Some notes

I found this document in Sun Blueprint. It is created by Glen Brunette, one of Sun guys that i admired.
There's 2 things in the document that did not point out, one of them is giving permission to /var/audit/* files, and the other one is stopping cryptoadm by non-root user bring the cryptosvc to maintenance state when try to bring up.

First 'problem' details:
Assuming i am user weehing, and i was assigned "Audit Review" profile. Now i would like to audit user oracle activity, this is the same steps as illustrated in Glen's doc.

[weehing@pw250 ~]$ auditreduce -m AUE_su -r oracle | praudit -s | more
auditreduce: couldn't open:
/etc/security/audit/localhost/files/20080723041356.20080723041357.pw250: Permission denied
auditreduce: couldn't open:
/etc/security/audit/localhost/files/20080723041357.not_terminated.pw250: Permission denied
file,1970-01-01 07:30:00.000 +07:30,
file,2008-07-23 13:55:50.000 +08:00,

[weehing@pw250 ~]$ ls -l /etc/security/audit/localhost/files/*
-rw------- 1 root root 70 Jul 23 12:13 /etc/security/audit/localhost/files/20080723041356.20080723041357.pw250
-rw------- 1 root root 21080 Jul 23 13:58 /etc/security/audit/localhost/files/20080723041357.not_terminated.pw250


To allow weehing to audit oracle's activity, read permission would have to be given to weehing. This can be solved by a change in audit binary file permission, but this can be be another concern.


Second 'problem':

[weehing@pw250 ~]$ roles
roleA
[weehing@pw250 ~]$ profiles -l

Audit Review:
/usr/sbin/auditreduce euid=0
/usr/sbin/auditstat euid=0
/usr/sbin/praudit euid=0
All:
*
[weehing@pw250 ~]$ auths
solaris.audit.read,solaris.device.cdrw,solaris.profmgr.read,solaris.jobs.users,solaris.mail.mailq,solaris.admin.usermgr.read,solaris.admin.logsvc.read,solaris.admin.fsmgr.read,solaris.admin.serialmgr.read,solaris.admin.diskmgr.read,solaris.admin.procmgr.user,solaris.compsys.read,solaris.admin.printer.read,solaris.admin.prodreg.read,solaris.admin.dcmgr.read,solaris.snmp.read,solaris.project.read,solaris.admin.patchmgr.read,solaris.network.hosts.read,solaris.admin.volmgr.read
[weehing@pw250 ~]$ svcs cryptosvc
STATE STIME FMRI
online 17:19:30 svc:/system/cryptosvc:default
[weehing@pw250 ~]$
[weehing@pw250 ~]$ digest -a sha1 /etc/hosts
ee4ef007673a3090a4cc00bdb125ec8c146cf7e4
[weehing@pw250 ~]$
[weehing@pw250 ~]$ cryptoadm stop
cryptoadm: failed to stop cryptographic framework daemon - Not owner.
[weehing@pw250 ~]$ su roles
su: Unknown id: roles
[weehing@pw250 ~]$ su roleA
Password:
$ svcs cryptosvc
STATE STIME FMRI
online 17:19:30 svc:/system/cryptosvc:default
$ cryptoadm stop
$ svcs cryptosvc
STATE STIME FMRI
maintenance 17:34:54 svc:/system/cryptosvc:default
$ digest -a sha1 /etc/hosts
digest: failed to initialize PKCS #11 framework: CKR_GENERAL_ERROR
$ cryptoadm start
$ digest -a sha1 /etc/hosts
ee4ef007673a3090a4cc00bdb125ec8c146cf7e4
$ svcs cryptosvc
STATE STIME FMRI
maintenance 17:34:54 svc:/system/cryptosvc:default <---all gone here until here, though this is not really a issue as digest command still works.
$ svcadm clear svc:/system/cryptosvc:default
svcadm: svc:/system/cryptosvc:default: Permission denied.

How to bring the cryptosvc back to online state??

[root@pw250 patches]$ cryptoadm stop
[root@pw250 patches]$ svcs cryptosvc
STATE STIME FMRI
maintenance 17:34:54 svc:/system/cryptosvc:default
[root@pw250 patches]$ svcadm clear svc:/system/cryptosvc:default
[root@pw250 patches]$ svcs cryptosvc
STATE STIME FMRI
online 17:39:25 svc:/system/cryptosvc:default

Well, this is nothing much, but just some findings for reader who follows Glen's doc and might hit the same things like me.

Permission Denied When Login SMC

Getting permission denied error when login to SMC as root user, check this:

[root@pw250 bin]$ profiles -l root

Web Console Management:
/usr/share/webconsole/private/bin/smcwebstart uid=noaccess,
gid=noaccess,
privs=proc_audit
All:
*

Rcapd daemon

Found some rcapd info in this doc: Best Practices for Running Oracle Databases in SolarisTM Containers.
--------------------------------------------------------------------------------------
Please note that the rcapd daemon cannot determine which pages of memory are shared
with other processes or which are mapped multiple times within the same process. Hence,
it is not recommended that shared memory-intensive applications, like Oracle databases,
run under projects that use rcapd to limit physical memory usage.
----------------------------------------------------------------------------------------

vmkfstool

Need to use this frequently....

[root@fms rhac4]# vmkfstools -c 4096m -a lsilogic -d thick rhac4_2.vmdk
[root@fms rhac4]# pwd
/vmfs/volumes/dd1/rhac4
[root@fms rhac4]# cd ../rhac3
[root@fms rhac3]# vmkfstools -c 4096m -a lsilogic -d thick rhac3_2.vmdk

How to failback a VVR RVG to Original Primary

The scenario is that pw250 was down and pw450 (secondary) takeover as a new primary.

After pw250 is fixed, it's powered-up. And the config error is shown below in red. Pw250 is running as acting secondary.
The procedure show how to do a failback to original primary - pw250.



pw250 -- 192.168.100.118 ---------- this is the original primary
pw450 -- 192.168.100.116 ---------- this is the original secondary
RVG name: PRDvvr
DG name: mxpdbs_dg
App: Oracle 10gR2 DB


[root@pw250 log]$
[root@pw250 log]$
[root@pw250 log]$ vradmin -g mxpdbs_dg repstatus PRDvvr
Replicated Data Set: PRDvvr
Primary:
Host name: 192.168.100.116
RVG name: PRDvvr
DG name: mxpdbs_dg
RVG state: enabled for I/O
Data volumes: 2
VSets: 0
SRL name: vvrsrl
SRL size: 1.00 G
Total secondaries: 1

Primary (acting secondary):
Host name: 192.168.100.118
RVG name: PRDvvr
DG name: mxpdbs_dg
Data status: consistent, behind
Replication status: logging to DCM (needs failback synchronization)
Current mode: asynchronous
Logging to: DCM (contains 17408 Kbytes) (failback logging)
Timestamp Information: N/A

