Tip: 看不到本站引用 Flickr 的图片? 下载 Firefox Access Flickr 插件 | AD: 订阅 DBA notes -- ![]()
2008-06-11 Wed


Cyrus Simple Authentication and Security Layer (SASL) library authenticates a remote SMTP client’s username and password; while the email accounts are part of the local system accounts. To enable (SASL) authentication in Postfix SMTP server follow these steps:
Step 1: Verify that cyrus-sasl has been installed.
Step 2: Modify /etc/postfix/main.cf, adding the following two lines.
smtpd_sasl_path = smtpd smtpd_sasl_auth_enable = yes
Step 3: Modify /usr/lib/sasl2/smtpd.conf
pwcheck_method: saslauthd mech_list: PLAIN LOGIN
Step 4: Start the postfix and saslauthd service
service saslauthd start service postfix start
Step 5: Test the SASL authentication on the Postfix SMTP server. To test the server side, connect to the Postfix SMTP server port to demonstrate if the connection is successful.
Example using telnet:
$ telnet server.test.com 25 . . . 220 server.test.com ESMTP Postfix EHLO client.test.com 250-server.test.com 250-PIPELINING250-SIZE 10240000 250-VRFY 250-ETRN 250-AUTH PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN AUTH PLAIN AHJlZGhhdAByZWRoYXQ= 235 2.0.0 Authentication successful
Note: Instead of AHJlZGhhdAByZWRoYXQ=, specify the base64-encoded form of \0username\0password (the \0 is a null byte). This example is for a user named `redhat’ with password `redhat’. To generate base64-encoded authentication use one of the following commands:
% printf ‘usernamepassword’ | mmencode % perl -MMIME::Base64 -e ‘print encode_base64(”usernamepassword”);’
Yesterday at Tech Ed IT Pro 2008 in Orlando we announced some of the enhancements we’re making in Internet Explorer 8 to help IT Professionals deploy and manage IE8 within their organization. We wanted to share those with the IT Pros on our blog.
Over the last year we’ve surveyed over 2000 IT Professionals to understand their concerns and priorities for deploying and managing desktops and software within their organization. We learned that IT Pros have a lot of things to worry about - more than 30 different concerns came up. However, some topics arose considerably more frequently than others. Here are the top ones:
- Deployment and implementation of new technology
- Managing updates and upgrades
- Application compatibility
- Security of data, network and systems
Internet Explorer 7 already has a pretty strong deployment and management story. For IE7 IT Pros are able to:
- Generate customized builds that include company’s settings and branding by using Internet Explorer Administration Kit(IEAK)
- Centrally manage browser settings through group policy
- Use common deployment infrastructures like Windows Update, Windows Server Update Services, Systems Management Server and Active Directory
In addition to deployment and management support, IE 7 introduced a number of features intended to help your users browse more safely and hence protect your corporate data, network and systems:
- Phishing Filter
- ActiveX Opt-in
- Extended Validation Certificates
IE7 did a lot to address the concerns of the IT Professionals but we felt there were some places we could improve. Yesterday, we announced some of our new features:
Slipstream Support in Internet Explorer 8
We got consistent feedback from customers that deploying Internet Explorer 7 as part of Windows XP is hard. Many IT Pros want to update their Windows XP images to contain IE7 by default, so IE7 gets installed as part of the OS install. To do that the IT Pros need to boot their existing images of Windows XP, install IE7 and then recapture the image. This process roughly takes 2 hours per image.
With Internet Explorer 8 and Windows Vista you’ll be able to “Slipstream” Internet Explorer 8 into a Vista image so that when you deploy Vista it already contains Internet Explorer 8. To slipstream IE8 only takes 10-15 minute per image. You’ll also be able to slipstream IE8 cumulative updates so that you are shipping the most up to date and secure image.
Look out for a forthcoming post to learn more about Slipstreaming IE8.
Application Compatibility and Internet Explorer 8
You have seen a lot of discussion on this blog about our decision to ship Internet Explorer 8 with standards mode switched on by default. Today, not all sites are built to conform to web standards so we’ve given end users and developers control over how sites display in IE8.
How about IT Professionals? For one, we're adding new events to the Application Compatibility Toolkit (ACT) that help you detect and resolve potential issues between IE8 and your internal applications and web sites. For another, we're providing Group Policy settings that help you control, with great granularity, those settings that most impact compatibility. Lastly, we're looking at how to intelligently solve this problem for intranets - providing the greatest application and web site compatibility while still maintaining our core tenets of security, performance, and reliability.
