The Triora Group

Another Ace in our Deck!

admin — Wed, 06 Aug 2008 19:31:52 +0000

Congratulations to Lon White, Triora Group’s second Oracle Ace. Lon was selected because of his thorough knowledge of database issues relating to the E-Business Suite as well as his participation on the Board of Directors of the Arizona Oracle Applications User Group for 4 years (he is the current Chairperson). Lon presents regularly at user group meetings and conferences, co-wrote several books, including “The Release 12 Primer” and “Installing, Upgrading and Maintaining Oracle E-Business Suite Release 11.5.10.2+”, and enthusiastically blogs about his findings as he delves into the E-Business Suite with our clients.

Way to go Lon!

Getting your Geek On

Robert McMillen — Tue, 05 Aug 2008 15:11:31 +0000

Without a doubt, Geeks, as a social group, have become the latest success symbol in our culture. Of course it doesn’t hurt that they make good money and bathe regularly. Whatever the reasons, it is clear that Geeks are hot right now.

Consider one example, Mr. Bill Gates, who wouldn’t get any attention at most parties. Instead, Bill is a media darling. Everyone wants to know what he thinks about poverty and Linux. As an aside, I do think that Bill sort of leans to the Nerd side of things but since he is my example, I will be generous for the moment and let him remain an official geek.

Please note that Nerds are not what we are talking about here. Nerds have a low interest in hygiene, spend all-nighters in World of Warcraft and invest hours designing and dressing their avatar. And you will find that no one calls up a Nerd and asks them for information. Mainly because they don’t answer the phone.

Geeks, however, are those persons with real technology knowledge and a life outside of technology. Geeks can intelligently debate the value of IPv6 and can tell you why the iPhone sucks/rocks. They know how to create a podcast and can also explain why RAC isn’t always a good choice. At the same time, they have a real life. Many Geeks are active in blowing things up for fun, building rockets to take non-astronauts to the moon and winning the war against international terrorism. In short, Geeks are the emerging “renaissance” persons of this new millenium.

This all brings me to the sordid reason for writing this blog entry, pocket protectors.

To be truly geek, you must also have the ability to laugh at the stereotypical geek-isms. And there’s nothing that best stereotypes a geek than a pocket protector.

The lowly pocket protector was designed to minimize accidental pen leakage and ensured your crisp white shirts remained pristine for years. Plus the correct logo on the pocket protector demonstrated that you were well connected. If you carefully watch the movie Apollo 13 you will notice many of the people at NASA used pocket protectors.

If a pocket protector was good enough to get someone to the moon, then it should be good enough to defend! Defend? Defend from what? I’m glad you asked.

Amazingly many items of geek couture have been ripped off by fashionistas. Take black-rimmed glasses that were a standard geek accessory that even Bill Gates once sported. No more though, because now everyone is wearing them so they can look like a geek.

We should be happy that imitation is the most sincere form of worship but it is still disconcerting. What else will be ripped off from our glorious past? If this continues, soon all that geeks will have beside their stunning intellect is the lowly pocket protector. For now this badge of official geekdom still remains, but for how long?

No doubt we will soon see pocket protectors showing up on the fashion runways of Paris or New York. Scrawny models prancing about with little more than pocket protectors covering emaciated parts of their bodies. The vision is horrific, but there is still something we can do about it. There is still time to protect this last remaining symbol of pure geek-ism. We must take back the pocket protector and enshrine it as our most sacred item.

With all of the sales hyperbole out of the way, I encourage you to consider becoming part of the movement.

You can start by getting one of our official Triora Group pocket protectors. Wear it proudly, wear it loudly, wear it openly or just pin it to your cubical wall (Note: Use caution when using sharp-pointed thingys.)

These one-of-a-kind pocket-protectors are made out of the finest soft plastic and are a pristine white to match your best working shirt. (Note: We wanted naugahyde but the sad news is that the naugas have been hunted almost to extinction.) The heavy-duty flap on the front of the pocket protector provides maximum protection and offers clear proof of your geek heritage.

So you see, it’s time to come out of the closet or the NOC or the Server room or your cubicle and let your inner Geek shine! Imagine the looks of awe when your coworkers spy you with the new pocket protector. Imagine the power you will project in the room as every head turns toward you when you enter. Keep imagining because there is more.