Config Errors:
192.168.100.118: Primary-Primary configuration

[root@pw250 log]$ vradmin -g mxpdbs_dg fbsync
VxVM VVR vradmin ERROR V-5-52-19 Incorrect number of arguments
VxVM VVR vradmin INFO V-5-52-42
Usage: vradmin [-g diskgroup] [-wait] fbsync rvg [cache=cacheobj | cachesize=size]


[root@pw250 log]$ vradmin -g mxpdbs_dg fbsync PRDvvr
[root@pw250 log]$ vradmin -g mxpdbs_dg repstatus PRDvvr
Replicated Data Set: PRDvvr
Primary:
Host name: 192.168.100.116
RVG name: PRDvvr
DG name: mxpdbs_dg
RVG state: enabled for I/O
Data volumes: 2
VSets: 0
SRL name: vvrsrl
SRL size: 1.00 G
Total secondaries: 1

Secondary:
Host name: 192.168.100.118
RVG name: PRDvvr
DG name: mxpdbs_dg
Data status: inconsistent
Replication status: resync in progress (failback synchronization)
Current mode: asynchronous
Logging to: DCM (contains 17408 Kbytes) (failback logging)
Timestamp Information: N/A

[root@pw250 log]$ vradmin -g mxpdbs_dg migrate PRDvvr 192.168.100.118
VxVM VVR vradmin WARNING V-5-52-93 Make sure applications using Primary data volumes are stopped.
vradmin: Continue with migrate (y/n)? y
Message from Primary:
VxVM VVR vxrvg ERROR V-5-1-10128 Operation not allowed with open volumes
VxVM VVR vxrvg ERROR V-5-1-407 Attempting to cleanup after failure ...

<***********At this stage, go to pw450 and shutdown all applications and unmount the filesystems)************>

[root@pw250 log]$ vradmin -g mxpdbs_dg migrate PRDvvr 192.168.100.118
VxVM VVR vradmin WARNING V-5-52-93 Make sure applications using Primary data volumes are stopped.
vradmin: Continue with migrate (y/n)? y

[root@pw250 log]$ vradmin -g mxpdbs_dg repstatus PRDvvr
Replicated Data Set: PRDvvr
Primary:
Host name: 192.168.100.118
RVG name: PRDvvr
DG name: mxpdbs_dg
RVG state: enabled for I/O
Data volumes: 2
VSets: 0
SRL name: vvrsrl
SRL size: 5.00 G
Total secondaries: 1

Secondary:
Host name: 192.168.100.116
RVG name: PRDvvr
DG name: mxpdbs_dg
Data status: consistent, up-to-date
Replication status: replicating (connected)
Current mode: synchronous
Logging to: SRL
Timestamp Information: N/A


[root@pw250 log]$ mount -F vxfs /dev/vx/dsk/mxpdbs_dg/mxpdbs_vol01 /app/oracle
[root@pw250 log]$ ls -ld /app/oracle
drwxr-xr-x 8 oracle oinstall 1024 Jul 9 17:42 /app/oracle/
[root@pw250 log]$ mount -F vxfs /dev/vx/dsk/mxpdbs_dg/mxpdbs_vol02 /flasharea/
[root@pw250 log]$ su - oracle
Sun Microsystems Inc. SunOS 5.10 Generic January 2005
[oracle@pw250 ~]$ sqlplus / as sysdba

SQL*Plus: Release 10.2.0.1.0 - Production on Wed Jul 9 18:57:03 2008

Copyright (c) 1982, 2005, Oracle. All rights reserved.

Connected to an idle instance.

SQL> startup
ORACLE instance started.

Total System Global Area 2550136832 bytes
Fixed Size 1980808 bytes
Variable Size 536872568 bytes
Database Buffers 1996488704 bytes
Redo Buffers 14794752 bytes
Database mounted.
Database opened.
SQL> select * from testt;

A
--------------------
2
288
3333
from450

SQL> exit
Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - 64bit Production
With the Partitioning, OLAP and Data Mining options

Edit listener.ora and anything that's required, and start up the listener.

[oracle@pw250 admin]$ lsnrctl start

LSNRCTL for Solaris: Version 10.2.0.1.0 - Production on 09-JUL-2008 18:58:35

Copyright (c) 1991, 2005, Oracle. All rights reserved.

Starting /app/oracle/product/10.2.0/dbhome/bin/tnslsnr: please wait...

TNSLSNR for Solaris: Version 10.2.0.1.0 - Production
System parameter file is /app/oracle/product/10.2.0/dbhome/network/admin/listener.ora
Log messages written to /app/oracle/product/10.2.0/dbhome/network/log/listener.log
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC1)))
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=pw250)(PORT=1521)))

Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1)))
STATUS of the LISTENER
------------------------
Alias LISTENER
Version TNSLSNR for Solaris: Version 10.2.0.1.0 - Production
Start Date 09-JUL-2008 18:58:37
Uptime 0 days 0 hr. 0 min. 0 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File /app/oracle/product/10.2.0/dbhome/network/admin/listener.ora
Listener Log File /app/oracle/product/10.2.0/dbhome/network/log/listener.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC1)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=pw250)(PORT=1521)))
Services Summary...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
[oracle@pw250 admin]$
[oracle@pw250 admin]$ lsnrctl status

LSNRCTL for Solaris: Version 10.2.0.1.0 - Production on 09-JUL-2008 18:59:27

Copyright (c) 1991, 2005, Oracle. All rights reserved.

Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1)))
STATUS of the LISTENER
------------------------
Alias LISTENER
Version TNSLSNR for Solaris: Version 10.2.0.1.0 - Production
Start Date 09-JUL-2008 18:58:37
Uptime 0 days 0 hr. 0 min. 50 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File /app/oracle/product/10.2.0/dbhome/network/admin/listener.ora
Listener Log File /app/oracle/product/10.2.0/dbhome/network/log/listener.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC1)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=pw250)(PORT=1521)))
Services Summary...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "ooo" has 1 instance(s).
Instance "ooo", status READY, has 1 handler(s) for this service...
Service "oooXDB" has 1 instance(s).
Instance "ooo", status READY, has 1 handler(s) for this service...
Service "ooo_XPT" has 1 instance(s).
Instance "ooo", status READY, has 1 handler(s) for this service...
The command completed successfully

Oracle RAC TAF Tnsnames.ora client entry

This is the entry that works for me..

