Upon the following step for rectifying the Oracle alarm CVE-2012-1675 on the Oracle Standard Edition RAC, an error occurs:
SQL> alter system set remote_listener='(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCPS)(HOST=10.174.5.148)(PORT=1625)))' SCOPE=BOTH SID='*';
alter system set remote_listener='(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCPS)(HOST=10.174.5.148)(PORT=1625)))' SCOPE=BOTH SID='*'
*
ERROR at line 1:
ORA-02097: parameter cannot be modified because specified value is invalid
ORA-00119: invalid specification for system parameter REMOTE_LISTENER
ORA-00130: invalid listener address
'(ADDRESS=(PROTOCOL=TCPS)(HOST=10.174.5.148)(PORT=1625))'
The Oracle Standard Edition does not support SSL. To clear this alarm, perform the following steps on each RAC node:
1. Log in to the database server as the oracle user, and go to $ORACLE_HOME/lib.
cd $ORACLE_HOME/lib
2. Check whether libntcps11.a is available in $ORACLE_HOME/lib.
/opt/oracle/product/11gR2/db/lib> ls -la libntcps11.a
-rw-r--r-- 1 oracle oinstall 7416 2015-01-14 10:04 libntcps11.a
3. Back up libntcps11.a.
/opt/oracle/product/11gR2/db/lib> cp libntcps11.a libntcps11.a.bak
/opt/oracle/product/11gR2/db/lib> ls -la libntcps11.a*
-rw-r--r-- 1 oracle oinstall 7416 2015-01-14 10:04 libntcps11.a
-rw-r--r-- 1 oracle oinstall 7416 2015-01-14 10:04 libntcps11.a.bak
4. Check whether libntcps11_ee.a.dbl is available in $ORACLE_HOME/lib.
/opt/oracle/product/11gR2/db/lib> ls -la libntcps11_ee.a.dbl
-rw-r--r-- 1 oracle oinstall 307802 2015-01-14 10:04 libntcps11_ee.a.dbl
5. Overwrite libntcps11.a with libntcps11_ee.a.dbl.
/opt/oracle/product/11gR2/db/lib> cp libntcps11_ee.a.dbl libntcps11.a
/opt/oracle/product/11gR2/db/lib> ls -al libntcps*
-rw-r--r-- 1 oracle oinstall 307802 2015-01-14 10:04 libntcps11.a
-rw-r--r-- 1 oracle oinstall 7416 2015-01-14 10:04 libntcps11.a.bak
-rw-r--r-- 1 oracle oinstall 307802 2015-01-14 10:04 libntcps11_ee.a.dbl
6. Log in to the database server as the grid user and run the following command to stop all database resources:
sudo crsctl stop crs
We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:
#1) Respect the privacy of others.
#2) Think before you type.
#3) With great power comes great responsibility.
root's password:
CRS-2791: Starting shutdown of Oracle High Availability Services-managed resources on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.crsd' on 'ccv**bfs2'
CRS-2790: Starting shutdown of Cluster Ready Services-managed resources on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.LISTENER_SCAN1.lsnr' on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.oc4j' on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.LISTENER.lsnr' on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.LISTENER_ORA.lsnr' on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.ipcc.service_ora.svc' on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.cvu' on 'ccv**bfs2'
CRS-2677: Stop of 'ora.ipcc.service_ora.svc' on 'ccv**bfs2' succeeded
CRS-2673: Attempting to stop 'ora.DG_BACKUP.dg' on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.DG_OCR.dg' on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.registry.acfs' on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.ipcc.db' on 'ccv**bfs2'
CRS-2677: Stop of 'ora.cvu' on 'ccv**bfs2' succeeded
CRS-2672: Attempting to start 'ora.cvu' on 'ccv**bfs1'
CRS-2677: Stop of 'ora.LISTENER_SCAN1.lsnr' on 'ccv**bfs2' succeeded
CRS-2673: Attempting to stop 'ora.scan1.vip' on 'ccv**bfs2'
CRS-2677: Stop of 'ora.LISTENER.lsnr' on 'ccv**bfs2' succeeded
CRS-2677: Stop of 'ora.LISTENER_ORA.lsnr' on 'ccv**bfs2' succeeded
CRS-2673: Attempting to stop 'ora.ccv**bfs2.vip' on 'ccv**bfs2'
CRS-2676: Start of 'ora.cvu' on 'ccv**bfs1' succeeded
CRS-2677: Stop of 'ora.DG_BACKUP.dg' on 'ccv**bfs2' succeeded
CRS-2677: Stop of 'ora.scan1.vip' on 'ccv**bfs2' succeeded