If you want to take the opportunity to acquire one of these rare pocket protectors, just send us an email at geekon@trioragroup.com. Remember… this offer will not be repeated, it will not be repeated.

Soon you will be eagerly searching your mail for that special unmarked envelope with your very own pocket protector enclosed. Don’t delay, send your email now. Quantities are limited. Operators are standing by!

The Latest Scoop on Patches for Irritating Problems

John Stouffer — Wed, 30 Jul 2008 19:45:52 +0000

For those of you tracking the latest releases, 10gR2 Version 10.2.0.4 is now certified for Release 11i. We’re anxiously awaiting certification for Release 12. Oracle has released the latest Critical Patch Update - be sure to check out www.integrigy.com’s evaluation of the July 2008 CPU, which points to the resolution of a high risk database vulnerability that makes applying the July 2008 CPU well worth your consideration. You’ll need to be running at least Release 11.5.10 and ATG_PF.H RUP 5 or RUP 6 to apply CPUs.

And speaking of ATG RUP 6, we had a Release 11i AIX customer experience a complete loss of service when they could not login to their Oracle applications environment (they saw a “Page not found” error) after upgrading to ATG_PF.H RUP 6 and JDK 1.6. The problem turned out to be two independent issues: the first issue was resolved after reviewing MetaLink Doc. ID: 422766.1, Cache Initialization Failure on AIX > platform, which required that the customer roll back their JDK version from JDK 1.6 to JDK 1.4.2. Patch 6801616 is supposed to resolve this issue, but is not available at this point, so the workaround is to rollback. The second issue required Patch 6841295 - DB SESSIONS FROM JVMS ARE VERY VERY HIGH AFTER ATG RUP6 + JDK 1.6 UPGRADE. As it turns out, this patch is needed even with JDF 1.4.2, as the issue is related to ATG_PF.H RUP 6.

Incidentally, if you are planning to apply ATG_PF.H RUP 6, keep careful track of MetaLink Doc. ID: 459353.1, External Tracking Note For Bugs On Top Of 11i.ATG_PF.H.delta.6 (RUP6) - 5903765. This document points to a number of issues, as well as to an unpublished note 550403.1 that describes the ATG RUP 6 performance issue: Connection leaks from fnd_security_pkg.fnd_encrypted_pwd that made it necessary for our client to retreat back to JDK 1.4.2.

Force Coagulation, Caution Focal Ogre and Inaccurate Fool Go

Lon White — Wed, 30 Jul 2008 17:55:38 +0000

What am I talking about? I love playing with anagrams. Each of the anagrams above describes the topic we are going to talk about. Can you decipher it before reading on? The answer is given at the end of this article…

How about some cool Autoconfig stuff for this month’s article? Last week I upgraded an Oracle Release 11i payroll system that called for the application of the latest Autoconfig patch. This patch, 6372396, was released just last month, so hopefully I may be getting this information to some of you before you have had a chance to read it for yourselves. Before I explain some of the new features included with this latest patch, I should probably mention that you can look some of this information up for yourself using Metalink Doc. ID: 165195.1. This note is the master document for helping you understand more about Autoconfig, as well as providing steps on running Autoconfig on both the application tier and the database tier. This note is also quite helpful, since it provides the specific syntax for generating the new appsutil directory from the application tier and getting it configured on the database side. But, I digress…

I’m assuming that most of you reading this article have a good understanding of what Autoconfig is and its use as the context management system for the E-Business Suite. Briefly speaking, though, Oracle uses Autoconfig to manage the configurations needed for the E-Business Suite. These values are stored in two local repositories, one for the application and one for the database. These repositories are often referred to as the context directories and take the form of _. You should recognize this label format, as it is the same format as the context file itself, _.xml, which is a key file used for storing context variables. The notion of “context” is Oracle’s way of grouping information about a singular instance. Release 12 follows this contextual notion and goes even further to group information relevant to a specific instance by developing their $INST_TOP methodology. When you apply a patch or make configuration changes, Autoconfig is the tool that propagates those values. So, as you can see, Autoconfig is something you really want to know if you’re going to be an Apps DBA. But, as I said earlier, this is all stuff that most of you probably already know. Keep reading though – it’s going to get good.