The Internet has changed the way that people live and work. People are spending more and more time on the web but this growth in web usage also attracted people who have malicious intent. From phishing scams to sites which install malware, the web can be a dangerous place to be. Who hasn’t had to jump across the keyboard/mouse to stop a friend or loved one visiting a phishing site or installing a piece of suspicious software? What happens when that person doesn’t have their tech-savvy friend watching over their shoulder?
Did you know that more than $3 billion has been lost in Phishing scams? The browser – and particularly in IE8 - plays an important role in helping protect users against a range of attacks, from social attacks like phishing to browser based exploits.
Rather than cover those features here, we’ve already posted information about some of the ways we’re helping your users browse more safely:
There’s more to come around security in later blog postings.
Updates to the IEAK
The internet Explorer Administration Kit (IEAK) enables IT Pros to customize IE for their company’s needs. You might be familiar with this tool since it was available for IE6 and IE7. In IE8, IEAK is getting a facelift. We have fixed a number of bugs and added some enhancements to improve the performance of IEAK. IEAK8 will support custom IE8 builds for new platforms: Vista and Windows Server 2008 and new IE8 features like Activities and Web Slices.
Stay tuned for a follow-up blog post that will contain more detail about IEAK8.
Wrap Up
We plan to include all of the above mentioned features in our Beta 2 release which is planned for August 2008. As always when developing software, features can get cut or postponed if we find bugs that affect ship quality but right now we’re on track to have these features for Beta 2.
IE7 was a great browser to deploy and manage in an enterprise or business environment. With IE8, we’re doubling down on that investment to make sure that we have the best browser to deploy and manage in an enterprise environment.
Jane Maliouta - IE Program Manager
James Pratt - IE Product Manager
昨天,经历了职业生涯中最令人心惊胆颤的危机,差点要去买锄头准备回家种地去了。-_-!!
早上5点钟,被同事叫醒,说应用程序连数据库报TNS没响应。于是开始登录数据库主机。登录的时候,用常用的浮动IP连接,没响应,此时第一个反映就是是不是数据库主机挂了?难道要去机房?现在可是奥运前期,进出机房是件挺麻烦的事情……再试了试实际IP,幸好,登录进去了。check了一下进程和alertlog,发现是控制文件的读取有问题了:
Errors in file /oracle/app/oracle/admin/sd168/bdump/sd168_arc0_7605.trc:
ORA-00202: controlfile: '/dev/vg_ora1/rctrl_128m_01'
ORA-27091: skgfqio: unable to queue I/O
ORA-27072: skgfdisp: I/O error
HP-UX Error: 5: I/O error
Additional information: 1
Tue Jun 10 04:17:51 2008
KCF: write/open error block=0x44a online=1
Tue Jun 10 04:17:51 2008
Errors in file /oracle/app/oracle/admin/sd168/bdump/sd168_lgwr_7595.trc:
ORA-00345: redo log write error block 84121 count 2
ORA-00312: online log 2 thread 1: '/dev/vg_ora1/rredo_256m_02'
ORA-65535: Message 65535 not found; product=RDBMS; facility=ORA
Tue Jun 10 04:17:51 2008
KCF: write/open error block=0xa251 online=1
file=7 /dev/vg_ora1/rdata_1g_004
Tue Jun 10 04:17:51 2008
Errors in file /oracle/app/oracle/admin/sd168/udump/sd168_ora_16308.trc:
ORA-00202: controlfile: '/dev/vg_ora1/rctrl_128m_01'
ORA-27091: skgfqio: unable to queue I/O
ORA-27072: skgfdisp: I/O error
HP-UX Error: 5: I/O error
Additional information: 1
file=1 /dev/vg_ora1/rsys_512m_01
error=65535 txt: ''
Tue Jun 10 04:17:51 2008
Errors in file /oracle/app/oracle/admin/sd168/udump/sd168_ora_16562.trc:
ORA-00604: error occurred at recursive SQL level 1
ORA-01115: IO error reading block from file 1 (block # 820)
ORA-01110: data file 1: '/dev/vg_ora1/rsys_512m_01'
ORA-27091: skgfqio: unable to queue I/O
ORA-27072: skgfdisp: I/O error
HP-UX Error: 25: Not a typewriter
Additional information: 819
error=65535 txt: ''
Tue Jun 10 04:17:51 2008
Errors in file /oracle/app/oracle/admin/sd168/bdump/sd168_ckpt_7597.trc:
ORA-00206: error in writing (block 3, # blocks 1) of controlfile
ORA-00202: controlfile: '/dev/vg_ora1/rctrl_128m_01'
ORA-65535: Message 65535 not found; product=RDBMS; facility=ORA
Tue Jun 10 04:17:51 2008
……
赶紧请主机工程师也登录上来检查,主机工程师上来之后,重新把VG mount了一次,也重新在db01激活了一次(有做HP的MC双机热备),再次启动数据库,又是报错:
ORA-27091: skgfqio: unable to queue I/O
ORA-27072: skgfdisp: I/O error
HP-UX Error: 6: No such device or address
Additional information: 720939
SQL>
坏了,vg_ora1上的spfile读不出来了,那换备份的pfile,用pfile到nomount,接着到mount时,再次报错:
ORACLE instance started.
