oracle database 11g configuring osb and security

8/10/2019 Oracle Database 11g Configuring OSB and Security

1/40

|Print|Contents| Close|

Introducing Oracle Secure BackupLearning Objective

After completing this topic, you should be able to

recognize the basic principles of OSB

1. Basic principles of OSB

Oracle Secure Backup or OSB is a centralized tape-management software. It providesreliable data protection to tape. It also supports major tape drives and libraries in a

Storage Area Network or SAN !igabit "t#ernet or !b" and Small $omputer S%stem

Interface or S$SI environments.

OSB enables %ou to

back up and restore data using a variet% of mac#ine arc#itectures

control secondar% storage-based data recording format and compression

use wildcards and e&clusion lists to specif% w#at %ou want to back up

perform full incremental or differential backups and

support most popular tape drives and libraries

Supplement

Selecting the link title opens the resource in a new browser window.

Learning id

'se t#e learning aidSt!le Considerationsfor more information on t#e st%le

considerations for Oracle ((g )atabase used in t#is course.

OSB provides several additional benefits*

provides access to local and remote file s%stems and devices from an% location in a network

wit#out using Network +ile S%stem or N+S or $ommon Internet +ile S%stem or $I+S protocols
http://window.print%28%29/http://window.print%28%29/http://library.skillport.com/courseware/Content/cca/od_odsb_a01_it_enus/output/t2/misc/transcript.html#contentshttp://library.skillport.com/courseware/Content/cca/od_odsb_a01_it_enus/output/t2/misc/transcript.html#contentshttp://library.skillport.com/courseware/Content/cca/od_odsb_a01_it_enus/output/t2/misc/transcript.html#contentshttp://parent.window.close%28%29/http://parent.window.close%28%29/http://dowindow%28%27../html/laod_odsb_a01_it_enus_t201_frame.html')http://dowindow%28%27../html/laod_odsb_a01_it_enus_t201_frame.html')http://library.skillport.com/courseware/Content/cca/od_odsb_a01_it_enus/output/t2/misc/transcript.html#contentshttp://parent.window.close%28%29/http://dowindow%28%27../html/laod_odsb_a01_it_enus_t201_frame.html')http://window.print%28%29/


2/40

enables back up to and restore from Oracle $luster +ile S%stem or O$+S on ,inu& and indows

provides duple& database backups t#at involve backing up t#e same files to multiple devices so

eac# data stream automaticall% goes to a separate device and

maintains securit% and limits users w#o are aut#orized to perform data-management operations

Increased demands on t#e enterprise backup infrastructure reuire more rigorous

service-level agreements for backup windows and restoration time w#ile ac#ieving

reliable data protection wit#in t#e budget. /#e tape tec#nolog% meets t#is c#allenge b%

offering #ig#-speed devices and #ig#-capacit% media wit# a t#roug#put similar to t#at of a

disk 0 generall% at a #ig# cost.

OSB addresses t#is issue b% providing centralized tape-backup management for Oracle

)atabase and file s%stems in mi&ed diverse environments t#us reducing t#e cost and

comple&it% of tape backup and restoration. Oracle )atabases are integrated via 1ecover%

2anager or 12AN wit# OSB and t#at 'NI3 ,inu& indows and Network Attac#edStorage or NAS directl% use OSB.

Some of t#e man% options available for protecting %our Oracle data are backing up solel%

to disk backing up to disk as a staging area for tape backups or backing up directl% to

tape.

)isk backup and restore operations are generall% faster t#an t#e euivalent tape

operations. 4owever tape backups provide some advantages for long-term backup

reuirements suc# as off-site storage and portabilit% w#ic# allow %ou to move backups

from one data center to anot#er.

"rap#ic

The backup and restore operation includes Oracle Beehive configuration files,

Oracle Application Server configuration files, Oracle Database, and file-syste

data. !or backup and restore, you use Oracle "i and later database versions and

#eal Application $lusters. !or file-syste data, you use Oracle hoe installations

and other nondatabase data.

$ote

OSB has its own release cycle and version nubers% for e&aple, OSB '(.) is the

correct version for Oracle Database ''g *#elease '+.

OSB provides tape backup management for all %our files relating to Oracle products

including

t#e Oracle )atabase backups stored on tape t#roug# integration wit# 1ecover% 2anager


3/40

seamless support of Oracle 1eal Application $lusters or 1A$

support for O$+S and Automatic Storage 2anagement or AS2 and

central administration of distributed clients and media servers including Oracle Application Server

Oracle $ollaboration Suite and Oracle #ome and binaries

/#e ke% benefits of 12AN and OSB integration over ot#er t#ird-part% media management

libraries are

e&clusive support of 12AN backup encr%ption to tape

faster more reliable database backups to tape and

a single tec#nical support resource e&pediting problem resolution

/#e "nterprise 2anager integration e&clusive to OSB provides a familiar interface forOracle customers reducing an% learning curves associated wit# ot#er products. /#is

integration also #elps t#e management of t#e entire Oracle )atabase backup and

recover% from disk or +las# 1ecover% Area to tape.

12AN and OSB integration also provides advanced effective securit% based on proven

Oracle tec#nolog%.

)etails about t#e securit% tec#nolog% are Secure Sockets ,a%er or SS, and "mbedded

Oracle wallets.

/o configure OSB %ou must define an adinistrative doain. An administrative domain isa group of mac#ines on %our network t#at %ou manage as a common unit to perform

backup and restore operations. An administrative domain #as one administrative server

one or more clients and one or more media servers.

dministrative server

/#e administrative server is a mac#ine in %our administrative domain t#at contains full

installation of t#e OSB software. /#is #ost maintains backup catalog files and ot#er files for

configuration settings and administrative data. /#e administrative server runs t#e

sc#eduler w#ic# starts and monitors jobs wit#in t#e administrative domain. 5ou need one

administrative server for eac# administrative domain at %our site. /o configure an

administrative server c#oose an administrative server installation w#en installing OSB on

t#e #ost.

%edia server

A media server is a mac#ine t#at #as one or more secondar% storage devices suc# as a

tape librar% connected to it. /#e media server transfers data to and from its attac#ed


4/40

storage devices. )uring installation %ou can configure multiple secondar% storage devices

on media servers.