Working on this upgrade required me to install the latest Autoconfig patch, 6372396. While reading through the associated Metalink note, I hit the appendix where some new features were introduced. Oracle now provides a method to “profile” our Autoconfig runs. This is interesting, as I have been at clients whose Autoconfig runs take only 10 - 15 minutes, and I have also seen runs take upwards of 90 minutes. So, what’s in it for me? What is profiling? Why do I care? In the past we have had to resort to watching the wall clock, or some kind of clock, to get timing information. Sure, we can also look at timestamps of the start and finish as well, but the important notion here is that the timing information is generally not straight forward and for the most part is relevant only to the entire run of Autoconfig. Now we have the option to pass a “profile” flag for our Autoconfig session that results in a nice HTML report that shows every script that has been run, as well as the time it took to run that particular step. Even more helpful, the report has a column for the status of that section, so we can see specifically where the session failed and what script it was on when it did so. The example below is a section of this report:

As you can see, the profile report shows us the step Autoconfig ran along with the instantiation time, execution time and then the combined total time. Oracle has also included a column that helps all of us evaluate this profile, as Cary Millsap would want us to… Millsap has long professed that we should first look at the performance impactor with the greatest time contributed to the overall elapsed time. For example, looking at the output above, cutting the running time by 50% for “ecx” would only save you half a second. While cutting the “ad/fnd” process by 50% would save you 66.5 seconds. Therefore, Millsap would say that we should be looking at the “ad/fnd” process first.

As you can see, there is also a column that shows the status for the process. Again, this overall information has been available when traversing the log file but here it is plain and simple, and easy to see specific problems. Furthermore, the following excerpt is a section of what you would see if you clicked on the “ad/fnd” link in the report:

Product : ad/fnd
Script Name	Instantiation Time (sec)	Execution Time (sec)	Total Time (sec)	Time (%)	Status
adconfig.txt	2.40	-	2.40	1.80	Passed
instantiate file: close
adalldefaults.txt	0.32	-	0.32	0.24	Passed
instantiate file: txt close
runform.htm	0.26	-	0.26	0.19	Passed
instantiate file: rm.htm close
runrep.htm	0.24	-	0.24	0.18	Passed
instantiate file: .htm close
adadmat.pl	0.25	0.56	0.81	0.61	Passed
instantiate file: .pl script execution command: adadmat.pl -nopromptmsg script returned: Current data APPL_TOP Names in AD_APPL_TOPS: PRESEEDED GLOBAL hpux3 mr Updating tables… Register a node … Updated data APPL_TOP Names in AD_APPL_TOPS: PRESEEDED GLOBAL hpux3 mr Done Commit complete. JServer Release 9.2.0.6.0 - Production ERRORCODE = 0 ERRORCODE_END .end std out. .end err out. close
adunzip.pl	0.24	0.44	0.68	0.51	Passed

Clearly these new features provide us geeks with excellent information as we look to deconstruct Autoconfig for a more thorough understanding of how things work.

And, if that new feature wasn’t cool enough, Oracle has also delivered a “context search” capability that is very helpful. I really like looking through the context file (remember the _.xml file?) at client sites, as it provides a wealth of information. This new feature isn’t as handy as strolling through the context file, but it is definitely more pointed and more robust. Below is an excerpt from the html output of the context information report:

Technology Stack (TXK) Context Variable Information.

Entered Keyword :	JVM
Context Variables Matched:	s_xmlsvcs_nprocs, s_fnd_jdbc_stmt_cache_size, s_oacore_nprocs, s_disco_nprocs, s_forms_servlet_nprocs, s_mwaJVMb, s_jvm_options, s_jvm_startup, s_appsjreopts, s_adjvaprg, s_afjvaprg, s_apjserv_vmtimeout, s_sessionCheck_frequency, s_fnd_cache_port_range, s_long_running_jvm, s_xmlparser_soap, s_disco_jvm_options, s_forms_jvm_options

