on 01-29-2013 6:26 PM
Can SAP and non-SAP databases coexist in a shared Oracle RAC ?
We are planning to migrate our existing oracle SAP single instance to a shared oracle RAC infrastructure and was looking at the impact of this setup if any and also the security concerns in this setup. Apparently <sid>adm has dba group during installtion and so <sid>adm can infact mange any other instance in the RAC, which is a security concern.
Thanks and Appreciate your thoughts on this issue.
Hi, L M
There is absolutely no issue to share one clusterware infrastructure across SAP and non-SAP databases, you can basically deploy individual oracle_homes for every SAP database. The common thing is obviously Grid Infrastructure home which has to be patched by some additional fixes provided by SAP. Those fixes are not affecting other databases' capabilities and even could give you extra improvements as additional team of Oracle's developers at SAP are working on bug fixes that may be observed in GI binaries.
As for security, you have ability to limit <SID>adm user is required mainly for start/stop/backup database by brbackup, brarchive and brconnect. You are allowed to limit this user to SYSOPER group, which does not have access to data inside the database. Look at http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/9e626b1c-0d01-0010-b2ba-cfa2443c1... for more information about security.
Hope this helps.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
85 | |
10 | |
10 | |
9 | |
7 | |
6 | |
5 | |
5 | |
4 | |
3 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.