Client

A client is a mac#ine w#ose locall% accessed data is backed up b% OSB. 2ost of t#e

mac#ines defined wit#in t#e administrative domain are clients.

/#e OSB Arc#itecture includes OSB catalog and daemons. /#e OSB catalog is a

director% structure wit# #ost-specific subdirectories. /#is means t#e contents var%

depending on t#e roles %ou assign to t#e #ost. An administrative server #as t#e central

catalog wit# configuration and metadata.

)aemons or services are processes t#at run in t#e background and perform OSB

operations on be#alf of an application.

"rap#ic

The client is connected to the adinistrative server, which is connected to the

edia server. The central catalog of the adinistrative server contains

obscheduled, observiced, and obhttpd.

&uestion

#ic# element of t#e administrative domain runs t#e sc#eduler6

Options'

(. 2edia server

7. $lient

8. Administrative server

9. OSB catalog

ns(er

Option 1:This option is incorrect. A edia server is a achine that has one or

ore secondary storage devices, such as a tape library, connected to it.

Option 2:This option is incorrect. A client is a achine whose locally accessed

data is backed up by OSB.

Option 3:This option is correct. The adinistrative server is a achine in your

adinistrative doain that contains full installation of the OSB software. The

adinistrative server runs the scheduler, which starts and onitors obs within the

adinistrative doain.


5/40

Option 4:This option is incorrect. OSB catalog is a directory structure with host-

specific subdirectories. The central catalog with configuration and etadata

resides on the adinistrative server.

Correct ans(er)s*'

8. Administrative server

Some daemons run continuall%: ot#ers run onl% to perform specific work and t#en e&it

w#en t#e work is complete. OSB daemons activel% participate in managing backup and

restore operations.

Some of t#ese daemons are

obscheduled

/#e obscheduleddaemon initiates sc#eduled events and manages jobs.

observiced+ and

On t#e administrative server t#e observiceddaemon runs jobs suc# as backup and

restore operations at t#e reuest of t#e obscheduleddaemon.

obhttpd

/#e obhttpdor t#e Apac#e eb server daemon provides t#e eb tool !'I for OSB.

/#e OSB software offers centralized backup management of #eterogeneous clients and

servers b% storing backup and configuration data in a central repositor% called t#e OSB

administrative server.

/#e administrative server contains a consolidated backup catalog providing a single

location for managing backup policies sc#eduling backups for multiple platforms and

managing local and remote tape devices.

/#e configured mac#ines and devices managed b% an administrative server make up t#e

OSB administrative domain.

"rap#ic

The OSB adinistrative server schedules backups for AS, /0 or 1inu&, and

2indows platfors. The platfors and the adinistrative server are connectedthrough a 1A to Oracle Database and the OSB $loud odule. The edia

servers are locally backed up to the tape library via Oracle Database and other

databases.

/#e OSB tape management s%stem minimizes t#e comple&it% of managing diverse

arc#itectures b% offering


6/40

fle&ible tape device configuration wit# options for single and multi-#osted tape libraries

support for major tape libraries and tape drives in !b" and S$SI environments

client;server arc#itecture providing centralized administration of distributed media servers over a

,AN or a AN

/#e Storage $loud enables users to take advantage of t#e virtuall% unlimited pool of

computing resources and storage over t#e Internet or t#e $loud.

'nlike t#e traditional I/ setup users #ave little insig#t or control over t#e underl%ing

infrastructure. /#eir interaction wit# t#e $loud is primaril% governed t#roug# an abstracted

interface provided b% t#e $loud vendor. /#e $loud is essentiall% disk storage.

it# t#e OSB $loud module it is possible to send t#e local disk backups of t#e Oracle

)atabase directl% to a storage cloud for off-site storage purposes. Amazon S8 is t#e first

$loud vendor t#at Oracle #as partnered wit# to enable database backup in t#e $loud./#is functionalit% ma% be e&tended to more $loud platforms or vendors in t#e future.

Backup and recover% from t#e $loud is performed b% 12AN. OSB (


7/40

Option 2:This option is correct. The OSB tape anageent syste inii3es

the cople&ity of anaging diverse architectures by offering fle&ible tape device

configuration with options for single and ulti-hosted tape libraries.

Option 3:This option is correct. The OSB client4server architecture provides

centrali3ed adinistration of distributed edia servers over a 1A or a 2A.

Option 4:This option is incorrect. OSB '(.) cannot back up to disk and does not

have e&plicit integration with the $loud. #5A backup encryption and advanced

copression technologies ay be used for $loud backup strategies.

Correct ans(er)s*'

7. It offers fle&ible tape device configuration

8. Its client;server arc#itecture provides centralized administration of distributed

media servers

OSB supports SAN environments. In a t%pical SAN environment one or more servers are

attac#ed to a SAN along wit# one or more tape devices. "ac# of t#e tape devices

attac#ed to a SAN appears local to t#e servers using SAN. $lients wit#in t#e

administrative domain are backed up over t#e network to t#e tape devices on t#e

configured media servers.

OSB automaticall% manages resource contention for tape drives wit#in t#e SAN. )uring a

backup or a restore operation a server engages a tape drive t#ereb% making it

temporaril% unavailable to ot#er servers. #en t#e operation completes t#e tape drive is

again available for use b% an% of t#e servers using t#e SAN as permitted b% %our

configuration.

"rap#ic

The SA environent is connected to the adinistrative server via a 1A.

#en configuring tape devices %ou are asked to configure attac#ments w#ere eac#

attac#ment describes a data pat# between t#e #ost and t#e device itself. A device must

#ave at least one attac#ment. In a SAN environment a tape device ma% #ave multiple

attac#ments one for eac# #ost t#at can access t#e device.

/#e +iber fabric and switc#es wit#in a SAN are transparent to OSB. /#erefore SANinteroperabilit% becomes important at t#e #ardware level. #en configuring a SAN it is

recommended to confirm t#at #ardware components #ave been tested and certified to

work toget#er.

&uestion


8/40

Identif% t#e tasks %ou can perform wit# OSB.