Context Variable : s_xmlsvcs_nprocs

Description	Specifies the number of JVM processes to serve the XmlSvcsGrp group. A group is a set of processes across which request traffic is distributed. This configuration parameter is used with the directive ‘ApJservGroup’. Syntax: ApJServGroup . For more details, please refer Oracle to MetaLink Note 202664.1.
Current Value	1
Default Value	1

The context variable is found in the following templates under FND_TOP

Template	Configuration
jserv_nt_ias1022.conf	ApJServGroup XmlSvcsGrp %s_xmlsvcs_nprocs% %s_xmlsvcs_node_weight% %s_iASconfig _home%/Apache/Jserv/etc/xmlsvcs.properties
jserv_ux_ias1022.conf	ApJServGroup XmlSvcsGrp %s_xmlsvcs_nprocs% %s_xmlsvcs_node_weight% %s_iASconfig _home%/Apache/Jserv/etc/xmlsvcs.properties

The context variable is found in the following templates under AD_TOP

Template

Configuration

Context Variable : s_fnd_jdbc_stmt_cache_size

Description	Sets the parameter fnd_jdbc_stmt_cache_size in the DBC file. FND_JDBC_STMT_CACHE_SIZE controls how many parsed SQL statements are retained in the JDBC cache. Statements stored in the JDBC cache will not require a reparse operation and therefore are highly optimized. The parameter should not be increased to an extreme value because maintaining this cache takes up memory in the JVM. The recommended value is between 200 and 400.
Current Value	200
Default Value	0

The context variable is found in the following templates under FND_TOP

Template

Configuration

The context variable is found in the following templates under AD_TOP

Template	Configuration
adgendbc_nt.cmd	( echo %APPS_UNAME%/%APPS_PWD%%ADMIN_ALIAS% ) \| %s_jretop%\bin\%JCMD% -clas spath %dbcclasspath% oracle.apps.fnd.security.AdminAppServer ADD FNDNAM=%APPS_UN AME% GWYUID=%s_gwyuid_user%/%s_gwyuid_pass% %DBC_CONNECT_ID% TWO_TASK=%s_tools_t wotask% GUEST_USER_PWD=%s_guest_user%/%s_guest_pass% SECURE_PATH=%s_fnd_secure% APPS_JDBC_DRIVER_TYPE=THIN DB_PORT=%s_dbport% DB_HOST=%s_dbhost%.%s_dbdomain% NO DE_NAME=%s_hostname% FND_MAX_JDBC_CONNECTIONS=%s_fnd_max_jdbc_connections% FND_J DBC_STMT_CACHE_SIZE=%s_fnd_jdbc_stmt_cache_size% -nopromptmsg
adgendbc_ux.sh	{ echo $USERNAME/$PASSWORD$ADMIN_ALIAS; } \| %s_adjvaprg% -classpath “%s_ad ovar_classpath%” oracle.apps.fnd.security.AdminAppServer ADD FNDNAM=$USERNAME GW YUID=%s_gwyuid_user%/%s_gwyuid_pass% “$DBC_CONNECT_ID” TWO_TASK=%s_tools_twotas k% GUEST_USER_PWD=%s_guest_user%/%s_guest_pass% SECURE_PATH=%s_fnd_secure% APPS _JDBC_DRIVER_TYPE=THIN DB_PORT=%s_dbport% DB_HOST=%s_dbhost%.%s_dbdomain% NODE_N AME=$HOST_NAME FND_MAX_JDBC_CONNECTIONS=%s_fnd_max_jdbc_connections% FND_JDBC_ST MT_CACHE_SIZE=%s_fnd_jdbc_stmt_cache_size% -nopromptmsg

The search string I used here was “JVM” as noted in the very first row labeled “Entered Keyword”. There was much more information returned than this small excerpt, but you can see where this could really be handy. I really like that in addition to the values matching the search criteria being returned, we can also see in what files they exist. Even better, for some, is the inclusion of the current value of the variable as well as the default value. I know, I know… we can get the same thing using the Unix find command paired with greps and awks, or perhaps you’re a wizard with Perl. On second thought, you would have to do some additional work to get the default value as a comparison… No matter, if you still want to get your information using those techniques, that is awesome. In fact, if you have some good command lines, pass them on; I’m always looking for good code to make my job easier… In the end, Oracle has provided some useful new options that I am really looking forward to playing with. I’ll let you know if I find anything interesting as I stress them.