XXX =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = 202.188.88.10)(PORT = 1521))
(ADDRESS = (PROTOCOL = TCP)(HOST = 202.188.88.11)(PORT = 1521))
(FAILOVER = on)
(LOAD_BALANCE = on)
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = xxx)
(FAILOVER_MODE =
(TYPE = SELECT)
(METHOD = PRECONNECT)
(RETRIES = 180)
(DELAY = 5)
)
)
)

#ocrcheck
#crsctl stop crs
---> this actually shutdowns everything, the crs components, listener and oracle as well
#crsctl start crs
---> this starts everything


[root@pw450 bin]$ crsctl start crs
Attempting to start CRS stack
The CRS stack will be started shortly
[root@pw450 bin]$ ps -aef|grep ora_
root 26501 29410 0 16:42:15 pts/6 0:00 grep ora_
[root@pw450 bin]$ ps -aef|grep ora_
root 26503 29410 0 16:42:16 pts/6 0:00 grep ora_
[root@pw450 bin]$
[root@pw450 bin]$ crsctl check crs
CSS appears healthy
Cannot communicate with CRS
EVM appears healthy
[root@pw450 bin]$ ps -aef|grep ora_
root 27225 29410 0 16:42:34 pts/6 0:00 grep ora_

[root@pw450 bin]$ ps -aef|grep ora_
oracle 27555 1 0 16:42:43 ? 0:00 ora_pmon_ooo2
oracle 27611 1 0 16:42:45 ? 0:00 ora_ckpt_ooo2
oracle 27625 1 0 16:42:45 ? 0:00 ora_s000_ooo2
oracle 27557 1 0 16:42:43 ? 0:00 ora_diag_ooo2
oracle 27563 1 0 16:42:43 ? 0:00 ora_lmd0_ooo2
oracle 27565 1 2 16:42:43 ? 0:01 ora_lms0_ooo2
oracle 27613 1 0 16:42:45 ? 0:00 ora_smon_ooo2
root 27787 29410 0 16:42:50 pts/6 0:00 grep ora_
oracle 27576 1 3 16:42:44 ? 0:01 ora_mman_ooo2
oracle 27592 1 0 16:42:44 ? 0:00 ora_dbw0_ooo2
oracle 27569 1 2 16:42:43 ? 0:01 ora_lms1_ooo2
oracle 27609 1 0 16:42:44 ? 0:00 ora_lgwr_ooo2
oracle 27615 1 0 16:42:45 ? 0:00 ora_reco_ooo2
oracle 27619 1 0 16:42:45 ? 0:00 ora_mmon_ooo2
oracle 27617 1 0 16:42:45 ? 0:00 ora_cjq0_ooo2
oracle 27623 1 0 16:42:45 ? 0:00 ora_d000_ooo2
oracle 27621 1 0 16:42:45 ? 0:00 ora_mmnl_ooo2
oracle 27720 1 0 16:42:48 ? 0:00 ora_lck0_ooo2
oracle 27559 1 0 16:42:43 ? 0:00 ora_psp0_ooo2
oracle 27561 1 3 16:42:43 ? 0:02 ora_lmon_ooo2

[oracle@pw450 ~]$ lsnrctl status

LSNRCTL for Solaris: Version 10.2.0.1.0 - Production on 30-JUN-2008 16:43:03

Copyright (c) 1991, 2005, Oracle. All rights reserved.

Connecting to (ADDRESS=(PROTOCOL=tcp)(HOST=)(PORT=1521))
TNS-12541: TNS:no listener
TNS-12560: TNS:protocol adapter error
TNS-00511: No listener
Solaris Error: 146: Connection refused
[oracle@pw450 ~]$
[oracle@pw450 ~]$
[oracle@pw450 ~]$ lsnrctl status

LSNRCTL for Solaris: Version 10.2.0.1.0 - Production on 30-JUN-2008 16:43:18

Copyright (c) 1991, 2005, Oracle. All rights reserved.

Connecting to (ADDRESS=(PROTOCOL=tcp)(HOST=)(PORT=1521))
STATUS of the LISTENER
------------------------
Alias LISTENER_PW450
Version TNSLSNR for Solaris: Version 10.2.0.1.0 - Production
Start Date 30-JUN-2008 16:43:07
Uptime 0 days 0 hr. 0 min. 11 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File /app/oracle/product/10.2.0/dbhome/network/admin/listener.ora
Listener Log File /app/oracle/product/10.2.0/dbhome/network/log/listener_pw450.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC1)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=202.188.88.11)(PORT=1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=202.188.88.9)(PORT=1521)))
Services Summary...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
[oracle@pw450 ~]$
[oracle@pw450 ~]$
[oracle@pw450 ~]$ lsnrctl status

LSNRCTL for Solaris: Version 10.2.0.1.0 - Production on 30-JUN-2008 16:43:21

Copyright (c) 1991, 2005, Oracle. All rights reserved.

Connecting to (ADDRESS=(PROTOCOL=tcp)(HOST=)(PORT=1521))
STATUS of the LISTENER
------------------------
Alias LISTENER_PW450
Version TNSLSNR for Solaris: Version 10.2.0.1.0 - Production
Start Date 30-JUN-2008 16:43:07
Uptime 0 days 0 hr. 0 min. 13 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File /app/oracle/product/10.2.0/dbhome/network/admin/listener.ora
Listener Log File /app/oracle/product/10.2.0/dbhome/network/log/listener_pw450.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC1)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=202.188.88.11)(PORT=1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=202.188.88.9)(PORT=1521)))
Services Summary...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
[oracle@pw450 ~]$ lsnrctl status

LSNRCTL for Solaris: Version 10.2.0.1.0 - Production on 30-JUN-2008 16:43:23

Copyright (c) 1991, 2005, Oracle. All rights reserved.

Connecting to (ADDRESS=(PROTOCOL=tcp)(HOST=)(PORT=1521))
STATUS of the LISTENER
------------------------
Alias LISTENER_PW450
Version TNSLSNR for Solaris: Version 10.2.0.1.0 - Production
Start Date 30-JUN-2008 16:43:07
Uptime 0 days 0 hr. 0 min. 15 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File /app/oracle/product/10.2.0/dbhome/network/admin/listener.ora
Listener Log File /app/oracle/product/10.2.0/dbhome/network/log/listener_pw450.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC1)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=202.188.88.11)(PORT=1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=202.188.88.9)(PORT=1521)))
Services Summary...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
[oracle@pw450 ~]$
[oracle@pw450 ~]$
[oracle@pw450 ~]$ lsnrctl status

LSNRCTL for Solaris: Version 10.2.0.1.0 - Production on 30-JUN-2008 16:46:17

Copyright (c) 1991, 2005, Oracle. All rights reserved.