Options'

(. 2anuall% manage resource contention for tape drives wit#in t#e SAN

7. =erform backup and recover% from t#e $loud to a disk

8. 'se e&clusion lists to specif% w#at is backed up

9. ,imit t#e users aut#orized to perform data management operations

ns(er

Option 1:This option is incorrect. OSB autoatically anages resource

contention for tape drives within the SA. During a backup or a restore operation,

a server engages a tape drive, which akes it teporarily unavailable to other

servers.

Option 2:This option is incorrect. Backup and recovery fro the $loud is

perfored by #5A. OSB '(.) cannot back up to disk.

Option 3:This option is correct. OSB enables you to use wildcards and e&clusion

lists to specify what you want to back up.

Option 4:This option is correct. OSB enables you to aintain security and liit

the users who are authori3ed to perfor data anageent operations.

Correct ans(er)s*'

8. 'se e&clusion lists to specif% w#at is backed up

9. ,imit t#e users aut#orized to perform data management operations

5ou can access OSB in four different wa%s depending on w#at %ou want to do*

using ,nterprise %anager

"nterprise 2anager provides a grap#ical interface to OSB for users w#o elect to perform

database backup and restore operations t#roug# integration wit# 12AN. 5ou can also

perform administrative tasks suc# as managing media and devices wit#in t#e OSB

administrative domain. /#e "nterprise 2anager console includes a link to t#e OSB eb

tool for performing file-s%stem backup and restore operations.

using -%$

5ou can use 12AN to back up %our databases directl% to tape. 12AN can be accessed

eit#er t#roug# t#e 12AN e&ecutable or t#roug# "nterprise 2anager. 12AN

communicates wit# OSB t#roug# t#e s%stem backup to tape or SB/ interface.

using t#e eb tool+ and


9/40

/#e eb tool is a !'I application t#at enables %ou to configure administrative domains

manage operations browse t#e backup catalog and back up and restore data. It provides

a grap#ical and interactive interface to access t#e obtool utilit%. 5ou s#ould use t#is

interface w#en making backups of f ile-s%stem data.

using t#e obtool utilit!

/#e obtool utilit% provides a command-line interface to OSB. /#is interface gives %ou t#e

same functionalit% as t#e !'I interface.

Summar!

In t#is topic %ou>ve learned to recognize t#e basic principles of OSB.

/able of Contents

? /op of page?

? Learning Objective?

? 1.Basic principles of OSB?

? Summar!?

$op%rig#t @ 7


10/40

Oracle Secure Backup or OSB organizes t#e backups it creates in a simple #ierarc#%.

/#is #ierarc#% comprises t#e following logical concepts*

backup image

A backup image is t#e product of a backup operation. A backup image is a file t#at consists

of one or more backup sections. A backup image can be contained wit#in a single volume

or it can span multiple volumes. /#e part of a backup image t#at fits on a single volume is

called a backup section.

volume

A volume is a single unit of media suc# as an ,/O-8 tape. It can store man% backup

images.

volume set+ and

A volume set is a group of one or more volumes t#at contain a complete backup image.

media famil!

A media famil% is a named classification of volumes t#at s#are some common attributes

suc# as t#e volume naming met#od t#e policies used for writing data to volumes and t#e

lengt# of time volumes are retained in t#e media famil%.

#en %ou back up files using OSB %ou generate a volume set t#at #as some common

c#aracteristics defined b% t#e media famil% t#at %ou #ave associated wit# %our backup

operation.

&uestion

OSB organizes t#e backups it creates in a simple #ierarc#% w#ic# is composed of

logical media concepts. 2atc# eac# concept to its description.

Options'

A. Backup image

B. 2edia famil%

$. olume

). olume set

/argets'

(. A group of one or more volumes t#at contain a complete backup image

7. A single unit of media

8. /#e product of a backup operation

9. A named classification of volumes t#at s#are some common attributes


11/40


12/40

OSB backup images are stored as backup image sections on a volume wit#in a volume

set w#ic# belongs to a media famil% in a tape librar%.

"rap#ic

Two or ore backup pieces for a backup set.

2edia families provide a wa% to establis# write periods and retention policies for data

backed up to various kinds of tapes. 2edia families are used to classif% and c#aracterize

backup t%pes. /#e% are commonl% associated wit# backup levels w#ic# generall%

correspond to retention times suc# as full incremental and arc#ive log.

5ou can for e&ample establis# a media famil% for all of %our backups t#at remain on-site

and a separate media famil% for %our backups t#at are to be stored off-site.

A media famil% is a classification of backup media t#at s#are t#e same

volume identification se0uence

/#e volume I) consists of a fi&ed portion followed b% a seuence number assigned and

updated b% OSB. #en %ou create a media famil% %ou specif% #ow to generate volume

I)s t#at become part of t#e volume label.

(rite (indo(+ and

/#e beginning of t#e write window is t#e time at w#ic# OSB first writes to a volume in t#e

volume set. /#e write window is a user-specified time interval t#at applies to all volumes in

t#e set. OSB continues to append backups to t#e volume set until t#e end of t#is interval.

#en t#e write window closes OSB does not allow furt#er updates to t#e volume set untilit e&pires is relabeled reused unlabeled or overwritten.

epiration polic!

#en a volume set e&pires OSB automaticall% considers eac# volume in t#e set eligible to

be overwritten. A media famil% is eit#er content managed DdefaultE or time managed. /#ese

two policies are mutuall% e&clusive.

2. Backup and restore operations

OSB maintains information about secondar% storage devices tape libraries and tape

drives so t#e% can be used for local and network backup and restore operations. /#esedevices are easil% configured during t#e installation process or a new device can be

easil% added to an e&isting OSB environment.

"rap#ic


13/40

Tape library robotics ove tapes between drives and slots. Storage eleents or

slots store the tapes. A barcode reader scans labels on cartridges.

The various types of tape drives, including aintd', aintd), and aintd7, refer to

its tape forat such as 1TO-7 or SD1T8((. Device connectivity varies by devices,

such as S$S/, !iber, and iS$S/.

"ac# tape drive and tape librar% is uniuel% identified wit#in an OSB administrative

domain b% a user-defined name for e&ample mainliband maintd1.

