OCI Database Backup Service Configuration – Avoid 401 Unauthorized Error

While I a preparing new exercises for an Oracle Cloud Infrastructure training, I ran into an issue while configuring the Oracle Database Backup Service for the Object Storage. The OCI backup module installer returns an error 401. My Environment Oracle Linux 7 Virtual Box Machine Oracle 19c RDBMS Backup Service Module Installation Error The installation was done according the documenation https://docs.oracle.com/en/cloud/paas/db-backup-cloud/csdbb/oracle-database-cloud-backup-module-oci.html oracle@ocivm01:~/ [ONPREM] java -jar oci_install.jar -host https://objectstorage.eu-frankfurt-1.oraclecloud.com -pvtKeyFile /home/oracle/.ssh/oci_api_backup_key.pem -pubFingerPrint 1c:79:c5:d5:e4:3a:6e:f5:07:xx:xx:xx -uOCID ocid1.user.oc1..aaaaaaaanqt5qrcbwwseeud7cjfxqcip123456789abcdefghi -tOCID ocid1.tenancy.oc1..aaaaaaaac3gjl7xgpxu3wmmqh2ha123456789abcdefghi -walletDir $ORACLE_BASE/opc_wallet -libDir $ORACLE_HOME/lib -configFile /u01/app/oracle/admin/ONPREM/opc_config/ONPREM.ora -bucket db_backup_doag00 Error Message – java.io.IOException: testConnection: 401 Unauthorized Oracle Database Cloud Backup Module Install Tool, build 12.2.0.1.0DBBKPCSBP_2018-11-09 Error: Could not authenticate to Oracle Database Cloud Backup Module Exception in thread “main” java.lang.RuntimeException: java.io.IOException: testConnection: 401 Unauthorized. at…

Read More

Monitor your Oracle Cloud Free Tier with Grafana on Oracle Linux 8

In a previous blog post I wrote about monitoring Oracle Cloud Infrastructure components by Grafana. In the meantime, we got the Oracle Cloud Free Tier. Here is an updated version. This blog post shows you how to install and configure the Grafana plugin based on the Oracle blog entry https://blogs.oracle.com/cloudnative/data-source-grafana on an Oracle Enterprise Linux 8 server. Steps to monitor the Oracle Cloud Free Tier by the OCI Grafana Plugin Install and configure the Oracle Cloud Infrastructure CLI – by download or by YUM install Configure Group, User and Policy in Oracle Cloud Infrastructure Console Install Grafana and the OCI Plugin Configure the Grafana DataSource Create a new Dashboard with OCI Metrics Machine Requirements The server needs access to the internet.…

Read More

Oracle Database Appliance X6-L Memory Expansion – Overwritten HugePage Settings after Reboot

A Customer has extended his Oracle Database Appliance X6-L with Oracle Database Appliance Memory Expansion Kit from 192GB to 384GB. After the first startup, the odacli tool has recognized the additional available memory and gave us the suggested value for the new HugePage settings. The ODA has the newest available patchset applied, OS is Oracle Enterprise Linux 6.10. Update the OS Configuration Oracle suggested the new values for the HugePage settings to 135350MB.  [root@srv20 ~]# odacli list-osconfigurations Parameter User ConfiguredValue SuggestedValue ————— ————— —————————— ————— Memlock grid 386716274KB 386716168KB Memlock oracle 386716274KB 386716168KB HugePage default 67815MB 135350MB According the Oracle documentation Oracle® Database Appliance X6-2S/X6-2M/X6-2L Deployment and User’s Guide – Section 13.14 – we updated the OS configuration by odacli.…

Read More

How to build OCI Infrastructure Environments with Ansible

The Oracle provided Ansible module gives us the opportunity to provision and configure Oracle Cloud Infrastructure resources on an automated base. The Ansible basic setup is very easy and the Oracle provided example playbooks in Git are a good base to start with your infrastructure automation project. Oracle provides Ansible example playbooks for Block Volumes Compute  Database File Storage IAM Load Balancer Private Subnets with VPN Delete Objects etc. In this blog post, I will show you how easy it is to bring Ansible and the Oracle Cloud Infrastructure together.  Requirements A local machine to install Ansible and the required software and modules, in my case it’s an Oracle Linux 7 virtual machine with Internet access. An Oracle Cloud Infrastructure…

Read More

OCI Compute Instances – Stop SSH Brute Force Attacks with fail2ban & UseDNS

Every day and night, the SSH login by key into my public accessible Oracle Cloud Infrastructure Linux Compute Instance was permitted for hours. And sometimes, when I had luck, it worked. For me it was not clear when it works and when not. But something has blocked me. The password authentification in the OCI Linux instance is basically disabled, the key is the only way to log in. After some investigation on the OCI instance, I found a huge amount of login trials in the /var/log/secure file. These brute force attacks were locking me out! Nov 4 03:57:24 instance-as-1 sshd[1975]: Received disconnect from 132.232.17.146 port 53924:11: Normal Shutdown, Thank you for playing [preauth] Nov 4 03:57:24 instance-as-1 sshd[1975]: Disconnected from 132.232.17.146…

Read More