_LOCATION}/libobk.[a,so,sl,so.1,so64,so64.1,sl64,a64] \
${ORACLE_HOME}/lib/libobk.[a,so,sl,so.1]

where LIBOBK_LOCATION is the pathname of the existing
NetBackup for Oracle library. LIBOBK_LOCATION is typically
/usr/openv/netbackup/bin.

6. Log in as the Oracle user and restart any Oracle instances.

For help linking the NetBackup for Oracle library, refer to
the support technote 233482, available on www.support.veritas.com.



============================
III. UNINSTALL INSTRUCTIONS
============================
1) Close the NetBackup user interfaces.

If a database agent is being used, such as Oracle,
ensure that the database services are stopped.

2) Change directory to the patch save directory.
Substitute the pack name for ${PACK} in the following command:

cd /usr/openv/pack/${PACK}/save

3) Run the un-install script:

./Vrts_pack.uninstall

4) Verify that the pack uninstalled successfully by checking
/usr/openv/pack/pack.history.

5) Only perform this step if the pack was originally pushed to remote
clients using update_dbclients. Please run update_dbclients after
the pack was successfully uninstalled on the master server.



==================================
IV. DESCRIPTION OF PROBLEMS FIXED
==================================
The following are descriptions of the problems fixed.
Please read the entire document before installing.

README Conventions :

Description
Describes particular problem or feature contained in this pack.

** Description **
Describes a problem that can lead to potential data loss. Please
read these problem descriptions carefully.

Workaround
Any available workarounds to a problem are also listed. Workarounds
can be used INSTEAD of applying the patch, however, Symantec strongly
recommends the "best practice" of being at the latest patch level.

Additional Notes
Any additional information regarding this problem is included.

=============
Current pack
=============

================================================================================
Etrack Incident = ET542280 ET542262 ET542258 ET542276 ET542266 ET542256 ET542268 ET542264 ET542270 ET542500
ET546394 ET542260

Description:
Multiple buffer overflow vulnerabilities have been identified in daemons
that run on Veritas NetBackup master, media, and client servers. An
attacker, if able to access a vulnerable Veritas NetBackup server and
successfully exploit these issues, could potentially execute arbitrary
code resulting in possible unauthorized and elevated privilege access to
the targeted system.

For more information relating to this vulnerability notification, refer to
TechNote 281521 on the Symantec Support web site.
================================================================================

=============
NB_ORA_45_8_M
=============
Description:
An Oracle autobackup of the control file is very slow because of the format
of the piece name.

(NetBackup Clients: Dgux HP Intel-NT Linux2.2 NCR RS6000_433 RS6000_51
Sequent4.2 SGI SOLARIS Solaris )


===============================
NB_ORA_45_6_M and NB_ORA_45_7_M
===============================

================================================================================
Description:
The number of parallel streams specified in an Oracle RMAN template that is
built using the Oracle RMAN Backup Wizard will be used for Archived Redo
Log backups in addition to Tablespace and Datafile backups. Previously,
only one stream was used for Archived Redo Log backups even if a greater
number of streams was specified in the template.

(All NetBackup Windows Clients Alpha Dgux HP Linux2.4 RS6000_433 SGI SOLARIS)
--------------------------------------------------------------------------------
Description:
Oracle template execution has been modified so that the temporary files
used by the rman and sqlplus command line programs are owned by the user
executing the template. Because the temporary files may contain username
and password information, permissions on the files are set so only the
owner has read/write capabilities.

(NetBackup Clients: Alpha Dgux HP Linux2.2 RS6000_433 SGI SOLARIS )
--------------------------------------------------------------------------------
Description:
Add support for Oracle 10g.

(All NetBackup Windows Clients Alpha Dgux HP Linux2.2 RS6000_433 SGI SOLARIS)
--------------------------------------------------------------------------------
Description:
Oracle 10G is not supported with the oracle_link scripts. The NetBackup for
Oracle installation will fail stating that Oracle 10G is not supported.



Workaround:
Oracle 10G can be support if the link to libobk is setup by hand. To
setup the libobk by hand do the following:
- Login into the Oracle user acount
- Move Oracle libobk to a save location:
mv -f lib/libobk.?? lib/libobk.??.save
- Link libobk to NetBackup's libobk
ln -s /usr/openv/netbackup/bin/libobk.?? lib/libobk.??

Note: ?? depends on the platform type. For example on solaris the suffix
is so.
(NetBackup Clients: Alpha HP Linux2.4 RS6000_433 RS6000_51
SGI SOLARIS Solaris )
--------------------------------------------------------------------------------
Description:
This problem only occurs when using RMAN Proxy with BLI or any other
frozen image methods. The backup will fail because a backup ID can
not be found by RMAN. A database with approximately 1000 data files, or
more, may see this error. The following error is reported in the dbclient
logs.

<4> sbtinfo2: Image Information for file <bk_80_128_515425193> :
<16> sbtinfo2: bk_80_128_515425193 NOT found
<8> sbtpcend: terminating all outstanding backups
<4> terminateFsBackup: terminating all running backups
<4> terminateFsBackup: terminating pid <13453>

(NetBackup Clients: HP RS6000_433 RS6000_51 SOLARIS Solaris )
--------------------------------------------------------------------------------
Description:
When the NetBackup Oracle agent Backup Wizard is used to create a COLD
backup script, the backup fails with a status 29 because the script is
calling the "init<SIDname>.ora" file. In Oracle 9.2, there is no such
file.

(NetBackup Clients: Alpha HP Intel-NT Linux2.2 RS6000_433 RS6000_51
Sequent4.2 SGI SOLARIS Solaris )
================================================================================


Attachments

NB_ORA_45_9S2_M_282563.sequent4.2.tar (508 kBytes)


Legacy ID



282563


Article URL http://www.symantec.com/docs/TECH47059


Terms of use for this information are found in Legal Notices