Because OSB manages tape drive operations it must e&plicitl% be able to identif% t#e

tape drive as well as understand if t#e tape drive is #oused wit#in a tape librar%.

OSB must furt#er determine w#ic# tape slots or storage elements are available for

storing tapes w#en t#e% are not loaded on a tape drive.

Before %ou can use tape drives or tape libraries wit# OSB %ou must add t#e device to t#eadministrative domain. OSB maintains a distinction between a device and t#e means b%

w#ic# t#e device is connected to a #ost.

"ac# device %ou configure can #ave one or more attac#ments w#ere eac# attac#ment

describes a data pat# between a #ost and t#e device itself. Often an attac#ment includes

t#e identit% of a #ost plus a 'NI3 device special file name a indows device name or a

Network Attac#ed Storage or NAS device name. In rare cases additional information is

needed to complete t#e attac#ment definition.

A +iber c#annel-attac#ed tape drive or tape librar% often #as multiple attac#ments one for

eac# #ost t#at can directl% access it.

#en a device is attac#ed to multiple #osts OSB automaticall% manages contention for

t#e device so t#at onl% one #ost is permitted access to it at a time. +or e&ample Storage

Area Network or SAN-attac#ed devices often #ave multiple attac#ments one for eac#

#ost t#at #as local access to t#e device t#roug# its +iber c#annel interface.

A virtual tape librar% or /, leverages traditional tape backup wit# disk tec#nolog% to

create an optimized backup and recover% infrastructure. /ape emulation software on t#e

disk appliance emulates popular tape devices and formats. Because /,s identif%

t#emselves as tape euipment for t#e backup software t#e% appear identical to t#e

actual tape device t#at is emulated.

/,s offer t#e performance advantages of disk backup and t#e% ma% be seamlessl%

deplo%ed in a s%stem environment wit#out c#anging t#e backup infrastructure. /,s are

increasingl% being adopted into I/ environments because of t#eir f le&ible configuration

wit# user-defined options for number and t%pe of tape emulation.


14/40

2ost popular /,s are supported b% OSB and are attac#ed to t#e network or servers

depending on t#e manufacturer.

&uestion

#ic# statements accuratel% describe tape drives and libraries in relation to OSB6

Options'

(. )evices are easil% configured during t#e installation process

7. An engaged tape drive is available for use b% an% of t#e servers on t#e SAN as

permitted b% %our configuration

8. /#ere>s no distinction between a device and t#e means b% w#ic# it connects to a

#ost

9. 5ou must manuall% identif% t#e tape slots t#at are available for storing tapes

ns(er

Option 1:This option is correct. Storage devices such as tape libraries and drives

are easily configured during the installation process, or a new device can be easily

added to an e&isting OSB environent.

Option 2:This option is correct. 2hen a device is attached to ultiple hosts, OSB

autoatically anages contention for the device so that only one host is peritted

access to it at a tie.

Option 3:This option is incorrect. OSB aintains a distinction between a deviceand the eans by which it is connected to a host. 9ach device you configure can

have one or ore attachents, where each attachent describes a data path

between a host and the device itself.

Option 4:This option is incorrect. Because OSB anages tape drive operations,

it ust e&plicitly be able to identify the tape drive as well as understand whether

the tape drive is housed within a tape library. OSB ust further deterine which

tape slots are available for storing tapes when they are not loaded in a tape drive.

Correct ans(er)s*'

(. )evices are easil% configured during t#e installation process

7. An engaged tape drive is available for use b% an% of t#e servers on t#e SAN as

permitted b% %our configuration

3. %anage and secure data


15/40

2anaging t#e backup infrastructure of file-s%stem data and Oracle )atabase data is

easil% administered wit# OSB and 12AN. )efining w#at data to back up is conceptuall%

similar for file-s%stem and database data. Bot# reuire t#at %ou t#e user define w#at to

include in t#e backup.

+or t#e database %ou use 12AN backup sets created using 12AN or "nterprise

2anager. +or file s%stems OSB uses datasets. 'se t#e OSB eb tool to define file-

s%stem datasets.

After defining w#at data to back up %ou must determine w#at t%pe of backup is most

appropriate to meet %our backup and restore reuirements. OSB offers multiple backup

levels for file-s%stem backups including full backup levels multiple incremental levels

and an off-site backup level. /#e off-site level is actuall% a full backup performed wit#out

interfering wit# an% incremental backup strategies. OSB also provides fle&ible sc#eduling

options t#at enable %ou to determine ongoing backup sc#edules based on da% and time

granularit%.

+or Oracle )atabase 12AN offers full and incremental backup levels t#at are backed up

to tape b% OSB.

After %ou #ave defined w#at #ow and #ow often to back up %our data t#roug#

sc#eduling OSB can automaticall% implement %our backup sc#edules onl% reuiring

manual intervention for #ardware errors or media needs.

&uestion

#en managing t#e data to be protected w#at tasks must be performed b% t#e

user6

Options'

(. )efining w#at to include in t#e backup

7. )etermining w#at t%pe of backup is t#e most appropriate

8. Implementing backup sc#edules

9. 'sing 12AN to define file-s%stem datasets

ns(er

Option 1:This option is correct. Defining what data to back up is conceptually

siilar for file-syste and database data. Both re:uire that you, the user, define

what to include in the backup.

Option 2:This option is correct. After defining what data to back up, you ust

deterine what type of backup is the ost appropriate to eet your backup and

restore re:uireents. OSB offers ultiple backup levels for file-syste backups.


16/40


17/40

OSB increases customer return on investment b% providing end-to-end tape data

protection for %our Oracle environment at a fraction of t#e cost of ot#er tape products.

backup encr!ption

OSB e&clusivel% provides 12AN encr%pted backup to tape.

fast and efficient tape backup+ and

/o deliver t#e fastest database tape backup OSB backs up onl% used blocks from Oracle

)atabase (ve also learned #ow to manage and secure data wit# OSB and

12AN.

/able of Contents

? /op of page?

? Learning Objectives?

? 1./#e OSB backup #ierarc#!?

? 2.Backup and restore operations?

? 3.%anage and secure data?

? Summar!?

