DH Unlimited
Portfolio Blog Login
X

About
DH Unlimited is comprised solely of me, Dave. I've been doing freelance web development since 2010, mainly for the purpose of expanding my technical skill set.


Site Updated
01/06/2016

Oracle Patch Install

Tuesday, October 30, 2012 12:10 pm

I ran into an issue installing an Oracle patch a few months ago. The solution was found at:

https://forums.oracle.com/forums/thread.jspa?messageID=5204155

Hello all,

Just though I would share my findings on this issue.

I’m a Information Assurnace engineer for a large communications company. I’m responcible for developing security solutions for a vast array of Windows based devices. Recently it had come to my attention that our security solution was blocking the install of the JAVA Runtime Enviroment. I naturally set to work on a resolution and here is what ultimatly solved this problem. I noticed that the JRE install worked on a freshly installed copy of the OS, but after applying security settings. . .they immediatly failed. I was able to root cause our failure to two registry keys. Below is the details:

Please note, that we had this 1330 error due to the fact that our prodcuts are NOT connected to the internet, hence they are off-line.

This solution worked for: XP, 2003, 2008, Vista, and 7.
WARNING: I cannot be held responcible for any issues the below may cause. Plase use at your own risk. Take good notes so that you can restore the two settings below to the origional “as found” values. Exporting the registry key before making changes is a good idea, that way it can be restored.
Basically there are two registry keys that can cause the JRE install to fail with 1330.

The first Key is a very complex beast. It is located in:
Registry Hive: HKEY_CURRENT_USER
Subkey: \Software\Micorosft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\
Value Name: State
Type: REG_DWORD
Value: 23c00

The default windows value for “STATE” should be 23c00 in hexidecimal / 146432 decimal. If the STATE value is NOT 23c00, then someone, or something changed this setting for a reason, and this is the root cause of your problem. Now, the quick and easy fix is to set this key back to 23c00 HEX. But you may want to investigate why this value was changed. . .it may be important.

The resason why this settin is complex, is because the BINARY representation of this number activates a bunch of switches related to .NET security. 23c00 = 100011110000000000 in BINARY. Look at page 65 of this document (http://iase.disa.mil/stigs/checklist/dot_net_checklist_v1r2-3.pdf) to understand the individual switches, as I don’t have the time to explain them here. Please note however, that the DISA / FDCC / CIS security requriments for this setting is 10,000 HEX or 010000000000000000 BINARY, or 65536 DECIMAL. If you see this number, some form of security has been applied to your box. Please note that 10800 HEX, or 010001000000000000 BINARY, or 69632 DECIMAL will also fix the JAVA 1330 problem.

Lastly, since this setting is based on a “per-user” basis. . .this is the reason why logging into another account to install JRE sometimes works. If this setting was set in a LGPO or GPO. . .then all accounts would fail. But if this setting was only set in for one user, then all other user accounts would allow JRE to install.

NOTE: The above setting will fix 1330 ONLY if JRE had been installed previously. If the above setting does not resolve the problem, then you will need to change the following registry as well.

Registry Hive: HKEY_LOCAL_MACHINE
Subkey: \Software\Policies\Microsoft\SystemCertificates\AuthRoot\
Value Name: DisableRootAutoUpdate
Type: REG_DWORD
Value: 1

Quite simply, this registry value should NOT exist in a default install of any Windows OS. Once again, if this value exists someone or something has applied some level of security to the computer. Simply deleting this value (in conjunction with the about value) will enable JRE offline to install without errors.

PLEASE NOTE: It’s probably a good I idea to put these registry settings back to how your found them when you are done installing JRE. . .as these settings are important security settings.

Hope this helps,
Regards
Boliskmail



Tag(s): Oracle 

iPhone 5

Sunday, September 16, 2012 11:27 am

Only a few more days and then I should be able to have a phone I can actually use in the office!



Tag(s): Life 

Clustered Server Issues

Saturday, September 15, 2012 8:40 am

I was able to upgrade SQL Server 2008 with Service Pack 3 in a formerly clustered server by changing the following registry key from 2 to 0.

HKEY_LOCAL_MACHINE
 --> SOFTWARE
  --> Microsoft
   --> WindowsNT
    --> CurrentVersion
     --> Cluster Server
      --> ClusterInstallationState



Tag(s): SQL Server 

Move All SQL Server System Databases

Wednesday, September 12, 2012 1:54 pm

Copied directly from:
http://manoranjandba.blogspot.com/2012/08/move-all-sql-server-system-databases-at.html

There are lots of articles, Links and sites that describe how to move system databases from the SQL default location to the location described by the DBA but still lot of users find difficult while moving them and land up in trouble. So I thought of wiriting an article for moving the databases so that the users can use the same and enjoy the task.

Tasks for moving system databases:

1.Moving tempdb databases.

a.) Execute the script below.


USE master;
GO
alter database tempdb
MODIFY FILE
(NAME = tempdev,FILENAME=‘NEW PATH’);
GO
alter database tempdb
MODIFY FILE
(NAME = templog,FILENAME=‘NEW PATH’);
GO


b.) Restart services.

c.) Confirm path of database files.

2. Moving model and msdb databases.

a.) Execute the script below.


USE master;
GO
alter database msdb
MODIFY FILE
(NAME = MSDBData,FILENAME=‘NEW PATH’);
go
alter database msdb
MODIFY FILE
(NAME = MSDBLog,FILENAME=‘NEW PATH’);
go

USE master;
GO
alter database model
MODIFY FILE
(NAME = modeldev,FILENAME=‘NEW PATH’);
go
alter database model
MODIFY FILE
(NAME = modellog,FILENAME=‘NEW PATH’);
go



b.) Stop services
c.) Copy the files to the new location
d.) Restart services.
e.) Confirm path of database files.

3.) Moving master database:

a.) Edit the startup parameters to reflect the new path for –d, –l and -e parameters.
b.) Stop the services.
c.) Move the master and resource database files to the new location
d.) Change the sql port to different one than usual to avoid excess connections and create an alias with that port
e.) Start the services using NET START MSSQLSERVER /f /T3608 (*MSSQLSERVER is for default instance, if you have installed named instance then you need to use NET START MSSQL$Instancename /f /T3608)
f.) Execute the script given below from sqlcmd


USE master;
GO
alter database mssqlsystemresource
MODIFY FILE
(NAME = data,FILENAME=‘NEW PATH’);
go
alter database mssqlsystemresource
MODIFY FILE
(NAME = log,FILENAME=‘NEW PATH’);
go
alter database mssqlsystemresource set READ_ONLY;
go

g.) Stop the services
h.) Change the port back to 1433
i.) Remove the alias
j.) Start sql services.
k.) Confirm if the data files and log files reside on desired path.



Tag(s): SQL Server 

Security+ Certification

Wednesday, August 22, 2012 7:40 pm

Passed my CompTIA Security+ test this morning.  I am very happy as I don’t want to study for it any more and definintely did not want to spend another $276 to take it again if I didn’t pass.  I am planning on upgrading my MCITP SQL Server 2005 Certification to the 2008 version next.



Tag(s): Life 
Back to the Top