The syntax used for these two examples were:

perl $AD_TOP/bin/adconfig.pl contextfile=$CONTEXT_FILE –profile

The above command gets you the profile output we talked about first. Appendix E, titled AutoConfig Performance Profiler, in the Metalink note, provides additional information you’ll want to read. The following code gets you the context search information:

$FND_TOP/bin/txkrun.pl -script=GenCtxinfRep -keyword=”JVM”

There are some additional flags to this command, which can be found in Appendix F of Metalink Doc. ID: 165195.1, Context Variable Information Utility.

And now for the answer, if you haven’t deciphered it yet… The anagrams above were derived from the phrase: Oracle Autoconfig.

Slugs, it Turns Out, Do Not Make Good Pets

Barbara Matthews — Fri, 25 Jul 2008 19:52:57 +0000

Yesterday as I was walking my dogs, I spotted a little bit of “little boy heaven”: two slugs – really big slugs – slithering on my hillside. I did the only thing a reallly cool Mommy could do under the circumstances – I ran back to the house and dragged my son out of bed, made him get the camera and set off to enjoy the world of slugs.

What, you might ask, does this have to do with the Oracle E-Business Suite of Applications? Well, first off, I can honestly say that I was as excited about this discovery as I was when I read that 10gR2 Version 10.2.0.4 is now certified with Release 11i. I hear there are performance improvements as well as functionality improvements to be had with this new release, so I highly recommend that my E-Business Suite friends consider upgrading.

But back to the slugs…

I have to admit, I was curious to see if my dogs would eat the slugs, and was disappointed to discover that while my dog will eat the pillar of my house, the thorns off of my rose bushes, and empty milk jugs, he will not eat slugs. Of course, this made me think about the exciting announcement that DB Vault 10gR2 is now certified with the E-Business Suite. I’m sure it was not the intent of the article writer to make it look like we DBAs are all an evil lot trying to sneak forbidden access to our companies’ financial data, but I did get a laugh out of this picture that I snagged from Steven Chan’s blog that showed that with Database Vault, only the FIN Realm Owner gets to peek at this precious data, while the DBA is unable to get to the data. So for all you DBAs, peeking can now be officially restricted.

For what it’s worth, the intent of Database Vault is to protect data from insider attacks and help meet SOX requirements for privacy and segregation of duties. I think the picture below gives a better idea of the sort of ne’er-do-wells that we are after. And for what it’s worth, DBAs aren’t the only people in your company who might like to see your data, so I’ve coined a new role for companies: The Insider Slug:

Now, you might say to yourself that you work with a great bunch of people, none of whom could ever make the ranks of The Insider Slug. But my cousin Anne Marie once gave this pearl of wisdom, after spending years consulting with newspaper companies. She said that she would go in to review their systems, and the newspaper owners would always say that there was no way that anyone was stealing from them. And Anne Marie and her husband Bill would pore over the records and at the end of their visit give the owner a list of who was stealing, and how much. To this day, Anne Marie says that if you run a company that doesn’t have checks and balances in place, or that does, but doesn’t follow them, then you should assume that somebody in the company is stealing you blind.

If only The Insider Slugs were so easy to spot

Smart companies use auditing to watch for cases where The Insider Slugs have found a way past security firewalls. And smarter companies put measures in place like Database Vault to keep those slugs from getting to their data in the first place.

And now, to finish the story of the slugs…

In the world of this really cool Mommy, I sometimes have to accept some uncomfortable liaisons in my life, so I steeled myself for the likelihood that we would become slug pet owners that night. In fact, I found two more slugs, bringing us to a total of four. They were very big, and not particularly good looking, but we diligently photographed the slugs and then my son, after considerable experimentation, used two sticks as chopsticks to pick up the slugs and put them in a box (yes, we did haul them out of the box and pose them on a rock).

Our slug box is kept handy for occasions like this. Last week we used the box to bring in two toads for overnight guests. We’ve put an awful lot of thought and research into what kind of food would be appealing to toads, but so far have not hit the mark, so toads are only allowed as overnight guests.