$op%rig#t @ 7


18/40

Learning Objective

After completing this topic, you should be able to

recognize how to install OSB

1. OSB installation tasks

Before installing Oracle Secure Backup or OSB on ,inu& t#ere are certain preinstallation

tasks t#at need to be performed. 4owever t#ere is no reuired seuence between t#ese

preinstallation tasks.

5ou must c#eck t#e supported device list on t#e Oracle /ec#nolog% Network or O/N to

confirm t#at %our environment is supported. $#eck t#at t#e platform is supported b% t#e

#ost role and t#at tape librar% tape drive and connectivit% are supported.

)uring preinstallation %ou plan disk space for OSB and obtain t#e OSB software via O/N

download or $). 5ou also plan %our administrative domain b% determining w#ic# #ost will

be t#e administrative server w#ic# will be t#e media serverDsE and w#ic# will be t#e

clientDsE. Additionall% %ou obtain S$SI device information.

"ac# #ost t#at participates in an OSB administrative domain must #ave a network

connection and run /$=;I=. OSB uses t#is protocol for all inter and intra-server

communication between its own and ot#er s%stem components.

"ac# appliance t#at emplo%s a closed operating s%stem suc# as Network Attac#ed

Storage or NAS and tape servers is backed up using Network )ata 2anagement=rotocol or N)2=. /#is protocol enables OSB to access primar% and secondar% storage

controlled b% t#e appliance.

"ac# #ost t#at participates in an OSB administrative domain must also #ave some

preconfigured wa% to resolve a #ost name to an I= address. 2ost s%stems use one of t#e

name resolution mec#anisms 0 )omain Name Service or )NS Network Information

Service or NIS indows Internet Name Service or INS or a local hostsfile.

OSB does not reuire a specific mec#anism. OSB reuires onl% t#at upon presenting t#e

underl%ing s%stem software wit# an I= address %ou #ave configured OSB obtains an I=

address corresponding to t#at name.

&uestion

Identif% t#e true statements about performing OSB preinstallation tasks.

Options'


19/40

(. 5ou s#ould c#eck t#e supported device list on O/N to confirm t#at %our environment

is supported

7. OSB uses /$=;I= for all inter and intra-server communication

8. "ac# #ost in an administrative domain must use a local hostsfile for name

resolution

9. )NS enables OSB to access primar% and secondar% storage controlled b% t#e

appliance

ns(er

Option 1:This option is correct. 6ou should check the device list on OT to

confir that the platfor support by host role, tape library and tape drive, and

connectivity are supported.

Option 2:This option is correct. 9ach host that participates in an OSB

adinistrative doain ust have a network connection and run T$;4/;. OSB uses

this protocol for all inter and intra-server counication between its own andother syste coponents.

Option 3:This option is incorrect. 9ach host that participates in an OSB

adinistrative doain ust also have soe preconfigured way to resolve a host

nae to an /; address. 5ost systes use one of the nae resolution

echaniss < DS, /S, 2/S, or a local hostsfile.

Option 4:This option is incorrect. D5; enables OSB to access priary and

secondary storage controlled by the appliance.

Correct ans(er)s*'

(. 5ou s#ould c#eck t#e supported device list on O/N to confirm t#at %our

environment is supported

7. OSB uses /$=;I= for all inter and intra-server communication

/#e installation and configuration of %our administrative domain includes installing t#e

OSB software itself on eac# of %our #osts e&cept N)2=-enabled #osts suc# as NAS

filers. 5ou t#en define %our administrative domain on t#e administrative server. /#is step

involves defining all media servers clients and NAS filers.

#en installing a media server OSB device attac#ments are created as part of t#edevice driver installation process. /#ese attac#ments are used during t#e device

definition. 2ake t#e administrative server aware of t#e tape devices t#at e&ist in %our

administrative domain. On eac# defined media server %ou configure t#e directl% attac#ed

S$SI and +iber c#annel devices Dtape libraries and tape drivesE.

If %ou use a NAS filer wit# attac#ed tape libraries and tape drives %ou can use OSB


20/40


21/40

Hstage J su

=assword*

HstageK mkdir -p ;usr;local;oracle;backup

HstageK cd ;usr;local;oracle;backup

HbackupK ;stage;osbLinstallmedia;setup

9. run t#e setup program from %our

MOSBCoe director% and respond to t#e prompts

The code to do this is the following=

>backup? 4stage4osbinstalledia4setup

Code

Hstage J su

=assword*

HstageK mkdir -p ;usr;local;oracle;backup

HstageK cd ;usr;local;oracle;backup

HbackupK ;stage;osbLinstallmedia;setup

/#e recommended director% for installing t#e OSB software is ;usr;local;oracle;backup.

5ou can install t#e software in a different director% if desired. 4owever t#en t#e printed

and online documentation for OSB ma% not agree wit# %our actual commands output

and !'I screens. +or users new to OSB t#is can add an unwanted la%er of confusion.

4ere %ou use t#e default director% ;usr;local;oracle;backup as OSBCoe.

After %our OSBCoedirector% is created c#ange %our current director% to t#e

OSBCoedirector% and e&ecute t#e setup program from %our staging area w#ic# in

t#is e&ample is t#e ;stage;osbLinstallmedia director%. If %ou use %our $)-1O2 drive as

%our staging area use a command similar to /cdrom/cdrom/setup. In t#is e&ample

a stage director% is used instead of a $)-1O2 drive.

Code

[stage] $ su

Password:

[stage]# mkdir -p /usr/local/oracle/backup

[stage]# cd /usr/local/oracle/backup[backup]# /stage/osb_installmedia/setup

$ote


22/40

There is no default OSBCoe environent variable, which is used to refer to this

directory, unlike the !"%&_'!(&variable used with Oracle Database

installations.

OSB anal%zes t#e #ost on w#ic# %ou start t#e installation: t#en it loads t#e relevant

software.

installobis t#e primar% installation script for OSB. It can be called in a stand-alone

fas#ion b% invoking t#e installobs#ell script.

Code

)elcome to !racle*s setup program +or !racle ,ecure ackup.

his program loads !racle ,ecure ackup so+tware +rom the

0-"!(

to a +ile-sstem director o+ our choosing.

his 0-"!( contains !racle ,ecure ackup version

1.2..2._linu342.