Total System Global Area 6453957408 bytes
Fixed Size 746272 bytes
Variable Size 2147483648 bytes
Database Buffers 4294967296 bytes
Redo Buffers 10760192 bytesSQL> alter database mount;
alter database mount
*
ERROR at line 1:
ORA-00205: error in identifying controlfile, check alert log for more info
SQL>
查alertlog是控制文件1的问题,ok,在pfile中去掉控制文件1,再次mount,OK,没问题,再次open,报错找不到system的数据文件!!
ORACLE instance started.
Total System Global Area 6453957408 bytes
Fixed Size 746272 bytes
Variable Size 2147483648 bytes
Database Buffers 4294967296 bytes
Redo Buffers 10760192 bytes
SQL>
SQL>
SQL> alter database mount;
Database altered.
SQL> alter database open;
alter database open
*
ERROR at line 1:
ORA-01122: database file 1 failed verification check
ORA-01110: data file 1: '/dev/vg_ora1/rsys_512m_01'
ORA-01251: Unknown File Header Version read for file number 1
SQL>
看来vg_ora1上的lv(裸设备)全完了!!
开始着手恢复措施:一方面,请主机工程师着手vg_ora1的恢复;另一方面,开始在db02上搭建环境,在上面做数据库的恢复。可是,一看备份,寒了,legato的数据库全备不知道被那个兄弟给disable了,最近的一次全备是今年的4月的!要追加2个月的arch,不知道要多久……-_-!!
进一步检查,备份的磁带还被recycle了。当时那个寒呀……
只好寄希望在主机那边的存储恢复了,终于,经过仔细的检查,发现vg_ora1上链路挂错了,重新配置后,数据库启动了……成功!此时已经中午12点半了。
通过这次事故,得到的教训还是很深刻的:
(1)备份高于一切,没有合适的备份,神仙都没办法救。必须保证备份的有效性和时效性。
(2)单点存储很危险,虽然有主机层面的MC双机热备,但是仅仅是存储挂在A机还是挂在B机的区别,要是存储坏了,后果很严重……就算有备份,恢复也是需要一段时间。如果有条件的话,还是做个DG比较安全……
(3)要有合适的还原策略,还原方案、还原脚本必须提前准备妥当,而不是待事故发生以后现场找数据库需要的LV,再划分VG和LV,再编写restore/recover脚本进行还原。
这是一个非常新的测试需求分析和测试用例设计技术,特别适用于测试需求不明确、文档不全的情况,而且把测试用例的重用性发挥到了极致,如果设计得当,基本可以做到design once, apply all的地步。不仅仅可以适应于跨项目,跨产品,甚至跨行业,跨公司都可以重用测试用例。
Q-Pattern中的Q是Question的意思,这是一个由一系列的问题组成的一个问题集的设计方法,针对不同颗粒的需求,小到一个下拉框,大到C/S级别的应用,都可以由一个包含许多问题集组成,针对不同的被测对象,回答这些问题就可以生成一系列的完成对产品覆盖的测试用例集。
下面是Q-Patterns的原文介绍
Patterns have proved to be a great tool for communication of domain specific knowledge across people and continuous skill enhancement. Designs, specifications, Architecture, Analysis patterns etc. are being widely used for this.
‘Questioning Patterns’ (Q-Patterns in short) are sets of patterns in questionnaire form that facilitate gathering and application of application or domain knowledge across wide variety of domains. These patterns are applicable at various phases of SDLC like specifications, design, testing etc.
These patterns are different from GOF (Gang of Four) design patterns and have been captured in a slightly different format.
below is from www.puretesting.com:
Q-Patterns provide a light-weight mechanism for sharing and documenting testing experience and test cases. Q-Patterns allow generic application of experience across projects, promote reuse of test cases and provide an easy method for review of specifications.
