FAQ
I'm sure that with proper management etc. a Windows database server can =
be reliable. But one thing that puzzles me - when you install a =
Microsoft security patch, the dialog box at the end (almost) always says =
"Reboot the machine now." I religiously do that since all of my Windows =
databases can be brought down (they're used for development.) What do =
people do with a production database server?
-----Original Message-----
Mercadante, Thomas F
=20
...
=20
I have windows databases that have been running for 3 years=20
now. *Never*
does the machine crash. And *never* do we reboot "just=20
because we should".
=20
...
Please see the official ORACLE-L FAQ: http://www.orafaq.com

To unsubscribe send email to: oracle-l-request_at_freelists.org
put 'unsubscribe' in the subject line.

--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------

Search Discussions

  • Thomas Day at Feb 12, 2004 at 7:17 pm
    Schedule the security patches for a maintenance window.

    "Jacques
    Kilchoer" To: "Oracle-L (E-mail)"
    Windows")
    Sent by:
    oracle-l-bounce

    02/12/2004 01:16
    PM
    Please respond
    to oracle-l

    I'm sure that with proper management etc. a Windows database server can =
    be reliable. But one thing that puzzles me - when you install a =
    Microsoft security patch, the dialog box at the end (almost) always says =
    "Reboot the machine now." I religiously do that since all of my Windows =
    databases can be brought down (they're used for development.) What do =
    people do with a production database server?
    -----Original Message-----
    Mercadante, Thomas F
    =20
    ...
    =20
    I have windows databases that have been running for 3 years=20
    now. *Never*
    does the machine crash. And *never* do we reboot "just=20
    because we should".
    =20
    ...
    Please see the official ORACLE-L FAQ: http://www.orafaq.com

    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.

    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------

    ----------------------------------------------------------------
    Please see the official ORACLE-L FAQ: http://www.orafaq.com
    ----------------------------------------------------------------
    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.
    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------
  • Mladen Gogala at Feb 12, 2004 at 7:35 pm

    On 02/12/2004 01:16:22 PM, Jacques Kilchoer wrote:
    I'm sure that with proper management etc. a Windows database server
    can =
    be reliable. But one thing that puzzles me - when you install a =
    Microsoft security patch, the dialog box at the end (almost) always
    says =
    "Reboot the machine now." I religiously do that since all of my
    Windows =
    databases can be brought down (they're used for development.) What do
    =
    people do with a production database server?
    Reboot the machine now.

    Please see the official ORACLE-L FAQ: http://www.orafaq.com

    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.

    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------
  • Paula_Stankus_at_doh.state.fl.us at Feb 12, 2004 at 8:04 pm
    Don't do the patch until after hours!!!!!!!!!!!!!!!

    -----Original Message-----
    From: oracle-l-bounce_at_freelists.org
    On Behalf Of Jacques Kilchoer
    Sent: Thursday, February 12, 2004 1:16 PM
    To: Oracle-L (E-mail)
    Subject: installing security patches on a Windows database server (was
    "Oracle 10g for Windows")=20

    I'm sure that with proper management etc. a Windows database server can =
    =3D
    be reliable. But one thing that puzzles me - when you install a =3D
    Microsoft security patch, the dialog box at the end (almost) always says =
    =3D
    "Reboot the machine now." I religiously do that since all of my Windows =
    =3D
    databases can be brought down (they're used for development.) What do =
    =3D
    people do with a production database server?
    -----Original Message-----
    Mercadante, Thomas F
    =3D20
    ...
    =3D20
    I have windows databases that have been running for 3 years=3D20
    now. *Never*
    does the machine crash. And *never* do we reboot "just=3D20
    because we should".
    =3D20
    ...
    Please see the official ORACLE-L FAQ: http://www.orafaq.com

    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.

    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------
    ----------------------------------------------------------------
    Please see the official ORACLE-L FAQ: http://www.orafaq.com
    ----------------------------------------------------------------
    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.
    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------
  • Mladen Gogala at Feb 12, 2004 at 9:36 pm

    On 02/12/2004 03:04:08 PM, Paula_Stankus_at_doh.state.fl.us wrote:
    Don't do the patch until after hours!!!!!!!!!!!!!!!
    Define "after hours". When working at OXHP, after hours was 2 hours
    a week, on Saturday afternoon. Everything that required downtime had
    to be done then. Restarting database at any other time required an
    explicit approval from the CIO himself or coordination between
    VP of shared services, VP of development and representatives of
    the business side. Restarting system is actually a very, very big
    deal. I know a guy who used to work at the site which managed
    911 calls for the state of NY. They had downtime window of 1 hour
    a month. The phrase "after hours" can be radically different from
    one place to another. For instance, I doubt that Rajendra can
    restart database which follows the scores of the sport events
    after 5 PM. That would be a bigger scandal then the unrehearsed
    wardrobe malfunction during the recent sport mega-event.