Please wait a moment while 5 learn about this host... done.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

-

1. %inu342 administrative server6 media server6 client

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

-

%oading !racle ,ecure ackup installation tools... done.

%oading linu342 administrative server6 media server6

client...done.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

-

%oading o+ !racle ,ecure ackup so+tware +rom 0-"!( is

complete. 7ou ma unmount and remove the 0-"!(.

)ould ou like to continue !racle ,ecure ackup installation

with *installob* now8 9he !racle ,ecure ackup 5nstallation

uide contains complete in+ormation about installob.;

Please answer *es* or *no* [es]: no

/#e obparameters file is preconfigured. If %ou want a default installation answer noonce

to t#e uestion about customizing t#is file.

If %ou wis# to customize it t#en %ou can use a te&t editor to edit t#e obparameters file in

t#e ;usr;local;oracle;backup;install; director% referred to as t#e OSBCoe;install

director%.


23/40

"rap#ic

/n this e&aple, the answer to the :uestions Cave you already reviewed and

custoi3ed install4obparaeters for your Oracle Secure Backup installation >yes?

and 2ould you like to do this now >yes? is no.

Code

)elcome to installob6 !racle ,ecure ackup*s

installation

program.

5t installs !racle ,ecure ackup onto one or more or

%inu3

sstems on our network. 95nstall !racle ,ecure ackup +or

)indows using the 0-"!( +rom which ou loaded this

so+tware.;

?or most @uestions6 a de+ault answer appears enclosed in

s@uare

brackets. Press &nter to select this answer.

Please wait a +ew seconds while 5 learn about this

machine...

done.

'ave ou alread reviewed and customiAed

install/obparameters

+or our !racle ,ecure ackup installation [es]8 no

)ould ou like to do this now [es]8 no

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

- -

arious parameters are defined t#at %ou can configure to meet t#e needs of %our

business.

+or e&ample %ou can modif% parameters for

Code

)elcome to installob6 !racle ,ecure ackup*s

installation

program.

5t installs !racle ,ecure ackup onto one or more or


24/40

%inu3

sstems on our network. 95nstall !racle ,ecure ackup +or

)indows using the 0-"!( +rom which ou loaded this

so+tware.;

?or most @uestions6 a de+ault answer appears enclosed in

s@uare

brackets. Press &nter to select this answer.

Please wait a +ew seconds while 5 learn about this

machine...

done.

'ave ou alread reviewed and customiAed

install/obparameters

+or our !racle ,ecure ackup installation [es]8 no

)ould ou like to do this now [es]8 no

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

- -

automatic startup at boot time of t#e observiceddaemon

automatic creation of an OSB user called oracle t#at is assigned t#e oracleclass and

preaut#enticated to be used b% 12AN and

default certificate ke% size

Specif% t#e role of t#is server. If %ou install OSB for t#e first time in a specific network

t#en %ou s#ould begin wit# an administrative server installation. B% default t#e

administrative server is also configured as a client.

Code

!racle ,ecure ackup is not et installed on this machine.

!racle ,ecure ackup*s )eb server has been loaded6 but is

not

et con+igured.

7ou can install this host in one o+ the three was:

9a; administrative server

9the host will also be able to act as a media server

or

client;

9b; media server

9the host will also be able to act as a client;


25/40

9c; client

5+ ou are not sure which wa to install6 please re+er to

the

!racle ,ecure ackup 5nstallation uide. 9a6b or c; [a]8 a

$#oose a password for t#e OSB encr%ption ke% store w#ic# follows %our securit%

strategies. )o not forget t#is password.

"rap#ic

/n this e&aple, the key store password, keypassword, is entered as the

placeholder.

Code

eginning the installation. his will take Bust a minute and

will produce several lines o+ in+ormational output.

5nstalling !racle ,ecure ackup on edvmr1p 9%inu3 version

2.C.D-CE..E..1.&%3en


26/40

Code

7ou must now enter a password +or the !racle ,ecure ackup

*admin* user.

!racle suggests ou choose a password o+ at least F

charactersin length6 containing a mi3ture o+ alphabetic and numeric

characters.

Please enter the admin password:adinpasswordGG not echoed HH

"e-tpe password +or veri+ication:adinpasswordGGnot echoedHH

7ou should now enter an email address +or the !racle ,ecure

ackup *adminI user. !racle ,ecure ackup uses this email

address to send Bob summar reports and to noti+ the user

when

a Bob re@uires input. 5+ ou leave this blank6 ou can set

itlater using the obtool*s *chuser* command.

Please enter the admin email address:

)uring software installation %ou see t#e actions t#at are performed. An e&ample is

displa%ed.

Code

generating links +or admin installation with )eb server

updating /etc/ld.so.con+

checking !racle ,ecure ackup*s con+iguration +ile

9/etc/obcon+ig;

setting !racle ,ecure ackup director to

/usr/local/oracle/backup in

/etc/obcon+ig

setting local database director to /usr/etc/ob in

/etc/obcon+ig

setting temp director to /usr/tmp in /etc/obcon+ig

setting administrative director to

/usr/local/oracle/backup/admin in

/etc/obcon+ig

protecting the !racle ,ecure ackup director

creating /etc/rc.d/init.d/observiced

activating observiced via chkcon+ig

initialiAing the administrative domain

If %ou wis# to see daemons or background processes enter t#is code after t#e

installation.


27/40

Code

# ps -a Jgrep ob

14EC pts/ :: observiced

14EE2 pts/ :: obscheduled

After t#e OSB software #as been installed %ou are asked if %ou want to configure an%

tape libraries or tape drives t#at mig#t be attac#ed to t#e current #ost.

After t#e software installation completes an installation summar% appears.

Code

KKKKKKKKKKKKKKKKKKKKKKK = ! & KKKKKKKKKKKKKKKKKKKKKKKK

!n %inu3 sstems !racle recommends that ou answer no to

the ne3t two @uestions. he pre+erred mode o+ operation on%inu3 sstems is to use the /dev/sg devices +or attach

points as described in the *"ead(e* and in the

*5nstallation and on+iguration uide*.