Connecting to (ADDRESS=(PROTOCOL=tcp)(HOST=)(PORT=1521))
STATUS of the LISTENER
------------------------
Alias LISTENER_PW450
Version TNSLSNR for Solaris: Version 10.2.0.1.0 - Production
Start Date 30-JUN-2008 16:43:07
Uptime 0 days 0 hr. 3 min. 9 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File /app/oracle/product/10.2.0/dbhome/network/admin/listener.ora
Listener Log File /app/oracle/product/10.2.0/dbhome/network/log/listener_pw450.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC1)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=202.188.88.11)(PORT=1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=202.188.88.9)(PORT=1521)))
Services Summary...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "ooo" has 2 instance(s).
Instance "ooo1", status READY, has 1 handler(s) for this service...
Instance "ooo2", status READY, has 2 handler(s) for this service...
Service "oooXDB" has 2 instance(s).
Instance "ooo1", status READY, has 1 handler(s) for this service...
Instance "ooo2", status READY, has 1 handler(s) for this service...
Service "ooo_XPT" has 2 instance(s).
Instance "ooo1", status READY, has 1 handler(s) for this service...
Instance "ooo2", status READY, has 2 handler(s) for this service...
The command completed successfully

Oracle 10gR2 RAC Installation Problems

Problem encountered in Oracle 10gR2 RAC Installation:

1. On Solaris, if raw device is to be used, remember not to use the first cylinder of the disk.
VTOC occupy the 1st cylinder of a Solaris partition 0.

2. Do not ever use IANA reserved private IP addresses ( as your public IP. There will be no error shown when you set those private interface to public. But the VIP instance will mysterious died off, and causing the RAC instances to abort without any errors.

IANA Reserved IP for Private use:
10.0.0.0 - 10.255.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255

Benn Yoong, DaWei, DaJie

Langkawi Trip

Something about Oracle user and Solaris project

here's the findings:

IF you primary Oracle group is not dba (say your primary group is oinstall), and you try to make project group.dba as your primary project, huhh nothing will change when you type "id -p". You still get back the project called default as your primary project. (In fact, i shouldn't use the term "primary project", as this is not accurate).

So create a project something like "user.oracle" and make it your oracle primary project, it will works.

See below:

[root@pw450 /]$ su - oracle
Sun Microsystems Inc. SunOS 5.10 Generic January 2005
[oracle@pw450 ~]$ id -p
uid=200(oracle) gid=200(oinstall) projid=3(default)
[root@pw450 /]$
[root@pw450 /]$ projadd -U oracle -K "project.max-shm-memory=(priv,4g,deny)" \
> -K "project.max-sem-nsems=(priv,256,deny)" \
> -K "project.max-sem-ids=(priv,100,deny)" \
> -K "project.max-shm-ids=(priv,100,deny)" group.dba
[root@pw450 /]$
[root@pw450 /]$ su - oracle
Sun Microsystems Inc. SunOS 5.10 Generic January 2005
[oracle@pw450 ~]$ id -p
uid=200(oracle) gid=200(oinstall) projid=3(default)



...............oppps..........it doesn't work, you are however being added to the member list of the project group.dba.


so we will create user.oracle instead.

see below:

[root@pw450 /]$ projdel group.dba
[root@pw450 /]$
[root@pw450 /]$ su - oracle
Sun Microsystems Inc. SunOS 5.10 Generic January 2005
[oracle@pw450 ~]$ id -p
uid=200(oracle) gid=200(oinstall) projid=3(default)
[oracle@pw450 ~]$ exit
logout
[root@pw450 /]$
[root@pw450 /]$ projadd -U oracle -K "project.max-shm-memory=(priv,4g,deny)" \
> -K "project.max-sem-nsems=(priv,256,deny)" \
> -K "project.max-sem-ids=(priv,100,deny)" \
> -K "project.max-shm-ids=(priv,100,deny)" user.oracle
[root@pw450 /]$
[root@pw450 /]$ su - oracle
Sun Microsystems Inc. SunOS 5.10 Generic January 2005
[oracle@pw450 ~]$ id -p
uid=200(oracle) gid=200(oinstall) projid=100(user.oracle)
[oracle@pw450 ~]$ cat
^C
[oracle@pw450 ~]$ cat /etc/project
system:0::::
user.root:1::::
noproject:2::::
default:3::::
group.staff:10::::
user.oracle:100::oracle::project.max-sem-ids=(priv,100,deny);project.max-sem-nsems=(priv,256,deny);project.max-shm-ids=(priv,100,deny);project.max-shm-memory=(priv,4294967296,deny)
[oracle@pw450 ~]$

....
something that's not mentioned in the Oracle RAC installation guide...

...

uncompress oracle files

just in case i dont remember...
[root@pw450 oradb]$ gunzip -cd 10gr2_db_sol.cpio.gz | cpio -idmv

Bug in Tectia SSH2

Here's the description of the problem found:

Solaris 10 08/07 running multiple containers. In one of the containers Tectia SSH2 server is installed and run. The Solaris' openssh server is disabled. I found this while installing Oracle 10gR2 in the container. To install Oracle in the container, i have created a project called user.oracle (as usual) and assign the project to oracle user.

When i login to the container using zlogin, the user oracle shows that is has correct project "user.oracle" assigned. But login using f-secure ssh client shows that the project still has assigned to the default project "user.root". I have problem determining the problem in the first place as i used ssh, zlogin and telnet all at the same time and annoyed by the 'intermittent' occurrence of project that showed incorrectly to the user oracle.

At last, i noticed it, and i shutdown the Tectia ssh2 server and started the Solaris Openssh server. Yes, login as user oracle using f-secure client or putty ssh client all show correct project assigned.

See below:

Global zone hostname: pw450
Container name: dbtest

Container running solaris openssh and login using either putty or f-secure shows correct project.































Container running Tectia SSH2 server and login as oracle using either putty or f-secure shows incorrect project assigned.





Not sure this is a bug or some misconfiguration.

Kernel setup for Oracle 10g

Command to add kernel settings for oracle in project user.oracle.
=====================================================

#projadd -U oracle -K "project.max-shm-memory=(priv,4g,deny)" -K "project.max-sem-nsems=(priv,256,deny)" -K "project.max-sem-ids=(priv,100,deny)" -K "project.max-shm-ids=(priv,100,deny)" user.oracle

Melaka Trip

It was a rainy day when we reached Melaka, and mom wanted me to take a photo here.

Birthday

This is my 2 years old birthday.

My 4th Birthday

I wish everyday is my birthday.

Brothers having fun time talking to each other

Da Jie: Now i become big brother.
Da Zhong: No problem, i will ask Mom to get a baby brother for me.