Using Q-Patterns one can drastically reduce the test case creation time by promoting reuse of test cases across organizations, projects, technologies and domains. Software projects generally yield a web of interrelated Q-Patterns. An integrated and broad adoption of Q-Patterns framework in an organization can yield a rich harvest of test cases with very little effort
(more…)
最近有很多朋友发邮件或者在QQ/MSN上向我咨询关于学习和工作方面的问题,很多问题具有重复性,现在在这里列举一些并表达一下我的看法,希望对朋友们有益。
从朋友们的提问来看,接触Oracle的群体有极大的年轻化趋势。很多大学的学生已经开始向我咨询,这在以前是不常见的,现在的学生能够更早的接触Oracle,这真是一件好事。
有很多朋友在自学Oracle,并且希望能够转向DBA的工作,那么怎样来完成这个过程呢?很多人对此迫不及待。
以下是一个朋友的来信,他的一些想法很有代表性:
2007年1月正式参加工作,原来一直做java开发,
然后因公司需要做维护。随着接触数据库渐多,对数据库产生了兴趣。
2007年11月至今一直在学习数据库,...也慢慢的入门了,准备完全从事数据库。....
问题是我现在还没有找到适合我的工作。...
很多朋友在进行了一段时间的学习之后,对转型迫不及待甚至焦虑不堪,这是不对的,在工作中应当切忌浮躁,我经常这样提醒年轻的朋友。
我们每个人从毕业到工作、再到找到适合自己的位置,这通常都要经过一个较长的时期,学习、思考、进步、再次出发,所以要知道有时候等待是过程的必须。
在我熟悉的圈子里,绝大多数资深DBA都经过过这样一个过程,很多人都是先做开发工作,然后接触Oracle、对Oracle感兴趣并开始研究、找到机会进行转型,这个过程以前都需要2~3年的时间。
我本人毕业之后也做了三年的开发工作,然后才转向DBA工作的。
而现在的年轻人,很多人一毕业就开始寻找DBA的工作,我承认现在一个DBA的成长历程被大幅缩短,但是要知道,一个人从毕业到成长为具有稳定职业发展观,总需要一个过程,在这个过程中,要保持冷静,拒绝浮躁。
如果你手上已经有了一份工作,那你需要做的是,做好它,哪怕那不是你喜欢的!
你必须证明给别人看你有做好一件事情的能力,别人才会给你下一个机会,如果你从来没能很好的完成一项任务,那你应该冷静的反省一下。
总结一下,在以上我想说的是,十年磨一剑,有时候你的等待是必须的历程,正视这个历程,珍重这个历程才是正确的态度。
我上面说,十年磨一剑,在这个历程中,你应当一直在琢磨,使自己成长,具备进一步跳跃的素质,如果你喜欢Oracle,那你应当在这个阶段完成积累过程。很多人经常是偶然有一天头脑发热,说我要去搞Oracle,这未尝不可,不过没有积累,你的起步要困难得多。
在具备了一定的积累之后,你需要的其实是机会,机会在哪里?
机会喜欢光顾有准备的头脑,你做好准备之后,静静的去寻找和等待机会,这是你应该做的。
很少有机会会从天而降,降临到毫无准备的人头上,如果你希望获得机会,那机会也希望你准备充分。
学习是没有止境的,在工作中认真处理遇到的问题,从每一个可能遇到的问题入手,深入再深入,这是对现实的把握。把握好现实才能把握未来。
去除浮躁,认真学习,不断积累,寻找机遇,这是我给很多朋友的建议。
-The End-
相关文章|Related Articles
评论数量(5)|Add Comments
本文网址:http://www.eygle.com/archives/2008/06/oracle_and_dba.html
2008-06-10 Tue
2008-06-09 Mon
AnySQL.net
DBA notes
Oracle & Starcraft
eagle's home
Give you some color to see see!
AnySQL.net English
Oracle Scratchpad
Oracle Life
OracleDBA Blog---请享受无法回避的痛苦!
Uploads from dbanotes
Chanel [K]
xzh2000的博客
Oracle Security Blog
ERN空间
Eddie Awad's Blog
MySQL Performance Blog
The Tom Kyte Blog
del.icio.us/fenng/oracle
AIXpert
O'Reilly Databases
Red Hat Magazine
DBASupport
DB2 Magazine 中文版
developerWorks 中国 : 技术文章 , 教程 AIX
Pythian Group Blog » Log Buffer
车东[Blog^2]
blue_prince
玉面飞龙的BLOG
此生 今世
人生就是如此
Orange Tiger 木匠 的 移民生活
生活帮-LifeBang
Hey!! Sky!
dba on unix
Oracle Notes Wiki
Brotherxiao's Home
柔嘉维则@life.oracle.eng
Fenng's shared items in Google Reader
jametong's shared items in Google Reader
缥缈游侠-logzgh
Tanel Poder's blog: Core IT for geeks and pros
DBA Tools
ilonng
yangtingkun
NinGoo@Net
Oracle & Unix
Inside the Oracle Optimizer - Removing the black magic
Ricky's Test Blog
DBA@Taobao
存储部落
Think in 88
Alibaba DBA Team
Oracle Team @SNC
淘宝数据仓库团队
OracleBlog.cn