Ultimately, the slugs made it into our aquarium, which is filled with slimy dirt from the backyard. I thought the adventure was over, but my husband reviewed the slug habitat situation and concluded that putting a book on top of the aquarium would not be sufficient to keep the slugs where we wanted. Out came the slug box, and the slugs were returned to the wild, with a brief argument about whether putting them on the porch was sufficient, or if they should be taken back to where we found them, with side comments from my husband about what we normally do to slugs in our garden.

With all this said, I’ll just finish up by pointing out a few important observations:

One should probably not assume that Insider Slugs always work by themselves. My slugs looked ready to form a conga line.
Our slugs were quite slimy and left a trail behind them. I am not convinced that Insider Slugs are so obvious or easy to spot.
I can’t emphasize enough how tickled I was that my son used sticks to pick up the slugs rather than grabbing them with his bare hands. It’s bad enough when toads pee on him, I’d just as soon not see slug slime on him.

Improving Teamwork in Your Environment

Robert McMillen — Wed, 23 Jul 2008 19:59:28 +0000

It seems that in every organization we work with that there are always as many people/organizational challenges as there are technical challenges. Often when doing assessments we find that there are organization problems that have contributed to the situation. Sometimes different departments don’t communicate well with each other and tasks fall through the cracks. Or maybe there is a lot of distrust between groups and the tend to compete with each other rather than collaborate. It seems we must tackle both to some degree if we hope to have better effectiveness.

Several years ago I was working in non-profit organization and this issue of improving team productivity became a big topic. How could we improve the way the various departments and teams worked together? How could we reduce the amount of friction and distrust that tends to build up over time?

We were fortunate to have a facilitator introduce us to a book from Patrick Lencioni, “The Five Dysfunctions of a Team”. Lencioni works with all types of organizations to improve productivity and he has summarized the issues that need to be addressed before organizations can improve their results.

The five dysfunctions he identifies are built one on top of the other. The first dysfunction that must be dealt with is LACK OF TRUST. Trust means that the team members have confidence that their team members intentions are good and that honest communication is ok. Teams without LACK OF TRUST don’t ask for help, hide their problems, jump to conclusions, waste time, hold grudges and have unproductive meetings. To build TRUST requires management involvement to help break down barriers between groups and create honest communication. The book provides recommendations on how this is done.

The next dysfunction is FEAR OF CONFLICT. All great working relationships inevitably require some conflict because of differing opinions. Teams that avoid conflict at all costs or those that are the opposite and are always involved in conflict are usually unproductive. Certain conflict in meetings is healthy and needed to find the best solution and get everyone’s input. If your teams have a FEAR OF CONFLICT, they will have boring meetings, use back-channel politics/personal attacks, ignore controversial topics and spend a lot of time posturing.

The next three dysfunctions of teams that Lencioni discusses include LACK OF COMMITMENT, AVOIDANCE OF ACCOUNTABILITY and INATTENTION TO RESULTS. As a team or organization builds trust, becomes comfortable with conflict, rebuilds commitment, encourages accountability and attends to the results then its productivity exceeds that of its competitors.

Since almost all of us work in teams to complete projects, it’s important to understand the dynamics within the team and work to avoid these types of dysfunctional team behavior. Just being able to identify the behaviors can help to work through them before the team productivity is impacted.

Lencioni has written several other interesting books on leadership and how to conduct good meetings. I encourage you to check them out. As I said at the beginning, the organizational issues can often be more difficult to address than the technical issues, but you can’t separate them. Teams that have strong trust inevitably perform more effectively and have more camaraderie. Who wouldn’t want that type of environment all of the time?

New Oracle Database 10g Patch #3 Certified (10.2.0.4)

Robert McMillen — Wed, 23 Jul 2008 18:38:37 +0000

Since its introduction in July 2005, 10gR2 has become the database version of choice for many E-Business Suite environments. Originally released as 10.2.0.1 it has been regularly enhanced with new patches to 10.2.0.3. In the last several months, the third patch set was released for 10gR2, raising its current version to 10.2.0.4. In the last week it has been certified with most platforms for the E-Business Suite 11i.

