The new 11gR2 install is full of pre-checks, comes with a fix-it script utility and is much easier to use both a reinstall and for new installs. But, its still not completele problem free out in the real world ;)
The popularity of linux is not questionable, but there is seldom an installation that is just a default setup.
Iptables (OS firewall) is a common feature of linux which I find very usefull. This is of course something you need to take in account for all software installs. But, usually you get away by opening a port or two.
This is not the case with 11gR2 Grid Infrastructure install for RAC. It uses random ports to copy the software between nodes! At first I thougt it was enough to enable all traffic for the private nic, but unfortunately thats not true. It also communicates on the public nic!! From a security point of view, this is quite astonishing.
The popularity of linux is not questionable, but there is seldom an installation that is just a default setup.
Iptables (OS firewall) is a common feature of linux which I find very usefull. This is of course something you need to take in account for all software installs. But, usually you get away by opening a port or two.
This is not the case with 11gR2 Grid Infrastructure install for RAC. It uses random ports to copy the software between nodes! At first I thougt it was enough to enable all traffic for the private nic, but unfortunately thats not true. It also communicates on the public nic!! From a security point of view, this is quite astonishing.
The only way I got it working was by stopping iptables during the installation. If anyone have a better idea I would really like to here about it!
Stop iptables on both nodes:
orarac06# service iptables stop
Flushing firewall rules: [ OK ]
Setting chains to policy ACCEPT: filter [ OK ]
Unloading iptables modules: [ OK ]
Now you can try your Oracle Grid Infrastructure Install again... (hopefully you saved a responsfile...)
No comments:
Post a Comment