    Please see the official ORACLE-L FAQ: http://www.orafaq.com

    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.

    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------
  • Nelson Flores at Feb 12, 2004 at 8:22 pm
    They just bring it down :( ... And endure all the hassle that entails
    from doing this...

    This is unless you have 2 servers and you apply patches on each one at
    different times so as to have max(uptime)...

    I still don't know what the big deal is with windows bashing. Both *nix
    and windows server their purpose. It's the tech people's job to
    determine what needs to be used in their specific circumstances (the
    very root of engineering)... there is no good or bad ... just wrong
    choices..
    (That's if you don't count Windows ME;) )

    p.d : I use Oracle 8.17 on Solaris and Windows 2000 ...

    -----Original Message-----
    From: oracle-l-bounce_at_freelists.org
    On Behalf Of Jacques Kilchoer
    Sent: Thursday, February 12, 2004 10:16 AM
    To: Oracle-L (E-mail)
    Subject: installing security patches on a Windows database server (was
    "Oracle 10g for Windows")

    I'm sure that with proper management etc. a Windows database server can
    =
    be reliable. But one thing that puzzles me - when you install a =
    Microsoft security patch, the dialog box at the end (almost) always says
    =
    "Reboot the machine now." I religiously do that since all of my Windows
    =
    databases can be brought down (they're used for development.) What do =
    people do with a production database server?
    -----Original Message-----
    Mercadante, Thomas F
    =20
    ...
    =20
    I have windows databases that have been running for 3 years=20
    now. *Never*
    does the machine crash. And *never* do we reboot "just=20
    because we should".
    =20
    ...
    Please see the official ORACLE-L FAQ: http://www.orafaq.com

    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.

    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------

    ----------------------------------------------------------------
    Please see the official ORACLE-L FAQ: http://www.orafaq.com
    ----------------------------------------------------------------
    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.
    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------
  • Jeff Herrick at Feb 12, 2004 at 8:22 pm
    Most patches have a 'silent' as well as a 'no-reboot' option. The
    problem is that they are not always the same for all patches so
    you have to run the patch from a command line first with the
    '/?' option to discover them (usually /S and /X but it varies)

    With these options you can copy the patch to multiple servers
    and then remotely execute using something like PSEXEC from
    SysInternals. After this is done the reboots can be scheduled
    based on a balance between required availability of the server
    and the critical nature or risk exposure of the problem that the
    patch fixes.

    Of course you should also have tested the patch before rolling it
    out =8-0

    Multiple patches that would normally require a series of reboots can
    be 'chained' together using the QCHAIN program available from the
    Microsoft KB. This way only one reboot of your production server(s)
    is necessary. Note that only QCHAIN has the smarts to determine
    which DLL versions are to be swapped around. If you just strung a set
    of patches together using /quiet /noreboot you risk having a broken
    O/S after the reboot

    HTH

    Jeff Herrick
    On Thu, 12 Feb 2004, Jacques Kilchoer wrote:

    I'm sure that with proper management etc. a Windows database server can =
    be reliable. But one thing that puzzles me - when you install a =
    Microsoft security patch, the dialog box at the end (almost) always says =
    "Reboot the machine now." I religiously do that since all of my Windows =
    databases can be brought down (they're used for development.) What do =
    people do with a production database server?
    -----Original Message-----
    Mercadante, Thomas F
    =20
    ...
    =20
    I have windows databases that have been running for 3 years=20
    now. *Never*
    does the machine crash. And *never* do we reboot "just=20
    because we should".
    =20
    ...
    ----------------------------------------------------------------
    Please see the official ORACLE-L FAQ: http://www.orafaq.com
    ----------------------------------------------------------------
    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.
    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------
    Please see the official ORACLE-L FAQ: http://www.orafaq.com

    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.

    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------
  • Jared.Still_at_radisys.com at Feb 12, 2004 at 10:28 pm
    Unless of course your company has no concept of 'after hours'.

    Sent by: oracle-l-bounce_at_freelists.org
    02/12/2004 12:04 PM
    Please respond to oracle-l



    To:
    cc:
    Subject: RE: installing security patches on a Windows database server (was "Oracle

    10g for Windows")

    Don't do the patch until after hours!!!!!!!!!!!!!!!