Oracle Database 10gR2 is eligible for Oracle Premier support through July 2010 and eligible for Extended support through July 2013. Sustaining support is still listed as “indefinite” in Oracle’s Lifetime Support Policy located at http://www.oracle.com/support/lifetime-support-policy.html.

This new release is certified on all platforms (HPUX, AIX, Linux, Solaris and Windows) in both 32 and 64 bit versions. Keep in mind that this patchset does not provide any additional functionality only applying bug fixes.

Digging into the Metalink documents (Patch# 6810189) it was nice to find that10.2.0.4 includes the January and April 2008 Critical Patch Updates (CPU), which consolidates the effort of doing them. The CPU for July 2008 (Doc# 467881.1) would still need to be applied after this patch. Three issues are noted with this patchset. The one of interest is that parameter “CURSOR_SPACE_FOR_TIME” is being deprecated.

So what are the primary fixes in this 10.2.0.4 patchset? You can check them out in Doc#401436.1 on Metalink (metalink.oracle.com). A quick read show that this new release includes over 3,000 individual bug fixes. In the patchset notes Oracle has identified 14 new issues/bugs that are introduced by this patchset, so be sure to read through them as well.

Stephen Chan has a brief article on the certification of 11i and 10.2.0.4 on his BLOG, so check that out as well. To summarize, it indicates that 10.2.0.4 is certified with E-Business Suite Release 11.5.9.CU2 and higher as well as 11.5.10.CU2 and higher. Real Application Clusters (RAC), Transparent Data Encryption (TDE) and Automated Storage Management (ASM) are also certified. Database Vault is not yet certified.

This patchset includes an update to the Oracle time zone definitions to Version 4 which includes the changes to daylight saving time in the USA in 2007. You can determine which version you have with this query, “SELECT version FROM v$timezone_file;”.

Lastly, while some of the documentation says that this patch includes up to the January 2008 Critical Patch Update (CPU), it actually includes the April 2008 CPU as well (see Metalink Note 555579.1).

Happy Patching!

Auditing Options

John Stouffer — Tue, 01 Jul 2008 21:54:34 +0000

We’re often asked about the different ways of auditing to help ensure security for an E-Business Suite environment. Here’s a quick summary of some of your options:

Operating System Auditing
Many types of auditing are available, especially if “sudo” is utilized. “sudo” should be utilized for ALL accounts, though we find that it often is not in our clients’ environments

Database Auditing

Setting different “audit_trail” levels in the database initialization parameters - the more detail you audit, the slower the performance of the server. You have to really watch the audit tables’ growth - this is normally NOT set in an E-Business Suite environment
Auditing of specific tables (or columns with Database Vault) by database id - this is used by most Apps DBAs as it has limited performance impact. To use this type of auditing, the timed_statistics setting in the database init.ora file may need to be set to true depending on the feature to be utilized

Applications Auditing

Automatic current record audit information is the standard provided by the Applications, however, NO historical auditing is provided
Auditing enabled via the System Administrator responsibility for specific tables captures Applications users and changes but usually is limited to select payroll and fnd tables. The audit tables will grow and auditing usually needs to be disabled for all types of upgrades to avoid performance issues
Auditing enabled via the System Administrator responsibility at certain levels - user, application, responsibility, form - should ALWAYS be set to form for the most granular information when the Systen Administrator reviews users in the applications. Setting this option does NOT impact performance

Time to Upgrade to RDBMS Version 10.2.0.4? Not Quite.

John Stouffer — Tue, 01 Jul 2008 21:31:28 +0000

We here at Triora Group are big advocates of staying current on RDBMS versions, so we’re excitedly waiting for the next RDBMS 10g patch, Version 10.2.0.4. We know it includes more performance patches for the database - always a good thing. However, we have to stand by Oracle’s caveat - not until it’s certified for the E-Business Suite. In the meantime, though, let’s talk about the difference between a new database patch and a new database release.

Patch = Oracle Database 10g Release 2 Patch Set 3 (10.2.0.3) - the 10 is the major release, the .2 is the 2nd generation for this release and the .3 is the latest patchset. Much like with Oracle Database 9i Release 2 Patch Set 8 (9.2.0.8)

Release = Oracle Database 11g Release 1 (11.1.0.6.0) - The 11 is the major release, the .1 is the 1st generation for this release and the .6 is the latest patchset.

