5 Postinstallation Configuration Tasks

This chapter identifies postinstallation configuration tasks. Where appropriate, this chapter references other guides for procedures on performing these configuration tasks.

This chapter contains these topics:

About NTFS File System and Windows NT Registry Permissions
Individual Component Postinstallation Configuration Tasks

About NTFS File System and Windows NT Registry Permissions

Oracle Corporation recommends that you configure Oracle9i database files, directories, and registry settings to allow only authorized database administrators (DBAs) to have full control. These topics describe how to perform these tasks:

Setting NTFS File System Security
Setting Windows NT Registry Security

See Also:
Your Windows NT documentation for more information about modifying NTFS file system and Windows NT registry settings

Setting NTFS File System Security

The Oracle9i database uses files to store database data, backup data, log information, and so on. To do this, the Oracle9i database process runs under a security account. This security account (the Windows NT LocalSystem account called SYSTEM) includes the ability to create and access these files. The security account is assigned to the service that the Oracle9i database uses (in the Control Panel). This account requires full file system permissions to create, read, write, delete, and execute files.

To ensure that only authorized users have full file system permissions:

Go into Windows NT Explorer.
Right-click Oracle9i database files (in the ORACLE_BASE\oradata\DB_NAME directory), executables and dynamic link libraries (in the ORACLE_BASE\ORACLE_HOME\bin directory), and directories.
Select Properties from the menu that appears.

Adjust the file and directory permissions to ensure that:

Only the security account that the Oracle9i Database is configured to use has full control permissions to these files

User accounts that must run Oracle applications (for example, SQL*Plus and Pro*C) have read privileges on their executables (for example, sqlplus.exe for SQL*Plus)

Note:

The Oracle9i Database uses the Windows NT LocalSystem built-in security account. Therefore, file permissions must be granted to the SYSTEM account of the local computer running the Oracle9i Database.

Setting Windows NT Registry Security

Oracle Corporation recommends that you remove write permissions from users who are not Oracle9i DBAs or system administrators in HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE of the Windows NT registry.

To remove write permissions:

Open the registry.
Go to HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE.
Select Permissions from the Security main menu.

The Registry Key Permissions dialog box appears.
Remove write permissions from any users who are not Oracle9i DBAs or system administrators. Note that the SYSTEM account must have Full Control, since this is the account with which the Oracle9i Database runs.
Ensure that user accounts that must run Oracle applications have read privileges.
Choose OK.
Exit the registry.

Individual Component Postinstallation Configuration Tasks

Some individual components require postinstallation configuration tasks. Table 5-1 lists configuration requirements and the sections or documents referenced for specific configuration procedures. This table does not include postinstallation configuration tasks for Oracle Workflow.

See Also:

"Oracle Workflow"

Table 5-1 Individual Component Postinstallation Configuration Tasks

Component	Description	See Also...
Management Pack for Oracle Applications	After installation is complete, you have additional configuration tasks to perform before using the Management Pack for Oracle Applications.	Getting Started with the Oracle Management Pack for Oracle Applications
Oracle Advanced Security	Authentication, encryption, integrity support, and enterprise user security require configuration.	Oracle Advanced Security Administrator's Guide
Oracle HTTP Server	You can start, stop, and verify the status of Oracle HTTP Server; view the default initial static page; and check log files.	Oracle Enterprise Manager Configuration Guide
Oracle Net Services network software	Oracle Net Configuration Assistant is a tool that assists you in configuring your Oracle network. If you installed Oracle Net Services, Oracle Net Configuration Assistant automatically guided you through network configuration of client computers and Oracle9i Database servers. You can also configure your Oracle network after installation with the Oracle Net Configuration Assistant and Oracle Net Manager tools.	Oracle9i Net Services Administrator's Guide and the online help available with both tools "Configuring Your Client Network" for a discussion of available configuration choices
Oracle Services for Microsoft Transaction Server	For Windows NT installation, if you did not install the Microsoft Management Console (MMC) before installing Oracle9i, then you must manually start the `OracleMTSRecoveryService` service and change its status to Automatic. Perform the following tasks before using Oracle Services for Microsoft Transaction Server: Create the Microsoft Transaction Server administrator account Schedule a database server-level transaction recovery job	"Managing Recovery Scenarios" of Oracle Developer's Guide for Microsoft Transaction Server
Pro*COBOL	Pro*COBOL supports specific compilers.	"Introducing ProCOBOL" of ProCOBOL Precompiler Getting Started for Windows
SQL*Plus help file	If you want to use online help with SQLPlus, you must populate the SQLPlus tables with help files.	"Installing SQLPlus Help and Demonstration Tables" of SQLPlus Getting Started for Windows

Oracle Workflow

This section contains these topics:

Oracle Workflow Postinstallation Tasks
workflow.log File
Installing and Configuring Your Web Server for Oracle Workflow

Oracle Workflow Postinstallation Tasks

You must perform a number of configuration procedures, including:

Editing the init.ora parameter file
Installing and configuring a Web server
Verifying your base URL
Setting up the Oracle Workflow Monitor and HTML help
See Also:

Oracle Workflow Client Installation Notes

Oracle Workflow Guide

workflow.log File

The workflow.log file produced during installation of Oracle Workflow can contain sensitive information. To protect this sensitive information, either delete workflow.log or change the permissions for the file so that only authorized administrators can access it.

Installing and Configuring Your Web Server for Oracle Workflow

If you install Oracle9i Application Server release 1.0.2.2 as your Web server, specify the settings listed in Table 5-2 when creating a Database Access Descriptor (DAD) for Oracle Workflow.

Table 5-2 Oracle Workflow DAD Settings

Field...	Enter...
Database Access Descriptor Name	`your_Workflow_DAD`
Schema Name	Leave Blank
Oracle User Name	Leave Blank
Oracle Password	Leave Blank
Oracle Connect String	`connect_string`
Authentication Mode	Basic
Session Cookie Name	Leave Blank
Package/Session Management Type	Stateless (Reset Package State)
Enable Connection Pooling?	Yes
Default (Home) Page	`wfa_html.home`

Attention:

Be sure you leave the Oracle User Name and Oracle Password blank to enable mod_plsql database authentication.

You can also leave any remaining settings blank.