3 brothers

Veritas Storage Checkpoint

create
# fsckptadm -v create thu_7pm /checkpt1

Mount
# mount -F vxfs -o ckpt=thu_7pm /dev/vx/dsk/datadg/vol1:thu_7pm /checkpt1

remount
# mount -F vxfs -o ckpt=may_23,remount,rw /dev/vx/dsk/datadg/vol1:may_23 /fsvol_may_23

umount
# umount /fsvol_may_23

#umount /dev/vx/dsk/datadg/vol1:may_23


Convert data to no data chkpt
# fsckptadm -s set nodata thu_7pm /checkpt1 (convert data to nodata)

-s option means synchronous

this nodata checkpoint only contains a collection of markers

# fsckptadm set nomount thu_7pm /checkpt (convert mountable to non-mount)


# fsckptadm set remove thu_7pm /checkpt (convert non-removeable to removeable)

set quotas
# fsckptadm setquotalimit /checkpt1 1024 512

1024 - no.of hard limit blocks
512 - no.of soft limit blocks

remove
# fsckptadm remove thu_7pm /checkpt1

list
# fsckptadm -clv list /mnt0

-c : resets statiscal counters
-l : displays statistical info on the fs, in addition to its checkpoints
-v: verbose mode, displays extensive statistical info

restoring a file system

# fsckpt_restore -l /dev/vx/dsk/datadg/vol01

Full-sized instant volume snapshots - method 2 : using empty volume

Full-sized instant volume snapshots - method 2 : using empty volume

1. find the required size for the snapshot volume.

#LEN=`vxprint -g datadg -F%len vol01`

2. find the name of the dco volume

#DCONAME=`vxprint -g datadg -F%dco_name vol01`

3. find the dco region size.

#RSZ=`vxprint -g datadg -F%regionsz $DCONAME`

4. Create a volume of the required size and redundancy

#vxassist -g datadg make snapvol01 $LEN init=active

5. To prepare the volume for snapshot operation
(to enable the fast resync using dco)

#vxsnap -g datadg prepare snapvol regionsize=$RSZ

6. create the snapshot using the empty volume.

#vxsnap -g datadg make source=vol01/snapvol=snapvol01

7. split the snapshot volume into a separate disk group

#vxdg split datadg offhostdg snapvol01

or

#vxdg -g datadg -o expand split datadg offhostdg snapvol01 snapvol02

8. deport the disk group

#vxdg deport offhostdg

9. import the disk group in remote host

(remote host)#vxdg import offhostdg

10. recover the disk group

(remote host)#vxdg -g offhostdg -sb

11. XXX Perform off-host processing XXX
fsck and mount, etc.....

12. deport the disk group

(remote host)#vxdg deport offhostdg

13. import back on the local host.

#vxdg import offhostdg

14. join the disk group

#vxdg join offhostdg datadg

15. Recover the disk group.

#vxrecover -sb

if the volume still in disabled state, then start it.

#vxvol -g datadg start vol01

16. update the snapshot volume
(refreshing the volume will sync the changed block from vol01 to
snapvol01)


#vxsnap -g datadg refresh snapvol01

or

#vxsnap -g datadg refresh snapvol01 source=vol01

17. If full resync of the volume is needed, then a reattach is required.

#vxsnap -g datadg reattach snapvol01 source=vol01

18. remove the snapshot volume if not required anymore.

#vxedit -g datadg -rf rm snapvol01

Full-Sized Instant Volume Snapshots - method 1: addmir to have 1 plex to attach to the volume.

1. A mirrored-volume created with 2 plexes and fastresync turned on
====================================================================

pw250(root)::vxsnap -g tdg prepare v8

pw250(root)::vxprint -htg tdg v8
V NAME RVG/VSET/CO KSTATE STATE LENGTH READPOL PREFPLEX UTYPE
PL NAME VOLUME KSTATE STATE LENGTH LAYOUT NCOL/WID MODE
SD NAME PLEX DISK DISKOFFS LENGTH [COL/]OFF DEVICE MODE
SV NAME PLEX VOLNAME NVOLLAYR LENGTH [COL/]OFF AM/NM MODE
SC NAME PLEX CACHE DISKOFFS LENGTH [COL/]OFF DEVICE MODE
DC NAME PARENTVOL LOGVOL
SP NAME SNAPVOL DCO
EX NAME ASSOC VC PERMS MODE STATE
SR NAME KSTATE

v v8 - ENABLED ACTIVE 409600 SELECT - fsgen
pl v8-01 v8 ENABLED ACTIVE 409600 CONCAT - RW
sd disk1-01 v8-01 disk1 0 409600 0 c2t8d18 ENA
pl v8-02 v8 ENABLED ACTIVE 409600 CONCAT - RW
sd disk2-01 v8-02 disk2 0 409600 0 c2t8d19 ENA
dc v8_dco v8 v8_dcl
v v8_dcl - ENABLED ACTIVE 544 SELECT - gen
pl v8_dcl-01 v8_dcl ENABLED ACTIVE 544 CONCAT - RW
sd disk6-01 v8_dcl-01 disk6 0 544 0 c2t8d17 ENA
pl v8_dcl-02 v8_dcl ENABLED ACTIVE 544 CONCAT - RW
sd disk3-01 v8_dcl-02 disk3 0 544 0 c2t8d20 ENA



2.Additional snap plex has been added to the volume.

pw250(root)::vxsnap -g tdg addmir v8 plex=v8snap-v3 alloc=disk4
====================================================================
v v8 - ENABLED ACTIVE 409600 SELECT - fsgen
pl v8-01 v8 ENABLED ACTIVE 409600 CONCAT - RW
sd disk1-01 v8-01 disk1 0 409600 0 c2t8d18 ENA
pl v8-02 v8 ENABLED ACTIVE 409600 CONCAT - RW
sd disk2-01 v8-02 disk2 0 409600 0 c2t8d19 ENA
pl v8-03 v8 ENABLED SNAPDONE 409600 CONCAT - WO
sd disk4-01 v8-03 disk4 0 409600 0 c2t8d21 ENA
dc v8_dco v8 v8_dcl
v v8_dcl - ENABLED ACTIVE 544 SELECT - gen
pl v8_dcl-01 v8_dcl ENABLED ACTIVE 544 CONCAT - RW
sd disk6-01 v8_dcl-01 disk6 0 544 0 c2t8d17 ENA
pl v8_dcl-02 v8_dcl ENABLED ACTIVE 544 CONCAT - RW
sd disk3-01 v8_dcl-02 disk3 0 544 0 c2t8d20 ENA
pl v8_dcl-03 v8_dcl DISABLED DCOSNP 544 CONCAT - RW
sd disk4-02 v8_dcl-03 disk4 409600 544 0 c2t8d21 ENA