5s edvmr1p connected to an tape libraries that ou*d

like to use with !racle ,ecure ackup [no]8 no

5s edvmr1p connected to an tape drives that ou*d like

to use with !racle ,ecure ackup [no]8 no

5nstallation summar:

5nstallation 'ost !, 0river !, (ove "eboot

(ode =ame =ame 5nstalled8 "e@uired8 "e@8

admin edvmr1p %inu3 no no no

!racle ,ecure ackup is now read +or our use.

&uestion

#en installing and configuring OSB on ,inu& w#at step immediatel% follows

software installation6

Options'

(. $onfiguring tape libraries and drives

7. $#oosing a password for t#e admin user

8. $#oosing a password for t#e encr%ption ke% store

9. Specif%ing t#e role for t#e server


28/40

ns(er

Option 1:This option is correct. After the OSB software has been installed, you

are asked if you want to configure any tape libraries or tape drives that ight be

attached to the current host.

Option 2:This option is incorrect. During installation, you ust specify the role of

the server. /f you install OSB for the first tie on a specific network, then you

should begin with adinistrative server installation.

Option 3:This option is incorrect. During installation, you need to choose a

password for the OSB encryption key store, which follows your security strategies.

Option 4:This option is incorrect. During installation, you need to choose a

password for the adin user, which follows your security strategies. /f you know

the e-ail address of the adin user, you can enter it as well.

Correct ans(er)s*'

(. $onfiguring tape libraries and drives

5ou can use eit#er t#e !'I interface or t#e obtool command-line interface or $,I to

access OSB information. In all cases %ou must use a valid username and password.

+or e&ample if %ou want to view OSB users %ou can c#oose an% of t#ese t#ree

interfaces*

eb tool

5ou can start t#e eb tool b% entering #ttps*;;EhostnaeFinto %our eb browser. $lick

t#e Configuretab and t#en click 4sers.

,nterprise %anager+ or

5ou can start "nterprise 2anager b% entering #ttps*;;EhostnaeF*((FG;em into %our eb

browser. 5ou t#en select vailabilit! 5 Oracle Secure Backup 6evice and %edia 5

Configure 5 4sers. "nterprise 2anager is t#e recommended interface.

obtool

5ou can start t#e obtool command line b% entering obtoolin a terminal window and t#en

t#e lsusercommand.

/#e Oracle Secure Backup eb tool 4ome page provides a snaps#ot of t#e current

status of OSB jobs and devices presenting important summar% information to

administrators and users.

/#e 4ome page includes t#e sc#edule times and status of recent jobs as well as job I)s

job t%pe and job level. OSB provides a link for failed jobs alerting users and


29/40

administrators to potential trouble spots.

/#e )evices link lists t#e devices associated wit# eac# job along wit# information

concerning device t%pe device name and status. /#is page provides %ou wit# an overall

sense of t#e various backup or restore processes t#at are going on.

"rap#ic

The OSB 2eb tool interface contains five pages= Coe, $onfigure, 5anage,

Backup, and #estore. The Coe page is selected.

/#e eb tool provides a grap#ic interface for just about all OSB features suc# as fle&ible

sc#eduling options for backups of f ile-s%stem data. /#ese options specif% backups based

on t#e time of da% and da%s of t#e week mont# uarter or %ear. /#ese options also

sc#edule backups to start immediatel% or at a future date.

/#e eb tool also provides backup windows to minimize impact on da%-to-da% backupoperations and includes t#e abilit% to create off-site backups for remote storage wit#out

disturbing currentl% sc#eduled incremental backups of t#e same data.

OSB provides some common obtool commands t#at %ou can use to uer% t#e OSB

administrative and catalog data. )epending on t#e information %ou want to retrieve %ou

ma% use additional options to specif% t#e amount of information returned suc# as listing

all volumes for a particular media famil% or onl% listing t#e completed jobs.

/#ese commands can assist %ou wit# troubles#ooting %our OSB installation and

configuration. +or e&ample t#e lshostcommand displa%s t#e current roles of a #ost. If

%ou want to add a device to %our OSB domain t#e #ost must #ave t#e mediaserverrole w#ic# is not installed b% default.

"rap#ic

The coon obtool coands table contains two coluns= $ategory and Obtool

$oand. To retrieve inforation about hosts, you use the lshost -l coand,

and to display inforation about devices, you use the lsdev coand. 6ou use

lsssel coand to display storage selectors used. /f you want to retrieve user

info, you use the id, lsuser, and lsclass coands. !or obs and schedules, you

use the lsob *-a G -c G -p+ coand, lsbw for backup windows, and the 1sschedcoand. 6ou can use the lsds coand for backing up dataset inforation, the

lspiece coand for backing up #5A backup pieces, lsbackup for file-syste

backups, and lssection for backup iage sections. To retrieve inforation about

edia failies, you can use the lsf --long coand. /f you want to display

volues, you use the lsvol --all or lsvol --library ElibnaeF coands.

$ote


30/40

!or details of all coand options, see the Oracle Secure Backup #eference on

the Oracle web site.

/#ese e&amples illustrate #ow %ou can verif% %our installation wit# obtool commands.

Code

ps -e J grep ob

obH lsuser

obH lsm+ --long

ps -e | grep ob

6ou can view OSB processes in 1inu& using this coand.

ob> lsuser

ob> lsmf --long

6ou can view OSB users and default edia faily using these obtool coands.

/#is e&ample depicts t#e use of obtool commands to verif% %our installation.

Code

obH lsuser

admin admin

oracle oracle

obH lsm+ --long!,-%!-(?:

)rite window: E das

Leep volume set: 1M das

ppendable: es

Nolume 50 used: uni@ue to this media +amil

omment: !, catalog backup media +amil

"(=-0&?


31/40

If %ou remove OSB from an administrative server %ou are given t#e option of retaining t#e

administrative director% and its contents. /#is enables %ou to safel% remove and reinstall

t#e product wit#out deleting %our administrative server data.

5ou must be logged in as t#e root user on 'NI3 or ,inu& s%stems to remove OSB

completel%. If %ou are not logged in as root w#en %ou remove t#e software %ou ma% not

#ave t#e privileges needed to delete files and s#ut down OSB daemons.