There is quite a bit of difference in the impact to going down one path or the other as these are not equivalent Oracle software releases. A patch is a maintenance patch to the current release and should be applied as a part of routine maintenance like we do for the ATG and CPU patches. A release, on the other hand, is a full upgrade from one full database version (9i) to another full database version (10g) to another full database version (11g) and has a major impact on the E-Business Suite environment, specifically around testing.

Risk - Oracle is running Version 10.2.0.3 with Release 12 on RAC. They are not running 11gRAC for their production database and, until they do so, we do not recommend getting ahead of them regardless of the differences between the two different Application releases in play, Release 11i and Release 12. This database version is also the first generation of a major database version certified with the Oracle Applications. It’s not advisable to uptake the first release of a new database version and we recommend waiting for 11gR2 database certification.
Certification - although the 11gR1 database version is certified for a 10gR2 RAC configuration, no document outlining the steps involved is available for public review on MetaLink.
Database patch 10.2.0.4 documentation is publicly available on Oracle’s MetaLink website and indicates that we should expect to see this patch certified soon
Database patch 10.2.0.3 or higher is required for the database portion of the April 2008 Oracle Critical Patch Updates (CPU) patches

Recommendation
Upgrade to or remain on the current database version, 10.2.0.3, until the database patch 10.2.0.4 has been released. Once that database patch is certified with the Oracle Applications, apply that database maintenance patch if it makes sense to do so at that time. There will be a variety of factors that will affect that decision including but not limited to projects in progress, scheduling, enhancements and fixes and Oracle recommended patches.

Gauging the Impact of BEA on the Oracle E-Business Suite

Robert McMillen — Tue, 01 Jul 2008 18:21:09 +0000

Today, Oracle provided a view into their plans for the integration of the BEA Aqualogic products into the Oracle product line. Oracle is very experienced at this effort and it showed in the presentation. They focused a lot on reassuring BEA and Oracle customers that there would be no drastic changes and no forced upgrades.

For E-Business Suite users, they mentioned specifically that there will be no forced migrations from the Oracle Application Server. This will only impact those who have upgraded to the 10g version of the Application Server, which would be customers on Release 12 or those who have added new Fusion Middleware components such as Identity Management to their existing Release 11i environments.

Here are the key points that I took away from the presentations which focused, as expected, on Fusion Middleware.

Oracle is extending support of several products for both companies to reduce the upgrade requirements. The integrations of BEA/Oracle products are expected to occur over 12 to 18 months. Oracle will provide a single integrated development toolset that incorporates both BEA/Oracle products. JDeveloper, ADF, and Oracle Forms/Reports will remain. A new Eclipse Pack will be released to help BEA development users migrate.

Oracle Data Integrator, TopLink, Coherence, AIA, Web Services Manager, Service Registry, BPA Designer, BAM, WebCenter, and Business Rules will remain. The Oracle Applications Server will eventually be replaced by BEA’s offering (JRockit, Weblogic) but the OAS will be maintained for some time. Inside the Fusion Middleware, the Oracle Enterprise Service Bus will be merged with BEA’s offering.

BEA’s Aqualogic BPM Designer will be kept and used as an agile process modeling counterpart to the Oracle BPA Designer. Both will be updated to share a common metadata model so that model information can be shared between them.

Oracle will revise their BPEL processing engine and introduce BEA’s Enterprise Repository (SOA governance). Pricing for the BEA products has been simplified and country-specific pricing has been replaced with a worldwide pricing model.

Several BEA products will be included in new Oracle Enterprise Manager Packs. In particular, a new Diagnostics Pack for Java Virtual Machine tuning based on JRockit Mission Control has been added.

Several topics were not discussed, but I want to note them. What about BEA Tuxedo? How will these changes impact the middleware stack for the Fusion Applications?

To summarize, Oracle is not making radical changes that will impact current E-Business Suite users or BEA users. Instead they will be cherry-picking the BEA product line to introduce some new products and bulk up existing products with better technologies from BEA. Existing products will continue to be supported, some up to 9 more years.