AIX平台上11.2 Grid Infrastructure RDBMS进程的user是grid用户?

注意这个问题目前发现仅发生在11.2 + AIX平台上,不管是Standalone Grid 还是RAC Grid Infrastructure 都可能遇到, 使用ps -ef列出RDBMS实例进程时发现进程的user是Grid ,照理来说$RDBMS_HOME/bin/oracle的拥有者是oracle,这些进程应当属于oracle用户; 这种现象可能仅发生在LOCAL=NO的服务进程上,也可能发生在包括后台进程上。

 

现象如下:

 

oracle@mac01:/home/oracle>ps -p 
oracle@mac01:/home/oracle>ps -ef |grep -i local=no
    grid  3866680        1   0 17:11:03      -  0:08 oracleG11R231 (LOCAL=NO)
    grid  5374010        1   0 17:11:04      -  0:10 oracleG11R231 (LOCAL=NO)
    grid  5832916        1   0 17:11:04      -  0:07 oracleG11R231 (LOCAL=NO)
    grid  5898482        1   0 17:11:04      -  0:08 oracleG11R231 (LOCAL=NO)
    grid  5963946        1   0 19:08:47      -  0:00 oracleG11R231 (LOCAL=NO)
    grid  6160614        1   0 19:08:47      -  0:00 oracleG11R231 (LOCAL=NO)
    grid  6684846        1   0 17:11:03      -  0:08 oracleG11R231 (LOCAL=NO)
    grid  6947026        1   0 17:11:04      -  0:08 oracleG11R231 (LOCAL=NO)
    grid  8978436        1   0 19:08:47      -  0:00 oracleG11R231 (LOCAL=NO)
    grid  9961692        1   0 19:08:47      -  0:00 oracleG11R231 (LOCAL=NO)
    grid 10158178        1   0 19:08:47      -  0:21 oracleG11R231 (LOCAL=NO)
    grid 10354770        1   0 19:08:47      -  0:00 oracleG11R231 (LOCAL=NO)
    grid 10747936        1   0 17:43:13      -  0:08 oracleG11R231 (LOCAL=NO)
    grid 10944566        1   0 19:08:47      -  0:00 oracleG11R231 (LOCAL=NO)
    grid 11403516        1   0 19:08:47      -  0:00 oracleG11R231 (LOCAL=NO)
    grid 11665480        1  91 19:08:46      -  4:45 oracleG11R231 (LOCAL=NO)
    grid 12255372        1   0 17:43:13      -  0:08 oracleG11R231 (LOCAL=NO)
    grid 12386550        1   0 19:08:46      -  0:00 oracleG11R231 (LOCAL=NO)
    grid 15466566        1   0 19:08:47      -  0:00 oracleG11R231 (LOCAL=NO)
  oracle 19005520 13697088   0 15:22:02  pts/2  0:00 grep -i local=no

oracle@mac01:/home/oracle>ps -p 15466566 -f
     UID      PID     PPID   C    STIME    TTY  TIME CMD
    grid 15466566        1   0 19:08:47      -  0:00 oracleG11R231 (LOCAL=NO)


oracle@mac01:/home/oracle>ps -p 15466566 -o uid,user,ruid,ruser,args
 UID     USER RUID    RUSER COMMAND
3001   oracle 3016     grid oracleG11R231 (LOCAL=NO)

oracle@mac01:/home/oracle>ls -l $ORACLE_HOME/bin/oracle
-rwsr-s--x    1 oracle   asmadmin  301231110 Sep 11 15:08 /s01/oracle/product/11.2.0/dbhome_1/bin/oracle

 

实际原因是 DB Instance在RAC环境中自动启动时是使用GRID用户名下的oraagent负责管理 ,oraagent 的login user 是grid,即real user id是GRID ,它负责调用call $RDBMS_HOME/bin/oracle 这个2进制文件(属于oracle用户 -rwsr-s–x    1 oracle   asmadmin), 且该2进制文件是setuid的,当调用setuid 应用时effective user ID变成oracle, 但是 real user id是不变的。

 

oraagent

关于 real user ID和effective user ID的解释如下:

 

Most of the time, the effective user ID of a process is just the same as the real ones, and there’s no point in making a fuss of this minor distinction.

Things start to get interesting when you invoke a setuid application, however. Assume you’re logging into your normal user account, which has a user ID of 500. Now you invoke a setuid root application. Because it’s setuid root, the operating system will set the the effective user ID of the process to that of the root user (0). The real user ID, however, remains unchanged. This allows the application to learn the identity of the user who invoked it, and to continue to access files etc with the privilege of the invoking user.

 

在Linux平台上不存在该问题, user和ruser均是oracle。

在AIX   ps -p -f  显示的是login name of the process owner is shown,即real user id

ps -p -o  user,ruser 显示的:

user  Indicates the effective user ID of the process

ruser Indicates the real user ID of the process

 

 

BUG 9666617 – INSTANCE IS STARTED WITH USER GRID中分析了上述问题,并认为这不是一个软件bug close this as ‘not as bug’.

 

Comments

  1. sky13and23 says

    这个问题我目前的数据库就是这个情况,可是我之前的11.2+AIX没有遇到,为什么有的有,有的没有呢?

  2. 目前HPUX AI,11.2.0.3 有这种情况,用UNIX95= ps -ef|grep smon可以看到正常的owner

  3. ernme says

    我们HP-UX 也是这样啊, 这个跟平台应该无关吧LOCAL=NO说明是通过Listener 连接进来的, 如果是通过GRID用户启动Listener 的, 那么产生的Server Process 就是GRID用户的如果Listener是RDBMS用户启动的,那么产生的Server Process 就是RDBMS用户的

  4. 有空一起交流一下

Comment

*

沪ICP备14014813号-2

沪公网安备 31010802001379号