OSB-related processes suc# as t#e 4//= processes for t#e OSB eb tool s#ould be

s#ut down before beginning t#e uninstallation process. /o identif% processes for OSB

%ou can use t#is command.

Code

# /bin/ps -e+ Jgrep ob

5ou can t#en use t#is command to kill eac# process in t#e list associated wit# OSB.

Code

kill -D GpidH

If %ou remove OSB from t#e local mac#ine t#e uninstallobscript removes t#e OSB

#ome director% w#en t#e script completes. +or t#is reason %ou s#ould call t#e

uninstallobscript from t#e parent director% of t#e OSB #ome director%.

If %ou encounter errors w#en removing t#e OSB software or if t#e uninstallobscript

fails to completel% remove all files for OSB 0 assuming %ou did not c#oose to save an%

files 0 correct t#e problem causing t#e error if possible.

/#en run t#e uninstallobscript again until %ou receive t#is message.

Code

!racle ,ecure ackup has been success+ull removed +rom

GhostH.

Summar!

In t#is topic %ou>ve learned #ow to install OSB on ,inu&.

/able of Contents


32/40


33/40

A s%stem c#eck s#ould inform %ou t#at t#is will be a clean installation of OSB. 5ou

proceed to t#e ne&t page.

/#e $ustomer Information dialog bo& is displa%ed. 5ou specif% %our name and t#e name

of %our compan%. 5ou select a target user for t#e application w#ic# ma% be all users or a

single user. /#en %ou proceed to t#e ne&t page.

"rap#ic

The 2elcoe to the /nstallShield 2i3ard for Oracle Secure Backup page is open.

On t#e Oracle Secure Backup Setup page %ou c#oose t#e program features to configure.

%edia Server

/o configure t#e indows #ost as a media server click t#e menu of t#e %edia Servericon. /#e menu displa%s several options. Selecting t#e /#is feature (ill be installed on

local #ard drive option removes t#e 3 from t#e 2edia Server icon and installs t#e media

server software.

dministrative Server+ or

/o configure t#e indows #ost as an administrative server click t#e menu of t#e

dministrative Servericon and select t#e /#is feature (ill be installed on local #ard

driveoption. Again selecting t#is option removes t#e 3 from t#e Administrative Server icon

and installs t#e administrative server software.

Create 7oracle7 user

If %ou plan to perform Oracle )atabase backups and restores repeat t#is process for

$reate oracle user. )oing so creates an OSB user called oracle wit# t#e rig#ts and

privileges of t#e oracleclass w#ose purpose is to facilitate 12AN backup and restores

of Oracle )atabases.

$lick $etto continue. /#e "ncr%ption allet =assword page opens. "nter a strong

password for t#e encr%ption wallet and re-enter it for verification. /#en click $et.

"rap#ic

The 9ncryption 2allet ;assword page contains two te&t bo&es < ;assword for

encryption wallet and #e-type password for verification.

On t#e Admin 'ser =assword and "mail page enter a strong password for t#e admin

user and re-enter it for verification. If possible provide an e-mail address for t#e admin

user. OSB will send reports suc# as t#e Pob Summar% to t#is e-mail address. $lick $et.


34/40

$licking Installallows %ou to start cop%ing files. A completion message will appear w#en

t#e files are copied and %ou complete t#e izard.

$ote

2hen the /nstallShield 2i3ard is finished, it autoatically calls the OSB

$onfiguration 2i3ard.

/#e Oracle Secure Backup Service Startup page opens.

Select a mode in w#ic# to start t#e OSB service and t#en click $etto continue*

Automatic 0 /#e Oracle Secure Backup service starts automaticall% w#en %ou reboot %our #ost.

2anual 0 /#e Oracle Secure Backup service must be started manuall% b% a user w#o is a

member of t#e Administrators group.

)isabled 0 /#e Oracle Secure Backup service is disabled.

$ote

On the 2indows operating syste, the only daeon that runs as a 2indows

service is the OSB service or observiced.

/#e Oracle Secure Backup Service ,ogon page is displa%ed. Select one of t#e following

options*

"rap#ic

The Service 1ogged On As section of the Oracle Secure Backup Service 1ogon

page contains two radio buttons < Syste Account and This Account. The page

contains a note at the beginning. /t states, H6ou ay specify that the Oracle

Secure Backup service log on as the syste account or another account that you

identify below. The account you choose ust belong to the Backup Operators

group, ust not be re:uired to change password at logon, ust have a password

that never e&pires, and ust have the following rights= back up files and

directories, restore files and directories, log on as a service, act as part of the

operating syste, increase :uotas, replace a process level token.H

S!stem ccount or

If %ou plan to run t#e OSB service daemon and associated subordinate daemons wit# full

privileges click S!stem ccount.

/#is ccount


35/40


36/40


37/40

)irectories are created for a media server or a client. /#e bin and device subdirectories

are created on ever% computer regardless of t#e operating s%stem used. Ot#er

directories are created for computers t#at use t#e indows operating s%stem.

"rap#ic

!or a edia server, the 4usr4local4oracle4backup directory contains these

subdirectories < .drv.EOSF, help, bin, and device. !or a client, the

4usr4local4oracle4backup directory contains these subdirectories < help, bin, and

device.

Supplement

Selecting the link title opens the resource in a new browser window.

9ob id

Access t#e job aid %edia Server and Client 6irectoriesto learn about t#e t%pes

of directories created for a media server and client.

Summar!

In t#is topic %ou #ave learned #ow to install and configure OSB on indows.

/able of Contents

? /op of page?

? Learning Objective?

? 1.Install OSB on indo(s?

? Summar!?

$op%rig#t @ 7


38/40


39/40

Steps list

Instructions

R. =ress ,nter

G. /%pe noand press ,nter

. /%pe noand press ,nter

/ask 2' Configuring media for OSB

5ou #ave configured t#e mediaserver role for t#e current #ost and configured t#e virtual

test drives. 5ou now want to view information about t#e configured devices insert

volumes into bot# tape libraries and confirm t#e correct configuration using t#e obtool

interface. iew t#e virtual drives and libraries under t#e u


40/40

$op%rig#t @ 7

oracle database 11g configuring osb and security

Documents