    -----Original Message-----
    From: oracle-l-bounce_at_freelists.org
    On Behalf Of Jacques Kilchoer
    Sent: Thursday, February 12, 2004 1:16 PM
    To: Oracle-L (E-mail)
    Subject: installing security patches on a Windows database server (was
    "Oracle 10g for Windows")=20

    I'm sure that with proper management etc. a Windows database server can =
    =3D
    be reliable. But one thing that puzzles me - when you install a =3D
    Microsoft security patch, the dialog box at the end (almost) always says =
    =3D
    "Reboot the machine now." I religiously do that since all of my Windows =
    =3D
    databases can be brought down (they're used for development.) What do =
    =3D
    people do with a production database server?
    -----Original Message-----
    Mercadante, Thomas F
    =3D20
    ...
    =3D20
    I have windows databases that have been running for 3 years=3D20
    now. *Never*
    does the machine crash. And *never* do we reboot "just=3D20
    because we should".
    =3D20
    ...
    Please see the official ORACLE-L FAQ: http://www.orafaq.com

    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.

    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------
    ----------------------------------------------------------------
    Please see the official ORACLE-L FAQ: http://www.orafaq.com
    ----------------------------------------------------------------
    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.
    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------

    ----------------------------------------------------------------
    Please see the official ORACLE-L FAQ: http://www.orafaq.com
    ----------------------------------------------------------------
    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.
    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------
  • Jared.Still_at_radisys.com at Feb 12, 2004 at 10:29 pm
    In addition, when your company has offices in time zones all over the
    globe,
    the idea of 'after hours' gets a bit muddy.

    Mladen Gogala
    Sent by: oracle-l-bounce_at_freelists.org
    02/12/2004 01:36 PM
    Please respond to oracle-l



    To: oracle-l_at_freelists.org
    cc:
    Subject: Re: installing security patches on a Windows database server (was "Oracle

    10g for Windows")
    On 02/12/2004 03:04:08 PM, Paula_Stankus_at_doh.state.fl.us wrote:
    Don't do the patch until after hours!!!!!!!!!!!!!!!
    Define "after hours". When working at OXHP, after hours was 2 hours
    a week, on Saturday afternoon. Everything that required downtime had
    to be done then. Restarting database at any other time required an
    explicit approval from the CIO himself or coordination between
    VP of shared services, VP of development and representatives of
    the business side. Restarting system is actually a very, very big
    deal. I know a guy who used to work at the site which managed
    911 calls for the state of NY. They had downtime window of 1 hour
    a month. The phrase "after hours" can be radically different from
    one place to another. For instance, I doubt that Rajendra can
    restart database which follows the scores of the sport events
    after 5 PM. That would be a bigger scandal then the unrehearsed
    wardrobe malfunction during the recent sport mega-event.

    Please see the official ORACLE-L FAQ: http://www.orafaq.com

    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.

    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------

    ----------------------------------------------------------------
    Please see the official ORACLE-L FAQ: http://www.orafaq.com
    ----------------------------------------------------------------
    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.
    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------
  • Kresimir Fabijanic at Feb 13, 2004 at 4:55 am
    A person would think (silly me) that a sites like that would (I would
    say should) have some level of redundancy build (either as standby or
    replicated database or copy of the database) as a part of their DR
    policy. That redundancy would help to minimise (even possibly
    eliminate) downtime. That way all work on upgrades can be done behind
    the scene. I worked on site where redundancy was build in application
    itself, so there was effectively no downtime (OK, we called all users
    that were using application at 3 a.m. [both of them] to get in and out
    of application).
    Maybe an idea that you may share with all CIOs and VPs next time a
    critical update/patch needs to be applied

    Kind Regards

    Kresimir Fabijanic

    Jared.Still_at_radisys.com wrote:
    In addition, when your company has offices in time zones all over the
    globe,
    the idea of 'after hours' gets a bit muddy.





    Mladen Gogala
    Sent by: oracle-l-bounce_at_freelists.org
    02/12/2004 01:36 PM
    Please respond to oracle-l


    To: oracle-l_at_freelists.org
    cc:
    Subject: Re: installing security patches on a Windows database server (was "Oracle
    10g for Windows")


    On 02/12/2004 03:04:08 PM, Paula_Stankus_at_doh.state.fl.us wrote:

    Don't do the patch until after hours!!!!!!!!!!!!!!!
    Define "after hours". When working at OXHP, after hours was 2 hours
    a week, on Saturday afternoon. Everything that required downtime had
    to be done then. Restarting database at any other time required an
    explicit approval from the CIO himself or coordination between
    VP of shared services, VP of development and representatives of
    the business side. Restarting system is actually a very, very big
    deal. I know a guy who used to work at the site which managed
    911 calls for the state of NY. They had downtime window of 1 hour
    a month. The phrase "after hours" can be radically different from
    one place to another. For instance, I doubt that Rajendra can
    restart database which follows the scores of the sport events
    after 5 PM. That would be a bigger scandal then the unrehearsed
    wardrobe malfunction during the recent sport mega-event.