CRS-2672: Attempting to start 'ora.scan1.vip' on 'ccv**bfs1'
CRS-2677: Stop of 'ora.registry.acfs' on 'ccv**bfs2' succeeded
CRS-2677: Stop of 'ora.ccv**bfs2.vip' on 'ccv**bfs2' succeeded
CRS-2672: Attempting to start 'ora.ccv**bfs2.vip' on 'ccv**bfs1'
CRS-2677: Stop of 'ora.ipcc.db' on 'ccv**bfs2' succeeded
CRS-2673: Attempting to stop 'ora.DG_DATA.dg' on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.DG_INDEX.dg' on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.DG_ORA.dg' on 'ccv**bfs2'
CRS-2676: Start of 'ora.scan1.vip' on 'ccv**bfs1' succeeded
CRS-2676: Start of 'ora.ccv**bfs2.vip' on 'ccv**bfs1' succeeded
CRS-2677: Stop of 'ora.DG_DATA.dg' on 'ccv**bfs2' succeeded
CRS-2672: Attempting to start 'ora.LISTENER_SCAN1.lsnr' on 'ccv**bfs1'
CRS-2677: Stop of 'ora.DG_ORA.dg' on 'ccv**bfs2' succeeded
CRS-2677: Stop of 'ora.DG_INDEX.dg' on 'ccv**bfs2' succeeded
CRS-2676: Start of 'ora.LISTENER_SCAN1.lsnr' on 'ccv**bfs1' succeeded
CRS-2677: Stop of 'ora.oc4j' on 'ccv**bfs2' succeeded
CRS-2672: Attempting to start 'ora.oc4j' on 'ccv**bfs1'
CRS-2676: Start of 'ora.oc4j' on 'ccv**bfs1' succeeded
CRS-2677: Stop of 'ora.DG_OCR.dg' on 'ccv**bfs2' succeeded
CRS-2673: Attempting to stop 'ora.asm' on 'ccv**bfs2'
CRS-2677: Stop of 'ora.asm' on 'ccv**bfs2' succeeded
CRS-2673: Attempting to stop 'ora.ons' on 'ccv**bfs2'
CRS-2677: Stop of 'ora.ons' on 'ccv**bfs2' succeeded
CRS-2673: Attempting to stop 'ora.net1.network' on 'ccv**bfs2'
CRS-2677: Stop of 'ora.net1.network' on 'ccv**bfs2' succeeded
CRS-2792: Shutdown of Cluster Ready Services-managed resources on 'ccv**bfs2' has completed
CRS-2677: Stop of 'ora.crsd' on 'ccv**bfs2' succeeded
CRS-2673: Attempting to stop 'ora.crf' on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.ctssd' on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.evmd' on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.asm' on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.mdnsd' on 'ccv**bfs2'
CRS-2673: Attempting to stop 'ora.drivers.acfs' on 'ccv**bfs2'
CRS-2677: Stop of 'ora.crf' on 'ccv**bfs2' succeeded
CRS-2677: Stop of 'ora.evmd' on 'ccv**bfs2' succeeded
CRS-2677: Stop of 'ora.ctssd' on 'ccv**bfs2' succeeded
CRS-2677: Stop of 'ora.mdnsd' on 'ccv**bfs2' succeeded
CRS-2677: Stop of 'ora.asm' on 'ccv**bfs2' succeeded
CRS-2673: Attempting to stop 'ora.cluster_interconnect.haip' on 'ccv**bfs2'
CRS-2677: Stop of 'ora.cluster_interconnect.haip' on 'ccv**bfs2' succeeded
CRS-2673: Attempting to stop 'ora.cssd' on 'ccv**bfs2'
CRS-2677: Stop of 'ora.cssd' on 'ccv**bfs2' succeeded
CRS-2673: Attempting to stop 'ora.gipcd' on 'ccv**bfs2'
CRS-2677: Stop of 'ora.drivers.acfs' on 'ccv**bfs2' succeeded
CRS-2677: Stop of 'ora.gipcd' on 'ccv**bfs2' succeeded
CRS-2673: Attempting to stop 'ora.gpnpd' on 'ccv**bfs2'
CRS-2677: Stop of 'ora.gpnpd' on 'ccv**bfs2' succeeded
CRS-2793: Shutdown of Oracle High Availability Services-managed resources on 'ccv**bfs2' has completed
CRS-4133: Oracle High Availability Services has been stopped.
7. Check whether all processes under the grid and oracle users are stopped.
ps -ef | grep grid
root 32243 23526 0 17:46 pts/2 00:00:00 grep grid
ps -ef | grep ora
root 32327 23526 0 17:47 pts/2 00:00:00 su - oracle
oracle 32328 32327 0 17:47 pts/2 00:00:00 -bash
oracle 32412 32328 0 17:47 pts/2 00:00:00 ps -ef
oracle 32413 32328 0 17:47 pts/2 00:00:00 grep ora
8. Log in to the database server as the oracle user, go to $ORACLE_HOME/lib, and run the following command:
/opt/oracle/product/11gR2/db/lib> relink all
writing relink log to: /opt/oracle/product/11gR2/db/install/relink.log
9. Check error and alarm messages in /opt/oracle/product/11gR2/db/install/relink.log.
10. Log in to the database server as the grid user and run the following command to start all database resources:
sudo crsctl start crs
CRS-4123: Oracle High Availability Services has been started.