一次配置oracleem的经历 - 数据库编程

g.invoke(EMDBPostConfig.java:227) at oracle.sysman.emcp.EMDBPostConfig.invoke(EMDBPostConfig.java:196) at oracle.sysman.emcp.EMConfig.perform(EMConfig.java:184) at oracle.sysman.emcp.EMConfigAssistant.invokeEMCA(EMConfigAssistant.java:494) at oracle.sysman.emcp.EMConfigAssistant.performConfiguration(EMConfigAssistant.java:1161) at oracle.sysman.emcp.EMConfigAssistant.statusMain(EMConfigAssistant.java:478) at oracle.sysman.emcp.EMConfigAssistant.main(EMConfigAssistant.java:426) 网上查资料，是oracle的bug。

Oracle对此的解释是：

In Enterprise Manager Database Control with Oracle Database 10.2.0.4 and 10.2.0.5, the root certificate used to secure communications via the Secure Socket Layer (SSL) protocol will expire on 31-Dec-2010 00:00:00. The certificate expiration will cause errors if you attempt to configure Database Control on or after 31-Dec-2010. Existing Database Control configurations are not affected by this issue.

If you plan to configure Database Control with either of these Oracle Database releases, Oracle strongly recommends that you apply Patch 8350262 to your Oracle Home installations before you configure Database Control. Configuration of Database Control is typically done when you create or upgrade Oracle Database, or if you run Enterprise Manager Configuration Assistant (EMCA) in standalone mode.

可以查看：Enterprise Manager Database Control Configuration - Recovering From Errors Due to CA Expiry on Oracle Database 10.2.0.4 or 10.2.0.5 [Video] [ID 1222603.1]

解决方法：

如果是在创建实例前就已经打了这个patch的话，那之后就不会报错了。如果是在创建实例之后才打的这个patch，那么需要执行以下：

对于单实例：
1.使用Opatch安装Patch 8350262
2.设置ORACLE_HOME and ORACLE_SID 环境变量，执行 /killDBConsole.(windows 平台省略这一步)
3.Re-secure Database Control with the following command:
/bin/emctl secure dbconsole -reset
4.Re-start Database Control with the following command:
/bin/emctl start dbconsole

对于RAC：
1.使用Opatch安装Patch 8350262, 在一个节点安装就ok了。
2.在所有节点执行：设置ORACLE_HOME and ORACLE_SID 环境变量，执行 /killDBConsole.(windows 平台省略这一步)
3.Re-secure Database Control on the first cluster node with the following command:
/bin/emctl secure dbconsole -reset
4.Re-secure Database Control on the remaining cluster nodes with the following command. Note that the -reset switch is not included with this command:
/bin/emctl secure dbconsole
5.Re-start Database Control by executing the following command on each node in the cluster:
/bin/emctl start dbconsole

打补丁后，清除并新建em，各种报错，无奈下手工删除各种数据：

Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.5.0 - 64bit Production
With the Partitioning, Real Application Clusters, OLAP, Data Mining
and Real Application Testing options

SQL> DROP public synonym SETEMVIEWUSERCONTEXT;

Synonym dropped.

SQL> DROP PUBLIC SYNONYM MGMT_TARGET_BLACKOUTS;

Synonym dropped.

SQL> drop role MGMT_USER;

Role dropped.

SQL> DROP USER MGMT_VIEW CASCADE;
DROP USER MGMT_VIEW CASCADE
          *
ERROR at line 1:
ORA-01918: user 'MGMT_VIEW' does not exist

SQL> DROP USER SYSMAN CASCADE;

User dropped.

SQL> exit

之后新建em成功，

[oracle@node1 ~]$ emca -config dbcontrol db -repos create

STARTED EMCA at Aug 17, 2014 2:58:04 PM
EM Configuration Assistant, Version 10.2.0.5.0 Production
Copyright (c) 2003, 2009, Oracle.  All rights reserved.

Enter the following information:
Database SID: racdb1
Listener port number: 1521
Password for SYS user:

一次配置oracleem的经历(二)