    ----------------------------------------------------------------
    Please see the official ORACLE-L FAQ: http://www.orafaq.com
    ----------------------------------------------------------------
    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.
    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------




    ----------------------------------------------------------------
    Please see the official ORACLE-L FAQ: http://www.orafaq.com
    ----------------------------------------------------------------
    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.
    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------

    Please see the official ORACLE-L FAQ: http://www.orafaq.com

    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.

    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------
  • Jacques Kilchoer at Feb 12, 2004 at 11:56 pm
    Thank you all for your input, and thanks to Jeff Herrick for teaching me =
    something new about Windows patching.
    -----Original Message-----
    Jeff Herrick
    =20
    Most patches have a 'silent' as well as a 'no-reboot' option. The
    problem is that they are not always the same for all patches so
    you have to run the patch from a command line first with the
    '/?' option to discover them (usually /S and /X but it varies)
    =20
    With these options you can copy the patch to multiple servers
    and then remotely execute using something like PSEXEC from
    SysInternals. After this is done the reboots can be scheduled
    based on a balance between required availability of the server
    and the critical nature or risk exposure of the problem that the
    patch fixes.
    =20
    Of course you should also have tested the patch before rolling it
    out =3D8-0
    =20
    Multiple patches that would normally require a series of reboots can
    be 'chained' together using the QCHAIN program available from the
    Microsoft KB. This way only one reboot of your production server(s)
    is necessary. Note that only QCHAIN has the smarts to determine
    which DLL versions are to be swapped around. If you just strung a set
    of patches together using /quiet /noreboot you risk having a broken
    O/S after the reboot
    Please see the official ORACLE-L FAQ: http://www.orafaq.com

    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.

    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------
  • Jamadagni, Rajendra at Feb 15, 2004 at 3:45 pm
    on the sports database, our upgrade window is 3 hours (if we are lucky) =
    on the Sunday after super bowl (once a year), both sides can't be down =
    more than 1 hour, during which we have a separate instance to which =
    everyone connects, so practically no downtime just some data loss =
    (regeneratable of course) ... take it or leave it.

    Raj

    -------------------------------------------------------------------------=

    Rajendra dot Jamadagni at nospamespn dot com
    All Views expressed in this email are strictly personal.
    select standard_disclaimer from company_requirements;
    QOTD: Any clod can have facts, having an opinion is an art !

    -----Original Message-----
    From: oracle-l-bounce_at_freelists.org
    On Behalf Of Mladen Gogala
    Sent: Thursday, February 12, 2004 4:37 PM
    To: oracle-l_at_freelists.org
    Subject: Re: installing security patches on a Windows database server
    (was "Oracle 10g for Windows")
    On 02/12/2004 03:04:08 PM, Paula_Stankus_at_doh.state.fl.us wrote:
    Don't do the patch until after hours!!!!!!!!!!!!!!!
    Define "after hours". When working at OXHP, after hours was 2 hours
    a week, on Saturday afternoon. Everything that required downtime had =20
    to be done then. Restarting database at any other time required an
    explicit approval from the CIO himself or coordination between
    VP of shared services, VP of development and representatives of
    the business side. Restarting system is actually a very, very big
    deal. I know a guy who used to work at the site which managed
    911 calls for the state of NY. They had downtime window of 1 hour
    a month. The phrase "after hours" can be radically different from
    one place to another. For instance, I doubt that Rajendra can
    restart database which follows the scores of the sport events
    after 5 PM. That would be a bigger scandal then the unrehearsed
    wardrobe malfunction during the recent sport mega-event.

    Please see the official ORACLE-L FAQ: http://www.orafaq.com

    To unsubscribe send email to: oracle-l-request_at_freelists.org
    put 'unsubscribe' in the subject line.

    --
    Archives are at http://www.freelists.org/archives/oracle-l/
    FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
    -----------------------------------------------------------------

Related Discussions

Discussion Navigation
viewthread | post
Discussion Overview
grouporacle-l @
categoriesoracle
postedFeb 12, '04 at 6:16p
activeFeb 15, '04 at 3:45p
posts12
users9
websiteoracle.com

People

Translate

site design / logo © 2022 Grokbase