3. After break off the plex, it is used to create new snapshot volume

pw250(root)::vxsnap -g tdg make source=v8/newvol=v8snapvol/plex=v8-03
pw250(root)::
================================================================

v v8 - ENABLED ACTIVE 409600 SELECT - fsgen
pl v8-01 v8 ENABLED ACTIVE 409600 CONCAT - RW
sd disk1-01 v8-01 disk1 0 409600 0 c2t8d18 ENA
pl v8-02 v8 ENABLED ACTIVE 409600 CONCAT - RW
sd disk2-01 v8-02 disk2 0 409600 0 c2t8d19 ENA
dc v8_dco v8 v8_dcl
v v8_dcl - ENABLED ACTIVE 544 SELECT - gen
pl v8_dcl-01 v8_dcl ENABLED ACTIVE 544 CONCAT - RW
sd disk6-01 v8_dcl-01 disk6 0 544 0 c2t8d17 ENA
pl v8_dcl-02 v8_dcl ENABLED ACTIVE 544 CONCAT - RW
sd disk3-01 v8_dcl-02 disk3 0 544 0 c2t8d20 ENA
sp v8snapvol_snp v8 v8_dco

v v8snapvol - ENABLED ACTIVE 409600 ROUND - fsgen
pl v8-03 v8snapvol ENABLED ACTIVE 409600 CONCAT - RW
sd disk4-01 v8-03 disk4 0 409600 0 c2t8d21 ENA
dc v8snapvol_dco v8snapvol v8snapvol_dcl
v v8snapvol_dcl - ENABLED ACTIVE 544 ROUND - gen
pl v8_dcl-03 v8snapvol_dcl ENABLED ACTIVE 544 CONCAT - RW
sd disk4-02 v8_dcl-03 disk4 409600 544 0 c2t8d21 ENA
sp v8_snp v8snapvol v8snapvol_dco
pw250(root)::




4. Split the diskgroup to create a new snap diskgroup
============================================================

pw250(root)::vxdg split tdg snapdg v8snapvol
pw250(root)::
pw250(root)::vxprint -htg snapdg
............
..........

dg snapdg default default 46000 1207136413.39.pw250

dm disk4 c2t8d21s2 auto 65536 10141440 -

v v8snapvol - DISABLED ACTIVE 409600 ROUND - fsgen
pl v8-03 v8snapvol DISABLED ACTIVE 409600 CONCAT - RW
sd disk4-01 v8-03 disk4 0 409600 0 c2t8d21 ENA
dc v8snapvol_dco v8snapvol v8snapvol_dcl
v v8snapvol_dcl - DISABLED ACTIVE 544 ROUND - gen
pl v8_dcl-03 v8snapvol_dcl DISABLED ACTIVE 544 CONCAT - RW
sd disk4-02 v8_dcl-03 disk4 409600 544 0 c2t8d21 ENA
sp v8_snp v8snapvol v8snapvol_dco


pw250(root)::vxprint -htg tdg
............
.....

v v8 - ENABLED ACTIVE 409600 SELECT - fsgen
pl v8-01 v8 ENABLED ACTIVE 409600 CONCAT - RW
sd disk1-01 v8-01 disk1 0 409600 0 c2t8d18 ENA
pl v8-02 v8 ENABLED ACTIVE 409600 CONCAT - RW
sd disk2-01 v8-02 disk2 0 409600 0 c2t8d19 ENA
dc v8_dco v8 v8_dcl
v v8_dcl - ENABLED ACTIVE 544 SELECT - gen
pl v8_dcl-01 v8_dcl ENABLED ACTIVE 544 CONCAT - RW
sd disk6-01 v8_dcl-01 disk6 0 544 0 c2t8d17 ENA
pl v8_dcl-02 v8_dcl ENABLED ACTIVE 544 CONCAT - RW
sd disk3-01 v8_dcl-02 disk3 0 544 0 c2t8d20 ENA
sp v8snapvol_snp v8 v8_dco


5. EXport the diskgroup
=========================
pw250(root)::vxdg deport snapdg
pw250(root)::vxdg list
NAME STATE ID
oracledg enabled,cds 1205751433.22.pw450
tdg enabled,cds 1207125877.35.pw250




6. Import the diskgroup on the remote host
===========================================

pw450(root)-->vxdg import snapdg
pw450(root)-->vxrecover -g snapdg -sb
pw450(root)-->
pw450(root)-->vxprint -htg snapdg
.........
..........

dg snapdg default default 46000 1207136413.39.pw250

dm disk4 c3t18d21s2 auto 65536 10141440 -

v v8snapvol - ENABLED ACTIVE 409600 ROUND - fsgen
pl v8-03 v8snapvol ENABLED ACTIVE 409600 CONCAT - RW
sd disk4-01 v8-03 disk4 0 409600 0 c3t18d21 ENA
dc v8snapvol_dco v8snapvol v8snapvol_dcl
v v8snapvol_dcl - ENABLED ACTIVE 544 ROUND - gen
pl v8_dcl-03 v8snapvol_dcl ENABLED ACTIVE 544 CONCAT - RW
sd disk4-02 v8_dcl-03 disk4 409600 544 0 c3t18d21 ENA
sp v8_snp v8snapvol v8snapvol_dco
pw450(root)-->
pw450(root)-->
pw450(root)-->mount -F vxfs /dev/vx/dsk/snapdg/v8snapvol /vsnap
pw450(root)-->
pw450(root)-->df -h /vsnap
Filesystem size used avail capacity Mounted on
/dev/vx/dsk/snapdg/v8snapvol
200M 2.1M 186M 2% /vsnap



7. Deport from remote host and import on original host
==========================================================

pw450(root)-->umount /vsnap
pw450(root)-->
pw450(root)-->vxdg deport snapdg

pw250(root)::vxdg import snapdg
pw250(root)::
pw250(root)::vxrecover -g snapdg -sb
pw250(root)::


8. Join the snap disk group into original disk group
=========================================================
pw250(root)::vxdg join snapdg tdg
pw250(root)::vxprint -htg tdg
..........
...

dg tdg default default 15000 1207125877.35.pw250

dm disk1 c2t8d18s2 auto 65536 10141440 -
dm disk2 c2t8d19s2 auto 65536 10141440 -
dm disk3 c2t8d20s2 auto 65536 10141440 -
dm disk4 c2t8d21s2 auto 65536 10141440 -
dm disk5 c2t8d22s2 auto 65536 10141440 -
dm disk6 c2t8d17s2 auto 65536 20381440 -

v v8 - ENABLED ACTIVE 409600 SELECT - fsgen
pl v8-01 v8 ENABLED ACTIVE 409600 CONCAT - RW
sd disk1-01 v8-01 disk1 0 409600 0 c2t8d18 ENA
pl v8-02 v8 ENABLED ACTIVE 409600 CONCAT - RW
sd disk2-01 v8-02 disk2 0 409600 0 c2t8d19 ENA
dc v8_dco v8 v8_dcl
v v8_dcl - ENABLED ACTIVE 544 SELECT - gen
pl v8_dcl-01 v8_dcl ENABLED ACTIVE 544 CONCAT - RW
sd disk6-01 v8_dcl-01 disk6 0 544 0 c2t8d17 ENA
pl v8_dcl-02 v8_dcl ENABLED ACTIVE 544 CONCAT - RW
sd disk3-01 v8_dcl-02 disk3 0 544 0 c2t8d20 ENA
sp v8snapvol_snp v8 v8_dco

v v8snapvol - DISABLED ACTIVE 409600 ROUND - fsgen
pl v8-03 v8snapvol DISABLED ACTIVE 409600 CONCAT - RW
sd disk4-01 v8-03 disk4 0 409600 0 c2t8d21 ENA
dc v8snapvol_dco v8snapvol v8snapvol_dcl
v v8snapvol_dcl - DISABLED ACTIVE 544 ROUND - gen
pl v8_dcl-03 v8snapvol_dcl DISABLED ACTIVE 544 CONCAT - RW
sd disk4-02 v8_dcl-03 disk4 409600 544 0 c2t8d21 ENA
sp v8_snp v8snapvol v8snapvol_dco



9. Start the snap volume as it is in disabled state

Refresh the snap volume with start the resync process with the orignial volume.
========================================================
pw250(root)::vxvol -g tdg start v8snapvol
pw250(root)::vxsnap -g tdg refresh v8snapvol

Veritas Traditional Volume Snapshot.

