Change uid and group id - Oracle User

[msantaana]

Hello Erman, we need to change the uid and gid of the Oracle user from our EBS database. This task is because we have a drawbacks with writing in the nfs, to write with the oracle user and the writing remains as nobody and needs the same uid. Throughout our organization the uid and gid for the Oracle user is standardized in a single number. In the oracle environment EBS is with another number because it was installed by an provider and we didn't realize that the change at the time of installation. Do you know if you can change that number on the Oracle platform and it is transparent to the installation?

Thanks
Marcelo

[ErmanArslansOracleBlog]

Hi,

You can change it using usermod and groupmod.
İ.e:

usermod -u 2005 oracle
groupmod -g 3005 dba

However, this may cause problems.
You also need to update the files that is owned by your OS user (i.e oracle) with the new uid and group id.

For example: if you change the uid from 506 to 9933
Then you need to change the userid stored in files owned by the user as well.

A command like the one below, can do this job.

find / -uid 506 -exec chown -h 9933 {} \;

Same for changing the groupid.
find / -gid ${OLD_GID} -exec chgrp -h ${NEW_GID} {} \;

For example:
find / -gid $11140 -exec chgrp -h 3001 {} \;

Note that: The chgrp and chown removes the setuid bit on some files.. oracle binary for example has setuid on it. So the setuid bit on these kinds of files should be reset with chmod.

chmod 6751 oracle

For Exadata Storage Servers, it is documented actually:

How to Change the Group ID (GID) and User ID (UID) of the New DBM Services Users and Groups in Exadata. (Doc ID 2006042.1)

But For Oracle RDBMS and EBS, it is not documented at all.

So you need to test it. First do your test and then take it into Live by taking the risk on your own.
You can also create an SR for this.

[msantaana]

Thank you Erman.
Regards

[msantaana]

We resolved it. We add user root the secondary group OINSTALL.

Thanks

[ErmanArslansOracleBlog]

Good but what about "uid" of the files created on nfs?

27 Oca 2017 23:17 tarihinde "msantaana [via Erman Arslan's Oracle Forum]" <[hidden email]> yazdı:

We resolved it. We add user root the secondary group OINSTALL.

Thanks

---

If you reply to this email, your message will be added to the discussion below:

http://erman-arslan-s-oracle-forum.2340467.n4.nabble.com/Change-uid-and-group-id-Oracle-User-tp2018p2027.html

To start a new topic under EBS 12.2, email [hidden email]
To unsubscribe from Erman Arslan's Oracle Forum, click here.
NAML

[msantaana]

Erman, what we solve with this workaround, is that it allows the group of Others to write and read permissions, in this way the backup product can take the information and upload it to tape. Backup product: IBM-TSM

Thanks

[ErmanArslansOracleBlog]

Okay..

Bytheway, we changed the uid and guid of applmgr + oracle users in a EBS 12.2 test environment.
I must say that it is working.

Here is the approach.


oracle:x:500:501::/home/oracle:/bin/bash  
applmgr:x:54321:501::/home/applmgr:/bin/bash

usermod -u 1001 oracle
usermod -u 1002 applmgr

oracle & applmgr (after the change)
oracle:x:1001:501::/home/oracle:/bin/bash  
applmgr:x:1002:1001::/home/applmgr:/bin/bash  

dba & oinstall groups (before the change)
dba:x:501:oracle,applmgr    
oinstall:x:54321:applmgr    

groupmod -g 3333 dba
groupmod -g 4444 oinstall

dba & oinstall groups (after the change)
dba:x:3333:oracle,applmgr    
oinstall:x:4444:applmgr      

After the change of uids and guids, we update the files accordingly.

find / -uid 500 -exec chown -h 1001 {} \;
find / -uid 54321 -exec chown -h 1002 {} \;
find / -gid 501 -exec chgrp -h 3333 {} \;
find / -gid 54321 -exec chgrp -h 4444 {} \;

Additionally, we only set the sticky bit of the Oracle Home binary using chmod 6751 oracle.
Just in case, we relinked the RDBMS and all the other db level tools using relink all.