Traditional Volume Snapshots
==============================

make pitc
----------
1. vxvol set fastresync=on

2. vxassist -g xxxdg snapstart datavol

3. vxassist -g xxxdg snapshot datavol snapvol

use pitc
---------
4. vxdg split
5. vxdg join

update pitc
------------
6.vxassist -g xxxdg snapback snapvol

or

7. vxassist -g xxxdg -o resyncfromreplica snapback snapvol


display pitc info
------------------
8. vxassist -g xxxdg snapprint datavol


abort the snapshot
--------------------
To remove a snapshot mirror that has not been detached and moved to a snapshot volume.

9. vxassist -g xxxdg snapabort datavol



destroy pitc
-------------
10.destroy pitc

Xeon-toasted Chicken

This is a funny one.

In the bus....

Visit to mom's hometown

Linux VIO Considerations

Here's the support info provided by IBM:

1. For AIX 5L V5.3 VIO clients, only the APV VIOS is supported by IBM.
2. Linux VIO clients may use the APV VIOS or the Linux VIO server.


So it seems to be that having Linux VIO client is a better choice.
But do i want to run linux on such expensive IBM hardware??!

I can achieve better performance, availability and serviceability by running linux on x64/x86 server.

Conclusion is Linux VIO client / server is only meant for rich and affordable customers.

shares

silverstone - 4000 - PN17
amsteel - 4000 - PN17
mbfcorp - 8000 - PN17
twscorp - 1000
pasdec - 3000
scomi - 1000
GHL - 231
mobif - 4000
pmhldg - 1000
faber - 1000
bolton - 1000
dialog - 1000
sapcres - 1000
leader - 6000
rcecap - 3500
bimb - 2000
jland - 1000
ramunia - 2000
oilcorp - 1000
ta -1000

Play at school

............................

First they demand for an public apology from this young man. Only when he did so, then they wanted to take action against him. That's the strategy, i am totally disgusted by the way they handled this matter. This sick government!!

Photo on 15/8/2006

it was taken about a year ago. The big brother looks the same, whereas the young brother has grown up noticeably.

Veritas problems and solutions.

I found 2 solutions to this problem. The difference is minor. They are Veritas commands.

We have a machine running Solaris and VxVM, attached to a Clarion box. The SAN link was down, and Storage guy managed to bring the link back after a while. We had a situation where:

1. OS detects all the SAN disks.
2. VxVM had not able to recognize back the original disks, though the device paths are the same.
3. All fs mounted on those disks have IO error. Though a format read test is passed.
4. It seems that this is purely a VxVM problem now.


# vxprint -g dg01 -th <== Showed the following...
dg dg01 2 2 123000 1021305687.1295.obp1
dm appsdisk c0t1d0s2 sliced 11555 71112735 -
dm appsmirror c1t1d0s2 sliced 11555 71112735 -
dm homedisk c2t0d0s2 sliced 14135 35349424 -
dm homemirror c3t0d0s2 sliced 14135 35349424 -


v home - DISABLED ACTIVE 16896000 SELECT - fsgen
pl home-01 home DISABLED RECOVER 16897232 CONCAT - RW
sd homedisk-01 home-01 homedisk 0 16897232 0 c2t0d0 RLOC
pl home-02 home DISABLED RECOVER 16897232 CONCAT - RW
sd h omemirror-01 home-02 homemirror 0 16897232 0 c3t0d0 ENA


Solution 1:
Part 1:
1. vxdctl enable
2. vxdisk list <--- you will see plenty of failed disk message because of broken SAN link.
3. /etc/vx/bin/vxreattach
4. vxdisk list
Part 2:
1. vxmend -g dg01 -o force off home-01
2. vxmend -g dg01 on home-01
3. vxmend -g dg01 fix clean home-01
4. vxvol -g dg01 start home
5. fsck -F vxfs /dev/vx/rdsk/dg01/home
6. mount -F vxfs /dev/vx/dsk/dg01/home /export/home

You only need to fix on 1 plex, the clean plex will resync the other plex which has problem.

Solution 2:
Part 1:
1. vxdctl enable
2. vxdisk list <--- you will see plenty of failed disk message because of broken SAN link.
3. /etc/vx/bin/vxreattach
4. vxdisk list

Part 2:
1. vxmend -g dg01 fix stale home-01
2. vxmend -g dg01 fix clean home-01
3. vxvol -g dg01 start home
4. fsck -F vxfs /dev/vx/rdsk/dg01/home
5. mount -F vxfs /dev/vx/dsk/dg01/home /export/home

Again, you only need to fix 1 plex. It will automatically resync the other plex.

Yummmm

Wisdom Tooth

I had the x-ray done this morning. The x-ray clearly shows that i had all 4 wisdom teeth either decaying or laying nicely wating for the right moment. The 2 decaying one are killing me for the past 2 nights.
The one at upper-left started Saturday night, and really gave me a difficult time to sleep. The worst one came at evening Sunday, it just too painfull to be born. I almost fainted.
Go see a dentist, this is the serv 1 incident for me personally.

Sungai Kerayong site visit

It's me having some fun at the site. Though we not supposed to go near, but it was a sunny Sunday afternoon, and who cares!

What a sunshine day

This is 3pm in the afternoon. You know this is Kuala Lumpur, 3pm on a shinny day is very hot. They like the school environment. The big brother likes the flag so much, the little one just picks up walking 'skill', simply like to walk only. Their mom didn't like the idea to play at 3pm under open air. I have a different philosophy, 3pm is the time to stay at home for her, while for me it is good time to go out and have some fun.

Smart Tunnel and etc

This is from Director-general of Deparment of Irrigation and Drainage Malaysia. He was responding to the Smart tunnel which has not completed its water tunnel work. He says the government has come up with a ruling that future development projects include good drainage systems and ponds. So what has happened to the current devleopment projects? Is good drainage systems and ponds optional?? I guess you have the answer

Explanation

This happens to a disk which has a inode error on the OS disk.
The SA wants to do a fsck but afraid the it might cause unpredictable error on the disks. (Well,
i dont think this is really necessary, but the user requested for it)
This machine has the boot disks encapsulated and mirrored. First we want to know the mirrored disk's plex. The mirrored disk is c2t1d0. You can see the purpose is to break mirror and boot up onmirrored disk to perform a fsck on mirrored disk. When it's done, boot up from root disk and
reattach the mirror.

You figure out first what's this..

# vxprint -thg rootdg | grep pl | grep 02

pl export-02 export ENABLED ACTIVE 8389656 CONCAT - RW

pl local-02 local ENABLED ACTIVE 8389656 CONCAT - RW

pl pstore-02 pstore ENABLED ACTIVE 205119 CONCAT - RW

pl rootdisk1vol-02 rootdisk1vol ENABLED ACTIVE 4194828 CONCAT - RW

pl rootvol-02 rootvol ENABLED ACTIVE 29360907 CONCAT - RW

pl var-02 var ENABLED ACTIVE 12584484 CONCAT - RW

1. Remove volume pstore.

# vxassist –g rootdg remove pstore

2. Set up system boot information on mirror disk

# /etc/vx/bin/vxbootsetup rootmirr

3. Break rootmirror (c2t1d0)

# vxplex –g rootdg dis rootvol-02

# vxplex –g rootdg dis rootdisk1vol-02

4. FSCK mirror disk (c2t1d0).

# fsck –F ufs /dev/rdsk/c2t1d0s0

5. Mount root file system in mirror disk

# mount /dev/dsk/c2t1d0s0 /mnt

6. Change /etc/system in mirror disk

# cd /mnt/etc

# cp system system.ddmmyy

# cp system.rfc263171 system

7. Change /etc/vfstab in mirror disk.

# cd /mnt/etc

# cp vfstab vfstab.ddmmyy

# cp vfstab.rfc263171 vfstab

The entries from / and /swap will be changed as shown:

/dev/dsk/c2t1d0s1 - - swap - no -

/dev/dsk/c2t1d0s0 /dev/dsk/c2t1d0s0 / ufs 1 no logging

8. Un-mount file system.

# cd /

# umount /mnt

9. Shutdown system. Reboot system,

# init 0

ok boot vx-rootmirror -sw

Enter root password to enter maintenance mode

Perform FSCK on /

# fsck –F ufs /dev/rdsk/c2t0d0s0

When done, bring down system

# init 0

10. Reboot system with vx-rootdisk,

ok boot vx-rootdisk

IF boot is OK, go to step 11.

IF boot failed, go to step 12.

11. Re-attach mirror,

# vxplex –g rootdg att rootvol rootvol-02

# vxplex –g rootdg att rootdisk1vol rootdisk1vol-02

Job done. Use “vxtask list” to check progress of synchronization.

12. Boot the system off the detached mirror disk,

# init 0

ok boot vx-rootmirror –s

13. Check to ensure system is booted with disk slices rather than volume devices.

# df –k /

Filesystem kbytes used avail capacity Mounted on

/dev/dsk/c2t1d0s0 14451472 4468338 9838620 32% /

14. Stop all volumes in rootdg, re-attach those detached plexes,

# vxvol –g rootdg stopall

Attach detached plexes,

# vxplex –g rootdg att rootvol rootvol-02

# vxplex –g rootdg att rootdisk1vol rootdisk1vol-02

Make the newly attached plexes active,

# vxmend –g rootdg –o force off rootvol-01

# vxmend –g rootdg –o force off rootdisk1vol-01

# vxmend –g rootdg fix clean rootvol-02

# vxmend –g rootdg fix clean rootdisk1vol-02

# vxvol –g rootdg startall

15. Revert /etc/system and /etc/vfstab from backup files created earlier,

# cp /etc/system.ddmmyy /etc/system

# cp /etc/vfstab.ddmmyy /etc/vfstab

16. Shutdown system and reboot with mirror disk again,

# init 0

Ok boot vx-rootmirror

System should boot up using volume device, “df –k /” to verify,

# df –k /

Filesystem kbytes used avail capacity Mounted on

/dev/vx/dsk/bootdg/rootvol

14451472 4468384 9838574 32% /

17. Online the disabled plexes,

# vxmend –g rootdg on rootvol-01

# vxmend –g rootdg on rootdisk1vol-01

Synchronization will starts, use “vxtask list” to check progress.

Projects to fix Sungai Kerayong

The first one on the left (with a completion date on 25th mei 2006)clearly states that the project is to fix the flash flood problem caused by Sungai Kerayong.

Second project is to fix once and for all the river's flow and river bank structured work

Sungai Kerayong river bed deepening work

Jalan Loke Yew Road Upgrade

This is road expansion work along Jalan Loke Yew, after 7 / 8 months the project started.

Saturday morning...

It is always a happy morning when they discover the parents are at home not going to office.

李登輝!

李登輝：有人掌權 全家撈錢
He must be referring to our red dot Mr. Lee. Well, he always like to compare himself with the senior Lee.
Is he any better than Senior Lee? Personally i think not!

Balcony bath

It was early 8 in the morning, and the brothers already having some good time at the balcony - something not every child is allowed.

;-)

Oh....

She just told me the test was positive and she lost control of her emotion. Yes, we will have a 3rd child. We didn't expect it comes so fast. This has been a hectic year for me, and i am totally surprised this happen to a couple who has so little sex life.
;-)

Good Feng Shui Place?

The house and surroundings look so good to me except that it is located about 200km away from where i life now.

See here. This houses in Ipoh really attracts me.

Another day of hardwork

My throat is burning, it is affecting my sleep now. I got a long nite yesterday, it's all work. Slept at 3.30am and woke up 7am to send my children to nanny. And not able to sleep now because of sore throat. Life is tough, as always.....

Taman Recreasi Air Panas (TRAP) Sungkai

Brothers having some good times at TRAP. It was very crowded during public holiday. This place is run by Felda, and it is right in the palm oil estate.

Happy Birthday 3 years old

Big brother turning 3 years old...on 1st April.

Boat Ride - Teluk Intan

Brothers having boat ride for the first time.....

Jakarta Safari

Jakarta Trip

happy moment

Young brothers having happy hour at the yard..

my Da Jie

1 year old

House survey 1

Found this under the classified section: house for sale
CHERAS TMN Cheras Indah d/s 18x60 Nlot 3r2b fully extended RM235K (Value buy) well kept 012-2906029, 03-92003864 Alex E(3)0931 20/3/2007

Everything is ok except -- this is leasehold house, and it has balance of about 70+ years.
Free hold house is very important factor in my buying decision. Never look back.

More house for sale now.....

I think this is no coincidental.....the next day after PM announced the removal of RPGT, the number of house sales in classified section increased from 30+ to 40+.

Da Jie's 1 year old birthday